Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/1/323830343a346464343a3a2f33322d3336203d3e20323638323232.roa
File:                     323830343a346464343a3a2f33322d3336203d3e20323638323232.roa (raw, json)
Hash identifier:          EoP+11geRpslAWSgK0ETI5CjSMrFXMqiPXwIq/Q6ifY=
Subject key identifier:   3B:29:3E:8F:BF:62:0D:C1:27:8D:BE:B6:30:9A:8C:0A:11:55:00:34
Certificate issuer:       /CN=2B7C28300318BBB841E13A29F56C5A04DC2E7785
Certificate serial:       684BD2D4B963A278402AFEF4FEA8B8355B9988D7
Authority key identifier: 2B:7C:28:30:03:18:BB:B8:41:E1:3A:29:F5:6C:5A:04:DC:2E:77:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7C28300318BBB841E13A29F56C5A04DC2E7785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/1/323830343a346464343a3a2f33322d3336203d3e20323638323232.roa
Signing time:             Thu 04 Apr 2024 18:17:03 +0000
ROA not before:           Thu 04 Apr 2024 18:12:03 +0000
ROA not after:            Thu 03 Apr 2025 18:17:03 +0000
asID:                     268222
IP address blocks:        2804:4dd4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4b:d2:d4:b9:63:a2:78:40:2a:fe:f4:fe:a8:b8:35:5b:99:88:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7C28300318BBB841E13A29F56C5A04DC2E7785
        Validity
            Not Before: Apr  4 18:12:03 2024 GMT
            Not After : Apr  3 18:17:03 2025 GMT
        Subject: CN=3B293E8FBF620DC1278DBEB6309A8C0A11550034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:c9:72:a1:7c:b8:b2:53:9c:13:8d:63:00:
                    77:2f:0e:a4:10:43:4f:bd:e2:33:65:fa:fe:b7:1f:
                    a6:97:9a:3c:3a:49:76:56:8d:c9:ab:09:ba:4c:d2:
                    43:c7:b0:96:b0:49:59:3a:ff:a4:d7:b9:c6:fc:81:
                    ea:bd:9b:45:17:16:5c:16:6e:e6:da:c2:ab:39:d9:
                    97:00:47:d9:87:f3:34:b6:e2:fa:65:0c:52:61:2a:
                    7b:11:ae:71:4e:00:d2:86:b5:dc:c2:fe:81:1c:9e:
                    86:10:0d:4a:44:01:50:b3:b2:8f:b5:a0:11:61:66:
                    03:e1:02:2f:71:e7:4a:3f:a5:47:c4:27:78:0a:37:
                    76:1f:67:db:7a:24:7d:7d:b2:b1:81:87:de:a4:40:
                    a1:1e:cd:52:57:de:22:d8:87:3a:ac:0e:48:3f:aa:
                    9e:96:59:0a:b2:82:15:1c:96:dd:2e:87:e2:bf:1a:
                    d9:1b:73:c2:a7:c1:3e:63:72:bd:cf:df:3a:41:5d:
                    7f:1e:d2:d9:7d:7d:93:7f:5d:92:e6:6d:dd:80:f3:
                    13:15:29:f8:91:09:68:cb:4b:9c:8d:dc:b3:87:fa:
                    49:c3:8c:84:7e:5f:5e:7c:60:14:2a:36:b9:7e:ba:
                    1a:d0:bb:8a:2d:d4:c0:d6:ff:d2:9a:67:56:8f:75:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:3E:8F:BF:62:0D:C1:27:8D:BE:B6:30:9A:8C:0A:11:55:00:34
            X509v3 Authority Key Identifier:
                keyid:2B:7C:28:30:03:18:BB:B8:41:E1:3A:29:F5:6C:5A:04:DC:2E:77:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/1/2B7C28300318BBB841E13A29F56C5A04DC2E7785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7C28300318BBB841E13A29F56C5A04DC2E7785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/1/323830343a346464343a3a2f33322d3336203d3e20323638323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:eb:0e:8f:fe:ec:bc:72:73:94:2e:b9:50:26:a2:66:22:
         5e:bb:c9:af:52:63:a7:04:4c:6d:54:52:7c:d8:06:c3:58:d0:
         51:a7:c3:f6:26:4b:b7:6b:eb:82:0e:f9:07:83:b3:b9:3d:08:
         fa:81:71:23:b7:b8:18:9b:1d:79:ce:41:f9:c6:07:ac:c6:7c:
         35:47:a1:8b:d0:ee:89:b6:ed:63:e0:b6:f6:92:1b:87:30:7e:
         7c:dc:30:ed:62:fe:7d:0a:ed:62:02:95:c6:11:b1:f8:15:bc:
         2a:43:46:cf:fa:86:9a:4f:77:bd:b2:3f:da:6b:3c:c5:88:3c:
         f0:d5:0c:d0:6b:e1:ca:ea:82:22:bc:0f:c4:8a:17:a9:7f:d9:
         40:2a:f0:6f:1e:b3:3b:07:db:8c:fd:69:56:14:db:5b:b8:60:
         e5:3a:e6:eb:8a:0f:ad:ee:cd:06:61:97:25:11:da:3e:24:bd:
         26:dd:55:e6:22:8a:7e:20:11:e3:04:d1:fb:16:61:48:4d:e8:
         41:fd:2e:d6:20:03:b4:f5:e2:d0:62:c8:78:51:65:d7:b3:39:
         70:d8:86:7c:5d:20:53:fd:78:eb:4b:0b:75:0c:1c:99:76:3d:
         f3:7b:16:5c:f6:8c:35:02:bb:71:bc:6e:d3:04:94:60:3f:d3:
         1d:c0:cc:f5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaEvS1LljonhAKv70/qi4NVuZiNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3QzI4MzAwMzE4QkJCODQxRTEzQTI5RjU2QzVBMDRE
QzJFNzc4NTAeFw0yNDA0MDQxODEyMDNaFw0yNTA0MDMxODE3MDNaMDMxMTAvBgNV
BAMTKDNCMjkzRThGQkY2MjBEQzEyNzhEQkVCNjMwOUE4QzBBMTE1NTAwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwclyoXy4slOcE41jAHcvDqQQ
Q0+94jNl+v63H6aXmjw6SXZWjcmrCbpM0kPHsJawSVk6/6TXucb8geq9m0UXFlwW
bubawqs52ZcAR9mH8zS24vplDFJhKnsRrnFOANKGtdzC/oEcnoYQDUpEAVCzso+1
oBFhZgPhAi9x50o/pUfEJ3gKN3YfZ9t6JH19srGBh96kQKEezVJX3iLYhzqsDkg/
qp6WWQqyghUclt0uh+K/Gtkbc8KnwT5jcr3P3zpBXX8e0tl9fZN/XZLmbd2A8xMV
KfiRCWjLS5yN3LOH+knDjIR+X158YBQqNrl+uhrQu4ot1MDW/9KaZ1aPdc8RAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOyk+j79iDcEnjb62MJqMChFVADQwHwYDVR0j
BBgwFoAUK3woMAMYu7hB4Top9WxaBNwud4UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq
UksvMS8yQjdDMjgzMDAzMThCQkI4NDFFMTNBMjlGNTZDNUEwNERDMkU3Nzg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCN0MyODMwMDMxOEJCQjg0
MUUxM0EyOUY1NkM1QTA0REMyRTc3ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4RXpIaG5BWmVhZHpSOGtZZlZzR21WWnRmWEtWcEdRUmROWWRUN1hEalJLLzEv
MzIzODMwMzQzYTM0NjQ2NDM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARN1DANBgkqhkiG9w0BAQsFAAOCAQEAM8PrDo/+
7Lxyc5QuuVAmomYiXrvJr1JjpwRMbVRSfNgGw1jQUafD9iZLt2vrgg75B4OzuT0I
+oFxI7e4GJsdec5B+cYHrMZ8NUehi9DuibbtY+C29pIbhzB+fNww7WL+fQrtYgKV
xhGx+BW8KkNGz/qGmk93vbI/2ms8xYg88NUM0GvhyuqCIrwPxIoXqX/ZQCrwbx6z
OwfbjP1pVhTbW7hg5Trm64oPre7NBmGXJRHaPiS9Jt1V5iKKfiAR4wTR+xZhSE3o
Qf0u1iADtPXi0GLIeFFl17M5cNiGfF0gU/1460sLdQwcmXY983sWXPaMNQK7cbxu
0wSUYD/THcDM9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org