Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a3536383a3a2f33322d3430203d3e20323632353134.roa
File:                     323830343a3536383a3a2f33322d3430203d3e20323632353134.roa (raw, json)
Hash identifier:          ukrVdQIqmr3e48L8PT91+lNlr5sJzM4ownYbRLH0yMw=
Subject key identifier:   46:6C:92:40:19:F8:21:5F:6B:BF:59:65:98:6C:8B:97:C6:CD:25:38
Certificate issuer:       /CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
Certificate serial:       72339F9305F8C05916863DD10F54F1DEBC8F00F3
Authority key identifier: 7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a3536383a3a2f33322d3430203d3e20323632353134.roa
Signing time:             Mon 08 May 2023 11:49:42 +0000
ROA not before:           Mon 08 May 2023 11:44:42 +0000
ROA not after:            Mon 06 May 2024 11:49:42 +0000
asID:                     262514
IP address blocks:        2804:568::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:33:9f:93:05:f8:c0:59:16:86:3d:d1:0f:54:f1:de:bc:8f:00:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
        Validity
            Not Before: May  8 11:44:42 2023 GMT
            Not After : May  6 11:49:42 2024 GMT
        Subject: CN=466C924019F8215F6BBF5965986C8B97C6CD2538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:04:5c:00:22:d0:8e:6b:30:79:b3:48:f1:
                    7a:ec:ef:e3:05:29:05:03:b6:7d:7e:c3:cb:42:72:
                    f6:8c:ca:76:7f:1c:e2:41:38:ec:c9:a4:1e:20:74:
                    62:dd:6f:6c:ff:fa:1d:2b:84:17:26:6e:ad:e1:92:
                    68:73:76:ee:f1:9b:0e:d0:fd:cb:e6:0f:c1:06:79:
                    26:57:8f:02:67:73:0f:f0:5b:30:58:dc:f8:59:a6:
                    8a:f5:45:cf:e0:ba:af:63:fb:39:8a:b1:92:a4:d2:
                    24:3d:79:a9:74:07:74:70:98:c1:70:36:8d:41:ee:
                    61:d7:6f:c0:2b:85:57:9b:58:ea:4d:ab:7a:03:a3:
                    4b:0b:a4:bd:ac:77:f9:9c:93:58:c5:00:49:fb:8f:
                    9f:79:88:54:41:8f:2b:82:69:4a:90:cc:ab:68:05:
                    39:df:ff:8f:46:c1:aa:d2:1a:00:ea:aa:23:ca:e3:
                    f2:28:50:db:d6:95:cf:06:87:d8:db:08:f8:be:2b:
                    a9:a5:8f:22:de:f7:b3:98:6e:dd:f6:52:5f:52:08:
                    fa:4a:3d:3c:ff:b9:e3:8d:6b:6c:58:06:2f:04:4e:
                    76:2f:27:64:3a:e8:fc:e1:c5:04:b2:42:1c:bc:ff:
                    4d:fd:9f:f1:9f:d8:9d:3c:dc:07:51:46:ab:99:c3:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6C:92:40:19:F8:21:5F:6B:BF:59:65:98:6C:8B:97:C6:CD:25:38
            X509v3 Authority Key Identifier:
                keyid:7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a3536383a3a2f33322d3430203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:568::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:40:cc:74:41:8c:f8:7c:c2:8d:2b:f9:8d:ca:7a:61:89:58:
         eb:b3:62:8b:02:27:a0:e3:d9:88:d2:c2:53:06:67:f8:fb:87:
         7b:29:96:2b:55:d7:54:d8:6e:d6:a9:2a:20:1b:58:55:fd:ed:
         e6:b5:0c:ba:cd:77:25:4c:25:51:e0:e9:f4:e7:be:c9:d8:60:
         e5:5b:b4:41:75:bd:b2:5e:9e:70:47:0c:be:90:07:92:06:69:
         32:0b:87:3f:f7:85:50:f6:c0:d0:75:aa:2a:54:61:64:eb:63:
         5e:56:2a:43:8a:69:53:88:1a:bb:e8:60:d3:27:01:57:d0:73:
         64:89:67:1f:5a:83:2b:30:76:9a:e5:40:e3:98:81:10:79:c2:
         89:15:21:1b:cf:1a:25:01:35:69:2f:cb:00:91:5c:c1:90:42:
         67:a2:6f:d0:be:c5:a9:c7:4f:ec:0c:4c:8a:42:28:70:e2:4b:
         cc:32:7f:a4:94:6f:cf:e1:d6:5f:2c:92:20:34:81:a4:e4:27:
         2c:77:8c:94:4c:e0:88:38:23:46:30:02:11:24:92:26:e8:8d:
         59:f3:ad:55:3b:b6:91:e2:1a:6d:8b:23:3f:fb:1f:00:9c:ee:
         d8:bd:e5:27:fe:30:e7:b3:97:cd:b9:35:5d:a4:b5:ca:8d:69:
         9b:c3:f4:00
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcjOfkwX4wFkWhj3RD1Tx3ryPAPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UzRTEzM0U4MDFEQTczQ0UxNEUxNkU4MzEyNEEyOUE5
RUU3NEYyMjAeFw0yMzA1MDgxMTQ0NDJaFw0yNDA1MDYxMTQ5NDJaMDMxMTAvBgNV
BAMTKDQ2NkM5MjQwMTlGODIxNUY2QkJGNTk2NTk4NkM4Qjk3QzZDRDI1MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxARcACLQjmswebNI8Xrs7+MF
KQUDtn1+w8tCcvaMynZ/HOJBOOzJpB4gdGLdb2z/+h0rhBcmbq3hkmhzdu7xmw7Q
/cvmD8EGeSZXjwJncw/wWzBY3PhZpor1Rc/guq9j+zmKsZKk0iQ9eal0B3RwmMFw
No1B7mHXb8ArhVebWOpNq3oDo0sLpL2sd/mck1jFAEn7j595iFRBjyuCaUqQzKto
BTnf/49GwarSGgDqqiPK4/IoUNvWlc8Gh9jbCPi+K6mljyLe97OYbt32Ul9SCPpK
PTz/ueONa2xYBi8ETnYvJ2Q66PzhxQSyQhy8/039n/Gf2J083AdRRquZw+1DAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQURmySQBn4IV9rv1llmGyLl8bNJTgwHwYDVR0j
BBgwFoAUfj4TPoAdpzzhThboMSSimp7nTyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC83RTNFMTMzRTgwMURBNzNDRTE0RTE2RTgzMTI0QTI5QTlFRTc0RjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFM0UxMzNFODAxREE3M0NF
MTRFMTZFODMxMjRBMjlBOUVFNzRGMjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzIzODMwMzQzYTM1MzYzODNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzMjM1
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBWgwDQYJKoZIhvcNAQELBQADggEBAGJAzHRBjPh8
wo0r+Y3KemGJWOuzYosCJ6Dj2YjSwlMGZ/j7h3splitV11TYbtapKiAbWFX97ea1
DLrNdyVMJVHg6fTnvsnYYOVbtEF1vbJennBHDL6QB5IGaTILhz/3hVD2wNB1qipU
YWTrY15WKkOKaVOIGrvoYNMnAVfQc2SJZx9agyswdprlQOOYgRB5wokVIRvPGiUB
NWkvywCRXMGQQmeib9C+xanHT+wMTIpCKHDiS8wyf6SUb8/h1l8skiA0gaTkJyx3
jJRM4Ig4I0YwAhEkkibojVnzrVU7tpHiGm2LIz/7HwCc7ti95Sf+MOezl825NV2k
tcqNaZvD9AA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org