Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa
File:                     323830343a346630303a3a2f33322d3438203d3e20323638323937.roa (raw, json)
Hash identifier:          I+qf4wMJ7bNPULD3C6XppvGhwLt0YioLpelH5Z6ZF8E=
Subject key identifier:   2B:6E:F5:4D:CC:10:3E:87:7A:E4:7B:FD:EC:A2:D9:DD:AE:41:95:C9
Certificate issuer:       /CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
Certificate serial:       72BDB4CCECE8F696E693FAC057C849C5EB9D0BB7
Authority key identifier: 90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa
Signing time:             Thu 07 Dec 2023 13:26:26 +0000
ROA not before:           Thu 07 Dec 2023 13:21:26 +0000
ROA not after:            Thu 05 Dec 2024 13:26:26 +0000
asID:                     268297
IP address blocks:        2804:4f00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bd:b4:cc:ec:e8:f6:96:e6:93:fa:c0:57:c8:49:c5:eb:9d:0b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
        Validity
            Not Before: Dec  7 13:21:26 2023 GMT
            Not After : Dec  5 13:26:26 2024 GMT
        Subject: CN=2B6EF54DCC103E877AE47BFDECA2D9DDAE4195C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:13:d7:91:eb:ef:e7:2b:ff:80:45:cc:b4:
                    c2:2f:83:3e:47:66:36:92:ce:6d:34:72:ff:22:bf:
                    4a:9e:75:d9:1e:2d:3c:b7:89:12:d3:ae:23:f9:cb:
                    15:50:68:76:c2:8d:01:7c:99:3a:cf:d2:1a:10:3a:
                    b3:ac:4e:be:c7:91:0f:b1:7c:4c:34:48:4a:78:58:
                    a0:7b:b1:60:6f:5f:ee:d8:0a:81:dd:d2:53:6e:81:
                    da:d3:35:0d:72:5e:20:51:46:93:02:f8:84:0d:38:
                    f8:1e:6e:b7:7a:d7:89:51:2d:62:02:0d:62:64:e6:
                    e8:c3:3f:9f:5d:7e:3f:cf:0e:85:91:6e:59:24:b0:
                    98:c8:d5:6e:ef:79:99:1f:93:80:e7:51:1b:ac:93:
                    57:db:64:3d:37:b1:7f:10:6f:cf:1d:29:bf:e6:2b:
                    d9:fa:fb:d0:a4:bf:77:47:d1:cc:b2:49:48:ee:62:
                    75:e0:30:2f:cd:01:03:d7:48:48:35:65:e9:6f:ff:
                    1c:ec:fb:83:34:b3:31:34:aa:17:12:f6:f4:50:cd:
                    60:8d:78:ef:15:a5:bf:70:78:18:83:90:f9:21:fe:
                    88:06:e9:04:00:60:a2:e6:27:b5:b1:15:76:5f:58:
                    f6:0e:a8:f3:e7:ad:a0:27:14:2b:90:41:aa:46:84:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6E:F5:4D:CC:10:3E:87:7A:E4:7B:FD:EC:A2:D9:DD:AE:41:95:C9
            X509v3 Authority Key Identifier:
                keyid:90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/323830343a346630303a3a2f33322d3438203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:5d:16:3f:c3:b7:43:85:ce:db:b3:60:1d:3a:a4:fb:9d:
         e8:a0:bc:02:1d:10:01:50:04:87:b7:64:f9:4b:c2:26:5a:de:
         4a:25:d4:90:ac:97:f2:7c:93:44:bb:5f:67:12:c2:17:aa:c5:
         c9:9d:5b:92:f1:d9:35:63:0f:fb:47:b0:8e:e0:dd:4c:36:f2:
         cc:bc:4b:05:01:e0:cf:4f:4a:23:46:6e:a8:0a:9f:41:74:ef:
         db:90:18:48:59:dd:23:45:ee:77:b8:cb:bb:ec:16:2e:2e:92:
         71:79:24:34:b4:b8:bb:25:e8:e9:7a:fd:6c:94:3a:d2:75:fe:
         52:30:22:f8:71:c6:b8:29:1b:b7:30:97:7d:ba:5b:5c:2b:9d:
         aa:ce:d4:f9:d8:41:d3:a5:fc:39:17:2e:3d:03:fe:57:1b:a6:
         d2:5a:34:c5:de:8d:d7:6b:50:a3:c2:56:ce:01:27:b3:12:70:
         bb:52:ad:17:b4:69:5f:9f:3f:cf:a0:8b:df:a0:69:3e:65:3a:
         a9:c3:6d:80:f8:27:c2:79:bf:26:c3:7e:a8:70:66:f3:5a:0f:
         56:d1:3b:d5:65:a4:9c:9e:66:29:55:fd:a6:35:d0:b3:c4:92:
         4b:65:4f:ad:36:d6:df:00:d6:a8:d2:61:f1:1e:3a:c6:9d:bf:
         ad:cc:84:d9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcr20zOzo9pbmk/rAV8hJxeudC7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA0ODdDNTY5MTM5MEIxRDdGNUUxMjlFQkZFQTM3N0FB
NDFEOTRDMDAeFw0yMzEyMDcxMzIxMjZaFw0yNDEyMDUxMzI2MjZaMDMxMTAvBgNV
BAMTKDJCNkVGNTREQ0MxMDNFODc3QUU0N0JGREVDQTJEOUREQUU0MTk1QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRehPXkevv5yv/gEXMtMIvgz5H
ZjaSzm00cv8iv0qeddkeLTy3iRLTriP5yxVQaHbCjQF8mTrP0hoQOrOsTr7HkQ+x
fEw0SEp4WKB7sWBvX+7YCoHd0lNugdrTNQ1yXiBRRpMC+IQNOPgebrd614lRLWIC
DWJk5ujDP59dfj/PDoWRblkksJjI1W7veZkfk4DnURusk1fbZD03sX8Qb88dKb/m
K9n6+9Ckv3dH0cyySUjuYnXgMC/NAQPXSEg1Zelv/xzs+4M0szE0qhcS9vRQzWCN
eO8Vpb9weBiDkPkh/ogG6QQAYKLmJ7WxFXZfWPYOqPPnraAnFCuQQapGhJWhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUK271TcwQPod65Hv97KLZ3a5BlckwHwYDVR0j
BBgwFoAUkEh8VpE5Cx1/XhKev+o3eqQdlMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN0dENUMW9YWDRrWUNvdGFzenh1a3VydUwxTjNZTk1DNFhzcjhvRHY2
dFYvMC85MDQ4N0M1NjkxMzkwQjFEN0Y1RTEyOUVCRkVBMzc3QUE0MUQ5NEMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkwNDg3QzU2OTEzOTBCMUQ3
RjVFMTI5RUJGRUEzNzdBQTQxRDk0QzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzdHRDVDFvWFg0a1lDb3Rhc3p4dWt1cnVMMU4zWU5NQzRYc3I4b0R2NnRWLzAv
MzIzODMwMzQzYTM0NjYzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzIzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARPADANBgkqhkiG9w0BAQsFAAOCAQEAaj5dFj/D
t0OFztuzYB06pPud6KC8Ah0QAVAEh7dk+UvCJlreSiXUkKyX8nyTRLtfZxLCF6rF
yZ1bkvHZNWMP+0ewjuDdTDbyzLxLBQHgz09KI0ZuqAqfQXTv25AYSFndI0Xud7jL
u+wWLi6ScXkkNLS4uyXo6Xr9bJQ60nX+UjAi+HHGuCkbtzCXfbpbXCudqs7U+dhB
06X8ORcuPQP+Vxum0lo0xd6N12tQo8JWzgEnsxJwu1KtF7RpX58/z6CL36BpPmU6
qcNtgPgnwnm/JsN+qHBm81oPVtE71WWknJ5mKVX9pjXQs8SSS2VPrTbW3wDWqNJh
8R46xp2/rcyE2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org