Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/0/323830343a313034383a3a2f33322d3438203d3e20323633363238.roa
File:                     323830343a313034383a3a2f33322d3438203d3e20323633363238.roa (raw, json)
Hash identifier:          powVycs7+fwnkTZrAt75hT0irlWZzWUNN9Jpl9s9VQo=
Subject key identifier:   D6:D5:61:F1:E4:B1:06:2D:91:41:C2:75:A6:0F:EC:DB:68:2A:BF:5B
Certificate issuer:       /CN=30A1AF22260A0EC425DA422DB655C96CEDCE77A9
Certificate serial:       3EE869751FE31A4512FECB223238BE48BAEA91A9
Authority key identifier: 30:A1:AF:22:26:0A:0E:C4:25:DA:42:2D:B6:55:C9:6C:ED:CE:77:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30A1AF22260A0EC425DA422DB655C96CEDCE77A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/0/323830343a313034383a3a2f33322d3438203d3e20323633363238.roa
Signing time:             Fri 22 Sep 2023 02:52:39 +0000
ROA not before:           Fri 22 Sep 2023 02:47:39 +0000
ROA not after:            Fri 20 Sep 2024 02:52:39 +0000
asID:                     263628
IP address blocks:        2804:1048::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e8:69:75:1f:e3:1a:45:12:fe:cb:22:32:38:be:48:ba:ea:91:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30A1AF22260A0EC425DA422DB655C96CEDCE77A9
        Validity
            Not Before: Sep 22 02:47:39 2023 GMT
            Not After : Sep 20 02:52:39 2024 GMT
        Subject: CN=D6D561F1E4B1062D9141C275A60FECDB682ABF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4e:1e:61:42:0e:3a:0a:a6:4b:e6:85:a8:78:
                    48:2f:5b:2f:22:03:2e:24:52:ab:f8:0e:3c:0e:9a:
                    fa:d0:3f:7c:49:4f:4c:08:cf:b4:bb:3e:71:e7:d1:
                    8e:82:6d:c1:db:e6:88:fa:e1:05:ac:5b:6c:48:68:
                    aa:ee:f2:09:6f:69:2a:c4:38:eb:0e:02:20:09:42:
                    ae:07:ac:38:0f:36:0b:7b:7c:d2:d5:6e:aa:4a:02:
                    99:e0:a4:f2:6c:de:ac:e1:b9:3b:44:df:d1:cb:ae:
                    38:eb:14:0c:dd:5c:73:a8:65:87:c9:e5:b1:de:82:
                    99:51:61:7c:37:55:bf:7e:72:d0:84:69:2a:7b:21:
                    ed:82:25:fe:23:fc:01:87:5a:3a:90:94:b3:eb:f1:
                    63:5d:14:11:2f:02:fa:ad:fd:c5:ad:04:bd:67:32:
                    a0:f8:67:1f:2b:97:95:9c:66:3d:90:2c:b7:3f:82:
                    37:b4:92:26:59:9e:4f:77:55:85:e1:55:8a:0c:cc:
                    e8:7b:0a:40:5a:1c:ae:ec:6b:d4:d5:f2:be:f7:82:
                    0b:a6:be:d0:b6:1c:37:98:a3:8e:68:8c:09:7c:b6:
                    13:20:55:3c:15:1d:a9:b6:99:7c:63:19:54:bd:5e:
                    09:52:d2:dd:1d:0e:0a:c2:e6:09:8b:c0:24:ee:c8:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D5:61:F1:E4:B1:06:2D:91:41:C2:75:A6:0F:EC:DB:68:2A:BF:5B
            X509v3 Authority Key Identifier:
                keyid:30:A1:AF:22:26:0A:0E:C4:25:DA:42:2D:B6:55:C9:6C:ED:CE:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/0/30A1AF22260A0EC425DA422DB655C96CEDCE77A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30A1AF22260A0EC425DA422DB655C96CEDCE77A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/0/323830343a313034383a3a2f33322d3438203d3e20323633363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1048::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:56:c6:09:99:aa:37:08:c6:49:51:1b:61:02:0e:08:3d:
         85:41:53:44:af:8e:e2:bb:2d:37:7f:3b:48:c6:0c:b2:3b:f5:
         a5:ea:b7:0e:d6:9d:ab:c9:cc:d6:4f:4b:d5:50:0b:24:eb:5e:
         ae:49:96:c7:28:17:56:f0:3c:44:b9:88:c7:f8:12:cf:3a:ab:
         a1:e7:ba:70:32:8f:67:70:b5:ee:e0:f2:f4:bb:77:3d:9f:2f:
         25:da:4b:c6:c9:10:22:32:0a:b0:77:3b:42:39:e0:0f:eb:3e:
         66:75:aa:6a:a6:8c:13:1b:ce:66:49:26:45:5f:f7:de:a4:f5:
         9f:b6:2e:32:4e:b8:b9:cf:42:9d:12:35:1f:ea:22:90:b7:b5:
         18:85:f0:9b:36:58:fe:44:48:38:94:de:cf:3d:43:fe:81:f7:
         0a:6d:d2:aa:46:3e:c0:79:be:76:dc:3c:f6:0c:88:75:52:6a:
         b2:14:2c:b7:3c:3b:10:61:c3:7c:1e:b9:99:e3:b8:90:75:2c:
         4b:ff:87:27:52:64:f1:5f:09:9a:bf:c3:87:c9:81:11:c8:2a:
         0c:b8:2c:5d:ff:cb:60:0f:a4:77:10:be:85:84:b4:f8:38:14:
         ae:4b:34:53:e6:c5:21:7b:1d:81:70:90:61:b1:4b:d4:29:7d:
         85:7c:bf:79
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPuhpdR/jGkUS/ssiMji+SLrqkakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBBMUFGMjIyNjBBMEVDNDI1REE0MjJEQjY1NUM5NkNF
RENFNzdBOTAeFw0yMzA5MjIwMjQ3MzlaFw0yNDA5MjAwMjUyMzlaMDMxMTAvBgNV
BAMTKEQ2RDU2MUYxRTRCMTA2MkQ5MTQxQzI3NUE2MEZFQ0RCNjgyQUJGNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTh5hQg46CqZL5oWoeEgvWy8i
Ay4kUqv4DjwOmvrQP3xJT0wIz7S7PnHn0Y6CbcHb5oj64QWsW2xIaKru8glvaSrE
OOsOAiAJQq4HrDgPNgt7fNLVbqpKApngpPJs3qzhuTtE39HLrjjrFAzdXHOoZYfJ
5bHegplRYXw3Vb9+ctCEaSp7Ie2CJf4j/AGHWjqQlLPr8WNdFBEvAvqt/cWtBL1n
MqD4Zx8rl5WcZj2QLLc/gje0kiZZnk93VYXhVYoMzOh7CkBaHK7sa9TV8r73ggum
vtC2HDeYo45ojAl8thMgVTwVHam2mXxjGVS9XglS0t0dDgrC5gmLwCTuyPzPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1tVh8eSxBi2RQcJ1pg/s22gqv1swHwYDVR0j
BBgwFoAUMKGvIiYKDsQl2kIttlXJbO3Od6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjZSYWNyODZYRmtQYm9WU3dmQ3NmZUNTb01qVmFoOEd6THpnWkR1S1Fn
dUMvMC8zMEExQUYyMjI2MEEwRUM0MjVEQTQyMkRCNjU1Qzk2Q0VEQ0U3N0E5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwQTFBRjIyMjYwQTBFQzQy
NURBNDIyREI2NTVDOTZDRURDRTc3QTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY2UmFjcjg2WEZrUGJvVlN3ZkNzZmVDU29NalZhaDhHekx6Z1pEdUtRZ3VDLzAv
MzIzODMwMzQzYTMxMzAzNDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzYzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQSDANBgkqhkiG9w0BAQsFAAOCAQEAptpWxgmZ
qjcIxklRG2ECDgg9hUFTRK+O4rstN387SMYMsjv1peq3Dtadq8nM1k9L1VALJOte
rkmWxygXVvA8RLmIx/gSzzqroee6cDKPZ3C17uDy9Lt3PZ8vJdpLxskQIjIKsHc7
QjngD+s+ZnWqaqaMExvOZkkmRV/33qT1n7YuMk64uc9CnRI1H+oikLe1GIXwmzZY
/kRIOJTezz1D/oH3Cm3SqkY+wHm+dtw89gyIdVJqshQstzw7EGHDfB65meO4kHUs
S/+HJ1Jk8V8Jmr/Dh8mBEcgqDLgsXf/LYA+kdxC+hYS0+DgUrks0U+bFIXsdgXCQ
YbFL1Cl9hXy/eQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org