Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/323830343a65383a3a2f33322d3438203d3e203238323830.roa
File:                     323830343a65383a3a2f33322d3438203d3e203238323830.roa (raw, json)
Hash identifier:          L5sQc81q/Ks6QH5VH4g5M+GysqLoDdpNi9M2a5a+New=
Subject key identifier:   6E:5E:ED:3A:DD:58:69:CE:0D:A5:6C:E1:7C:61:AD:44:67:50:21:F3
Certificate issuer:       /CN=3C4101973F3741AA7FD920C82809162B188C085A
Certificate serial:       60173779FEEF6047ED077D5616DF8F71EEC46C28
Authority key identifier: 3C:41:01:97:3F:37:41:AA:7F:D9:20:C8:28:09:16:2B:18:8C:08:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4101973F3741AA7FD920C82809162B188C085A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/323830343a65383a3a2f33322d3438203d3e203238323830.roa
Signing time:             Mon 13 Feb 2023 21:50:04 +0000
ROA not before:           Mon 13 Feb 2023 21:45:04 +0000
ROA not after:            Mon 12 Feb 2024 21:50:04 +0000
asID:                     28280
IP address blocks:        2804:e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:17:37:79:fe:ef:60:47:ed:07:7d:56:16:df:8f:71:ee:c4:6c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C4101973F3741AA7FD920C82809162B188C085A
        Validity
            Not Before: Feb 13 21:45:04 2023 GMT
            Not After : Feb 12 21:50:04 2024 GMT
        Subject: CN=6E5EED3ADD5869CE0DA56CE17C61AD44675021F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:76:d1:eb:62:7b:f4:2b:06:0e:59:8c:c3:
                    9f:39:36:f6:78:50:af:2c:d2:c0:ab:90:37:3f:c6:
                    6a:f6:b4:df:5b:7c:5b:eb:07:00:e4:35:e8:e0:de:
                    47:33:0a:50:1b:bb:d3:62:59:f4:f7:3e:04:d9:cd:
                    5f:d4:41:48:85:48:74:b9:19:76:fa:bb:7d:c6:84:
                    38:7c:81:c1:38:8e:ed:7d:1a:f0:72:d7:b8:85:8e:
                    26:25:b2:47:1b:3e:41:cc:56:ac:23:5f:49:ea:86:
                    34:e0:cf:2d:86:7c:73:e5:68:af:f9:46:3b:4b:f4:
                    c1:6e:ef:d5:9c:a8:3b:d3:af:d8:68:27:fd:bc:dc:
                    f1:33:07:b8:d9:4e:cf:0d:94:6d:3f:45:da:37:08:
                    67:3c:81:3b:d2:c5:7e:15:82:9e:ad:bd:f6:79:be:
                    38:7a:8f:dc:72:a8:ee:0f:7c:ec:02:68:e8:46:62:
                    44:c6:6c:c7:8e:aa:7a:b2:ed:bc:29:c7:96:23:ba:
                    ad:7d:22:a4:8c:4d:12:c3:4d:64:3b:f7:f9:27:89:
                    84:36:88:e2:e1:f4:be:2f:df:a8:57:71:b0:38:a4:
                    1d:6e:e2:bd:65:66:f2:ff:32:c3:e3:48:68:c3:af:
                    b3:41:ea:3e:ac:5d:d0:d4:ea:f7:ff:2c:f7:45:fd:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:ED:3A:DD:58:69:CE:0D:A5:6C:E1:7C:61:AD:44:67:50:21:F3
            X509v3 Authority Key Identifier:
                keyid:3C:41:01:97:3F:37:41:AA:7F:D9:20:C8:28:09:16:2B:18:8C:08:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3C4101973F3741AA7FD920C82809162B188C085A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4101973F3741AA7FD920C82809162B188C085A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/323830343a65383a3a2f33322d3438203d3e203238323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:6b:2c:d6:d9:07:30:61:79:d9:f9:54:a2:9c:2b:89:af:5c:
         4f:1d:a1:81:d7:1a:e7:81:04:7b:6e:b3:1d:a7:31:0b:5c:43:
         16:ed:66:4a:1e:48:e6:08:a3:c6:21:f9:07:90:46:ec:8e:3c:
         8c:0e:29:2c:fe:cc:86:71:b5:f3:3e:da:d2:7a:1f:4f:c0:ca:
         2c:93:7b:fb:c1:04:26:ba:25:66:fd:78:e9:d1:08:6f:02:a3:
         0b:60:84:0d:35:01:21:93:e0:41:df:84:a8:90:c3:9a:32:8d:
         2b:25:6b:85:2f:17:a8:d2:d8:34:ca:5f:1e:47:2c:47:a3:40:
         16:f7:62:08:76:d0:a7:db:75:2f:7c:bf:42:79:63:48:9c:a5:
         20:24:b8:30:36:7e:f9:b1:c0:60:48:5e:96:59:ce:7d:84:8b:
         69:65:f9:c2:50:f8:3e:fa:0b:57:65:05:c8:81:74:98:e5:a9:
         b9:a9:e4:a4:6a:9e:a7:af:7a:ef:8a:5f:a2:2a:5a:e1:54:65:
         f8:25:c5:f5:34:30:da:b2:1f:d3:0e:dc:58:00:f0:2b:45:cc:
         1d:76:fe:bb:b2:7b:d1:e5:b6:2a:9a:9d:d7:76:fc:6e:ed:b0:
         94:a3:36:84:3e:b9:42:8d:34:a3:17:6f:24:90:02:25:21:d8:
         26:96:3c:60
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUYBc3ef7vYEftB31WFt+Pce7EbCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M0MTAxOTczRjM3NDFBQTdGRDkyMEM4MjgwOTE2MkIx
ODhDMDg1QTAeFw0yMzAyMTMyMTQ1MDRaFw0yNDAyMTIyMTUwMDRaMDMxMTAvBgNV
BAMTKDZFNUVFRDNBREQ1ODY5Q0UwREE1NkNFMTdDNjFBRDQ0Njc1MDIxRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAXbR62J79CsGDlmMw585NvZ4
UK8s0sCrkDc/xmr2tN9bfFvrBwDkNejg3kczClAbu9NiWfT3PgTZzV/UQUiFSHS5
GXb6u33GhDh8gcE4ju19GvBy17iFjiYlskcbPkHMVqwjX0nqhjTgzy2GfHPlaK/5
RjtL9MFu79WcqDvTr9hoJ/283PEzB7jZTs8NlG0/Rdo3CGc8gTvSxX4Vgp6tvfZ5
vjh6j9xyqO4PfOwCaOhGYkTGbMeOqnqy7bwpx5Yjuq19IqSMTRLDTWQ79/kniYQ2
iOLh9L4v36hXcbA4pB1u4r1lZvL/MsPjSGjDr7NB6j6sXdDU6vf/LPdF/fWlAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUbl7tOt1Yac4NpWzhfGGtRGdQIfMwHwYDVR0j
BBgwFoAUPEEBlz83Qap/2SDIKAkWKxiMCFowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk03ZDNXQkhYa2ZCRDJZMktXR0xTYkRZekZXUVJQRGl3UFFKYlNCWk00
aUovMC8zQzQxMDE5NzNGMzc0MUFBN0ZEOTIwQzgyODA5MTYyQjE4OEMwODVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDNDEwMTk3M0YzNzQxQUE3
RkQ5MjBDODI4MDkxNjJCMTg4QzA4NUEuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNN2QzV0JIWGtmQkQyWTJLV0dMU2JEWXpGV1FSUERpd1BRSmJTQlpNNGlKLzAv
MzIzODMwMzQzYTY1MzgzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM4MzIzODMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQA6DANBgkqhkiG9w0BAQsFAAOCAQEA0Gss1tkHMGF52flU
opwria9cTx2hgdca54EEe26zHacxC1xDFu1mSh5I5gijxiH5B5BG7I48jA4pLP7M
hnG18z7a0nofT8DKLJN7+8EEJrolZv146dEIbwKjC2CEDTUBIZPgQd+EqJDDmjKN
KyVrhS8XqNLYNMpfHkcsR6NAFvdiCHbQp9t1L3y/QnljSJylICS4MDZ++bHAYEhe
llnOfYSLaWX5wlD4PvoLV2UFyIF0mOWpuankpGqep69674pfoipa4VRl+CXF9TQw
2rIf0w7cWADwK0XMHXb+u7J70eW2Kpqd13b8bu2wlKM2hD65Qo00oxdvJJACJSHY
JpY8YA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org