Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a653030303a3a2f33352d3335203d3e20323634303232.roa
File:                     323830343a323939303a653030303a3a2f33352d3335203d3e20323634303232.roa (raw, json)
Hash identifier:          i5303hWlWJlZZYxqFqCM+YhO9AQCZzMhvnlQcA+klrc=
Subject key identifier:   D3:3E:BB:E1:B7:25:D8:F7:4C:CE:A6:5A:E9:A8:9A:BD:E5:FA:4F:E8
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       02C88A6BF1CD9032F3F16A0CC67990E081AAA672
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a653030303a3a2f33352d3335203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:58:27 +0000
ROA not before:           Sat 27 Apr 2024 13:53:27 +0000
ROA not after:            Sat 26 Apr 2025 13:58:27 +0000
asID:                     264022
IP address blocks:        2804:2990:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c8:8a:6b:f1:cd:90:32:f3:f1:6a:0c:c6:79:90:e0:81:aa:a6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 27 13:53:27 2024 GMT
            Not After : Apr 26 13:58:27 2025 GMT
        Subject: CN=D33EBBE1B725D8F74CCEA65AE9A89ABDE5FA4FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:0c:97:e1:72:10:23:c6:7b:5c:22:23:ad:
                    d2:f6:17:24:a0:bb:39:9e:54:66:35:ce:ed:99:76:
                    5c:81:a6:05:db:ec:b5:3f:12:fd:b8:ca:89:1f:6a:
                    b3:84:05:a2:62:a3:58:36:b6:24:6d:9f:e3:c5:87:
                    e2:2f:59:8c:38:8f:a1:42:2b:29:a9:22:f9:7e:ed:
                    fb:ee:c6:ad:24:56:34:6d:ec:bd:bb:f4:1a:2e:fb:
                    cd:88:7e:9a:db:ba:9d:2e:1a:71:22:e0:7d:6f:bd:
                    96:b8:6b:3e:f2:42:d3:5c:90:5d:ac:78:5b:43:64:
                    4b:73:8a:82:2b:9e:fa:e7:fb:d9:06:b0:d2:ee:ff:
                    76:30:68:23:e1:64:41:d4:73:1c:98:23:42:a4:59:
                    0e:89:f2:91:56:f1:f3:17:68:3d:19:b6:b3:56:16:
                    cb:fa:e5:b7:46:5c:de:26:a3:dd:38:19:3e:72:80:
                    16:21:80:d6:ac:87:f0:31:ff:e3:37:14:dd:18:90:
                    d6:a4:1f:0a:f8:4b:86:f0:8e:df:6f:a3:ee:34:99:
                    fa:6b:3a:ae:bf:8a:f8:13:02:97:a0:5f:e2:60:1b:
                    ae:11:fc:ce:f9:dd:3a:01:f1:78:8d:a3:96:00:68:
                    bc:6d:66:ab:ea:05:04:52:96:a0:25:8e:9b:d1:17:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:BB:E1:B7:25:D8:F7:4C:CE:A6:5A:E9:A8:9A:BD:E5:FA:4F:E8
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/323830343a323939303a653030303a3a2f33352d3335203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         d1:63:12:b5:68:91:a0:e9:53:a4:a7:c3:2a:75:06:bb:c3:70:
         e5:91:b5:7b:ad:28:7a:4d:c5:08:e2:28:af:03:fe:18:9e:df:
         9d:1c:3b:86:f8:f0:c3:f4:5a:f8:19:ce:30:be:1d:4a:3b:09:
         89:0e:b2:24:8d:2c:c1:3e:3f:79:62:fb:9f:6a:54:fc:c2:df:
         24:a2:46:0e:ba:bc:a8:02:e2:51:1e:0b:15:d0:7b:27:bb:77:
         0e:17:60:a5:9b:d8:2c:55:ef:57:f9:a1:f5:17:c4:5a:f5:d8:
         11:de:b0:48:8b:43:19:7c:d4:c8:68:02:a5:b9:01:6e:03:82:
         ca:19:4e:47:91:f4:5d:5d:45:3f:32:0e:b5:01:93:34:f1:f5:
         bd:00:27:54:b8:c0:af:63:f6:4a:77:47:2c:2a:7f:d8:ef:c4:
         04:97:67:b7:47:8e:77:fe:9e:37:f9:1c:ba:d0:5b:17:1b:af:
         b1:bf:97:9b:56:70:a5:95:62:53:da:03:fd:8b:37:86:3a:8f:
         67:4c:1e:63:7e:43:c0:a1:0b:1a:4f:48:1d:b3:3d:1e:c7:62:
         c3:83:12:f1:70:1b:40:6c:13:0c:8c:ee:a6:52:f2:fd:5b:44:
         56:26:45:6e:35:36:7b:20:78:3f:32:8e:d5:35:5e:ce:67:54:
         6e:68:27:c9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAsiKa/HNkDLz8WoMxnmQ4IGqpnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NDQjY3MUYxRTcwOTVEQjVENEExNEEwMTkzQTdEMkY0
Q0FCMzI0OTAeFw0yNDA0MjcxMzUzMjdaFw0yNTA0MjYxMzU4MjdaMDMxMTAvBgNV
BAMTKEQzM0VCQkUxQjcyNUQ4Rjc0Q0NFQTY1QUU5QTg5QUJERTVGQTRGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rgyX4XIQI8Z7XCIjrdL2FySg
uzmeVGY1zu2ZdlyBpgXb7LU/Ev24yokfarOEBaJio1g2tiRtn+PFh+IvWYw4j6FC
KympIvl+7fvuxq0kVjRt7L279Bou+82Ifprbup0uGnEi4H1vvZa4az7yQtNckF2s
eFtDZEtzioIrnvrn+9kGsNLu/3YwaCPhZEHUcxyYI0KkWQ6J8pFW8fMXaD0ZtrNW
Fsv65bdGXN4mo904GT5ygBYhgNash/Ax/+M3FN0YkNakHwr4S4bwjt9vo+40mfpr
Oq6/ivgTApegX+JgG64R/M753ToB8XiNo5YAaLxtZqvqBQRSlqAljpvRF9ifAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0z674bcl2PdMzqZa6aiaveX6T+gwHwYDVR0j
BBgwFoAUPMtnHx5wldtdShSgGTp9L0yrMkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJXTHVYd2N3N0N5Yzh2WGh2YXllM0RHNHJhZkxjZ0xQOVFkQ2UzWXFN
ZHEvMS8zQ0NCNjcxRjFFNzA5NURCNUQ0QTE0QTAxOTNBN0QyRjRDQUIzMjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQ0I2NzFGMUU3MDk1REI1
RDRBMTRBMDE5M0E3RDJGNENBQjMyNDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyV0x1WHdjdzdDeWM4dlhodmF5ZTNERzRyYWZMY2dMUDlRZENlM1lxTWRxLzEv
MzIzODMwMzQzYTMyMzkzOTMwM2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNDMwMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEKZDgMA0GCSqGSIb3DQEBCwUA
A4IBAQDRYxK1aJGg6VOkp8MqdQa7w3DlkbV7rSh6TcUI4iivA/4Ynt+dHDuG+PDD
9Fr4Gc4wvh1KOwmJDrIkjSzBPj95YvufalT8wt8kokYOuryoAuJRHgsV0Hsnu3cO
F2Clm9gsVe9X+aH1F8Ra9dgR3rBIi0MZfNTIaAKluQFuA4LKGU5HkfRdXUU/Mg61
AZM08fW9ACdUuMCvY/ZKd0csKn/Y78QEl2e3R453/p43+Ry60FsXG6+xv5ebVnCl
lWJT2gP9izeGOo9nTB5jfkPAoQsaT0gdsz0ex2LDgxLxcBtAbBMMjO6mUvL9W0RW
JkVuNTZ7IHg/Mo7VNV7OZ1RuaCfJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org