Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a383030303a3a2f33332d3333203d3e20323639353339.roa
File:                     323830343a363632633a383030303a3a2f33332d3333203d3e20323639353339.roa (raw, json)
Hash identifier:          cHx1e2Rt3EngGTHlC2M09iyf608fv/S8+QGtyR1petw=
Subject key identifier:   12:45:6A:0A:58:EE:7A:36:26:44:E0:00:84:1E:90:48:06:F8:A3:38
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       64FB16D3B2C7F0097F6458BE273E721AB3A6F6B6
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a383030303a3a2f33332d3333203d3e20323639353339.roa
Signing time:             Mon 21 Aug 2023 23:15:52 +0000
ROA not before:           Mon 21 Aug 2023 23:10:52 +0000
ROA not after:            Mon 19 Aug 2024 23:15:52 +0000
asID:                     269539
IP address blocks:        2804:662c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fb:16:d3:b2:c7:f0:09:7f:64:58:be:27:3e:72:1a:b3:a6:f6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Aug 21 23:10:52 2023 GMT
            Not After : Aug 19 23:15:52 2024 GMT
        Subject: CN=12456A0A58EE7A362644E000841E904806F8A338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:cc:78:50:9d:fb:1b:ec:91:15:56:8a:9c:
                    61:e5:65:f0:c5:6d:82:98:60:0f:13:43:9a:c4:58:
                    29:b7:21:c5:20:50:32:3a:7e:87:49:c3:91:ec:64:
                    b0:61:b7:b7:88:5b:0b:bd:f7:19:8f:37:22:be:b0:
                    9e:27:ab:49:9d:cb:cc:ce:e5:33:55:3f:8a:13:37:
                    15:b1:bd:f2:9d:44:c5:83:b3:f3:36:3c:58:f9:d6:
                    d6:78:72:c3:d6:2f:81:97:fb:74:d0:8c:b6:f7:09:
                    92:89:e6:4a:ad:98:9d:0f:84:bb:d0:3d:0e:ea:8a:
                    30:92:4e:20:a6:f1:b7:c7:85:51:ba:a0:cb:d3:d6:
                    8a:18:4c:bc:13:c5:43:c2:f7:b1:70:c5:88:6e:57:
                    aa:17:eb:c4:67:b6:8e:dd:3e:68:38:6d:7e:65:6c:
                    b4:a0:f5:85:f6:b7:87:a0:2a:f3:a0:b9:1d:29:19:
                    5a:c2:23:09:02:bf:c9:b9:a8:34:ba:3f:c1:77:29:
                    1f:fd:05:d5:a7:c5:96:dd:8e:68:d5:33:6f:f1:22:
                    80:2b:e5:5a:8e:1d:43:0c:34:f1:85:c6:e9:fd:41:
                    ec:fb:f1:5c:25:c1:29:3a:aa:10:df:9a:15:f5:39:
                    34:de:36:01:01:9e:1f:07:0a:89:e3:cf:e9:28:ea:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:45:6A:0A:58:EE:7A:36:26:44:E0:00:84:1E:90:48:06:F8:A3:38
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/323830343a363632633a383030303a3a2f33332d3333203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:71:33:12:e0:4a:88:1a:ed:f3:c5:bc:11:8f:87:3c:87:
         a3:6e:b7:76:51:57:97:06:12:c8:8c:4a:9c:87:e4:79:4e:be:
         6c:0f:23:3f:e7:e8:a6:1b:65:92:06:42:d0:78:c1:d2:a1:bc:
         a0:6e:1a:53:a5:3f:06:dd:e3:72:f0:ea:b5:16:2b:3b:b1:a4:
         47:9f:51:ee:e8:9a:ca:a1:ad:88:41:e8:34:81:1e:f0:83:ad:
         08:2e:2c:c3:ce:67:62:db:00:b2:97:ed:0c:ad:28:08:de:8d:
         52:5f:a3:e6:8a:29:d8:1c:97:c0:58:de:8f:f8:11:29:ae:0a:
         7b:6e:6e:a5:61:44:6c:06:3d:65:29:e4:cb:48:6b:9e:63:d6:
         b1:a6:42:ac:70:5c:85:cd:d9:13:ad:9c:2b:5f:71:19:d0:34:
         b7:87:88:87:95:22:23:1c:15:49:7e:2f:da:1c:c3:1b:82:74:
         62:c4:27:29:58:3c:31:da:67:30:b3:86:17:e6:8e:a5:dd:9c:
         c5:82:52:5c:06:7a:7a:74:3f:a1:3a:26:30:e6:77:fe:80:31:
         f5:04:23:f7:93:59:55:c6:b5:eb:a5:ab:9a:97:59:12:dc:48:
         d6:e4:fd:9c:44:ad:f3:91:6e:af:3e:a3:e6:d2:86:58:12:9a:
         85:d8:a4:a3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZPsW07LH8Al/ZFi+Jz5yGrOm9rYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc0OUYzQzJDNkM3RDYzQUVCMkQ5NTdGRDk4M0E4REU4
OTI3QUIzOTAeFw0yMzA4MjEyMzEwNTJaFw0yNDA4MTkyMzE1NTJaMDMxMTAvBgNV
BAMTKDEyNDU2QTBBNThFRTdBMzYyNjQ0RTAwMDg0MUU5MDQ4MDZGOEEzMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCD8x4UJ37G+yRFVaKnGHlZfDF
bYKYYA8TQ5rEWCm3IcUgUDI6fodJw5HsZLBht7eIWwu99xmPNyK+sJ4nq0mdy8zO
5TNVP4oTNxWxvfKdRMWDs/M2PFj51tZ4csPWL4GX+3TQjLb3CZKJ5kqtmJ0PhLvQ
PQ7qijCSTiCm8bfHhVG6oMvT1ooYTLwTxUPC97FwxYhuV6oX68Rnto7dPmg4bX5l
bLSg9YX2t4egKvOguR0pGVrCIwkCv8m5qDS6P8F3KR/9BdWnxZbdjmjVM2/xIoAr
5VqOHUMMNPGFxun9Qez78VwlwSk6qhDfmhX1OTTeNgEBnh8HConjz+ko6rJ7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEkVqCljuejYmROAAhB6QSAb4ozgwHwYDVR0j
BBgwFoAUx0nzwsbH1jrrLZV/2YOo3oknqzkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RwUWlvN0I5N2h1OEhXSzFtcUFES05BM0toM1M1bUhudktrNjFTY1Jq
MTUvMC9DNzQ5RjNDMkM2QzdENjNBRUIyRDk1N0ZEOTgzQThERTg5MjdBQjM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M3NDlGM0MyQzZDN0Q2M0FF
QjJEOTU3RkQ5ODNBOERFODkyN0FCMzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0cFFpbzdCOTdodThIV0sxbXFBREtOQTNLaDNTNW1IbnZLazYxU2NSajE1LzAv
MzIzODMwMzQzYTM2MzYzMjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTM1MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEZiyAMA0GCSqGSIb3DQEBCwUA
A4IBAQAabHEzEuBKiBrt88W8EY+HPIejbrd2UVeXBhLIjEqch+R5Tr5sDyM/5+im
G2WSBkLQeMHSobygbhpTpT8G3eNy8Oq1Fis7saRHn1Hu6JrKoa2IQeg0gR7wg60I
LizDzmdi2wCyl+0MrSgI3o1SX6PmiinYHJfAWN6P+BEprgp7bm6lYURsBj1lKeTL
SGueY9axpkKscFyFzdkTrZwrX3EZ0DS3h4iHlSIjHBVJfi/aHMMbgnRixCcpWDwx
2mcws4YX5o6l3ZzFglJcBnp6dD+hOiYw5nf+gDH1BCP3k1lVxrXrpaual1kS3EjW
5P2cRK3zkW6vPqPm0oZYEpqF2KSj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org