Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a663030303a3a2f33362d3336203d3e20323636343932.roa
File:                     323830343a333861383a663030303a3a2f33362d3336203d3e20323636343932.roa (raw, json)
Hash identifier:          bfqU1V4ARVCbpUQ+F62Yn7sz9nJpr+8jDeana8dsHIU=
Subject key identifier:   91:D4:CF:03:56:48:6C:28:C8:A0:C2:59:55:6E:F0:F4:BD:43:6D:52
Certificate issuer:       /CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
Certificate serial:       73C45F5FDDC88F7527DA781584F3DC752B61324B
Authority key identifier: E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a663030303a3a2f33362d3336203d3e20323636343932.roa
Signing time:             Tue 02 May 2023 17:01:15 +0000
ROA not before:           Tue 02 May 2023 16:56:15 +0000
ROA not after:            Tue 30 Apr 2024 17:01:15 +0000
asID:                     266492
IP address blocks:        2804:38a8:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c4:5f:5f:dd:c8:8f:75:27:da:78:15:84:f3:dc:75:2b:61:32:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142
        Validity
            Not Before: May  2 16:56:15 2023 GMT
            Not After : Apr 30 17:01:15 2024 GMT
        Subject: CN=91D4CF0356486C28C8A0C259556EF0F4BD436D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:2b:9a:eb:33:32:ec:f4:b6:57:59:c5:8e:
                    ee:b0:fe:a9:aa:be:fa:01:6e:a5:23:16:5f:01:92:
                    b8:ea:a7:49:71:51:a0:d8:33:5e:78:8e:5b:f7:27:
                    71:d9:1d:56:3e:bc:48:b0:66:1b:3d:98:ad:2b:68:
                    13:15:ff:13:44:c4:b5:1f:30:12:5c:b7:33:18:00:
                    65:30:b1:7f:8a:d0:45:ba:93:6a:5f:4f:9a:58:73:
                    51:b7:12:4b:38:43:6d:b7:67:e0:4f:25:f2:72:34:
                    cc:5b:32:d5:17:21:53:0a:37:81:a5:74:81:42:a5:
                    1b:73:ce:37:31:1b:df:13:ed:8f:f7:b1:f9:1a:a8:
                    1f:4e:e7:37:2c:a3:8e:e6:e2:ad:f3:0f:15:4e:12:
                    62:7f:7f:a6:3b:6d:20:65:80:89:07:37:f3:da:3c:
                    d9:53:43:1f:22:a1:fa:f8:63:99:80:15:11:6a:5e:
                    e2:35:07:80:f2:9b:8c:30:27:5d:65:5a:7b:b4:9f:
                    21:5c:fa:bd:64:a2:06:72:b0:cd:ae:e7:31:2e:13:
                    fe:42:b1:52:c1:20:c5:aa:ed:40:e8:25:9e:26:71:
                    f8:8a:52:cf:0c:5b:91:33:55:3f:e5:6c:35:f5:39:
                    2f:36:5d:3a:dc:64:eb:0f:90:84:d4:80:ec:15:94:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D4:CF:03:56:48:6C:28:C8:A0:C2:59:55:6E:F0:F4:BD:43:6D:52
            X509v3 Authority Key Identifier:
                keyid:E3:A1:D7:7C:CA:57:DE:76:48:ED:E5:58:0D:7D:FD:64:E0:A5:71:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3A1D77CCA57DE7648EDE5580D7DFD64E0A57142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/0/323830343a333861383a663030303a3a2f33362d3336203d3e20323636343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38a8:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bd:70:f5:c9:b6:18:ae:50:a1:b7:d1:13:4f:70:b1:6c:9c:3f:
         bb:fd:5f:f3:3e:dd:c5:16:e6:30:94:0a:f8:75:5c:62:0e:0d:
         7f:c2:d0:91:51:d2:01:45:98:68:aa:f1:02:d3:2f:53:64:88:
         52:20:30:d4:96:ce:f5:07:8d:1c:89:72:e6:05:68:e7:e3:74:
         bd:20:08:ce:b1:07:7b:df:e4:50:f5:f0:1f:b2:db:9d:a2:49:
         ab:32:9e:11:9d:8d:eb:97:85:20:1f:8f:43:06:00:c6:27:65:
         13:77:fc:33:fe:37:f1:bb:f1:6d:70:f3:66:b8:cb:6c:f0:d3:
         68:63:60:21:25:d1:db:4c:af:35:17:13:7c:2f:02:09:91:f0:
         56:7d:99:54:52:01:ed:82:e2:ef:45:39:37:da:ac:dd:e5:ac:
         5e:43:ca:c8:49:f9:d1:04:96:04:71:97:42:af:18:36:46:8a:
         27:e0:29:42:10:94:5d:31:3d:62:38:dc:a9:f3:10:9d:22:d9:
         ea:eb:9a:81:b3:31:9e:37:c1:0f:3b:c3:37:c8:43:f0:88:21:
         65:f9:27:58:d5:b6:e9:81:8f:70:f9:4e:26:be:98:2e:83:fb:
         e0:e5:63:8e:18:33:37:24:65:c4:19:7a:15:44:62:a2:1e:1f:
         e7:06:a4:bd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUc8RfX93Ij3Un2ngVhPPcdSthMkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNBMUQ3N0NDQTU3REU3NjQ4RURFNTU4MEQ3REZENjRF
MEE1NzE0MjAeFw0yMzA1MDIxNjU2MTVaFw0yNDA0MzAxNzAxMTVaMDMxMTAvBgNV
BAMTKDkxRDRDRjAzNTY0ODZDMjhDOEEwQzI1OTU1NkVGMEY0QkQ0MzZENTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuCua6zMy7PS2V1nFju6w/qmq
vvoBbqUjFl8Bkrjqp0lxUaDYM154jlv3J3HZHVY+vEiwZhs9mK0raBMV/xNExLUf
MBJctzMYAGUwsX+K0EW6k2pfT5pYc1G3Eks4Q223Z+BPJfJyNMxbMtUXIVMKN4Gl
dIFCpRtzzjcxG98T7Y/3sfkaqB9O5zcso47m4q3zDxVOEmJ/f6Y7bSBlgIkHN/Pa
PNlTQx8iofr4Y5mAFRFqXuI1B4Dym4wwJ11lWnu0nyFc+r1kogZysM2u5zEuE/5C
sVLBIMWq7UDoJZ4mcfiKUs8MW5EzVT/lbDX1OS82XTrcZOsPkITUgOwVlN+lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkdTPA1ZIbCjIoMJZVW7w9L1DbVIwHwYDVR0j
BBgwFoAU46HXfMpX3nZI7eVYDX39ZOClcUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFFERnhLRzZUOXRlaXV5cENIVnE5cWd4YW9uRW9LVThXYnJFdFZKSDZu
aXIvMC9FM0ExRDc3Q0NBNTdERTc2NDhFREU1NTgwRDdERkQ2NEUwQTU3MTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzQTFENzdDQ0E1N0RFNzY0
OEVERTU1ODBEN0RGRDY0RTBBNTcxNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhRREZ4S0c2VDl0ZWl1eXBDSFZxOXFneGFvbkVvS1U4V2JyRXRWSkg2bmlyLzAv
MzIzODMwMzQzYTMzMzg2MTM4M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM0MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEOKjwMA0GCSqGSIb3DQEBCwUA
A4IBAQC9cPXJthiuUKG30RNPcLFsnD+7/V/zPt3FFuYwlAr4dVxiDg1/wtCRUdIB
RZhoqvEC0y9TZIhSIDDUls71B40ciXLmBWjn43S9IAjOsQd73+RQ9fAfstudokmr
Mp4RnY3rl4UgH49DBgDGJ2UTd/wz/jfxu/FtcPNmuMts8NNoY2AhJdHbTK81FxN8
LwIJkfBWfZlUUgHtguLvRTk32qzd5axeQ8rISfnRBJYEcZdCrxg2Roon4ClCEJRd
MT1iONyp8xCdItnq65qBszGeN8EPO8M3yEPwiCFl+SdY1bbpgY9w+U4mvpgug/vg
5WOOGDM3JGXEGXoVRGKiHh/nBqS9
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org