Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a353030303a3a2f33362d3336203d3e20323636343932.roa
File:                     323830343a333861383a353030303a3a2f33362d3336203d3e20323636343932.roa (raw, json)
Hash identifier:          nD7SVZ4ai3LxaWIer6zdqoAcNbPsQycTZnLS0wfHKvM=
Subject key identifier:   92:47:01:4F:DA:A1:BC:FA:6E:C7:6E:91:65:38:44:AF:D5:48:10:7B
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       40932E606C2BAA915068DC41E8C7E310CF432E12
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a353030303a3a2f33362d3336203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:00:55 +0000
ROA not before:           Tue 02 May 2023 16:55:55 +0000
ROA not after:            Tue 30 Apr 2024 17:00:55 +0000
asID:                     266492
IP address blocks:        2804:38a8:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:93:2e:60:6c:2b:aa:91:50:68:dc:41:e8:c7:e3:10:cf:43:2e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:55:55 2023 GMT
            Not After : Apr 30 17:00:55 2024 GMT
        Subject: CN=9247014FDAA1BCFA6EC76E91653844AFD548107B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:52:99:58:a0:3f:58:64:56:33:ff:26:22:
                    ec:c0:f1:65:a1:69:27:41:a3:22:3e:ca:c8:49:a2:
                    10:62:ae:2b:83:d7:f0:af:28:4c:37:1b:78:e5:46:
                    cc:e6:4e:df:00:8b:73:2e:85:da:81:c6:ff:e0:34:
                    28:05:6d:df:39:48:f1:1a:1e:9a:b1:3f:b9:a9:8d:
                    f1:5c:a9:0c:3e:5c:99:f6:82:0f:32:0d:75:08:be:
                    ee:51:e7:b1:d4:8d:2f:6a:75:d8:20:47:a9:99:07:
                    16:54:7b:47:53:24:2f:73:76:c0:c5:99:e1:c3:b5:
                    d4:49:44:e9:6a:0c:64:ca:b8:15:71:c2:26:52:e7:
                    80:fa:30:7c:55:48:92:24:4f:59:cf:74:06:0a:62:
                    d6:9d:ec:18:a9:89:e9:ca:25:38:59:ec:63:ab:59:
                    25:91:b7:18:e7:10:38:8b:7c:55:b2:55:8a:ef:5a:
                    40:05:40:a2:f1:87:d5:17:4d:07:eb:3c:64:f9:ff:
                    bc:7a:b7:c8:5a:94:3a:c4:86:86:f9:36:74:20:87:
                    bb:29:ff:7a:13:46:a5:ec:79:8d:cd:1b:c8:7f:ee:
                    95:01:66:b4:02:6b:46:ed:af:c6:1a:de:8a:82:32:
                    16:3b:b1:01:7e:dc:59:ee:8f:80:5c:af:5b:c9:6f:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:47:01:4F:DA:A1:BC:FA:6E:C7:6E:91:65:38:44:AF:D5:48:10:7B
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a353030303a3a2f33362d3336203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:19:5d:8b:b6:0c:82:16:69:94:3b:b6:9d:ef:7e:39:b2:
         ac:db:05:d1:cd:49:14:04:64:3a:72:c2:5c:82:07:2f:a3:32:
         eb:23:b2:67:fb:73:b6:3f:ef:09:87:10:8a:d6:6b:7d:ef:44:
         dd:bb:5b:af:ec:42:67:c5:03:58:2b:54:a2:b7:b2:b9:f1:7d:
         e2:00:63:e5:4b:bd:f3:dd:d9:b4:40:75:45:10:06:89:cc:1d:
         73:d7:82:4b:37:03:7e:24:8a:dd:69:0f:5f:ce:47:6b:99:24:
         03:5f:41:11:5e:a2:70:d6:a4:ae:dc:a8:81:80:73:86:ce:18:
         a9:0b:09:c9:91:97:62:2a:dd:d0:91:e0:75:d9:f3:a1:d1:0e:
         a5:d5:6c:d4:de:35:8d:77:b3:39:43:20:e1:d2:1f:6a:d7:24:
         4a:d4:b8:e2:9d:83:12:ef:0f:e2:28:b5:ba:c1:48:29:28:cc:
         82:84:f1:3c:78:07:71:ad:cf:43:a8:f0:14:69:ba:bc:00:78:
         b9:6c:a3:88:5a:1f:a8:c7:77:73:98:3d:2a:a9:9d:2d:d1:e6:
         85:99:72:56:07:8a:88:76:1c:40:ad:c8:32:32:c2:c3:bd:00:
         28:16:89:27:33:c3:da:19:1b:a7:6a:07:82:78:a2:94:11:68:
         8a:53:e6:e0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQJMuYGwrqpFQaNxB6MfjEM9DLhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNBMUQ3N0NDQTU3REU3NjQ4RURFNTU4MEQ3REZENjRF
MEE1NzE0MjAeFw0yMzA1MDIxNjU1NTVaFw0yNDA0MzAxNzAwNTVaMDMxMTAvBgNV
BAMTKDkyNDcwMTRGREFBMUJDRkE2RUM3NkU5MTY1Mzg0NEFGRDU0ODEwN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTN1KZWKA/WGRWM/8mIuzA8WWh
aSdBoyI+yshJohBiriuD1/CvKEw3G3jlRszmTt8Ai3MuhdqBxv/gNCgFbd85SPEa
HpqxP7mpjfFcqQw+XJn2gg8yDXUIvu5R57HUjS9qddggR6mZBxZUe0dTJC9zdsDF
meHDtdRJROlqDGTKuBVxwiZS54D6MHxVSJIkT1nPdAYKYtad7BipienKJThZ7GOr
WSWRtxjnEDiLfFWyVYrvWkAFQKLxh9UXTQfrPGT5/7x6t8halDrEhob5NnQgh7sp
/3oTRqXseY3NG8h/7pUBZrQCa0btr8Ya3oqCMhY7sQF+3Fnuj4Bcr1vJb7FFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkkcBT9qhvPpux26RZThEr9VIEHswHwYDVR0j
BBgwFoAU46HXfMpX3nZI7eVYDX39ZOClcUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFFERnhLRzZUOXRlaXV5cENIVnE5cWd4YW9uRW9LVThXYnJFdFZKSDZu
aXIvMC9FM0ExRDc3Q0NBNTdERTc2NDhFREU1NTgwRDdERkQ2NEUwQTU3MTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzQTFENzdDQ0E1N0RFNzY0
OEVERTU1ODBEN0RGRDY0RTBBNTcxNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhRREZ4S0c2VDl0ZWl1eXBDSFZxOXFneGFvbkVvS1U4V2JyRXRWSkg2bmlyLzAv
MzIzODMwMzQzYTMzMzg2MTM4M2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM0MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEOKhQMA0GCSqGSIb3DQEBCwUA
A4IBAQBdzBldi7YMghZplDu2ne9+ObKs2wXRzUkUBGQ6csJcggcvozLrI7Jn+3O2
P+8JhxCK1mt970Tdu1uv7EJnxQNYK1Sit7K58X3iAGPlS73z3dm0QHVFEAaJzB1z
14JLNwN+JIrdaQ9fzkdrmSQDX0ERXqJw1qSu3KiBgHOGzhipCwnJkZdiKt3QkeB1
2fOh0Q6l1WzU3jWNd7M5QyDh0h9q1yRK1LjinYMS7w/iKLW6wUgpKMyChPE8eAdx
rc9DqPAUabq8AHi5bKOIWh+ox3dzmD0qqZ0t0eaFmXJWB4qIdhxArcgyMsLDvQAo
FoknM8PaGRunageCeKKUEWiKU+bg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org