Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa
File:                     323830343a353239383a3a2f33322d3334203d3e20323638353238.roa (raw, json)
Hash identifier:          uuCzIkYQS8ID4A9mlIkZlQI9OFGHm15BrPs7E+GEJtM=
Subject key identifier:   2C:44:71:79:A4:93:16:7A:7E:D4:62:2A:D0:30:13:97:60:8F:DD:D1
Certificate issuer:       /CN=B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD
Certificate serial:       25457F2AF149BE6B1613B2FCFBD26756B9837332
Authority key identifier: B3:DC:EA:24:6C:36:CB:EF:4D:EA:95:90:9D:08:AC:33:1E:A4:BD:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa
Signing time:             Thu 14 Mar 2024 14:15:15 +0000
ROA not before:           Thu 14 Mar 2024 14:10:15 +0000
ROA not after:            Thu 13 Mar 2025 14:15:15 +0000
asID:                     268528
IP address blocks:        2804:5298::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:45:7f:2a:f1:49:be:6b:16:13:b2:fc:fb:d2:67:56:b9:83:73:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD
        Validity
            Not Before: Mar 14 14:10:15 2024 GMT
            Not After : Mar 13 14:15:15 2025 GMT
        Subject: CN=2C447179A493167A7ED4622AD0301397608FDDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:1b:21:24:7f:dc:a8:3a:8d:34:a5:12:85:
                    ec:2b:24:4c:41:44:9b:18:91:e2:06:28:6b:0f:e1:
                    e2:1e:de:58:b7:2a:28:1b:aa:17:2d:52:d6:1f:a8:
                    67:28:3c:e5:bf:af:16:a3:07:ab:95:fe:ae:38:c9:
                    51:46:17:18:26:05:77:13:17:0a:03:cc:cb:94:32:
                    23:5c:57:a6:f4:c7:6e:d2:a3:7d:79:61:5b:fb:11:
                    41:82:88:8a:2e:84:d9:37:81:f2:42:72:7b:85:fa:
                    c0:ec:e2:a1:5f:0a:e4:5a:b4:91:11:f5:ce:08:10:
                    b2:51:f3:e6:a9:28:07:40:28:60:36:f3:c8:7a:f9:
                    53:b7:c9:1d:08:48:19:f1:e3:b6:36:ef:47:ae:08:
                    f6:a6:f9:e0:01:80:1a:12:a2:4e:b0:b5:e6:36:25:
                    74:4d:0f:98:a1:2a:1f:d9:75:fd:0f:63:0c:d9:d1:
                    64:cf:cc:c0:d9:c4:bb:3a:20:25:fa:ec:55:15:a5:
                    3c:a5:05:b8:4b:bb:28:d1:c0:3d:55:da:d1:e6:71:
                    bf:40:51:ca:86:8f:52:b4:42:12:18:3f:e1:1e:66:
                    10:c2:26:43:96:26:fe:94:36:49:30:e2:bc:95:14:
                    a2:13:7c:11:9e:a3:5a:1e:f1:68:16:c7:15:35:e8:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:44:71:79:A4:93:16:7A:7E:D4:62:2A:D0:30:13:97:60:8F:DD:D1
            X509v3 Authority Key Identifier:
                keyid:B3:DC:EA:24:6C:36:CB:EF:4D:EA:95:90:9D:08:AC:33:1E:A4:BD:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3334203d3e20323638353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5298::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:57:55:39:bc:9f:f7:e0:8a:9e:3b:7c:e0:f0:77:87:d1:c0:
         3b:4e:b8:ba:19:83:04:e6:39:c4:3a:56:bb:9e:29:cf:07:ac:
         16:36:46:58:55:4f:a1:ee:f2:d8:ea:d7:5d:5a:50:69:92:dd:
         e7:a2:0d:ef:03:98:42:a1:36:c3:77:2c:09:3a:86:0d:6a:43:
         ec:e2:06:1e:67:a0:23:fa:bf:4f:44:d2:a3:4e:81:ed:94:b6:
         e0:a9:83:47:92:c3:f5:c3:26:0a:a7:03:08:83:bd:dc:20:e9:
         e4:49:78:1a:f0:8b:fd:29:9d:53:97:6e:b2:8c:13:d5:95:3b:
         8c:20:38:50:c6:56:94:06:39:80:ae:c3:34:cb:d3:69:49:00:
         f8:c3:57:60:9e:15:b2:d5:42:70:ae:1a:b4:1c:3e:b7:7f:29:
         96:eb:85:44:ff:b2:8a:c6:fb:dd:73:fb:8d:66:5a:6a:ef:67:
         eb:ad:6f:6d:23:d4:79:75:18:24:25:91:04:03:c6:53:93:f3:
         35:0e:d5:5f:af:a4:59:a0:c2:ff:7d:ec:b1:91:ef:82:5d:09:
         4a:cc:51:22:33:cc:9f:17:b9:7c:0a:bc:fd:d2:e3:57:f7:e7:
         7e:91:11:35:d6:fe:95:08:62:f9:ec:af:dc:fa:5f:4c:41:34:
         5d:e8:cb:c5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJUV/KvFJvmsWE7L8+9JnVrmDczIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNEQ0VBMjQ2QzM2Q0JFRjRERUE5NTkwOUQwOEFDMzMx
RUE0QkRBRDAeFw0yNDAzMTQxNDEwMTVaFw0yNTAzMTMxNDE1MTVaMDMxMTAvBgNV
BAMTKDJDNDQ3MTc5QTQ5MzE2N0E3RUQ0NjIyQUQwMzAxMzk3NjA4RkRERDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhxshJH/cqDqNNKUShewrJExB
RJsYkeIGKGsP4eIe3li3KigbqhctUtYfqGcoPOW/rxajB6uV/q44yVFGFxgmBXcT
FwoDzMuUMiNcV6b0x27So315YVv7EUGCiIouhNk3gfJCcnuF+sDs4qFfCuRatJER
9c4IELJR8+apKAdAKGA288h6+VO3yR0ISBnx47Y270euCPam+eABgBoSok6wteY2
JXRND5ihKh/Zdf0PYwzZ0WTPzMDZxLs6ICX67FUVpTylBbhLuyjRwD1V2tHmcb9A
UcqGj1K0QhIYP+EeZhDCJkOWJv6UNkkw4ryVFKITfBGeo1oe8WgWxxU16MqHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULERxeaSTFnp+1GIq0DATl2CP3dEwHwYDVR0j
BBgwFoAUs9zqJGw2y+9N6pWQnQisMx6kva0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndlelBxQ3RwRlpFN1ZtcVJTeVBRRlBzTHc1Y1NKMm52UGlGMjlSQ0w0
OXYvMC9CM0RDRUEyNDZDMzZDQkVGNERFQTk1OTA5RDA4QUMzMzFFQTRCREFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IzRENFQTI0NkMzNkNCRUY0
REVBOTU5MDlEMDhBQzMzMUVBNEJEQUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3ZXpQcUN0cEZaRTdWbXFSU3lQUUZQc0x3NWNTSjJudlBpRjI5UkNMNDl2LzAv
MzIzODMwMzQzYTM1MzIzOTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARSmDANBgkqhkiG9w0BAQsFAAOCAQEAOFdVObyf
9+CKnjt84PB3h9HAO064uhmDBOY5xDpWu54pzwesFjZGWFVPoe7y2OrXXVpQaZLd
56IN7wOYQqE2w3csCTqGDWpD7OIGHmegI/q/T0TSo06B7ZS24KmDR5LD9cMmCqcD
CIO93CDp5El4GvCL/SmdU5dusowT1ZU7jCA4UMZWlAY5gK7DNMvTaUkA+MNXYJ4V
stVCcK4atBw+t38pluuFRP+yisb73XP7jWZaau9n661vbSPUeXUYJCWRBAPGU5Pz
NQ7VX6+kWaDC/33ssZHvgl0JSsxRIjPMnxe5fAq8/dLjV/fnfpERNdb+lQhi+eyv
3PpfTEE0XejLxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org