Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a383030303a3a2f33332d3333203d3e203238333532.roa
File:                     323830343a6165303a383030303a3a2f33332d3333203d3e203238333532.roa (raw, json)
Hash identifier:          LuBMGpxhfw0lbIqB40JuD4Qk3Y7dKTK38pLq6DnRT50=
Subject key identifier:   BA:1C:3D:BE:36:BA:34:BE:E8:02:0D:F7:B4:A1:3A:41:67:2E:CC:54
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       2B44A21C8CA4110ACEECB09E5F0C3682C7188807
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a383030303a3a2f33332d3333203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:53 +0000
ROA not before:           Fri 13 Oct 2023 14:31:53 +0000
ROA not after:            Fri 11 Oct 2024 14:36:53 +0000
asID:                     28352
IP address blocks:        2804:ae0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:44:a2:1c:8c:a4:11:0a:ce:ec:b0:9e:5f:0c:36:82:c7:18:88:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:53 2023 GMT
            Not After : Oct 11 14:36:53 2024 GMT
        Subject: CN=BA1C3DBE36BA34BEE8020DF7B4A13A41672ECC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:98:00:91:c6:a5:73:1d:8a:c1:ab:76:0d:
                    56:55:31:89:d4:a6:6e:26:ff:f3:7a:d2:ac:7b:ab:
                    84:64:c3:79:40:e7:3c:dc:e9:31:49:2f:35:01:90:
                    45:12:97:c9:61:fc:63:a0:54:e9:40:eb:b6:5e:ac:
                    0a:2f:3d:ba:0b:8d:73:e0:4b:7c:53:fc:a8:a4:f7:
                    7a:2b:74:54:5f:53:e4:75:a3:25:25:17:4c:fa:bf:
                    c3:d9:4c:8c:6b:20:c5:9b:76:a2:a0:90:48:a1:4d:
                    83:e7:21:ad:94:10:b5:e2:ce:04:18:4a:99:78:b0:
                    91:b7:ca:8b:86:cc:32:82:82:1a:d6:ee:8b:55:fc:
                    65:7f:ab:63:94:7a:9e:f9:71:6f:45:b4:67:f9:6b:
                    64:8d:2e:a6:06:ee:d6:c1:39:44:65:15:ee:4d:63:
                    12:4e:50:b9:39:eb:11:99:9a:2b:4b:73:f2:21:4e:
                    8a:49:40:7e:dc:fb:24:47:84:30:e8:d4:66:e5:5a:
                    35:36:fc:b2:07:a3:5e:03:c6:c3:9f:a0:d9:f3:8c:
                    8c:1e:65:14:d9:6a:44:99:6b:2f:f6:5c:48:1f:36:
                    db:1f:dc:64:fb:35:a1:fe:97:6c:41:c0:2e:59:ae:
                    a1:64:70:fb:6d:47:38:9f:a3:86:6e:2d:8d:5b:79:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1C:3D:BE:36:BA:34:BE:E8:02:0D:F7:B4:A1:3A:41:67:2E:CC:54
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a383030303a3a2f33332d3333203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:92:54:d6:22:f9:0b:29:b7:a0:a9:b4:81:85:0d:38:60:be:
         3d:07:f1:ab:dc:bd:3a:72:79:1d:58:79:d8:0b:f4:b4:63:9d:
         e8:d1:6b:7d:c5:27:1b:21:82:98:0d:27:d3:d0:ed:79:2b:93:
         63:23:85:76:94:5f:98:a8:3f:e4:a5:f9:26:0f:22:29:f8:bd:
         b0:2d:16:16:be:ab:67:ec:54:2c:8c:7d:d3:2f:fb:6a:40:32:
         96:8a:77:c4:33:3c:03:03:9b:fd:a6:a5:e8:35:a5:02:9c:07:
         71:60:6f:92:b1:10:c9:d9:cd:6c:94:03:6f:5d:04:0b:63:12:
         8c:4f:f9:61:71:bb:6a:11:75:7b:2e:af:5a:9b:83:bf:fb:a7:
         3a:bf:22:8d:e3:5a:3e:b2:4c:e1:33:b2:0a:8e:a9:82:8e:58:
         b1:76:67:62:4a:de:62:13:af:00:3c:5b:51:26:33:cb:d7:17:
         76:3f:8a:97:f6:22:97:58:9a:65:84:49:48:6e:e3:38:f9:67:
         04:c8:cc:59:99:b4:67:b6:50:cf:47:c4:5b:94:cf:e4:39:85:
         68:75:59:25:c8:9d:8c:b7:54:4d:6d:29:fd:6b:6f:5b:f7:44:
         20:ea:44:81:17:3d:77:9c:24:d9:b4:b6:fa:73:74:05:32:16:
         2e:1a:13:c0
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUK0SiHIykEQrO7LCeXww2gscYiAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTczRTVGMjkzRDdGQjUyQzM3QTAxNDJDMDQ0MTVEREZB
MDRDNDYwMjAeFw0yMzEwMTMxNDMxNTNaFw0yNDEwMTExNDM2NTNaMDMxMTAvBgNV
BAMTKEJBMUMzREJFMzZCQTM0QkVFODAyMERGN0I0QTEzQTQxNjcyRUNDNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD55gAkcalcx2Kwat2DVZVMYnU
pm4m//N60qx7q4Rkw3lA5zzc6TFJLzUBkEUSl8lh/GOgVOlA67ZerAovPboLjXPg
S3xT/Kik93ordFRfU+R1oyUlF0z6v8PZTIxrIMWbdqKgkEihTYPnIa2UELXizgQY
Spl4sJG3youGzDKCghrW7otV/GV/q2OUep75cW9FtGf5a2SNLqYG7tbBOURlFe5N
YxJOULk56xGZmitLc/IhTopJQH7c+yRHhDDo1GblWjU2/LIHo14DxsOfoNnzjIwe
ZRTZakSZay/2XEgfNtsf3GT7NaH+l2xBwC5ZrqFkcPttRzifo4ZuLY1befwxAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUuhw9vja6NL7oAg33tKE6QWcuzFQwHwYDVR0j
BBgwFoAUpz5fKT1/tSw3oBQsBEFd36BMRgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9BNzNFNUYyOTNEN0ZCNTJDMzdBMDE0MkMwNDQxNURERkEwNEM0NjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E3M0U1RjI5M0Q3RkI1MkMz
N0EwMTQyQzA0NDE1RERGQTA0QzQ2MDIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzIzODMwMzQzYTYxNjUzMDNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzMjM4MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQK4IAwDQYJKoZIhvcNAQELBQADggEB
ABmSVNYi+Qspt6CptIGFDThgvj0H8avcvTpyeR1YedgL9LRjnejRa33FJxshgpgN
J9PQ7Xkrk2MjhXaUX5ioP+Sl+SYPIin4vbAtFha+q2fsVCyMfdMv+2pAMpaKd8Qz
PAMDm/2mpeg1pQKcB3Fgb5KxEMnZzWyUA29dBAtjEoxP+WFxu2oRdXsur1qbg7/7
pzq/Io3jWj6yTOEzsgqOqYKOWLF2Z2JK3mITrwA8W1EmM8vXF3Y/ipf2IpdYmmWE
SUhu4zj5ZwTIzFmZtGe2UM9HxFuUz+Q5hWh1WSXInYy3VE1tKf1rb1v3RCDqRIEX
PXecJNm0tvpzdAUyFi4aE8A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org