Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d3438203d3e203631353939.roa
File:                     323830343a336361303a3a2f33322d3438203d3e203631353939.roa (raw, json)
Hash identifier:          nMDDiboW9yCquqkrTP8s/J/Sim5l3O/9T63WRaxV9LI=
Subject key identifier:   2D:66:D5:E8:00:8E:18:72:2A:27:20:E3:4C:FA:70:35:2B:3B:24:98
Certificate issuer:       /CN=46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7
Certificate serial:       25F57F8FC1184AEBB13ADD00BA759A7E11D04E62
Authority key identifier: 46:F0:DB:4A:B3:9C:E5:9E:FB:5E:FE:6E:24:B1:11:F0:09:82:C1:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d3438203d3e203631353939.roa
Signing time:             Sun 29 Oct 2023 03:08:14 +0000
ROA not before:           Sun 29 Oct 2023 03:03:14 +0000
ROA not after:            Sun 27 Oct 2024 03:08:14 +0000
asID:                     61599
IP address blocks:        2804:3ca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f5:7f:8f:c1:18:4a:eb:b1:3a:dd:00:ba:75:9a:7e:11:d0:4e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7
        Validity
            Not Before: Oct 29 03:03:14 2023 GMT
            Not After : Oct 27 03:08:14 2024 GMT
        Subject: CN=2D66D5E8008E18722A2720E34CFA70352B3B2498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cd:5f:ba:3b:7e:86:59:4d:8f:8b:8a:9d:b5:
                    6c:76:b4:12:43:8e:12:fc:0f:60:89:16:06:a2:f9:
                    ce:c4:0b:93:86:5a:cf:1c:34:8f:18:e4:56:d9:5c:
                    c2:9f:74:2b:85:1d:46:11:e5:77:2e:62:fa:fa:13:
                    5c:c2:53:a9:c0:c1:60:f1:1c:30:35:6c:d5:bf:7e:
                    f9:8d:8b:05:5c:d2:10:c7:46:0f:66:8b:ad:12:a0:
                    3a:23:81:bb:8b:50:3d:40:c7:45:8e:a1:2b:25:5c:
                    9c:b1:d3:e7:01:cb:bd:05:f1:b3:13:d0:b4:87:83:
                    bf:e5:d1:b4:06:8b:d3:88:f9:90:56:08:1d:42:6a:
                    1c:b8:06:7a:94:29:f2:b1:b0:b9:3d:4f:b4:2d:1d:
                    23:46:36:63:72:6d:b1:8d:0e:91:fd:58:f6:c9:bf:
                    5a:62:74:af:3b:4e:09:67:7f:1e:a0:ab:b7:2c:9b:
                    41:41:69:45:fc:d9:e4:bf:ba:e2:1a:2d:48:d0:ce:
                    a7:47:25:a7:56:d5:be:89:d1:23:f8:8f:ac:d2:fc:
                    db:73:44:a1:84:0d:d5:c3:ba:b9:b9:94:23:4a:0e:
                    72:43:cd:51:a5:55:38:db:ab:6c:71:61:eb:fd:38:
                    a4:33:c6:37:b3:19:0a:dc:85:6a:f5:42:f2:70:14:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:66:D5:E8:00:8E:18:72:2A:27:20:E3:4C:FA:70:35:2B:3B:24:98
            X509v3 Authority Key Identifier:
                keyid:46:F0:DB:4A:B3:9C:E5:9E:FB:5E:FE:6E:24:B1:11:F0:09:82:C1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d3438203d3e203631353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:33:9a:48:6d:05:d6:e5:cf:af:f1:04:a4:ef:e6:75:a5:f7:
         34:14:1f:7f:84:25:80:d5:7c:dc:19:1f:20:d7:c1:48:cb:b4:
         59:03:17:1b:f6:c1:8e:bf:41:3d:89:7e:95:8f:13:97:7b:3b:
         a7:a1:4e:68:40:e8:f5:4b:d8:dd:17:fa:0c:11:c4:08:02:f0:
         2a:14:f0:e7:bc:1f:e6:be:a1:2a:f5:09:b5:94:21:f2:63:94:
         05:b7:23:a2:75:8b:57:ae:fc:81:e1:92:a0:37:d1:3f:16:7c:
         fd:54:59:f1:7f:6a:4b:c7:fb:7e:7d:05:fc:af:20:ed:ef:f1:
         4a:48:80:f7:fb:71:cd:88:e7:54:f8:67:41:8c:49:5f:86:24:
         82:88:c6:fb:71:bf:5f:9b:16:37:93:4b:9b:99:d2:13:3d:ca:
         7a:0b:a6:16:03:2b:0d:3f:8d:bd:1b:98:98:5a:8b:75:60:97:
         04:bc:4d:cc:7e:0d:f0:2f:20:21:9c:67:56:f9:a6:24:87:8d:
         69:c9:1c:15:59:86:71:9c:4d:a4:f6:f9:35:6b:ff:45:fe:25:
         7b:41:9c:de:ba:be:73:11:f0:02:11:41:8e:ee:1e:14:30:dd:
         4b:fc:2e:b6:76:56:42:28:6e:e0:76:0a:19:f4:4d:1d:f7:12:
         c2:b5:cf:2e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJfV/j8EYSuuxOt0AunWafhHQTmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZGMERCNEFCMzlDRTU5RUZCNUVGRTZFMjRCMTExRjAw
OTgyQzFENzAeFw0yMzEwMjkwMzAzMTRaFw0yNDEwMjcwMzA4MTRaMDMxMTAvBgNV
BAMTKDJENjZENUU4MDA4RTE4NzIyQTI3MjBFMzRDRkE3MDM1MkIzQjI0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzV+6O36GWU2Pi4qdtWx2tBJD
jhL8D2CJFgai+c7EC5OGWs8cNI8Y5FbZXMKfdCuFHUYR5XcuYvr6E1zCU6nAwWDx
HDA1bNW/fvmNiwVc0hDHRg9mi60SoDojgbuLUD1Ax0WOoSslXJyx0+cBy70F8bMT
0LSHg7/l0bQGi9OI+ZBWCB1Cahy4BnqUKfKxsLk9T7QtHSNGNmNybbGNDpH9WPbJ
v1pidK87Tglnfx6gq7csm0FBaUX82eS/uuIaLUjQzqdHJadW1b6J0SP4j6zS/Ntz
RKGEDdXDurm5lCNKDnJDzVGlVTjbq2xxYev9OKQzxjezGQrchWr1QvJwFJkxAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQULWbV6ACOGHIqJyDjTPpwNSs7JJgwHwYDVR0j
BBgwFoAURvDbSrOc5Z77Xv5uJLER8AmCwdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE5pVkZ2c3FZS3RDMVNpMVNEYkEyM3d4V1dBZW1rcko4Q1N4elV2c0ht
Tm8vMC80NkYwREI0QUIzOUNFNTlFRkI1RUZFNkUyNEIxMTFGMDA5ODJDMUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2RjBEQjRBQjM5Q0U1OUVG
QjVFRkU2RTI0QjExMUYwMDk4MkMxRDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzROaVZGdnNxWUt0QzFTaTFTRGJBMjN3eFdXQWVta3JKOENTeHpVdnNIbU5vLzAv
MzIzODMwMzQzYTMzNjM2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM1
MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEPKAwDQYJKoZIhvcNAQELBQADggEBAH0zmkhtBdbl
z6/xBKTv5nWl9zQUH3+EJYDVfNwZHyDXwUjLtFkDFxv2wY6/QT2JfpWPE5d7O6eh
TmhA6PVL2N0X+gwRxAgC8CoU8Oe8H+a+oSr1CbWUIfJjlAW3I6J1i1eu/IHhkqA3
0T8WfP1UWfF/akvH+359BfyvIO3v8UpIgPf7cc2I51T4Z0GMSV+GJIKIxvtxv1+b
FjeTS5uZ0hM9ynoLphYDKw0/jb0bmJhai3VglwS8Tcx+DfAvICGcZ1b5piSHjWnJ
HBVZhnGcTaT2+TVr/0X+JXtBnN66vnMR8AIRQY7uHhQw3Uv8LrZ2VkIobuB2Chn0
TR33EsK1zy4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org