Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/323830343a336561633a3a2f33322d3438203d3e20323636363134.roa
File:                     323830343a336561633a3a2f33322d3438203d3e20323636363134.roa (raw, json)
Hash identifier:          uEW08ygPlyVJ73eVn53sRlISxCIQcGx6V0O2w17b1sI=
Subject key identifier:   B8:57:FC:49:A5:20:1F:30:30:38:06:91:F4:59:0A:D9:24:D8:5D:CC
Certificate issuer:       /CN=DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA
Certificate serial:       797D27EB02F9358E3D9E36AC90C9110D1139EB07
Authority key identifier: DC:33:80:34:AC:CA:06:D2:BA:9F:C6:BE:39:61:60:6E:E3:DE:1F:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/323830343a336561633a3a2f33322d3438203d3e20323636363134.roa
Signing time:             Fri 24 Nov 2023 21:11:09 +0000
ROA not before:           Fri 24 Nov 2023 21:06:09 +0000
ROA not after:            Fri 22 Nov 2024 21:11:09 +0000
asID:                     266614
IP address blocks:        2804:3eac::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7d:27:eb:02:f9:35:8e:3d:9e:36:ac:90:c9:11:0d:11:39:eb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA
        Validity
            Not Before: Nov 24 21:06:09 2023 GMT
            Not After : Nov 22 21:11:09 2024 GMT
        Subject: CN=B857FC49A5201F3030380691F4590AD924D85DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b4:92:35:6c:e3:d1:a0:a2:5f:10:dc:10:06:
                    a4:ea:e3:00:b2:8f:f9:f2:f3:67:4d:8b:11:30:1b:
                    ae:e1:cf:ae:bb:08:4e:88:df:65:4a:7b:7f:db:44:
                    62:2b:3c:d4:e4:a2:46:f1:17:c5:67:32:37:01:71:
                    1d:72:c9:95:c6:72:57:7b:27:02:e8:99:14:71:31:
                    84:e5:3d:bd:b3:dc:61:d4:d1:d9:46:b6:b4:69:6f:
                    0b:06:f0:bc:40:4b:b5:aa:e4:0b:c6:65:68:e2:d9:
                    5d:da:fd:69:53:9e:39:80:31:b5:d2:55:06:0a:16:
                    ba:af:e7:f4:f7:3b:86:95:1d:87:27:ea:e2:b2:dc:
                    11:4a:2f:f3:35:1d:41:f7:67:a3:42:2f:bb:dd:bd:
                    c0:b0:fe:96:f7:c6:8f:b6:7e:82:1d:44:03:e3:c2:
                    2f:c8:5b:3a:dd:3b:6b:08:37:64:96:af:9c:dd:01:
                    6b:cb:ee:ad:6f:c1:54:c6:ed:f4:56:0e:ea:ca:1c:
                    8b:26:0a:3d:f0:b3:29:47:9c:2a:30:43:4f:f3:53:
                    b1:6e:d1:a0:0a:a3:72:55:00:4d:4a:40:05:1f:a5:
                    df:d9:e4:ec:47:e7:0a:c7:a9:a0:aa:f9:25:58:99:
                    c7:6a:8b:99:41:c6:73:32:a8:66:83:e6:e0:58:73:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:FC:49:A5:20:1F:30:30:38:06:91:F4:59:0A:D9:24:D8:5D:CC
            X509v3 Authority Key Identifier:
                keyid:DC:33:80:34:AC:CA:06:D2:BA:9F:C6:BE:39:61:60:6E:E3:DE:1F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/323830343a336561633a3a2f33322d3438203d3e20323636363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3eac::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:11:21:ff:2b:d4:f7:b8:4a:2b:29:39:3d:0f:30:5c:ab:68:
         3b:53:16:d0:59:5b:6a:d2:18:62:a2:53:51:32:dc:33:e9:c2:
         91:f1:34:2f:ce:f9:2e:31:10:54:ec:29:24:3d:fc:82:8e:36:
         bb:38:fd:95:0b:5e:6c:c0:40:09:34:c9:f2:0f:77:43:d6:2c:
         71:1a:93:ac:ad:9f:7a:73:b5:f4:c7:85:b3:e9:59:20:5a:db:
         c0:5f:ef:e8:d2:37:ac:4c:49:c6:aa:b2:bc:77:6a:36:46:83:
         54:db:92:fa:f2:a7:fb:fe:e2:fb:bb:74:ac:40:81:07:86:5c:
         52:bd:24:90:06:23:82:a6:78:8d:15:a4:02:c3:4f:e5:0e:f3:
         d8:30:81:17:27:82:7a:3f:e7:28:b1:62:ea:fb:81:7b:bb:4e:
         80:da:fc:c6:d2:9b:45:ad:66:87:5a:43:fb:eb:f9:6c:89:e9:
         84:e8:a0:08:8f:b6:e5:9f:09:e0:3b:e4:dc:79:a5:9b:f5:d8:
         72:75:36:33:8e:6b:35:c8:65:66:0d:f7:b3:00:58:d6:48:b0:
         77:86:12:38:62:08:1c:7f:83:b3:c1:ed:65:7b:04:7b:b9:22:
         32:5a:26:e5:65:90:ea:dd:ae:86:1b:92:19:db:71:05:ef:21:
         b6:e6:42:9f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeX0n6wL5NY49njaskMkRDRE56wcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzMzgwMzRBQ0NBMDZEMkJBOUZDNkJFMzk2MTYwNkVF
M0RFMUZFQTAeFw0yMzExMjQyMTA2MDlaFw0yNDExMjIyMTExMDlaMDMxMTAvBgNV
BAMTKEI4NTdGQzQ5QTUyMDFGMzAzMDM4MDY5MUY0NTkwQUQ5MjREODVEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3tJI1bOPRoKJfENwQBqTq4wCy
j/ny82dNixEwG67hz667CE6I32VKe3/bRGIrPNTkokbxF8VnMjcBcR1yyZXGcld7
JwLomRRxMYTlPb2z3GHU0dlGtrRpbwsG8LxAS7Wq5AvGZWji2V3a/WlTnjmAMbXS
VQYKFrqv5/T3O4aVHYcn6uKy3BFKL/M1HUH3Z6NCL7vdvcCw/pb3xo+2foIdRAPj
wi/IWzrdO2sIN2SWr5zdAWvL7q1vwVTG7fRWDurKHIsmCj3wsylHnCowQ0/zU7Fu
0aAKo3JVAE1KQAUfpd/Z5OxH5wrHqaCq+SVYmcdqi5lBxnMyqGaD5uBYczEhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuFf8SaUgHzAwOAaR9FkK2STYXcwwHwYDVR0j
BBgwFoAU3DOANKzKBtK6n8a+OWFgbuPeH+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGNaaWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtu
MlkvMC9EQzMzODAzNEFDQ0EwNkQyQkE5RkM2QkUzOTYxNjA2RUUzREUxRkVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDMzM4MDM0QUNDQTA2RDJC
QTlGQzZCRTM5NjE2MDZFRTNERTFGRUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhjWmljU2dpdnA0UlZab1ZvclRTTTFtZXJuS3JZeDFZMThReVo5UnBLbjJZLzAv
MzIzODMwMzQzYTMzNjU2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzYzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+rDANBgkqhkiG9w0BAQsFAAOCAQEAWREh/yvU
97hKKyk5PQ8wXKtoO1MW0FlbatIYYqJTUTLcM+nCkfE0L875LjEQVOwpJD38go42
uzj9lQtebMBACTTJ8g93Q9YscRqTrK2fenO19MeFs+lZIFrbwF/v6NI3rExJxqqy
vHdqNkaDVNuS+vKn+/7i+7t0rECBB4ZcUr0kkAYjgqZ4jRWkAsNP5Q7z2DCBFyeC
ej/nKLFi6vuBe7tOgNr8xtKbRa1mh1pD++v5bInphOigCI+25Z8J4Dvk3Hmlm/XY
cnU2M45rNchlZg33swBY1kiwd4YSOGIIHH+Ds8HtZXsEe7kiMlom5WWQ6t2uhhuS
GdtxBe8htuZCnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org