Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/323830343a333036343a3a2f33322d3438203d3e20323634393438.roa
File:                     323830343a333036343a3a2f33322d3438203d3e20323634393438.roa (raw, json)
Hash identifier:          pYz2sRtVC2TZlXX2EmG1FwZupGi6mox94LKfaqrgJ3Q=
Subject key identifier:   8C:A6:26:37:31:4D:FB:B5:72:99:47:90:C1:F8:15:34:82:89:D7:A1
Certificate issuer:       /CN=711FA892AF4913E4E1F9A25D92C488BA1D60CE7D
Certificate serial:       6D2ACA07F27FC3867A19BAAEDCE3EC9D2E6CF30B
Authority key identifier: 71:1F:A8:92:AF:49:13:E4:E1:F9:A2:5D:92:C4:88:BA:1D:60:CE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/323830343a333036343a3a2f33322d3438203d3e20323634393438.roa
Signing time:             Thu 04 Apr 2024 15:48:15 +0000
ROA not before:           Thu 04 Apr 2024 15:43:15 +0000
ROA not after:            Thu 03 Apr 2025 15:48:15 +0000
asID:                     264948
IP address blocks:        2804:3064::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2a:ca:07:f2:7f:c3:86:7a:19:ba:ae:dc:e3:ec:9d:2e:6c:f3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711FA892AF4913E4E1F9A25D92C488BA1D60CE7D
        Validity
            Not Before: Apr  4 15:43:15 2024 GMT
            Not After : Apr  3 15:48:15 2025 GMT
        Subject: CN=8CA62637314DFBB572994790C1F815348289D7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:20:2b:c0:81:d0:47:dc:05:d5:e2:e3:ac:
                    f6:d2:a1:92:04:6a:f4:bf:80:4d:36:40:b7:61:86:
                    ff:b8:e9:a7:2a:62:7c:b5:71:c8:5e:cd:7c:4f:4c:
                    c0:94:e3:64:ba:e8:4e:7f:b4:fa:be:b8:01:3c:b3:
                    b2:79:84:15:54:76:5f:f6:67:61:a0:be:b2:b5:05:
                    a7:59:ad:21:c1:b1:76:eb:91:9d:3a:78:22:9e:b8:
                    ae:a9:80:5d:f3:01:50:83:ab:fb:82:ea:f0:be:69:
                    8d:bc:b4:21:0f:81:d5:b2:a6:9d:81:66:ad:32:e9:
                    af:53:63:8e:d6:9f:87:ba:2c:30:2c:34:4c:74:7a:
                    a0:df:22:84:79:5e:0a:08:a8:0c:53:e8:6d:7f:b6:
                    cf:6c:01:09:6c:70:00:c8:c8:26:ea:0d:14:fb:ef:
                    e0:f0:2e:e3:21:a4:d3:8f:a0:d0:d0:1b:05:b1:5d:
                    f3:4d:0d:7f:27:4e:26:64:8d:7f:e1:90:1a:61:f2:
                    95:ad:e2:09:c6:0f:4a:1a:e8:2d:8f:4e:ab:84:01:
                    2a:c7:05:95:f5:0a:04:f0:86:26:b7:ec:2b:25:ce:
                    31:d8:df:60:0e:8b:2e:3f:4c:ce:6b:b0:b1:5c:fe:
                    c2:fb:1d:f7:3d:cb:29:c9:b6:b0:77:71:d4:9d:83:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A6:26:37:31:4D:FB:B5:72:99:47:90:C1:F8:15:34:82:89:D7:A1
            X509v3 Authority Key Identifier:
                keyid:71:1F:A8:92:AF:49:13:E4:E1:F9:A2:5D:92:C4:88:BA:1D:60:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711FA892AF4913E4E1F9A25D92C488BA1D60CE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/1/323830343a333036343a3a2f33322d3438203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3064::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:27:03:23:29:8f:7f:8c:ba:1d:fa:c7:21:4c:f3:f2:4a:b0:
         90:ad:3d:fb:ea:9b:95:b4:06:9c:08:c5:a9:04:87:da:a8:4b:
         02:16:1b:4e:8b:2b:fc:4a:e1:97:af:11:3b:66:e1:6c:7b:2e:
         03:5f:c8:0a:9e:16:50:f9:7b:8e:e0:32:1e:7d:b9:fc:d0:10:
         77:b9:29:f0:a2:ab:b5:85:0c:dd:49:cf:76:66:d7:8f:cf:2b:
         29:bc:49:73:75:b3:a4:68:db:58:3f:cc:4f:fb:6d:1c:68:9c:
         39:35:a4:19:58:58:59:49:98:6c:88:38:e5:72:f6:ab:5d:a7:
         33:73:1e:97:67:52:f4:f3:72:5e:8b:bc:3c:d7:78:4e:30:72:
         c6:3e:04:6c:b6:60:d5:36:2f:20:09:c7:b2:b2:1f:92:bd:61:
         3c:89:71:cb:f6:78:54:b7:a3:6c:8b:f7:da:4f:ac:4e:4a:b2:
         3c:f1:05:dc:3b:c9:74:02:62:9f:4c:78:a6:49:3b:b4:ad:03:
         55:b5:bd:5a:48:22:1e:a7:ac:0c:a3:92:ed:eb:3b:10:76:29:
         e0:d2:ae:13:ef:7e:07:e0:ae:8b:4f:c1:e4:9b:79:1a:23:4b:
         63:79:0f:48:30:69:b4:8c:03:94:6e:e3:5b:52:4d:8b:da:52:
         53:46:fb:fd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbSrKB/J/w4Z6Gbqu3OPsnS5s8wswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzExRkE4OTJBRjQ5MTNFNEUxRjlBMjVEOTJDNDg4QkEx
RDYwQ0U3RDAeFw0yNDA0MDQxNTQzMTVaFw0yNTA0MDMxNTQ4MTVaMDMxMTAvBgNV
BAMTKDhDQTYyNjM3MzE0REZCQjU3Mjk5NDc5MEMxRjgxNTM0ODI4OUQ3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LiArwIHQR9wF1eLjrPbSoZIE
avS/gE02QLdhhv+46acqYny1cchezXxPTMCU42S66E5/tPq+uAE8s7J5hBVUdl/2
Z2GgvrK1BadZrSHBsXbrkZ06eCKeuK6pgF3zAVCDq/uC6vC+aY28tCEPgdWypp2B
Zq0y6a9TY47Wn4e6LDAsNEx0eqDfIoR5XgoIqAxT6G1/ts9sAQlscADIyCbqDRT7
7+DwLuMhpNOPoNDQGwWxXfNNDX8nTiZkjX/hkBph8pWt4gnGD0oa6C2PTquEASrH
BZX1CgTwhia37CslzjHY32AOiy4/TM5rsLFc/sL7Hfc9yynJtrB3cdSdg7UHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjKYmNzFN+7VymUeQwfgVNIKJ16EwHwYDVR0j
BBgwFoAUcR+okq9JE+Th+aJdksSIuh1gzn0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMS83MTFGQTg5MkFGNDkxM0U0RTFGOUEyNUQ5MkM0ODhCQTFENjBDRTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMUZBODkyQUY0OTEzRTRF
MUY5QTI1RDkyQzQ4OEJBMUQ2MENFN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzEv
MzIzODMwMzQzYTMzMzAzNjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwZDANBgkqhkiG9w0BAQsFAAOCAQEAjCcDIymP
f4y6HfrHIUzz8kqwkK09++qblbQGnAjFqQSH2qhLAhYbTosr/Erhl68RO2bhbHsu
A1/ICp4WUPl7juAyHn25/NAQd7kp8KKrtYUM3UnPdmbXj88rKbxJc3WzpGjbWD/M
T/ttHGicOTWkGVhYWUmYbIg45XL2q12nM3Mel2dS9PNyXou8PNd4TjByxj4EbLZg
1TYvIAnHsrIfkr1hPIlxy/Z4VLejbIv32k+sTkqyPPEF3DvJdAJin0x4pkk7tK0D
VbW9WkgiHqesDKOS7es7EHYp4NKuE+9+B+Cui0/B5Jt5GiNLY3kPSDBptIwDlG7j
W1JNi9pSU0b7/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org