Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/323830343a3438383a3a2f33322d3334203d3e20323632343437.roa
File:                     323830343a3438383a3a2f33322d3334203d3e20323632343437.roa (raw, json)
Hash identifier:          L85L3yzYX5xKmYEpMok4QR5Zz53yeGwMNKE/5+3tG8Y=
Subject key identifier:   BF:5E:8B:29:82:0C:07:8F:98:23:1F:61:E3:68:53:1A:35:8E:20:D0
Certificate issuer:       /CN=243D79346DF352A3520A69F25ACDF6D44BEC8930
Certificate serial:       3B0353AD55219B27C4440E33FC1743C8C032C16E
Authority key identifier: 24:3D:79:34:6D:F3:52:A3:52:0A:69:F2:5A:CD:F6:D4:4B:EC:89:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/243D79346DF352A3520A69F25ACDF6D44BEC8930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/323830343a3438383a3a2f33322d3334203d3e20323632343437.roa
Signing time:             Sat 08 Apr 2023 02:44:40 +0000
ROA not before:           Sat 08 Apr 2023 02:39:40 +0000
ROA not after:            Sat 06 Apr 2024 02:44:40 +0000
asID:                     262447
IP address blocks:        2804:488::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:03:53:ad:55:21:9b:27:c4:44:0e:33:fc:17:43:c8:c0:32:c1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243D79346DF352A3520A69F25ACDF6D44BEC8930
        Validity
            Not Before: Apr  8 02:39:40 2023 GMT
            Not After : Apr  6 02:44:40 2024 GMT
        Subject: CN=BF5E8B29820C078F98231F61E368531A358E20D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:57:b9:64:14:f6:63:2c:57:85:b2:13:2b:
                    de:0b:50:5c:2c:fc:29:dc:27:16:66:37:c9:2e:af:
                    31:a5:31:dc:26:21:04:90:c7:dc:55:5d:47:ec:4b:
                    7c:98:09:97:ec:e3:e5:0e:ad:b0:12:d1:8a:11:18:
                    d6:76:4c:4b:41:d9:89:93:60:e7:66:ad:72:ba:bd:
                    5c:fe:e1:d2:06:2e:d3:1d:9d:2b:22:1b:8d:45:d1:
                    6e:2b:3f:20:bf:6a:da:ff:38:0f:ab:78:3e:ae:0c:
                    ec:92:72:51:78:0b:9a:65:5e:74:e3:b7:bb:87:12:
                    1d:2a:d8:58:79:51:a6:68:ff:6b:1b:64:d3:4a:14:
                    da:34:ce:52:1f:75:b3:c0:67:82:84:88:19:bf:fe:
                    47:7e:b7:6a:8c:92:0e:a6:3d:c5:f4:9a:ff:81:80:
                    c8:ab:b3:c9:be:da:a8:34:0c:b8:82:f8:32:41:3b:
                    1a:2f:62:78:dd:49:62:ba:b5:6b:58:76:6c:6b:51:
                    6c:12:bb:20:fd:ba:ac:7a:8c:7c:a9:63:a9:55:d1:
                    83:8b:87:dd:66:ff:f1:d9:42:d9:fa:c5:18:85:4d:
                    e2:36:68:ee:cf:52:95:46:32:0b:29:a4:45:66:66:
                    0a:b3:4d:9b:5a:0d:0c:3f:91:32:5b:23:e1:53:c5:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5E:8B:29:82:0C:07:8F:98:23:1F:61:E3:68:53:1A:35:8E:20:D0
            X509v3 Authority Key Identifier:
                keyid:24:3D:79:34:6D:F3:52:A3:52:0A:69:F2:5A:CD:F6:D4:4B:EC:89:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/243D79346DF352A3520A69F25ACDF6D44BEC8930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/243D79346DF352A3520A69F25ACDF6D44BEC8930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xdqvk6VoEgqMJ4trGXoNm29WKrCBwJQHBFKRRq8PNo8/0/323830343a3438383a3a2f33322d3334203d3e20323632343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:0f:f5:35:4d:26:85:24:df:5a:b0:ca:7f:87:c8:1c:39:
         cb:fc:c1:c5:05:dd:95:a4:cf:cd:23:28:5a:cf:76:47:c3:44:
         f1:58:54:34:38:a9:eb:30:2a:54:7c:6f:b0:f9:64:fe:a4:c1:
         c5:02:9f:89:68:42:c3:c2:02:60:81:12:5c:f7:13:0b:eb:7f:
         79:3f:16:9c:b9:26:73:64:3e:ab:19:4a:5e:9e:ef:2e:82:86:
         a3:ef:4a:74:74:12:0e:0c:0e:46:73:71:95:da:45:84:c6:b2:
         10:c6:e6:9f:ca:dc:02:d7:f7:67:9e:0b:b4:40:09:fa:16:ca:
         a4:fa:a7:1b:d8:ea:3d:e5:f6:f7:fc:13:8f:79:b4:1f:f2:b5:
         a4:8e:21:b0:39:68:48:81:cc:be:a5:1c:3a:41:28:64:6d:8f:
         b1:8c:61:62:9b:28:60:37:2a:bd:6f:ab:9d:fc:1f:38:bb:05:
         ae:37:ab:5f:62:c0:f1:b9:ea:76:c0:07:f0:2b:a2:ec:60:a7:
         96:b4:d2:2b:1f:f1:08:20:5e:0e:53:2f:65:18:cb:5d:37:1f:
         41:09:ce:4f:ac:f9:34:af:c9:f4:76:73:de:b3:8d:d6:02:7f:
         c8:0a:37:44:b3:94:da:f1:f9:23:96:2d:ca:12:c7:3a:1a:a3:
         11:58:f2:0b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUOwNTrVUhmyfERA4z/BdDyMAywW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzRDc5MzQ2REYzNTJBMzUyMEE2OUYyNUFDREY2RDQ0
QkVDODkzMDAeFw0yMzA0MDgwMjM5NDBaFw0yNDA0MDYwMjQ0NDBaMDMxMTAvBgNV
BAMTKEJGNUU4QjI5ODIwQzA3OEY5ODIzMUY2MUUzNjg1MzFBMzU4RTIwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLE1e5ZBT2YyxXhbITK94LUFws
/CncJxZmN8kurzGlMdwmIQSQx9xVXUfsS3yYCZfs4+UOrbAS0YoRGNZ2TEtB2YmT
YOdmrXK6vVz+4dIGLtMdnSsiG41F0W4rPyC/atr/OA+reD6uDOySclF4C5plXnTj
t7uHEh0q2Fh5UaZo/2sbZNNKFNo0zlIfdbPAZ4KEiBm//kd+t2qMkg6mPcX0mv+B
gMirs8m+2qg0DLiC+DJBOxovYnjdSWK6tWtYdmxrUWwSuyD9uqx6jHypY6lV0YOL
h91m//HZQtn6xRiFTeI2aO7PUpVGMgsppEVmZgqzTZtaDQw/kTJbI+FTxfX1AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUv16LKYIMB4+YIx9h42hTGjWOINAwHwYDVR0j
BBgwFoAUJD15NG3zUqNSCmnyWs321EvsiTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHhkcXZrNlZvRWdxTUo0dHJHWG9ObTI5V0tyQ0J3SlFIQkZLUlJxOFBO
bzgvMC8yNDNENzkzNDZERjM1MkEzNTIwQTY5RjI1QUNERjZENDRCRUM4OTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0M0Q3OTM0NkRGMzUyQTM1
MjBBNjlGMjVBQ0RGNkQ0NEJFQzg5MzAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4ZHF2azZWb0VncU1KNHRyR1hvTm0yOVdLckNCd0pRSEJGS1JScThQTm84LzAv
MzIzODMwMzQzYTM0MzgzODNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzMjM0
MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBIgwDQYJKoZIhvcNAQELBQADggEBAHVuD/U1TSaF
JN9asMp/h8gcOcv8wcUF3ZWkz80jKFrPdkfDRPFYVDQ4qeswKlR8b7D5ZP6kwcUC
n4loQsPCAmCBElz3Ewvrf3k/Fpy5JnNkPqsZSl6e7y6ChqPvSnR0Eg4MDkZzcZXa
RYTGshDG5p/K3ALX92eeC7RACfoWyqT6pxvY6j3l9vf8E495tB/ytaSOIbA5aEiB
zL6lHDpBKGRtj7GMYWKbKGA3Kr1vq538Hzi7Ba43q19iwPG56nbAB/Arouxgp5a0
0isf8QggXg5TL2UYy103H0EJzk+s+TSvyfR2c96zjdYCf8gKN0SzlNrx+SOWLcoS
xzoaoxFY8gs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org