Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a383a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a383a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          S9Gb58kexvkGq1m1x1Wj49skv3k7B7KC9YUJlAJItfw=
Subject key identifier:   D8:8E:D8:E5:AD:9A:27:64:74:66:50:F9:87:A1:58:71:12:8F:5E:C9
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       331629DDDD8ABF288220CDFCCCC88C0ECA59CF81
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a383a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:55 +0000
ROA not before:           Thu 09 Mar 2023 20:12:55 +0000
ROA not after:            Thu 07 Mar 2024 20:17:55 +0000
asID:                     28260
IP address blocks:        2804:28e4:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:16:29:dd:dd:8a:bf:28:82:20:cd:fc:cc:c8:8c:0e:ca:59:cf:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:55 2023 GMT
            Not After : Mar  7 20:17:55 2024 GMT
        Subject: CN=D88ED8E5AD9A2764746650F987A15871128F5EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:ef:23:44:eb:92:44:f1:f2:41:76:84:c8:
                    9a:b7:61:73:e4:e7:5f:59:be:bf:51:b1:3c:03:2f:
                    58:cf:59:50:2b:2f:0a:64:d8:4a:30:6f:b8:ad:29:
                    85:52:b5:27:ff:67:8b:cf:1f:e8:74:93:bd:79:57:
                    23:63:9c:c7:2a:59:50:7f:ff:b8:24:a2:71:e2:85:
                    d6:cc:f1:5c:48:b6:dc:cb:8d:0c:c2:a9:ff:8d:b3:
                    a1:27:7b:60:48:86:9b:e8:bb:22:f9:df:5b:63:c8:
                    e3:9b:0e:81:75:f5:ff:3a:23:dc:ed:5e:71:d6:c7:
                    fb:ed:ad:c4:ab:5e:96:b4:61:fa:3e:fc:2d:e5:e4:
                    7d:db:b2:8e:da:6f:60:d5:5f:18:0b:0e:8a:b0:91:
                    57:e0:f1:28:96:90:6c:1f:00:b2:5b:7f:ca:06:98:
                    65:f3:58:d8:64:70:3b:d0:40:23:40:0d:b2:43:d0:
                    09:2f:6d:8d:94:54:47:90:a8:dd:50:59:fc:7c:ed:
                    70:96:ad:9c:10:74:c9:06:84:85:a9:81:be:35:64:
                    d1:f9:63:e7:46:f9:5c:ba:df:48:bd:37:96:49:bc:
                    2a:f2:c8:67:a3:78:e4:1b:6e:b5:0a:80:65:3f:93:
                    36:64:06:35:94:d6:64:2d:37:81:5e:bb:ef:32:cb:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8E:D8:E5:AD:9A:27:64:74:66:50:F9:87:A1:58:71:12:8F:5E:C9
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a383a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:32:eb:7b:a0:da:98:7b:98:be:b3:fc:e1:30:70:a0:e6:
         c6:8b:cc:6a:dc:10:cc:0e:af:14:db:bb:45:e0:6d:9a:7c:53:
         31:71:b3:c5:da:db:7a:67:0b:4f:b5:2f:3f:a4:2b:53:b0:33:
         4e:80:10:40:8e:38:79:df:8b:23:fe:4d:5a:1d:40:55:86:ef:
         f4:43:85:eb:68:97:be:bf:cb:a3:23:87:db:a5:2f:83:ac:be:
         a0:5e:72:2c:8f:95:10:a2:e7:63:1b:62:82:48:86:b8:01:2a:
         65:2c:c9:88:88:d0:5f:1d:1d:dd:5b:39:74:0f:41:37:a8:2b:
         b9:a9:22:1d:6d:c3:90:60:9f:e6:1b:6e:d0:a3:75:ed:92:fe:
         b6:63:89:14:2c:a4:da:96:51:ad:81:67:50:15:03:25:fa:9f:
         b1:14:75:5f:ba:9c:20:02:5a:d2:41:dc:00:1a:f2:8b:41:4c:
         4e:85:16:7b:f2:ee:b5:4a:05:90:ef:6a:c6:1a:91:95:69:76:
         5e:d1:fe:45:3c:66:8c:85:5e:03:70:31:c7:49:0c:62:bf:54:
         c9:3f:cb:ec:3a:dd:f2:d6:bb:ef:e1:94:5b:99:81:22:e2:8d:
         83:46:35:cb:95:84:c3:7c:cd:6a:09:32:0a:60:16:35:c7:73:
         ce:09:22:ea
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUMxYp3d2KvyiCIM38zMiMDspZz4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNTVaFw0yNDAzMDcyMDE3NTVaMDMxMTAvBgNV
BAMTKEQ4OEVEOEU1QUQ5QTI3NjQ3NDY2NTBGOTg3QTE1ODcxMTI4RjVFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChuu8jROuSRPHyQXaEyJq3YXPk
519Zvr9RsTwDL1jPWVArLwpk2Eowb7itKYVStSf/Z4vPH+h0k715VyNjnMcqWVB/
/7gkonHihdbM8VxIttzLjQzCqf+Ns6Ene2BIhpvouyL531tjyOObDoF19f86I9zt
XnHWx/vtrcSrXpa0Yfo+/C3l5H3bso7ab2DVXxgLDoqwkVfg8SiWkGwfALJbf8oG
mGXzWNhkcDvQQCNADbJD0AkvbY2UVEeQqN1QWfx87XCWrZwQdMkGhIWpgb41ZNH5
Y+dG+Vy630i9N5ZJvCryyGejeOQbbrUKgGU/kzZkBjWU1mQtN4Feu+8yy79NAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQU2I7Y5a2aJ2R0ZlD5h6FYcRKPXskwHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzIzODMwMzQzYTMyMzg2NTM0M2EzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBCjkAAgwDQYJKoZIhvcNAQELBQADggEBAB1u
Mut7oNqYe5i+s/zhMHCg5saLzGrcEMwOrxTbu0XgbZp8UzFxs8Xa23pnC0+1Lz+k
K1OwM06AEECOOHnfiyP+TVodQFWG7/RDhetol76/y6Mjh9ulL4OsvqBeciyPlRCi
52MbYoJIhrgBKmUsyYiI0F8dHd1bOXQPQTeoK7mpIh1tw5Bgn+YbbtCjde2S/rZj
iRQspNqWUa2BZ1AVAyX6n7EUdV+6nCACWtJB3AAa8otBTE6FFnvy7rVKBZDvasYa
kZVpdl7R/kU8ZoyFXgNwMcdJDGK/VMk/y+w63fLWu+/hlFuZgSLijYNGNcuVhMN8
zWoJMgpgFjXHc84JIuo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org