Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/323830343a326439343a3a2f33322d313238203d3e20323635323930.roa
File:                     323830343a326439343a3a2f33322d313238203d3e20323635323930.roa (raw, json)
Hash identifier:          XwOYFZ+6W9hq+xyR2Cz2AcuJAWFA5PZkKSVwJE97MsM=
Subject key identifier:   32:3E:5D:7C:85:02:C4:10:F1:09:65:AA:33:17:A9:C5:A6:BB:E0:62
Certificate issuer:       /CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
Certificate serial:       2F2E11CCDC46723648101357124CE5B2E83D3AFC
Authority key identifier: 3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/323830343a326439343a3a2f33322d313238203d3e20323635323930.roa
Signing time:             Fri 02 Dec 2022 12:04:18 +0000
ROA not before:           Fri 02 Dec 2022 11:59:18 +0000
ROA not after:            Fri 01 Dec 2023 12:04:18 +0000
asID:                     265290
IP address blocks:        2804:2d94::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2e:11:cc:dc:46:72:36:48:10:13:57:12:4c:e5:b2:e8:3d:3a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
        Validity
            Not Before: Dec  2 11:59:18 2022 GMT
            Not After : Dec  1 12:04:18 2023 GMT
        Subject: CN=323E5D7C8502C410F10965AA3317A9C5A6BBE062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:65:fe:ea:32:91:ed:a8:18:62:db:d7:93:
                    4c:37:71:0d:eb:76:a0:d0:d8:9a:a1:61:b6:48:73:
                    3d:68:6c:ee:0e:2d:e9:9d:87:f3:3d:6a:79:02:2d:
                    41:a5:1c:34:26:7d:bd:d6:ce:89:ed:3c:98:ba:97:
                    cc:6c:31:eb:da:d0:85:0c:8c:9c:bf:d1:95:21:d6:
                    88:60:32:bc:25:a2:f2:c3:70:d7:f0:68:29:fd:15:
                    d2:54:66:59:6e:ad:20:1b:45:88:43:6c:59:1a:aa:
                    95:6a:93:0c:61:c9:9f:be:0e:f8:8e:8f:d8:57:46:
                    25:73:b8:f0:fb:ae:2c:b5:ef:6a:45:fc:67:da:a5:
                    27:9d:43:36:4a:8c:ec:fc:dd:a7:80:c3:32:64:53:
                    78:00:a7:dc:c1:78:1d:e9:fe:a6:3c:43:c4:13:17:
                    fb:b2:9f:c6:4b:18:fa:33:93:ed:13:64:a5:d2:3b:
                    0a:a7:0e:28:e6:e7:d3:20:a1:67:36:ff:aa:7e:2a:
                    08:46:2d:13:ef:90:67:f6:11:42:9d:89:0d:71:70:
                    ef:b8:6a:7a:f6:b4:85:e9:11:19:53:83:68:4f:b5:
                    9d:87:e9:51:56:4f:d4:bc:1d:2d:02:64:c6:11:ee:
                    9f:06:23:b5:69:5a:8f:e1:de:02:15:9b:e1:18:16:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:5D:7C:85:02:C4:10:F1:09:65:AA:33:17:A9:C5:A6:BB:E0:62
            X509v3 Authority Key Identifier:
                keyid:3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/323830343a326439343a3a2f33322d313238203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d94::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:ac:c1:9c:5c:d9:4a:9e:36:00:e0:e0:4a:0b:85:ec:dd:9a:
         69:3e:f9:5e:dd:f4:19:aa:34:9a:ad:70:b6:40:96:01:67:01:
         e9:99:94:28:47:82:6d:2f:e7:63:e8:58:34:77:da:35:43:63:
         46:31:2a:c4:77:ce:93:57:70:16:c0:18:e5:3f:65:e8:b4:9c:
         cd:12:45:70:98:bc:45:3c:a6:1d:dc:69:d5:3e:98:69:d7:ad:
         25:91:15:d1:10:e4:25:bd:7a:13:ac:b3:90:69:08:15:a9:6e:
         56:8d:dc:79:dc:56:e4:48:fa:43:d8:cc:c9:9f:ca:09:35:b6:
         1d:9f:69:c3:3f:1b:c0:23:86:a2:37:79:c3:99:5f:e7:c7:87:
         ad:b6:cd:7a:84:f3:f2:ca:d2:d1:39:0d:17:7d:e5:c1:1f:d1:
         13:18:64:ea:49:1b:64:fa:d9:3c:09:95:9e:29:3f:ff:76:d2:
         c4:9a:2c:88:2a:7b:34:f8:c5:43:87:48:ac:58:92:9a:44:db:
         23:9f:19:52:c8:7b:65:0e:a8:f0:98:96:9b:88:e5:5c:59:4c:
         88:3f:b7:55:03:1a:c2:a6:f5:2e:ec:01:05:f8:65:6b:bb:19:
         93:67:ee:c7:75:19:03:04:54:77:02:8c:2e:a1:52:e5:f9:c9:
         e6:15:ed:76
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULy4RzNxGcjZIEBNXEkzlsug9OvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwN0Q0MkI4M0M5QzBCNUVBQUQ4NUQ2REVDQkZGMDY5
MEZCNUFCMzAeFw0yMjEyMDIxMTU5MThaFw0yMzEyMDExMjA0MThaMDMxMTAvBgNV
BAMTKDMyM0U1RDdDODUwMkM0MTBGMTA5NjVBQTMzMTdBOUM1QTZCQkUwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OGX+6jKR7agYYtvXk0w3cQ3r
dqDQ2JqhYbZIcz1obO4OLemdh/M9ankCLUGlHDQmfb3WzontPJi6l8xsMeva0IUM
jJy/0ZUh1ohgMrwlovLDcNfwaCn9FdJUZllurSAbRYhDbFkaqpVqkwxhyZ++DviO
j9hXRiVzuPD7riy172pF/GfapSedQzZKjOz83aeAwzJkU3gAp9zBeB3p/qY8Q8QT
F/uyn8ZLGPozk+0TZKXSOwqnDijm59MgoWc2/6p+KghGLRPvkGf2EUKdiQ1xcO+4
anr2tIXpERlTg2hPtZ2H6VFWT9S8HS0CZMYR7p8GI7VpWo/h3gIVm+EYFl7TAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUMj5dfIUCxBDxCWWqMxepxaa74GIwHwYDVR0j
BBgwFoAUPgfUK4PJwLXqrYXW3sv/BpD7WrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVluWFFHM1pXRVJqbW50Z3lIWDdSQXAxSHhRY24zSmhERDV2VXpSWVRS
UUsvMC8zRTA3RDQyQjgzQzlDMEI1RUFBRDg1RDZERUNCRkYwNjkwRkI1QUIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFMDdENDJCODNDOUMwQjVF
QUFEODVENkRFQ0JGRjA2OTBGQjVBQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZblhRRzNaV0VSam1udGd5SFg3UkFwMUh4UWNuM0poREQ1dlV6UllUUlFLLzAv
MzIzODMwMzQzYTMyNjQzOTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBC2UMA0GCSqGSIb3DQEBCwUAA4IBAQBirMGc
XNlKnjYA4OBKC4Xs3ZppPvle3fQZqjSarXC2QJYBZwHpmZQoR4JtL+dj6Fg0d9o1
Q2NGMSrEd86TV3AWwBjlP2XotJzNEkVwmLxFPKYd3GnVPphp160lkRXREOQlvXoT
rLOQaQgVqW5Wjdx53FbkSPpD2MzJn8oJNbYdn2nDPxvAI4aiN3nDmV/nx4etts16
hPPyytLROQ0XfeXBH9ETGGTqSRtk+tk8CZWeKT//dtLEmiyIKns0+MVDh0isWJKa
RNsjnxlSyHtlDqjwmJabiOVcWUyIP7dVAxrCpvUu7AEF+GVruxmTZ+7HdRkDBFR3
AowuoVLl+cnmFe12
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org