Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a3a2f33322d3332203d3e20323731323531.roa
File:                     323830343a373839303a3a2f33322d3332203d3e20323731323531.roa (raw, json)
Hash identifier:          98TRKEP15Wiyc5B0/sVaYwUFo1qZKLF5obSuP2lVqS0=
Subject key identifier:   3C:F7:98:0C:E1:3E:9C:39:C5:88:9D:77:4E:C4:CB:A8:4E:F1:D1:D5
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       4082D09A7C01A639D13D80450800FF36CA77BFD5
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a3a2f33322d3332203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:39 +0000
ROA not before:           Fri 17 Nov 2023 17:31:39 +0000
ROA not after:            Fri 15 Nov 2024 17:36:39 +0000
asID:                     271251
IP address blocks:        2804:7890::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:82:d0:9a:7c:01:a6:39:d1:3d:80:45:08:00:ff:36:ca:77:bf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:39 2023 GMT
            Not After : Nov 15 17:36:39 2024 GMT
        Subject: CN=3CF7980CE13E9C39C5889D774EC4CBA84EF1D1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:d5:01:33:68:a5:d4:ae:82:92:f3:4e:30:
                    16:3c:07:7a:b5:7b:68:b7:98:6d:87:a7:38:b6:ae:
                    ea:7c:76:d2:18:c4:7a:79:15:8f:04:0f:28:77:97:
                    70:7f:eb:95:ef:22:a2:55:9f:37:bf:f1:19:21:cb:
                    51:8d:9a:6d:a1:fc:aa:ac:90:32:9d:91:34:fc:2b:
                    3f:79:86:0e:6d:7f:c0:8d:ca:e2:b5:cd:b9:aa:e4:
                    c3:3e:cb:81:85:9e:d2:34:e0:68:1e:92:d8:c8:45:
                    33:52:9b:46:b3:64:52:83:d8:5c:04:88:90:4f:7e:
                    3c:93:5b:09:3c:77:c5:47:08:6b:23:08:e4:d1:c5:
                    03:11:76:71:f5:17:7a:fd:03:e4:1f:d6:d7:d4:ba:
                    0b:6c:b7:67:82:8d:19:dc:56:20:51:2b:0c:07:6b:
                    0d:bb:63:eb:25:ff:61:23:3f:3f:27:2c:b4:43:8d:
                    0e:9f:97:65:be:d5:cf:e7:8b:bd:56:ad:3c:87:cf:
                    e4:f3:81:f1:36:41:b7:c8:0e:02:ad:32:ca:50:ed:
                    fd:51:45:dd:2b:bb:7a:3b:96:28:f3:43:5d:85:bb:
                    c0:65:23:5f:a1:01:b8:eb:9e:48:c2:42:6c:0a:46:
                    aa:cf:25:b3:16:c8:bb:09:88:f9:e4:b8:88:1a:8e:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F7:98:0C:E1:3E:9C:39:C5:88:9D:77:4E:C4:CB:A8:4E:F1:D1:D5
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/323830343a373839303a3a2f33322d3332203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7890::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:36:0a:60:04:5d:0f:9b:d0:3e:e1:08:a6:96:22:0a:40:d2:
         ab:0e:c5:e7:41:3b:7e:1f:ab:2a:b4:ec:d4:de:60:4d:1e:6e:
         2d:d7:d8:7e:80:31:de:7a:90:34:8d:d5:a5:2c:36:e9:40:30:
         15:58:1e:57:86:c1:6b:da:fc:d6:8e:ac:4a:62:07:3f:64:60:
         11:ec:41:a8:3f:0b:5e:8a:a0:fe:20:4a:11:eb:87:68:07:45:
         73:42:0b:5c:8b:b8:c0:03:04:9e:72:eb:00:14:05:2b:d5:17:
         d5:4e:cf:43:eb:96:39:f5:da:06:4d:1c:17:fa:a0:37:24:3f:
         23:65:5d:40:fb:f5:ee:85:d2:2c:ef:35:49:ed:fd:3c:10:42:
         c2:c1:eb:a0:9b:44:13:87:e8:6d:70:f5:ec:f3:13:e8:56:5d:
         46:62:10:19:85:44:d9:16:b1:99:a2:19:4e:99:64:bb:a4:b1:
         78:bb:19:7b:8a:d9:75:d9:b4:8b:9a:31:78:e8:ce:9e:a0:dd:
         45:ad:86:d5:c8:ce:9d:b6:7a:8b:d9:8f:a3:94:5d:6e:23:a1:
         6b:0c:47:4f:b3:3c:d6:76:a3:26:31:8a:37:9d:ca:6b:2a:9b:
         8f:e1:22:da:d2:ad:1e:05:17:7b:ec:d2:15:6e:95:e9:0e:e5:
         07:e0:7b:38
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQILQmnwBpjnRPYBFCAD/Nsp3v9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBRTQyMUY4NzNFRUYzMTU1MUJCREJFRTQyRkNENzkx
RjYwRjY4RDAeFw0yMzExMTcxNzMxMzlaFw0yNDExMTUxNzM2MzlaMDMxMTAvBgNV
BAMTKDNDRjc5ODBDRTEzRTlDMzlDNTg4OUQ3NzRFQzRDQkE4NEVGMUQxRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChY9UBM2il1K6CkvNOMBY8B3q1
e2i3mG2Hpzi2rup8dtIYxHp5FY8EDyh3l3B/65XvIqJVnze/8Rkhy1GNmm2h/Kqs
kDKdkTT8Kz95hg5tf8CNyuK1zbmq5MM+y4GFntI04GgektjIRTNSm0azZFKD2FwE
iJBPfjyTWwk8d8VHCGsjCOTRxQMRdnH1F3r9A+Qf1tfUugtst2eCjRncViBRKwwH
aw27Y+sl/2EjPz8nLLRDjQ6fl2W+1c/ni71WrTyHz+TzgfE2QbfIDgKtMspQ7f1R
Rd0ru3o7lijzQ12Fu8BlI1+hAbjrnkjCQmwKRqrPJbMWyLsJiPnkuIgajhvfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPPeYDOE+nDnFiJ13TsTLqE7x0dUwHwYDVR0j
BBgwFoAUKK5CH4c+7zFVG72+5C/NeR9g9o0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNGRnFNazlyRzVycWduQzk0YzdQYmpoeEF2V1V6a2RNWGdFc1Q4ZGpk
U3AvMC8yOEFFNDIxRjg3M0VFRjMxNTUxQkJEQkVFNDJGQ0Q3OTFGNjBGNjhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4QUU0MjFGODczRUVGMzE1
NTFCQkRCRUU0MkZDRDc5MUY2MEY2OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzRkZxTWs5ckc1cnFnbkM5NGM3UGJqaHhBdldVemtkTVhnRXNUOGRqZFNwLzAv
MzIzODMwMzQzYTM3MzgzOTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR4kDANBgkqhkiG9w0BAQsFAAOCAQEADTYKYARd
D5vQPuEIppYiCkDSqw7F50E7fh+rKrTs1N5gTR5uLdfYfoAx3nqQNI3VpSw26UAw
FVgeV4bBa9r81o6sSmIHP2RgEexBqD8LXoqg/iBKEeuHaAdFc0ILXIu4wAMEnnLr
ABQFK9UX1U7PQ+uWOfXaBk0cF/qgNyQ/I2VdQPv17oXSLO81Se39PBBCwsHroJtE
E4fobXD17PMT6FZdRmIQGYVE2RaxmaIZTplku6SxeLsZe4rZddm0i5oxeOjOnqDd
Ra2G1cjOnbZ6i9mPo5RdbiOhawxHT7M81najJjGKN53Kayqbj+Ei2tKtHgUXe+zS
FW6V6Q7lB+B7OA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org