Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/323830343a336463383a3a2f33322d313238203d3e20323636353533.roa
File:                     323830343a336463383a3a2f33322d313238203d3e20323636353533.roa (raw, json)
Hash identifier:          vu98u1CSRVXxNKphx3UQqMr1PQaUQjr+J3YRKRkZyMA=
Subject key identifier:   ED:1D:EF:CC:6E:5E:20:D1:F3:08:12:E9:8F:43:19:4B:4B:1D:84:C7
Certificate issuer:       /CN=44B5BBA0335229473521F3DA7C0E55975284FD42
Certificate serial:       04D29D1FC7E2AD657A98A97EC1DD82F2FA700398
Authority key identifier: 44:B5:BB:A0:33:52:29:47:35:21:F3:DA:7C:0E:55:97:52:84:FD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44B5BBA0335229473521F3DA7C0E55975284FD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/323830343a336463383a3a2f33322d313238203d3e20323636353533.roa
Signing time:             Mon 25 Mar 2024 15:41:28 +0000
ROA not before:           Mon 25 Mar 2024 15:36:28 +0000
ROA not after:            Mon 24 Mar 2025 15:41:28 +0000
asID:                     266553
IP address blocks:        2804:3dc8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d2:9d:1f:c7:e2:ad:65:7a:98:a9:7e:c1:dd:82:f2:fa:70:03:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B5BBA0335229473521F3DA7C0E55975284FD42
        Validity
            Not Before: Mar 25 15:36:28 2024 GMT
            Not After : Mar 24 15:41:28 2025 GMT
        Subject: CN=ED1DEFCC6E5E20D1F30812E98F43194B4B1D84C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:9b:1b:71:ef:2f:45:aa:71:0b:a1:1e:ec:
                    05:0f:a8:93:02:69:70:01:ae:d4:c5:e9:64:47:6f:
                    4d:c2:0b:1e:ca:b8:70:f8:b6:28:be:b0:6e:30:c5:
                    d0:d1:e2:0a:c9:37:53:6c:f9:cc:d8:e2:5e:e4:e0:
                    2d:0e:c4:8a:c2:b7:32:9d:23:0c:8e:21:15:b9:2c:
                    42:0b:50:5a:84:04:31:d4:f4:6f:b4:f8:75:4c:76:
                    a5:bc:ee:e7:fa:98:2f:07:d5:4d:55:5a:8e:5f:ac:
                    42:17:4c:31:f7:cd:01:8d:e5:72:54:81:2d:6f:b7:
                    99:ce:79:43:a3:83:06:c2:ea:a7:db:b0:ad:d4:db:
                    05:61:6e:34:51:e8:bb:ac:a1:cf:0a:08:c6:65:53:
                    fb:91:d0:74:12:09:ec:03:fb:d2:04:08:4b:86:ed:
                    d1:66:f5:f6:6a:d2:85:7d:70:61:ad:3d:17:80:b6:
                    d5:41:45:95:87:ec:00:af:b6:9e:39:30:23:bf:21:
                    ec:d7:4c:ca:f8:f4:64:fd:6d:b2:f3:c3:43:9d:26:
                    1e:f3:e4:b9:7a:d0:88:85:e2:97:c2:33:7f:32:3a:
                    00:17:f7:a6:a4:87:5f:0b:34:18:92:cc:0c:1d:99:
                    7b:c8:68:bd:bb:cd:47:c2:e5:12:cd:72:11:b3:0e:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1D:EF:CC:6E:5E:20:D1:F3:08:12:E9:8F:43:19:4B:4B:1D:84:C7
            X509v3 Authority Key Identifier:
                keyid:44:B5:BB:A0:33:52:29:47:35:21:F3:DA:7C:0E:55:97:52:84:FD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/44B5BBA0335229473521F3DA7C0E55975284FD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44B5BBA0335229473521F3DA7C0E55975284FD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/323830343a336463383a3a2f33322d313238203d3e20323636353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:cb:d1:ae:34:b0:b9:65:f8:3b:a4:91:7c:bc:7f:cd:35:ed:
         b2:9d:ad:8c:50:02:eb:a9:8e:a7:84:11:bf:aa:75:64:dd:44:
         67:6e:56:78:f1:ce:d1:6a:18:01:2d:b0:a7:66:e7:0f:bd:b7:
         8f:75:ae:f2:75:4f:06:18:7e:1b:ee:5d:f4:fe:0e:e7:ae:f7:
         3c:b0:01:32:06:12:2b:3d:7d:aa:66:a8:29:37:9b:bc:b0:52:
         01:1e:90:60:3e:07:a0:f3:3c:b9:c2:91:c0:3e:3d:80:f5:72:
         1e:61:82:e7:5f:d7:3a:86:b0:fb:fc:2e:71:03:fd:70:9a:10:
         ca:37:18:27:1a:2d:23:c3:1c:cf:43:ea:ad:7f:f2:62:1d:e7:
         43:74:3f:04:55:23:9d:bf:47:e0:77:e8:3d:21:5e:e7:df:a2:
         0b:06:e9:b1:80:ca:39:b5:b1:c4:c1:e6:3d:bc:50:b2:72:22:
         6d:a8:bc:87:bc:9e:3e:08:27:62:ce:f2:5d:fd:d0:8f:40:78:
         0e:08:e7:c2:fc:28:f5:ef:c9:ee:10:ad:c1:f6:73:9e:aa:20:
         0f:cc:21:40:91:9e:19:ec:b3:18:a9:68:ec:87:d6:93:8e:fb:
         78:5d:b8:ca:6b:5f:c2:ca:76:9a:26:6d:f7:ae:d3:45:8e:58:
         fd:c7:6a:58
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBNKdH8firWV6mKl+wd2C8vpwA5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCNUJCQTAzMzUyMjk0NzM1MjFGM0RBN0MwRTU1OTc1
Mjg0RkQ0MjAeFw0yNDAzMjUxNTM2MjhaFw0yNTAzMjQxNTQxMjhaMDMxMTAvBgNV
BAMTKEVEMURFRkNDNkU1RTIwRDFGMzA4MTJFOThGNDMxOTRCNEIxRDg0QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSJsbce8vRapxC6Ee7AUPqJMC
aXABrtTF6WRHb03CCx7KuHD4tii+sG4wxdDR4grJN1Ns+czY4l7k4C0OxIrCtzKd
IwyOIRW5LEILUFqEBDHU9G+0+HVMdqW87uf6mC8H1U1VWo5frEIXTDH3zQGN5XJU
gS1vt5nOeUOjgwbC6qfbsK3U2wVhbjRR6Lusoc8KCMZlU/uR0HQSCewD+9IECEuG
7dFm9fZq0oV9cGGtPReAttVBRZWH7ACvtp45MCO/IezXTMr49GT9bbLzw0OdJh7z
5Ll60IiF4pfCM38yOgAX96akh18LNBiSzAwdmXvIaL27zUfC5RLNchGzDpRhAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7R3vzG5eINHzCBLpj0MZS0sdhMcwHwYDVR0j
BBgwFoAURLW7oDNSKUc1IfPafA5Vl1KE/UIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTF4VENpU3hYS1hmbmN4NXhSbzhiTXNmV1JHV1R2NUY3YUNTNFNHaVVR
UU0vMC80NEI1QkJBMDMzNTIyOTQ3MzUyMUYzREE3QzBFNTU5NzUyODRGRDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0QjVCQkEwMzM1MjI5NDcz
NTIxRjNEQTdDMEU1NTk3NTI4NEZENDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ExeFRDaVN4WEtYZm5jeDV4Um84Yk1zZldSR1dUdjVGN2FDUzRTR2lVUVFNLzAv
MzIzODMwMzQzYTMzNjQ2MzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBD3IMA0GCSqGSIb3DQEBCwUAA4IBAQAmy9Gu
NLC5Zfg7pJF8vH/NNe2yna2MUALrqY6nhBG/qnVk3URnblZ48c7RahgBLbCnZucP
vbePda7ydU8GGH4b7l30/g7nrvc8sAEyBhIrPX2qZqgpN5u8sFIBHpBgPgeg8zy5
wpHAPj2A9XIeYYLnX9c6hrD7/C5xA/1wmhDKNxgnGi0jwxzPQ+qtf/JiHedDdD8E
VSOdv0fgd+g9IV7n36ILBumxgMo5tbHEweY9vFCyciJtqLyHvJ4+CCdizvJd/dCP
QHgOCOfC/Cj178nuEK3B9nOeqiAPzCFAkZ4Z7LMYqWjsh9aTjvt4XbjKa1/Cynaa
Jm33rtNFjlj9x2pY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org