Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/1/323830343a366465383a3a2f33322d313238203d3e20323730353633.roa
File:                     323830343a366465383a3a2f33322d313238203d3e20323730353633.roa (raw, json)
Hash identifier:          LApUjVp/BTQxVp6GdWSkrxAvzEjU/Y9NjHPVfUHnGkM=
Subject key identifier:   7D:12:1D:DE:30:9F:7B:C2:D7:28:58:C2:1F:71:C8:D7:10:78:EF:15
Certificate issuer:       /CN=AD5C6E0F80AA788B38ABD961522AF1BDD8E99620
Certificate serial:       49FE193ED8D63D01458608C14CF010049AAC41D9
Authority key identifier: AD:5C:6E:0F:80:AA:78:8B:38:AB:D9:61:52:2A:F1:BD:D8:E9:96:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD5C6E0F80AA788B38ABD961522AF1BDD8E99620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/1/323830343a366465383a3a2f33322d313238203d3e20323730353633.roa
Signing time:             Thu 04 Apr 2024 03:51:00 +0000
ROA not before:           Thu 04 Apr 2024 03:46:00 +0000
ROA not after:            Thu 03 Apr 2025 03:51:00 +0000
asID:                     270563
IP address blocks:        2804:6de8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fe:19:3e:d8:d6:3d:01:45:86:08:c1:4c:f0:10:04:9a:ac:41:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD5C6E0F80AA788B38ABD961522AF1BDD8E99620
        Validity
            Not Before: Apr  4 03:46:00 2024 GMT
            Not After : Apr  3 03:51:00 2025 GMT
        Subject: CN=7D121DDE309F7BC2D72858C21F71C8D71078EF15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:28:36:cb:05:5e:4e:cc:02:02:0e:c1:46:
                    5b:26:79:32:2e:02:81:a3:58:74:be:03:e8:28:f4:
                    39:6e:8e:f8:d8:99:1a:c5:54:92:24:b5:22:3d:d1:
                    8f:cd:ed:04:29:ee:f8:c0:bf:fc:da:ad:26:da:56:
                    87:5a:41:f0:80:72:47:fa:0f:8e:60:b2:86:8a:7e:
                    e2:81:54:85:fa:24:86:4a:85:e3:55:7e:bc:a1:ea:
                    ee:2a:91:44:6e:25:16:05:5c:34:b1:54:27:c7:59:
                    eb:7c:4e:ce:c3:28:fd:f8:46:a0:f4:3a:52:96:45:
                    14:49:82:9b:02:bd:3d:19:eb:8d:49:69:3a:8b:79:
                    e4:93:ec:44:66:ce:2e:c3:55:37:1d:88:bd:cd:28:
                    3f:4d:44:a5:e3:fe:76:91:3a:26:ea:4b:4e:23:35:
                    f3:a0:8b:2a:bf:56:b6:bd:b3:61:46:37:0e:dd:50:
                    44:59:d3:cf:ee:4c:30:24:ab:e6:86:21:3c:58:1c:
                    75:2f:6e:4e:24:cb:0a:32:7e:e1:b1:83:42:52:80:
                    02:86:e5:24:9b:a8:cc:f9:37:76:2b:db:f5:fc:fc:
                    8b:31:f1:90:e4:88:52:b6:b1:c1:6f:31:ff:e8:3e:
                    a8:b5:83:9d:ea:e1:3d:37:a3:96:c9:b3:84:6d:a0:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:12:1D:DE:30:9F:7B:C2:D7:28:58:C2:1F:71:C8:D7:10:78:EF:15
            X509v3 Authority Key Identifier:
                keyid:AD:5C:6E:0F:80:AA:78:8B:38:AB:D9:61:52:2A:F1:BD:D8:E9:96:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/1/AD5C6E0F80AA788B38ABD961522AF1BDD8E99620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD5C6E0F80AA788B38ABD961522AF1BDD8E99620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/1/323830343a366465383a3a2f33322d313238203d3e20323730353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6de8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:d5:5a:f0:65:2f:cb:b0:24:e3:a3:06:c1:9d:39:b1:0b:a0:
         56:59:55:0a:20:d9:5f:4e:86:6e:5c:b4:2c:b0:29:5c:29:b5:
         79:53:6e:75:8c:1c:41:68:99:bf:ea:11:d2:f8:b6:c7:84:10:
         99:99:6f:e9:3d:66:e4:d8:3a:17:47:3c:38:0a:ec:5c:27:d8:
         dd:2e:8e:f6:38:f6:dd:74:d5:f8:1d:16:4a:3b:6f:d1:4e:d2:
         8d:04:1e:e8:ab:a8:9b:6b:8f:d9:a9:f9:04:51:96:c5:09:a2:
         81:5d:69:d0:74:e0:75:10:21:a2:12:58:43:c3:46:6e:ea:ed:
         65:b0:22:af:d3:1a:6e:1d:fe:58:25:47:ef:51:bf:c1:02:36:
         d7:ac:77:34:0c:11:ce:0c:2f:17:8e:47:47:95:41:17:ce:e7:
         45:9c:c1:40:6f:36:76:44:56:90:8f:1c:b2:d2:30:b6:8c:99:
         f1:2f:d0:f4:e5:5d:86:88:db:0a:2d:45:8d:8e:51:c7:15:20:
         2e:70:87:2b:57:64:c1:8a:90:a4:df:43:ba:4c:69:d6:9d:54:
         cf:d4:14:60:8b:d8:39:ce:7b:cc:07:70:87:b4:40:40:a3:41:
         d5:84:99:33:8c:e9:3f:9f:af:74:b9:f2:b6:a6:9a:2c:b5:f3:
         f9:be:e9:b4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUSf4ZPtjWPQFFhgjBTPAQBJqsQdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ1QzZFMEY4MEFBNzg4QjM4QUJEOTYxNTIyQUYxQkRE
OEU5OTYyMDAeFw0yNDA0MDQwMzQ2MDBaFw0yNTA0MDMwMzUxMDBaMDMxMTAvBgNV
BAMTKDdEMTIxRERFMzA5RjdCQzJENzI4NThDMjFGNzFDOEQ3MTA3OEVGMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+ig2ywVeTswCAg7BRlsmeTIu
AoGjWHS+A+go9DlujvjYmRrFVJIktSI90Y/N7QQp7vjAv/zarSbaVodaQfCAckf6
D45gsoaKfuKBVIX6JIZKheNVfryh6u4qkURuJRYFXDSxVCfHWet8Ts7DKP34RqD0
OlKWRRRJgpsCvT0Z641JaTqLeeST7ERmzi7DVTcdiL3NKD9NRKXj/naROibqS04j
NfOgiyq/Vra9s2FGNw7dUERZ08/uTDAkq+aGITxYHHUvbk4kywoyfuGxg0JSgAKG
5SSbqMz5N3Yr2/X8/Isx8ZDkiFK2scFvMf/oPqi1g53q4T03o5bJs4RtoP81AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUfRId3jCfe8LXKFjCH3HI1xB47xUwHwYDVR0j
BBgwFoAUrVxuD4CqeIs4q9lhUirxvdjpliAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNBZWNKVHlEWGJxMkd0VjNXYkJ1aVJVeDhaTG1QWmszU1RqYmhvYW12
SzgvMS9BRDVDNkUwRjgwQUE3ODhCMzhBQkQ5NjE1MjJBRjFCREQ4RTk5NjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENUM2RTBGODBBQTc4OEIz
OEFCRDk2MTUyMkFGMUJERDhFOTk2MjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTQWVjSlR5RFhicTJHdFYzV2JCdWlSVXg4WkxtUFprM1NUamJob2Ftdks4LzEv
MzIzODMwMzQzYTM2NjQ2NTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBG3oMA0GCSqGSIb3DQEBCwUAA4IBAQDI1Vrw
ZS/LsCTjowbBnTmxC6BWWVUKINlfToZuXLQssClcKbV5U251jBxBaJm/6hHS+LbH
hBCZmW/pPWbk2DoXRzw4CuxcJ9jdLo72OPbddNX4HRZKO2/RTtKNBB7oq6iba4/Z
qfkEUZbFCaKBXWnQdOB1ECGiElhDw0Zu6u1lsCKv0xpuHf5YJUfvUb/BAjbXrHc0
DBHODC8XjkdHlUEXzudFnMFAbzZ2RFaQjxyy0jC2jJnxL9D05V2GiNsKLUWNjlHH
FSAucIcrV2TBipCk30O6TGnWnVTP1BRgi9g5znvMB3CHtEBAo0HVhJkzjOk/n690
ufK2ppostfP5vum0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org