Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33322d3332203d3e20323639353134.roa
File:                     323830343a363563383a3a2f33322d3332203d3e20323639353134.roa (raw, json)
Hash identifier:          DmudeKdVIMD/51vU6PZ+z8cG6olIapashH57JVSZsXM=
Subject key identifier:   2E:0D:25:50:7F:CD:FF:6F:3E:5C:52:D5:1C:E3:F7:AE:D9:0F:8B:7A
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       113F36BB4080B5F6B672D92185C95BF62248F2B5
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33322d3332203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:55 +0000
ROA not before:           Sun 07 Apr 2024 03:16:55 +0000
ROA not after:            Sun 06 Apr 2025 03:21:55 +0000
asID:                     269514
IP address blocks:        2804:65c8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3f:36:bb:40:80:b5:f6:b6:72:d9:21:85:c9:5b:f6:22:48:f2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:55 2024 GMT
            Not After : Apr  6 03:21:55 2025 GMT
        Subject: CN=2E0D25507FCDFF6F3E5C52D51CE3F7AED90F8B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:aa:25:21:56:18:9a:cd:59:2d:d0:bb:04:
                    b0:18:84:9c:14:bf:fe:29:0c:0e:63:9f:f8:ca:1b:
                    71:e2:70:bd:e3:e5:a6:60:18:09:53:9b:72:ac:5f:
                    aa:3e:fb:1d:01:a7:f0:5e:e3:08:9f:7b:53:bd:79:
                    35:15:23:af:5b:c7:90:77:3c:5b:0e:cf:2b:c7:79:
                    bf:5b:72:2f:b3:a7:ed:7d:fd:56:ff:be:ea:64:81:
                    4b:b6:1c:b6:13:5d:13:d4:78:f3:c3:f9:4c:34:7b:
                    62:79:fc:7d:e9:9d:50:71:b0:0f:55:94:b1:de:f4:
                    52:dd:b2:f7:94:46:2b:20:ab:9f:bf:1c:1c:3b:5a:
                    b2:87:c2:ad:78:cd:78:99:c7:7c:5a:e6:80:69:5c:
                    f7:2d:04:8c:b8:cf:34:e0:f2:c2:57:36:b3:ff:9f:
                    ee:41:23:bf:2a:a6:f5:38:59:d2:bd:d7:27:f7:58:
                    4e:ca:d0:7b:12:a1:ce:e2:c3:98:ac:5b:86:0e:7f:
                    60:f9:97:e2:ca:9f:e3:cd:ce:7c:57:c8:6a:eb:0b:
                    71:13:d6:2b:9e:04:7d:7d:cd:56:eb:f1:ac:57:af:
                    13:80:fe:81:d9:9e:61:84:d1:c3:f5:9d:f0:9e:5a:
                    1f:b2:95:fd:b8:5b:da:66:79:b7:15:40:5b:4d:53:
                    2b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0D:25:50:7F:CD:FF:6F:3E:5C:52:D5:1C:E3:F7:AE:D9:0F:8B:7A
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/323830343a363563383a3a2f33322d3332203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:d3:df:05:e4:c4:85:ff:bd:f8:5f:17:a2:c5:cf:20:19:1d:
         0c:4f:49:d7:41:97:b5:4e:5c:08:8c:d0:8a:48:e6:bf:57:7f:
         bd:9c:35:ca:3b:17:84:69:0f:9f:9e:1d:b9:ce:48:75:cf:de:
         83:26:8a:f6:b1:d5:59:2a:bf:99:3e:05:a7:a6:c3:99:76:a2:
         69:de:c9:7f:df:4b:44:a5:96:c0:29:2b:27:13:d3:38:ec:da:
         39:4b:a7:d7:05:89:37:1e:9f:72:68:91:66:ea:98:8d:a6:e0:
         f8:15:4c:04:09:f6:3a:15:26:61:01:06:ce:8a:15:3d:25:69:
         f2:a1:0d:44:d1:83:be:d2:c3:e7:1a:90:2d:ed:bc:eb:2c:27:
         8f:65:dc:cb:db:1c:db:f5:47:20:78:6b:a2:d5:62:17:f9:a6:
         5c:3f:87:12:df:69:b5:d2:3b:ca:38:43:6a:18:f8:76:bf:1b:
         a7:29:95:42:77:3c:f1:8c:a2:c5:c7:fd:8b:ce:5b:56:3d:0e:
         81:0b:b5:8f:4c:53:50:19:2f:9d:6e:b0:93:02:d0:05:09:14:
         4e:51:78:a2:43:89:62:3c:31:ee:31:47:26:bb:c6:3c:b7:40:
         81:eb:73:7e:83:11:2e:07:38:98:1f:3d:26:e7:d7:9b:41:19:
         b2:c5:18:48
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUET82u0CAtfa2ctkhhclb9iJI8rUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDOUQxRDFBRjMyRjFDRkRCQTBGQzdBMTdDMDExNjZF
QkI3QjAwODAeFw0yNDA0MDcwMzE2NTVaFw0yNTA0MDYwMzIxNTVaMDMxMTAvBgNV
BAMTKDJFMEQyNTUwN0ZDREZGNkYzRTVDNTJENTFDRTNGN0FFRDkwRjhCN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRKolIVYYms1ZLdC7BLAYhJwU
v/4pDA5jn/jKG3HicL3j5aZgGAlTm3KsX6o++x0Bp/Be4wife1O9eTUVI69bx5B3
PFsOzyvHeb9bci+zp+19/Vb/vupkgUu2HLYTXRPUePPD+Uw0e2J5/H3pnVBxsA9V
lLHe9FLdsveURisgq5+/HBw7WrKHwq14zXiZx3xa5oBpXPctBIy4zzTg8sJXNrP/
n+5BI78qpvU4WdK91yf3WE7K0HsSoc7iw5isW4YOf2D5l+LKn+PNznxXyGrrC3ET
1iueBH19zVbr8axXrxOA/oHZnmGE0cP1nfCeWh+ylf24W9pmebcVQFtNUysLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULg0lUH/N/28+XFLVHOP3rtkPi3owHwYDVR0j
BBgwFoAUO8nR0a8y8c/boPx6F8ARZuu3sAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHJGZkV0TlBoanNyZ29KQUFwNzRBejU5QkZ2TWJHYWE4enl1RTRjbjRp
M1ovMS8zQkM5RDFEMUFGMzJGMUNGREJBMEZDN0ExN0MwMTE2NkVCQjdCMDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQzlEMUQxQUYzMkYxQ0ZE
QkEwRkM3QTE3QzAxMTY2RUJCN0IwMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyRmZFdE5QaGpzcmdvSkFBcDc0QXo1OUJGdk1iR2FhOHp5dUU0Y240aTNaLzEv
MzIzODMwMzQzYTM2MzU2MzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARlyDANBgkqhkiG9w0BAQsFAAOCAQEAwtPfBeTE
hf+9+F8XosXPIBkdDE9J10GXtU5cCIzQikjmv1d/vZw1yjsXhGkPn54duc5Idc/e
gyaK9rHVWSq/mT4Fp6bDmXaiad7Jf99LRKWWwCkrJxPTOOzaOUun1wWJNx6fcmiR
ZuqYjabg+BVMBAn2OhUmYQEGzooVPSVp8qENRNGDvtLD5xqQLe286ywnj2Xcy9sc
2/VHIHhrotViF/mmXD+HEt9ptdI7yjhDahj4dr8bpymVQnc88Yyixcf9i85bVj0O
gQu1j0xTUBkvnW6wkwLQBQkUTlF4okOJYjwx7jFHJrvGPLdAgetzfoMRLgc4mB89
JufXm0EZssUYSA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org