Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3333203d3e20323636323136.roa
File:                     323830343a336338303a3a2f33322d3333203d3e20323636323136.roa (raw, json)
Hash identifier:          E5KrQA7RgdrIEfC4J0ZT9RbRIy9n6cdzW0h/Ai4Tot4=
Subject key identifier:   E4:38:32:88:44:FA:CD:AA:CB:96:4B:28:90:66:76:AD:D9:BD:92:10
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       7EBC22223F0D0AED669D89B37710893724862424
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3333203d3e20323636323136.roa
Signing time:             Sun 11 Feb 2024 22:56:26 +0000
ROA not before:           Sun 11 Feb 2024 22:51:26 +0000
ROA not after:            Sun 09 Feb 2025 22:56:26 +0000
asID:                     266216
IP address blocks:        2804:3c80::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:22:22:3f:0d:0a:ed:66:9d:89:b3:77:10:89:37:24:86:24:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Feb 11 22:51:26 2024 GMT
            Not After : Feb  9 22:56:26 2025 GMT
        Subject: CN=E438328844FACDAACB964B28906676ADD9BD9210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:16:dc:b6:d5:4c:34:2c:05:df:34:83:56:
                    bd:5d:00:e3:e7:55:8c:a7:68:c5:57:89:ce:12:76:
                    f6:a6:ee:62:09:f2:4b:e8:bf:6e:70:49:a8:e9:f2:
                    1c:03:6e:61:70:d0:8d:96:be:74:30:4c:26:d6:22:
                    bc:51:94:b7:29:68:4b:82:35:fc:12:c3:3f:94:90:
                    ed:f1:49:23:cb:de:33:5d:dc:24:ab:4a:8d:b8:84:
                    12:48:6d:88:49:6c:6b:f5:3c:31:62:24:c7:53:9f:
                    01:07:db:2d:79:bc:03:e4:ce:8c:44:b9:f8:9f:48:
                    f8:fb:93:98:21:91:1d:f4:b2:0b:24:68:b8:32:71:
                    aa:35:23:12:9a:ec:b4:11:8d:0e:e2:9e:b8:81:77:
                    95:a4:b2:57:ad:b0:40:aa:86:e8:c9:c2:27:e4:40:
                    aa:bf:17:4f:be:87:20:6e:6a:ca:f5:a7:19:c6:0b:
                    0f:9a:c1:2b:8c:4d:bd:55:bb:84:39:5b:d3:3f:73:
                    4d:3a:fa:db:22:cc:15:d2:45:92:cc:ef:82:af:9e:
                    3f:60:ca:4e:fb:12:0d:aa:b4:bc:a7:22:35:36:71:
                    e1:96:ab:4d:5b:db:a5:59:b1:73:e0:a4:a9:e0:a7:
                    56:17:76:b8:5a:20:fe:09:8a:b6:cb:dd:ab:f0:5c:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:38:32:88:44:FA:CD:AA:CB:96:4B:28:90:66:76:AD:D9:BD:92:10
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3333203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:1b:f2:5e:37:20:b1:5a:68:cf:c5:7e:b1:cc:b6:05:24:12:
         a0:15:e4:f6:ad:ef:c3:0a:3a:b1:b6:36:ba:a2:55:46:4c:7a:
         6f:31:b1:a0:6b:16:16:4a:a5:56:8b:11:3d:51:fa:b7:53:9f:
         c3:7b:74:33:fe:52:b0:c6:3c:83:63:5b:a9:24:07:4e:80:09:
         98:f0:13:d2:81:eb:bb:0c:93:84:48:52:b7:dc:2b:43:9c:b3:
         ef:16:9a:3b:90:d5:f2:35:79:e3:af:95:40:2a:8c:e4:fc:27:
         e8:93:a1:70:86:c2:63:f8:e2:75:d2:ce:1b:d9:4b:70:88:d2:
         8f:c4:d4:90:c0:dc:51:57:86:1c:55:b0:d7:d5:ca:cb:0f:86:
         8e:12:6b:b1:c5:d3:f5:27:e3:65:81:48:19:84:5f:30:0d:8c:
         14:8a:55:ca:d7:71:71:d1:9f:e7:dc:ef:92:68:91:e7:86:1c:
         47:cc:18:6d:4e:5d:af:85:e4:11:ea:2e:ed:8a:91:80:09:d8:
         f6:22:43:da:91:0a:6d:43:0b:56:8a:4e:f9:a4:30:2f:1b:36:
         68:d9:f7:4d:ff:89:d0:0b:20:67:65:a0:8a:b5:2b:13:f0:ab:
         4e:1a:e1:7c:8c:ed:9a:12:25:c3:d8:eb:7b:9e:08:05:5f:9d:
         19:62:d4:18
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfrwiIj8NCu1mnYmzdxCJNySGJCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzQTdCQjgwQ0QzMjYwNENFNDNGRDI3NUZBRjg4N0VC
MzNERjUxMjAeFw0yNDAyMTEyMjUxMjZaFw0yNTAyMDkyMjU2MjZaMDMxMTAvBgNV
BAMTKEU0MzgzMjg4NDRGQUNEQUFDQjk2NEIyODkwNjY3NkFERDlCRDkyMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVxbcttVMNCwF3zSDVr1dAOPn
VYynaMVXic4Sdvam7mIJ8kvov25wSajp8hwDbmFw0I2WvnQwTCbWIrxRlLcpaEuC
NfwSwz+UkO3xSSPL3jNd3CSrSo24hBJIbYhJbGv1PDFiJMdTnwEH2y15vAPkzoxE
ufifSPj7k5ghkR30sgskaLgycao1IxKa7LQRjQ7inriBd5WksletsECqhujJwifk
QKq/F0++hyBuasr1pxnGCw+awSuMTb1Vu4Q5W9M/c006+tsizBXSRZLM74Kvnj9g
yk77Eg2qtLynIjU2ceGWq01b26VZsXPgpKngp1YXdrhaIP4JirbL3avwXKn/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5DgyiET6zarLlksokGZ2rdm9khAwHwYDVR0j
BBgwFoAU6jp7uAzTJgTOQ/0nX6+IfrM99RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2
clYvMC9FQTNBN0JCODBDRDMyNjA0Q0U0M0ZEMjc1RkFGODg3RUIzM0RGNTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBM0E3QkI4MENEMzI2MDRD
RTQzRkQyNzVGQUY4ODdFQjMzREY1MTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuWGQ3bmc1REFLVjc4dG5IVnh3SkFxRExMTGh3dlluVG83RThTRnZUNnJWLzAv
MzIzODMwMzQzYTMzNjMzODMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM2
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ8gDANBgkqhkiG9w0BAQsFAAOCAQEAfRvyXjcg
sVpoz8V+scy2BSQSoBXk9q3vwwo6sbY2uqJVRkx6bzGxoGsWFkqlVosRPVH6t1Of
w3t0M/5SsMY8g2NbqSQHToAJmPAT0oHruwyThEhSt9wrQ5yz7xaaO5DV8jV546+V
QCqM5Pwn6JOhcIbCY/jiddLOG9lLcIjSj8TUkMDcUVeGHFWw19XKyw+GjhJrscXT
9SfjZYFIGYRfMA2MFIpVytdxcdGf59zvkmiR54YcR8wYbU5dr4XkEeou7YqRgAnY
9iJD2pEKbUMLVopO+aQwLxs2aNn3Tf+J0AsgZ2WgirUrE/CrThrhfIztmhIlw9jr
e54IBV+dGWLUGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org