Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/323830343a363761303a3a2f33322d3438203d3e20323639363430.roa
File:                     323830343a363761303a3a2f33322d3438203d3e20323639363430.roa (raw, json)
Hash identifier:          T1sooaP1Erze+Cbi3mKOnerk9cv/c/Hw+Ai3+eaUIqk=
Subject key identifier:   D2:DF:0A:0A:00:6B:CC:EA:FC:EF:E6:94:A3:68:9F:E5:8A:CD:68:95
Certificate issuer:       /CN=028AECB7B2EB02A3D78A64A521872D461244B9AE
Certificate serial:       54CBAE87C76173E8A65487AFF0AC0602B91777FB
Authority key identifier: 02:8A:EC:B7:B2:EB:02:A3:D7:8A:64:A5:21:87:2D:46:12:44:B9:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/323830343a363761303a3a2f33322d3438203d3e20323639363430.roa
Signing time:             Thu 04 Apr 2024 04:20:29 +0000
ROA not before:           Thu 04 Apr 2024 04:15:29 +0000
ROA not after:            Thu 03 Apr 2025 04:20:29 +0000
asID:                     269640
IP address blocks:        2804:67a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cb:ae:87:c7:61:73:e8:a6:54:87:af:f0:ac:06:02:b9:17:77:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028AECB7B2EB02A3D78A64A521872D461244B9AE
        Validity
            Not Before: Apr  4 04:15:29 2024 GMT
            Not After : Apr  3 04:20:29 2025 GMT
        Subject: CN=D2DF0A0A006BCCEAFCEFE694A3689FE58ACD6895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:4b:8f:ff:19:14:a7:7d:9e:da:ec:68:7d:
                    b3:cf:54:1a:86:d8:69:95:f6:1f:52:99:b7:fb:5b:
                    b3:2a:36:be:a7:c3:b6:9b:94:8d:99:68:61:1e:00:
                    9b:e1:20:98:e5:c3:ae:d8:fa:99:ef:db:58:1b:b5:
                    34:5e:97:db:2b:c9:7a:95:b4:fd:22:07:7f:74:32:
                    b6:34:50:17:2e:b7:b5:32:80:68:dd:3a:0a:e6:63:
                    5c:81:5e:5c:8f:46:5d:d9:34:3d:40:ea:48:2e:94:
                    a8:16:b7:77:f8:e2:4b:f6:30:6b:82:2e:d1:db:18:
                    1e:a8:5e:17:3e:11:71:be:a9:ac:e3:9a:f3:a8:24:
                    74:79:cc:b2:6a:21:fb:23:21:df:e4:4a:24:07:d2:
                    ef:ae:96:1e:3f:d9:a2:44:70:20:8c:95:09:35:0b:
                    67:7f:28:b6:9f:ab:ff:01:e6:9c:e4:7a:3c:d7:72:
                    72:3e:66:ba:cc:e7:f3:bd:6e:fe:b6:e0:a9:f6:0d:
                    ca:70:5c:eb:54:51:3c:34:73:78:e8:c5:0d:10:03:
                    93:2a:d7:d9:06:ac:d4:aa:4b:dd:be:93:8a:59:59:
                    7b:6c:fd:28:94:a1:1e:65:27:27:1b:9b:b1:39:b0:
                    5f:f8:3d:fa:1f:af:e3:75:ad:58:54:5a:83:66:e0:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DF:0A:0A:00:6B:CC:EA:FC:EF:E6:94:A3:68:9F:E5:8A:CD:68:95
            X509v3 Authority Key Identifier:
                keyid:02:8A:EC:B7:B2:EB:02:A3:D7:8A:64:A5:21:87:2D:46:12:44:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/323830343a363761303a3a2f33322d3438203d3e20323639363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:e6:54:07:d5:f5:ed:55:c3:38:3e:22:a2:87:09:8c:8d:
         1f:b6:a9:81:2c:6d:62:4f:0e:f9:67:43:d3:d8:9f:a6:3a:51:
         1a:26:e1:eb:5e:98:fa:8b:b4:df:42:fc:df:47:45:f3:94:e3:
         12:b3:d8:36:38:05:71:73:a3:31:fb:04:d4:b8:8a:68:f2:a6:
         6f:65:80:98:af:f7:4b:3c:59:18:2a:5a:32:2d:08:e2:07:f8:
         f1:cb:94:61:91:29:bb:61:fb:93:33:d2:e4:ef:56:b7:95:b3:
         06:d3:20:62:98:3f:8f:f4:3b:52:98:75:57:1b:57:a3:c0:57:
         18:d5:ce:bb:c7:24:cf:d3:09:4d:25:3b:9b:64:c0:bd:57:1d:
         cd:19:e4:58:83:59:47:0d:9d:e3:e1:54:93:f8:ce:38:ec:67:
         11:53:d3:dc:cb:95:c8:f3:7d:62:9f:f6:dc:b0:c2:63:5f:bc:
         54:b1:0b:37:68:c4:e1:e8:7f:5c:0f:f9:60:f0:9a:c4:a0:8c:
         a4:47:21:98:be:1e:73:ba:97:95:59:f9:c0:f5:16:51:0a:34:
         fe:8f:26:3f:31:d9:1b:b9:e2:a1:c3:4c:c8:dd:ea:a3:69:1a:
         07:23:20:7b:28:45:85:8d:e5:ca:98:d6:5d:3c:6b:5f:7c:f7:
         3c:30:72:48
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVMuuh8dhc+imVIev8KwGArkXd/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI4QUVDQjdCMkVCMDJBM0Q3OEE2NEE1MjE4NzJENDYx
MjQ0QjlBRTAeFw0yNDA0MDQwNDE1MjlaFw0yNTA0MDMwNDIwMjlaMDMxMTAvBgNV
BAMTKEQyREYwQTBBMDA2QkNDRUFGQ0VGRTY5NEEzNjg5RkU1OEFDRDY4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfUuP/xkUp32e2uxofbPPVBqG
2GmV9h9Smbf7W7MqNr6nw7ablI2ZaGEeAJvhIJjlw67Y+pnv21gbtTRel9sryXqV
tP0iB390MrY0UBcut7UygGjdOgrmY1yBXlyPRl3ZND1A6kgulKgWt3f44kv2MGuC
LtHbGB6oXhc+EXG+qazjmvOoJHR5zLJqIfsjId/kSiQH0u+ulh4/2aJEcCCMlQk1
C2d/KLafq/8B5pzkejzXcnI+ZrrM5/O9bv624Kn2DcpwXOtUUTw0c3joxQ0QA5Mq
19kGrNSqS92+k4pZWXts/SiUoR5lJycbm7E5sF/4Pfofr+N1rVhUWoNm4M6fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0t8KCgBrzOr87+aUo2if5YrNaJUwHwYDVR0j
BBgwFoAUAorst7LrAqPXimSlIYctRhJEua4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTN1UHkydkthd3hMU3ZRZ3JlZFlxSzkzVXdnUTlFYmZVYkU4cjJhVmlo
cDMvMS8wMjhBRUNCN0IyRUIwMkEzRDc4QTY0QTUyMTg3MkQ0NjEyNDRCOUFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOEFFQ0I3QjJFQjAyQTNE
NzhBNjRBNTIxODcyRDQ2MTI0NEI5QUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzdVB5MnZLYXd4TFN2UWdyZWRZcUs5M1V3Z1E5RWJmVWJFOHIyYVZpaHAzLzEv
MzIzODMwMzQzYTM2Mzc2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzYzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARnoDANBgkqhkiG9w0BAQsFAAOCAQEAfWrmVAfV
9e1Vwzg+IqKHCYyNH7apgSxtYk8O+WdD09ifpjpRGibh616Y+ou030L830dF85Tj
ErPYNjgFcXOjMfsE1LiKaPKmb2WAmK/3SzxZGCpaMi0I4gf48cuUYZEpu2H7kzPS
5O9Wt5WzBtMgYpg/j/Q7Uph1VxtXo8BXGNXOu8ckz9MJTSU7m2TAvVcdzRnkWINZ
Rw2d4+FUk/jOOOxnEVPT3MuVyPN9Yp/23LDCY1+8VLELN2jE4eh/XA/5YPCaxKCM
pEchmL4ec7qXlVn5wPUWUQo0/o8mPzHZG7niocNMyN3qo2kaByMgeyhFhY3lypjW
XTxrX3z3PDBySA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org