Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d3430203d3e203238363536.roa
File:                     323830343a373934343a3a2f33322d3430203d3e203238363536.roa (raw, json)
Hash identifier:          yXeLVJchVD6oUdSSv9dEHBlBomepceHPiwikR572g6o=
Subject key identifier:   9F:E3:49:8D:77:A3:2C:C3:2F:8B:F6:80:AB:A5:7C:C2:FD:B3:9A:47
Certificate issuer:       /CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
Certificate serial:       4AF8680AA448297DC9CB6721E0F0C4BAAD7DE1E8
Authority key identifier: 7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d3430203d3e203238363536.roa
Signing time:             Mon 08 May 2023 11:49:00 +0000
ROA not before:           Mon 08 May 2023 11:44:00 +0000
ROA not after:            Mon 06 May 2024 11:49:00 +0000
asID:                     28656
IP address blocks:        2804:7944::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f8:68:0a:a4:48:29:7d:c9:cb:67:21:e0:f0:c4:ba:ad:7d:e1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
        Validity
            Not Before: May  8 11:44:00 2023 GMT
            Not After : May  6 11:49:00 2024 GMT
        Subject: CN=9FE3498D77A32CC32F8BF680ABA57CC2FDB39A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:83:3c:a6:06:49:07:62:1e:b7:79:48:2f:
                    06:3d:2c:19:16:e1:82:22:bb:a5:79:3a:a2:ee:e0:
                    bb:2f:54:cd:b3:d2:38:85:ae:7e:cd:95:f0:b0:f9:
                    86:af:44:f9:91:45:ca:64:fe:4f:60:a5:b5:4d:21:
                    a3:91:4a:02:4f:1a:cc:01:46:ac:7c:0c:8b:e9:fc:
                    6b:df:d0:9e:f9:60:3c:a4:5a:fc:6d:40:ac:48:2d:
                    9b:e3:15:4b:38:e8:a5:de:a4:3f:b6:b7:a3:36:ed:
                    c5:ef:59:fe:98:46:d3:d4:1c:4e:a8:79:25:e4:94:
                    0c:cc:dc:0b:c4:4f:b9:2d:cc:74:dc:7f:eb:6e:24:
                    ae:af:a1:75:15:c2:6f:3d:6d:1a:7d:f9:33:0d:6e:
                    87:22:04:54:20:70:3e:64:3a:1d:80:c8:5b:f9:a6:
                    b9:87:76:4b:c5:ab:97:a9:c2:94:2e:30:e4:44:30:
                    bf:00:c2:85:fb:3a:a6:c5:e1:1a:df:56:c4:17:20:
                    61:80:91:46:21:1f:03:c3:13:34:97:3c:1b:10:f3:
                    39:f9:ce:0d:25:72:47:14:ff:65:c1:3f:7e:a2:b1:
                    7e:4a:04:f5:de:da:d7:eb:c3:8e:12:f0:1c:e4:c5:
                    8b:8c:c2:ab:f2:77:a3:38:aa:55:1b:1b:f8:44:bd:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E3:49:8D:77:A3:2C:C3:2F:8B:F6:80:AB:A5:7C:C2:FD:B3:9A:47
            X509v3 Authority Key Identifier:
                keyid:7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a373934343a3a2f33322d3430203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7944::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:cc:92:7e:09:36:6c:73:3c:37:f8:7d:be:d4:c3:0b:f9:
         f1:ab:ba:53:fa:ab:2b:fa:f8:df:20:cd:16:53:1b:04:06:e4:
         ea:31:44:ae:69:d3:65:15:ec:ad:bc:e7:f3:54:88:eb:f0:34:
         b1:e7:06:6f:37:3c:e4:9a:3a:51:20:0d:39:86:57:c9:68:fd:
         2f:7c:37:18:34:7b:54:75:77:85:59:d8:cc:df:5f:97:90:f0:
         a6:f0:b4:43:21:a0:65:cd:21:82:69:2c:96:ef:27:9f:8f:b3:
         18:53:1b:5d:9b:e8:16:7d:84:26:c8:f6:4d:c3:a4:aa:22:09:
         b2:c9:c1:80:a8:ed:95:7d:4d:3b:00:78:6b:21:70:13:01:d9:
         1a:02:b9:98:50:2b:4b:a7:a9:68:39:31:f4:d8:8c:4e:04:c3:
         a0:0a:7c:83:41:65:3e:78:0b:11:5e:6e:dc:3b:58:f3:86:1a:
         31:c5:1b:24:1f:70:f0:d7:de:27:f0:0a:95:b1:a3:c8:a0:df:
         8f:d9:12:27:eb:40:47:81:79:87:33:c8:31:13:4f:0a:44:8f:
         a2:94:07:33:af:2c:9a:89:3c:10:e5:4a:42:db:75:22:42:78:
         c3:18:b2:7d:7e:0e:69:0a:dd:d2:05:39:48:0b:38:3a:5f:2b:
         14:10:13:c1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSvhoCqRIKX3Jy2ch4PDEuq194egwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UzRTEzM0U4MDFEQTczQ0UxNEUxNkU4MzEyNEEyOUE5
RUU3NEYyMjAeFw0yMzA1MDgxMTQ0MDBaFw0yNDA1MDYxMTQ5MDBaMDMxMTAvBgNV
BAMTKDlGRTM0OThENzdBMzJDQzMyRjhCRjY4MEFCQTU3Q0MyRkRCMzlBNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pYM8pgZJB2Iet3lILwY9LBkW
4YIiu6V5OqLu4LsvVM2z0jiFrn7NlfCw+YavRPmRRcpk/k9gpbVNIaORSgJPGswB
Rqx8DIvp/Gvf0J75YDykWvxtQKxILZvjFUs46KXepD+2t6M27cXvWf6YRtPUHE6o
eSXklAzM3AvET7ktzHTcf+tuJK6voXUVwm89bRp9+TMNbociBFQgcD5kOh2AyFv5
prmHdkvFq5epwpQuMOREML8AwoX7OqbF4RrfVsQXIGGAkUYhHwPDEzSXPBsQ8zn5
zg0lckcU/2XBP36isX5KBPXe2tfrw44S8BzkxYuMwqvyd6M4qlUbG/hEvf1LAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUn+NJjXejLMMvi/aAq6V8wv2zmkcwHwYDVR0j
BBgwFoAUfj4TPoAdpzzhThboMSSimp7nTyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC83RTNFMTMzRTgwMURBNzNDRTE0RTE2RTgzMTI0QTI5QTlFRTc0RjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFM0UxMzNFODAxREE3M0NF
MTRFMTZFODMxMjRBMjlBOUVFNzRGMjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzIzODMwMzQzYTM3MzkzNDM0M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzODM2
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEeUQwDQYJKoZIhvcNAQELBQADggEBACvczJJ+CTZs
czw3+H2+1MML+fGrulP6qyv6+N8gzRZTGwQG5OoxRK5p02UV7K285/NUiOvwNLHn
Bm83POSaOlEgDTmGV8lo/S98Nxg0e1R1d4VZ2MzfX5eQ8KbwtEMhoGXNIYJpLJbv
J5+PsxhTG12b6BZ9hCbI9k3DpKoiCbLJwYCo7ZV9TTsAeGshcBMB2RoCuZhQK0un
qWg5MfTYjE4Ew6AKfINBZT54CxFebtw7WPOGGjHFGyQfcPDX3ifwCpWxo8ig34/Z
EifrQEeBeYczyDETTwpEj6KUBzOvLJqJPBDlSkLbdSJCeMMYsn1+DmkK3dIFOUgL
ODpfKxQQE8E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org