Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a383030303a3a2f33362d3336203d3e20323636343932.roa
File:                     323830343a333861383a383030303a3a2f33362d3336203d3e20323636343932.roa (raw, json)
Hash identifier:          Wp68POBK0Fb5HMehBpXsyD1Ij+C0D7Xxddb7t7m24x4=
Subject key identifier:   FE:78:9C:A9:74:00:14:6B:6D:25:94:B0:3B:E6:16:CB:C5:6E:FA:29
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       09B08EC41B2027D5C2FFB30E7BBEEA80B1FAB720
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a383030303a3a2f33362d3336203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:01:06 +0000
ROA not before:           Tue 02 May 2023 16:56:06 +0000
ROA not after:            Tue 30 Apr 2024 17:01:06 +0000
asID:                     266492
IP address blocks:        2804:38a8:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b0:8e:c4:1b:20:27:d5:c2:ff:b3:0e:7b:be:ea:80:b1:fa:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:56:06 2023 GMT
            Not After : Apr 30 17:01:06 2024 GMT
        Subject: CN=FE789CA97400146B6D2594B03BE616CBC56EFA29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:a1:e2:30:4f:ed:76:7c:b7:e3:f7:3b:a6:
                    7b:7f:fc:21:e7:6b:1a:6f:a8:dd:8c:3b:47:7d:4f:
                    d0:ee:00:e6:02:cf:19:ae:96:51:2b:e4:e0:a1:5e:
                    8b:55:29:60:0f:24:30:bb:5d:ff:06:98:6a:27:be:
                    8b:4a:c9:31:c5:53:b8:c5:a7:8a:a8:cc:60:62:5e:
                    7b:f4:d3:4a:0a:21:1b:e6:67:79:18:a7:6b:a0:56:
                    0e:7e:af:73:8d:f3:9b:2c:39:f5:ba:51:d4:ca:fa:
                    9d:b1:b7:92:dc:0a:7a:55:da:94:d5:02:7a:fd:bf:
                    ec:72:3f:25:b5:25:22:6c:ec:51:a9:3a:09:22:d7:
                    cd:f8:cf:4c:1f:34:3c:26:e4:cb:8e:de:18:c9:3b:
                    20:03:27:46:e8:ce:a6:a4:3a:52:af:76:f9:a5:fe:
                    75:80:94:f6:33:a8:96:7f:c2:b7:82:7d:65:84:5b:
                    d7:67:a2:4f:0f:5b:22:e3:a1:0c:fb:4c:c5:5e:91:
                    d0:18:3a:09:a8:27:98:56:0b:2c:e2:e7:36:64:90:
                    46:2b:7c:fc:cd:5e:77:67:f4:d5:c0:69:b4:91:0c:
                    8c:d8:65:50:89:df:0b:af:eb:7d:0f:f1:8b:e3:eb:
                    f8:34:1f:da:ab:21:bc:ea:76:57:8f:82:09:7d:e9:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:78:9C:A9:74:00:14:6B:6D:25:94:B0:3B:E6:16:CB:C5:6E:FA:29
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a383030303a3a2f33362d3336203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:25:9a:8e:19:12:e4:10:1a:23:0a:57:76:e2:c0:cc:f5:
         e2:75:00:ec:e1:b2:08:86:d7:80:24:c8:bf:37:0e:4c:39:7e:
         f5:70:45:4c:5f:26:0b:69:85:2c:05:aa:6f:6c:91:ff:e9:fe:
         bc:2f:de:17:95:83:d6:62:10:be:5b:32:57:65:d6:d3:77:2e:
         0d:7e:f7:30:21:e4:c5:35:96:fa:de:e7:0b:1e:6d:2c:d9:82:
         d2:30:8c:ac:06:5b:74:28:fb:78:c1:fa:60:96:d7:e6:b1:02:
         80:d4:6c:d9:6e:da:99:7d:e9:57:50:b1:38:5e:23:c6:ad:79:
         12:ef:02:4c:2a:bf:d7:70:3a:09:5c:5e:90:05:c8:dc:82:a7:
         cb:83:5f:8b:53:49:f7:b9:04:05:a5:e8:52:6f:c4:8c:57:d5:
         9c:85:48:c2:ba:3e:36:d9:a1:81:26:28:cd:5d:bd:17:a5:dd:
         79:a4:6a:83:6e:77:e6:b6:a1:76:31:3f:4e:c8:2a:5c:9e:86:
         e6:e5:a6:56:0d:ee:00:48:99:ef:00:f3:1b:ed:42:87:f3:18:
         69:69:03:0f:65:05:fd:0b:47:7b:ce:2e:72:1e:ce:65:85:67:
         9f:cb:c9:6a:07:e6:53:59:3c:80:aa:6e:45:03:a0:20:d2:af:
         da:af:7e:d0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCbCOxBsgJ9XC/7MOe77qgLH6tyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNBMUQ3N0NDQTU3REU3NjQ4RURFNTU4MEQ3REZENjRF
MEE1NzE0MjAeFw0yMzA1MDIxNjU2MDZaFw0yNDA0MzAxNzAxMDZaMDMxMTAvBgNV
BAMTKEZFNzg5Q0E5NzQwMDE0NkI2RDI1OTRCMDNCRTYxNkNCQzU2RUZBMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSqHiME/tdny34/c7pnt//CHn
axpvqN2MO0d9T9DuAOYCzxmullEr5OChXotVKWAPJDC7Xf8GmGonvotKyTHFU7jF
p4qozGBiXnv000oKIRvmZ3kYp2ugVg5+r3ON85ssOfW6UdTK+p2xt5LcCnpV2pTV
Anr9v+xyPyW1JSJs7FGpOgki1834z0wfNDwm5MuO3hjJOyADJ0bozqakOlKvdvml
/nWAlPYzqJZ/wreCfWWEW9dnok8PWyLjoQz7TMVekdAYOgmoJ5hWCyzi5zZkkEYr
fPzNXndn9NXAabSRDIzYZVCJ3wuv630P8Yvj6/g0H9qrIbzqdlePggl96d6hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/nicqXQAFGttJZSwO+YWy8Vu+ikwHwYDVR0j
BBgwFoAU46HXfMpX3nZI7eVYDX39ZOClcUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFFERnhLRzZUOXRlaXV5cENIVnE5cWd4YW9uRW9LVThXYnJFdFZKSDZu
aXIvMC9FM0ExRDc3Q0NBNTdERTc2NDhFREU1NTgwRDdERkQ2NEUwQTU3MTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzQTFENzdDQ0E1N0RFNzY0
OEVERTU1ODBEN0RGRDY0RTBBNTcxNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhRREZ4S0c2VDl0ZWl1eXBDSFZxOXFneGFvbkVvS1U4V2JyRXRWSkg2bmlyLzAv
MzIzODMwMzQzYTMzMzg2MTM4M2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM0MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEOKiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAfPyWajhkS5BAaIwpXduLAzPXidQDs4bIIhteAJMi/Nw5MOX71cEVMXyYL
aYUsBapvbJH/6f68L94XlYPWYhC+WzJXZdbTdy4NfvcwIeTFNZb63ucLHm0s2YLS
MIysBlt0KPt4wfpgltfmsQKA1GzZbtqZfelXULE4XiPGrXkS7wJMKr/XcDoJXF6Q
BcjcgqfLg1+LU0n3uQQFpehSb8SMV9WchUjCuj422aGBJijNXb0Xpd15pGqDbnfm
tqF2MT9OyCpcnobm5aZWDe4ASJnvAPMb7UKH8xhpaQMPZQX9C0d7zi5yHs5lhWef
y8lqB+ZTWTyAqm5FA6Ag0q/ar37Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org