Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d3332203d3e20323637363336.roa
File:                     323830343a343438303a3a2f33322d3332203d3e20323637363336.roa (raw, json)
Hash identifier:          weE8NdL5h528dsuJpmmZ7i3niuZWiBsnBwUxIPkODQY=
Subject key identifier:   E5:8E:FC:CD:07:E6:CE:33:68:7D:F7:62:3D:02:72:1E:34:07:77:A9
Certificate issuer:       /CN=38D9697A2330FB616A4B50BDB942F33C06977A53
Certificate serial:       25F02DC515D9FA9F74E76543C521C4D3A909D1C7
Authority key identifier: 38:D9:69:7A:23:30:FB:61:6A:4B:50:BD:B9:42:F3:3C:06:97:7A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D9697A2330FB616A4B50BDB942F33C06977A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d3332203d3e20323637363336.roa
Signing time:             Mon 06 Mar 2023 20:28:00 +0000
ROA not before:           Mon 06 Mar 2023 20:23:00 +0000
ROA not after:            Mon 04 Mar 2024 20:28:00 +0000
asID:                     267636
IP address blocks:        2804:4480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f0:2d:c5:15:d9:fa:9f:74:e7:65:43:c5:21:c4:d3:a9:09:d1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38D9697A2330FB616A4B50BDB942F33C06977A53
        Validity
            Not Before: Mar  6 20:23:00 2023 GMT
            Not After : Mar  4 20:28:00 2024 GMT
        Subject: CN=E58EFCCD07E6CE33687DF7623D02721E340777A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:a6:cf:87:6e:d3:03:c9:df:c5:4b:52:85:
                    59:fe:e2:3c:95:e6:32:dd:09:de:42:ea:1d:9e:9b:
                    2e:bc:29:e1:e4:51:40:48:c1:07:bf:f0:ba:00:ab:
                    fa:e8:48:58:0d:25:67:47:69:f7:37:4f:97:90:8b:
                    b8:40:2c:da:ea:53:12:79:15:83:41:4b:77:1e:08:
                    9b:64:7c:a2:65:a0:1c:b0:f0:26:63:e6:a2:81:47:
                    eb:09:0f:92:f8:10:d0:51:b5:60:40:ca:62:9b:97:
                    ed:e9:93:14:71:fd:73:49:fa:5c:54:00:bc:9a:e6:
                    76:3c:76:11:78:86:a0:f1:00:2d:12:ff:c7:b6:a0:
                    70:42:5a:74:51:02:9f:c6:03:41:8a:46:1e:8b:2a:
                    70:6e:33:84:89:5d:5f:ac:7b:bf:55:1d:09:fd:a7:
                    6d:80:43:c1:1d:11:fa:48:4e:ed:9f:e5:f2:c7:76:
                    e7:1d:4e:58:24:74:dd:59:f1:51:e4:d8:e1:79:62:
                    7b:ca:0f:ab:62:90:56:a5:4d:f6:fd:d6:ca:91:e1:
                    74:b1:1b:45:4c:98:24:f9:79:e9:8f:f0:f2:7d:43:
                    7c:2c:36:3a:b5:a6:8e:cd:9b:0a:9a:83:d8:48:90:
                    a6:5b:77:85:2d:98:ad:4b:72:eb:6a:15:f2:e1:a3:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8E:FC:CD:07:E6:CE:33:68:7D:F7:62:3D:02:72:1E:34:07:77:A9
            X509v3 Authority Key Identifier:
                keyid:38:D9:69:7A:23:30:FB:61:6A:4B:50:BD:B9:42:F3:3C:06:97:7A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/38D9697A2330FB616A4B50BDB942F33C06977A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D9697A2330FB616A4B50BDB942F33C06977A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/323830343a343438303a3a2f33322d3332203d3e20323637363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4480::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:aa:3a:d1:01:7a:b8:cf:f0:ed:b9:f4:64:a5:f6:87:59:01:
         a1:ca:62:44:78:75:e6:6b:f9:8b:fa:2f:c0:8d:ca:8a:ba:3a:
         6b:27:92:c1:92:27:5e:e1:a7:72:64:3a:5a:37:a7:df:7f:18:
         29:4d:1f:e3:4b:a9:42:b6:ab:a3:28:18:05:ad:b0:83:ab:ef:
         a6:42:a7:63:56:5e:79:3a:84:8c:0e:c8:3f:b4:70:41:12:50:
         fa:d6:82:12:06:cd:8f:c2:2b:f3:3a:ba:ea:dc:eb:9d:72:8c:
         f1:47:b8:0e:c2:ce:2e:bd:ed:a8:12:d5:5c:f8:12:a2:e5:53:
         41:1e:26:fb:33:bd:d9:72:55:3b:a5:c9:67:ad:dc:49:23:ce:
         ab:df:e2:38:79:54:dc:43:29:43:91:ba:73:24:a1:6a:19:8f:
         ae:5a:b5:a4:99:84:4e:e0:0f:d7:07:cf:f5:5c:39:9e:f9:51:
         30:1d:21:fc:e5:3c:f4:b7:d5:6b:2f:a0:fb:92:4c:5f:74:41:
         10:bf:d0:ad:7f:d9:54:a3:19:ae:d6:df:96:84:c7:e4:7e:f6:
         1b:b7:18:33:a8:61:0e:d8:f0:1c:40:77:4a:ef:82:40:7c:a0:
         b7:14:ac:1d:80:1f:06:0d:83:3f:5d:e5:67:30:2a:b0:bc:64:
         d5:65:87:b5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJfAtxRXZ+p9052VDxSHE06kJ0ccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhEOTY5N0EyMzMwRkI2MTZBNEI1MEJEQjk0MkYzM0Mw
Njk3N0E1MzAeFw0yMzAzMDYyMDIzMDBaFw0yNDAzMDQyMDI4MDBaMDMxMTAvBgNV
BAMTKEU1OEVGQ0NEMDdFNkNFMzM2ODdERjc2MjNEMDI3MjFFMzQwNzc3QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hKbPh27TA8nfxUtShVn+4jyV
5jLdCd5C6h2emy68KeHkUUBIwQe/8LoAq/roSFgNJWdHafc3T5eQi7hALNrqUxJ5
FYNBS3ceCJtkfKJloByw8CZj5qKBR+sJD5L4ENBRtWBAymKbl+3pkxRx/XNJ+lxU
ALya5nY8dhF4hqDxAC0S/8e2oHBCWnRRAp/GA0GKRh6LKnBuM4SJXV+se79VHQn9
p22AQ8EdEfpITu2f5fLHducdTlgkdN1Z8VHk2OF5YnvKD6tikFalTfb91sqR4XSx
G0VMmCT5eemP8PJ9Q3wsNjq1po7Nmwqag9hIkKZbd4UtmK1LcutqFfLho9ybAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5Y78zQfmzjNoffdiPQJyHjQHd6kwHwYDVR0j
BBgwFoAUONlpeiMw+2FqS1C9uULzPAaXelMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFVRk1Fd2k3VGFoOHZKWnIxVkRxWEdGUE5TZlgxUGk5dmhXY2hYanVr
UzMvMC8zOEQ5Njk3QTIzMzBGQjYxNkE0QjUwQkRCOTQyRjMzQzA2OTc3QTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4RDk2OTdBMjMzMEZCNjE2
QTRCNTBCREI5NDJGMzNDMDY5NzdBNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhVUZNRXdpN1RhaDh2SlpyMVZEcVhHRlBOU2ZYMVBpOXZoV2NoWGp1a1MzLzAv
MzIzODMwMzQzYTM0MzQzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAREgDANBgkqhkiG9w0BAQsFAAOCAQEAN6o60QF6
uM/w7bn0ZKX2h1kBocpiRHh15mv5i/ovwI3Kiro6ayeSwZInXuGncmQ6Wjen338Y
KU0f40upQraroygYBa2wg6vvpkKnY1ZeeTqEjA7IP7RwQRJQ+taCEgbNj8Ir8zq6
6tzrnXKM8Ue4DsLOLr3tqBLVXPgSouVTQR4m+zO92XJVO6XJZ63cSSPOq9/iOHlU
3EMpQ5G6cyShahmPrlq1pJmETuAP1wfP9Vw5nvlRMB0h/OU89LfVay+g+5JMX3RB
EL/QrX/ZVKMZrtbfloTH5H72G7cYM6hhDtjwHEB3Su+CQHygtxSsHYAfBg2DP13l
ZzAqsLxk1WWHtQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org