Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa
File:                     323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (raw, json)
Hash identifier:          8tDqTf019LGC1c1Z1YdOqkt9SveHOdTxaMKrZ7IHsI8=
Subject key identifier:   B9:05:54:C3:24:79:60:8B:EF:9F:8F:A3:04:74:5E:C5:A9:31:F2:6A
Certificate issuer:       /CN=43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7
Certificate serial:       3C5BE93F807414F763609B48C7CD4ABDE2F03B09
Authority key identifier: 43:C9:80:39:3B:B3:D0:2D:AB:AB:20:B5:8D:E3:6C:C2:CB:4D:7D:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa
Signing time:             Mon 01 Jan 2024 14:39:54 +0000
ROA not before:           Mon 01 Jan 2024 14:34:54 +0000
ROA not after:            Mon 30 Dec 2024 14:39:54 +0000
asID:                     266400
IP address blocks:        2804:3744::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5b:e9:3f:80:74:14:f7:63:60:9b:48:c7:cd:4a:bd:e2:f0:3b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7
        Validity
            Not Before: Jan  1 14:34:54 2024 GMT
            Not After : Dec 30 14:39:54 2024 GMT
        Subject: CN=B90554C32479608BEF9F8FA304745EC5A931F26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:dd:1d:49:40:e6:eb:cd:41:b6:01:6f:02:
                    12:b8:0e:08:31:08:1a:dc:a2:05:f8:2e:17:0c:c7:
                    a2:e7:3e:17:82:59:60:55:a6:41:d2:5e:28:6c:a0:
                    d2:bc:ab:24:af:96:2c:cd:e9:59:f6:c1:0e:6d:03:
                    3d:3f:c7:91:1c:31:f2:70:a1:97:6e:31:d4:eb:09:
                    a5:ef:70:c9:21:b2:a0:5e:b6:44:0d:e0:b8:cd:bf:
                    3a:98:8d:ea:70:b5:a4:64:a1:d7:21:0c:26:6c:ff:
                    4d:87:ff:50:a3:d9:92:8c:f9:72:5b:9b:ae:9e:00:
                    39:d0:80:bf:e6:8e:70:1a:c0:08:62:ab:3f:50:de:
                    a1:5b:e9:9c:18:d8:1e:a3:1a:36:3f:e5:a2:17:f6:
                    e6:8d:2a:9b:35:76:0b:92:1c:99:66:85:e9:28:f3:
                    b3:1e:a9:7b:d7:af:d9:4a:c1:c1:2a:96:ff:20:cd:
                    20:f4:a9:62:a8:69:cd:97:ae:56:93:ec:c6:5c:0a:
                    a8:bb:ba:a2:ea:a4:0e:c1:0f:b4:fe:3a:3f:eb:52:
                    5c:c6:e3:17:b9:7d:74:50:6c:3d:08:2f:2d:83:1e:
                    f2:1b:2b:a0:cf:10:22:c7:ba:30:d1:b5:e2:d1:82:
                    4e:35:21:79:71:77:81:33:56:72:8d:c0:04:02:30:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:05:54:C3:24:79:60:8B:EF:9F:8F:A3:04:74:5E:C5:A9:31:F2:6A
            X509v3 Authority Key Identifier:
                keyid:43:C9:80:39:3B:B3:D0:2D:AB:AB:20:B5:8D:E3:6C:C2:CB:4D:7D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C980393BB3D02DABAB20B58DE36CC2CB4D7DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/0/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3744::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:30:11:95:c0:bc:e5:9c:ab:1c:b1:68:2e:85:d2:d4:2b:
         ac:c7:8f:51:49:5d:db:dc:32:e6:34:73:b0:99:b1:04:e8:fd:
         33:c7:53:d6:a2:f7:0f:fe:24:05:93:b0:15:ad:99:f7:29:8c:
         28:ea:f3:78:1d:3a:52:cb:e8:e2:82:0c:af:cc:e3:62:15:86:
         c1:fa:f4:46:4c:dc:9c:bb:e1:12:01:0d:3d:41:f8:ad:89:75:
         50:e7:6d:e1:18:25:00:af:ab:3b:a1:f1:39:21:c5:22:15:08:
         fe:47:61:e7:b5:fc:d1:0f:c8:6d:63:0b:bc:b8:f9:aa:ab:dc:
         f4:d4:35:38:f4:a7:f6:16:17:f1:fd:d8:02:0b:27:cd:8d:77:
         9e:1a:d8:b1:6e:81:fb:ec:77:ec:44:e2:9f:10:f4:d2:96:28:
         a5:c4:af:3b:36:bf:9d:a0:90:5f:a4:9e:46:34:98:84:9f:4a:
         c7:33:dd:4a:d8:e5:a2:6f:bd:e8:e1:c0:aa:b5:bd:db:c0:7b:
         e0:ba:51:ee:a5:5a:4d:2b:62:58:3f:85:10:d2:77:bd:d9:e3:
         5b:79:4b:42:b9:12:61:8a:21:98:10:90:02:83:43:b4:a0:b1:
         6d:c6:7a:de:77:63:c9:28:50:b2:75:62:37:5c:8b:99:5f:46:
         cf:93:79:16
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPFvpP4B0FPdjYJtIx81KveLwOwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNDOTgwMzkzQkIzRDAyREFCQUIyMEI1OERFMzZDQzJD
QjREN0RCNzAeFw0yNDAxMDExNDM0NTRaFw0yNDEyMzAxNDM5NTRaMDMxMTAvBgNV
BAMTKEI5MDU1NEMzMjQ3OTYwOEJFRjlGOEZBMzA0NzQ1RUM1QTkzMUYyNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0P90dSUDm681BtgFvAhK4Dggx
CBrcogX4LhcMx6LnPheCWWBVpkHSXihsoNK8qySvlizN6Vn2wQ5tAz0/x5EcMfJw
oZduMdTrCaXvcMkhsqBetkQN4LjNvzqYjepwtaRkodchDCZs/02H/1Cj2ZKM+XJb
m66eADnQgL/mjnAawAhiqz9Q3qFb6ZwY2B6jGjY/5aIX9uaNKps1dguSHJlmheko
87MeqXvXr9lKwcEqlv8gzSD0qWKoac2XrlaT7MZcCqi7uqLqpA7BD7T+Oj/rUlzG
4xe5fXRQbD0ILy2DHvIbK6DPECLHujDRteLRgk41IXlxd4EzVnKNwAQCMBwDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUuQVUwyR5YIvvn4+jBHRexakx8mowHwYDVR0j
BBgwFoAUQ8mAOTuz0C2rqyC1jeNswstNfbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv
aXgvMC80M0M5ODAzOTNCQjNEMDJEQUJBQjIwQjU4REUzNkNDMkNCNEQ3REI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQzk4MDM5M0JCM0QwMkRB
QkFCMjBCNThERTM2Q0MyQ0I0RDdEQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCdkJjSzgzamZLbXRlVVpoSktxZzdQdGtkeDdYdE5xRmdEajRiNHJnb2l4LzAv
MzIzODMwMzQzYTMzMzczNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDdEMA0GCSqGSIb3DQEBCwUAA4IBAQBC7zAR
lcC85ZyrHLFoLoXS1Cusx49RSV3b3DLmNHOwmbEE6P0zx1PWovcP/iQFk7AVrZn3
KYwo6vN4HTpSy+jiggyvzONiFYbB+vRGTNycu+ESAQ09QfitiXVQ523hGCUAr6s7
ofE5IcUiFQj+R2HntfzRD8htYwu8uPmqq9z01DU49Kf2Fhfx/dgCCyfNjXeeGtix
boH77HfsROKfEPTSliilxK87Nr+doJBfpJ5GNJiEn0rHM91K2OWib73o4cCqtb3b
wHvgulHupVpNK2JYP4UQ0ne92eNbeUtCuRJhiiGYEJACg0O0oLFtxnred2PJKFCy
dWI3XIuZX0bPk3kW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org