Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a343130313a3a2f34382d3438203d3e20323639333338.roa
File:                     323830343a363331383a343130313a3a2f34382d3438203d3e20323639333338.roa (raw, json)
Hash identifier:          fgRrx/KwFUMohhIsyn2OMgoBj4c4azgOiO2zy4Q59b8=
Subject key identifier:   9A:FD:4F:4A:10:AF:BD:39:85:10:CB:A5:D7:96:4B:E6:8A:66:CE:6C
Certificate issuer:       /CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
Certificate serial:       4F9F233FC79A2D449918E5B8FCC0BDCA79A79600
Authority key identifier: 28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a343130313a3a2f34382d3438203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:09 +0000
ROA not before:           Sat 13 Apr 2024 16:11:09 +0000
ROA not after:            Sat 12 Apr 2025 16:16:09 +0000
asID:                     269338
IP address blocks:        2804:6318:4101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9f:23:3f:c7:9a:2d:44:99:18:e5:b8:fc:c0:bd:ca:79:a7:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
        Validity
            Not Before: Apr 13 16:11:09 2024 GMT
            Not After : Apr 12 16:16:09 2025 GMT
        Subject: CN=9AFD4F4A10AFBD398510CBA5D7964BE68A66CE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:5d:5f:fe:f1:01:f3:19:ad:42:24:c9:ed:
                    bc:41:b9:18:a3:1b:7a:fc:d2:81:55:d4:34:ff:de:
                    1c:3f:61:bd:d7:cc:d1:37:b6:1b:f3:a2:da:77:30:
                    a6:ba:e7:11:3d:23:6f:3d:0c:3c:f0:3f:f1:b2:ab:
                    39:94:21:3d:79:5a:7e:32:17:71:f6:c7:4f:4c:3b:
                    29:b9:9b:7a:1b:d1:4f:fe:ed:c8:3a:59:b3:77:00:
                    c8:51:4c:96:c9:9a:ba:92:c2:64:a0:05:67:97:3a:
                    28:a2:46:ab:06:61:3c:68:fd:25:7a:63:e7:45:ef:
                    90:4d:cb:01:8d:4e:85:05:c6:e3:ca:8c:ce:15:a5:
                    a4:bb:ec:cb:ee:81:45:d3:8f:44:7f:26:fa:4e:61:
                    08:63:03:7d:61:79:28:f2:f9:6c:2a:d4:67:d0:39:
                    d2:08:18:cb:e3:db:1d:a1:be:26:c2:25:de:f1:8e:
                    1c:51:5b:21:b8:85:5a:68:f0:f5:01:18:92:94:bd:
                    51:cb:df:3d:9b:78:d6:a2:78:7d:55:23:5e:90:a2:
                    4f:d6:7a:68:ba:ff:14:62:4a:28:12:04:d6:18:51:
                    ab:9b:a5:ed:9f:9e:9d:8a:3e:0b:6c:75:b7:9b:9b:
                    74:20:2c:74:5d:a7:58:67:f0:3c:3e:c2:ed:19:89:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FD:4F:4A:10:AF:BD:39:85:10:CB:A5:D7:96:4B:E6:8A:66:CE:6C
            X509v3 Authority Key Identifier:
                keyid:28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/28EE46D4F099B24B9DA8C80842FED277ABB924AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/323830343a363331383a343130313a3a2f34382d3438203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6318:4101::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:60:d9:b4:e3:f5:16:7e:24:a3:ef:66:34:e1:fe:a3:ff:e5:
         8b:03:79:2e:51:af:24:bd:9d:e2:89:6b:d2:c9:15:60:46:3e:
         85:70:0b:cc:e5:d6:56:89:e1:9a:f8:7d:58:e3:6e:67:ab:28:
         c2:87:de:c9:2f:f6:d5:b1:3c:46:7f:04:be:48:f9:3e:b6:5f:
         ff:94:ce:18:a6:30:8c:22:ee:20:70:38:58:d5:a2:ef:58:8d:
         1e:96:fc:41:80:fe:28:1f:f1:86:2e:d7:1c:8e:45:ee:32:ef:
         57:b5:78:bd:e1:96:75:3d:43:96:76:44:fb:ee:cd:1a:4b:3d:
         41:7d:55:95:85:3c:d7:8f:d5:10:b6:a6:33:3f:0f:2c:62:ee:
         45:84:df:9a:8c:cd:45:f6:34:97:c1:6e:39:82:9a:a8:16:19:
         f2:97:af:d9:f3:33:03:05:da:4c:ed:45:c4:87:5f:1a:ed:ec:
         5d:46:90:85:fe:bb:2d:33:ab:9f:5f:50:81:79:59:60:29:9c:
         d2:e3:24:e0:36:d0:2c:cd:4a:c8:d0:0f:b5:a1:6e:72:37:0a:
         35:12:1d:14:65:51:b0:c4:d0:f7:d1:1e:eb:11:b7:f6:40:69:
         78:ad:a1:ce:8f:64:6f:fa:89:36:99:fd:f8:81:0c:ce:31:eb:
         dc:b5:8f:96
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUT58jP8eaLUSZGOW4/MC9ynmnlgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhFRTQ2RDRGMDk5QjI0QjlEQThDODA4NDJGRUQyNzdB
QkI5MjRBRTAeFw0yNDA0MTMxNjExMDlaFw0yNTA0MTIxNjE2MDlaMDMxMTAvBgNV
BAMTKDlBRkQ0RjRBMTBBRkJEMzk4NTEwQ0JBNUQ3OTY0QkU2OEE2NkNFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIU11f/vEB8xmtQiTJ7bxBuRij
G3r80oFV1DT/3hw/Yb3XzNE3thvzotp3MKa65xE9I289DDzwP/GyqzmUIT15Wn4y
F3H2x09MOym5m3ob0U/+7cg6WbN3AMhRTJbJmrqSwmSgBWeXOiiiRqsGYTxo/SV6
Y+dF75BNywGNToUFxuPKjM4VpaS77MvugUXTj0R/JvpOYQhjA31heSjy+Wwq1GfQ
OdIIGMvj2x2hvibCJd7xjhxRWyG4hVpo8PUBGJKUvVHL3z2beNaieH1VI16Qok/W
emi6/xRiSigSBNYYUaubpe2fnp2KPgtsdbebm3QgLHRdp1hn8Dw+wu0ZifR/AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUmv1PShCvvTmFEMul15ZL5opmzmwwHwYDVR0j
BBgwFoAUKO5G1PCZskudqMgIQv7Sd6u5JK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpGd2FoZVZIcTZCaHltYTVKYjVzSE1NRVFGcGFzTFZoNFdWaldwMm1R
QjIvMS8yOEVFNDZENEYwOTlCMjRCOURBOEM4MDg0MkZFRDI3N0FCQjkyNEFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RUU0NkQ0RjA5OUIyNEI5
REE4QzgwODQyRkVEMjc3QUJCOTI0QUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKRndhaGVWSHE2Qmh5bWE1SmI1c0hNTUVRRnBhc0xWaDRXVmpXcDJtUUIyLzEv
MzIzODMwMzQzYTM2MzMzMTM4M2EzNDMxMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTMzMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEYxhBATANBgkqhkiG9w0BAQsF
AAOCAQEAIWDZtOP1Fn4ko+9mNOH+o//liwN5LlGvJL2d4olr0skVYEY+hXALzOXW
Vonhmvh9WONuZ6sowofeyS/21bE8Rn8Evkj5PrZf/5TOGKYwjCLuIHA4WNWi71iN
Hpb8QYD+KB/xhi7XHI5F7jLvV7V4veGWdT1DlnZE++7NGks9QX1VlYU814/VELam
Mz8PLGLuRYTfmozNRfY0l8FuOYKaqBYZ8pev2fMzAwXaTO1FxIdfGu3sXUaQhf67
LTOrn19QgXlZYCmc0uMk4DbQLM1KyNAPtaFucjcKNRIdFGVRsMTQ99Ee6xG39kBp
eK2hzo9kb/qJNpn9+IEMzjHr3LWPlg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org