Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653030323a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a653030323a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          +PL5ooMDW3Kjf+p+d74tI218BrT8BjaYlGT+rZ5xwGg=
Subject key identifier:   BF:ED:3B:0D:51:8D:0D:48:9E:2D:A6:ED:20:7C:97:CA:90:94:B1:7C
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       4DA74ABF2848404CAA8E34E78BC5D44EEEADF9
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653030323a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:53 +0000
ROA not before:           Thu 09 Mar 2023 20:12:53 +0000
ROA not after:            Thu 07 Mar 2024 20:17:53 +0000
asID:                     28260
IP address blocks:        2804:28e4:e002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a7:4a:bf:28:48:40:4c:aa:8e:34:e7:8b:c5:d4:4e:ee:ad:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:53 2023 GMT
            Not After : Mar  7 20:17:53 2024 GMT
        Subject: CN=BFED3B0D518D0D489E2DA6ED207C97CA9094B17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:2e:57:a9:4d:a3:b4:a7:e7:03:dc:16:a7:
                    af:e5:a3:6f:e3:06:e0:e4:af:08:5b:0e:5f:4b:fe:
                    a9:2b:fc:83:0f:bd:01:d6:1c:9c:9d:4e:36:57:17:
                    46:01:81:66:ce:9c:14:72:6b:45:2d:25:1b:b4:3d:
                    05:5d:9e:01:5e:7b:68:67:d5:c3:67:e0:4f:64:8a:
                    a9:b6:2f:c4:01:69:4f:72:85:3a:d8:4a:58:38:cc:
                    64:21:17:55:21:28:6b:44:75:7e:dc:6b:7b:88:a9:
                    d1:43:dd:1f:d3:5c:af:7b:a1:9a:61:3b:bf:57:f3:
                    6a:0d:0a:7e:f6:10:fa:2d:01:36:b5:5d:fe:4f:0a:
                    b7:35:f9:04:9f:7c:a9:93:45:1c:a3:63:63:72:ec:
                    3e:99:4b:6d:cc:3e:e6:0e:f8:6b:c7:66:61:01:ab:
                    f6:db:6c:fa:7f:da:17:c5:d8:e7:09:3b:fc:42:9d:
                    3e:6d:64:c2:30:7a:a0:39:48:66:a5:65:a2:eb:2e:
                    2b:a2:35:36:bb:46:c5:a0:98:ed:d9:e8:76:f7:8b:
                    99:3e:d5:d0:14:1f:25:d6:09:87:fb:92:f6:96:2c:
                    95:9a:05:4a:81:fa:3c:be:5d:41:92:c9:a9:dc:5b:
                    72:7c:27:76:35:17:36:fc:20:ae:03:62:e4:ca:8f:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:3B:0D:51:8D:0D:48:9E:2D:A6:ED:20:7C:97:CA:90:94:B1:7C
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653030323a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e002::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:04:c9:24:6b:3c:81:c4:1d:eb:0c:91:62:4d:d4:f7:21:
         7e:94:ec:36:d1:59:5d:5f:ce:06:bc:30:a6:47:5d:89:e4:75:
         ef:3f:ee:b4:7e:a1:0a:57:b1:6d:87:64:c9:25:3f:33:e7:43:
         c9:44:2f:5e:bf:0c:1a:c5:a6:5b:07:58:79:4b:08:e7:19:a7:
         af:32:37:e9:00:9a:77:a5:aa:8a:e7:35:95:76:7b:6c:23:97:
         96:9d:73:31:20:55:95:66:77:7d:e3:51:b5:b6:d6:85:db:f1:
         ba:1b:70:fd:ca:dc:4f:95:9f:ae:d1:89:d1:b0:2f:09:a8:48:
         16:94:2b:b7:cf:45:c1:06:3a:cf:78:48:48:c0:10:1f:18:d9:
         c1:5a:c6:b4:13:68:83:af:2c:e3:39:fc:ce:96:d7:3e:6e:ce:
         c0:68:a1:44:88:28:d9:3b:9e:9b:d6:e7:97:30:0d:87:a0:a4:
         7e:7d:a4:c6:90:bc:86:67:58:19:66:f1:fe:ab:7e:2f:0b:55:
         a2:d8:9b:76:c0:2d:1f:7e:42:43:98:0d:b9:b3:6f:73:4f:cd:
         86:af:75:ab:74:3c:ca:d4:bc:2a:48:91:f4:8e:ac:4c:38:68:
         f9:5c:a8:66:00:18:a4:5d:f1:54:6f:73:c4:a4:bd:74:22:44:
         9c:ba:17:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgITTadKvyhIQEyqjjTni8XUTu6t+TANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhBNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2
RTZBRUY1MB4XDTIzMDMwOTIwMTI1M1oXDTI0MDMwNzIwMTc1M1owMzExMC8GA1UE
AxMoQkZFRDNCMEQ1MThEMEQ0ODlFMkRBNkVEMjA3Qzk3Q0E5MDk0QjE3QzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMYJLlepTaO0p+cD3Banr+Wjb+MG
4OSvCFsOX0v+qSv8gw+9AdYcnJ1ONlcXRgGBZs6cFHJrRS0lG7Q9BV2eAV57aGfV
w2fgT2SKqbYvxAFpT3KFOthKWDjMZCEXVSEoa0R1ftxre4ip0UPdH9Ncr3uhmmE7
v1fzag0KfvYQ+i0BNrVd/k8KtzX5BJ98qZNFHKNjY3LsPplLbcw+5g74a8dmYQGr
9tts+n/aF8XY5wk7/EKdPm1kwjB6oDlIZqVlousuK6I1NrtGxaCY7dnodveLmT7V
0BQfJdYJh/uS9pYslZoFSoH6PL5dQZLJqdxbcnwndjUXNvwgrgNi5MqP1AcCAwEA
AaOCAlowggJWMB0GA1UdDgQWBBS/7TsNUY0NSJ4tpu0gfJfKkJSxfDAfBgNVHSME
GDAWgBSk2Ovgdlyt+CJLRFZDkubmxuau9TAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9EODFhaVhwREF2NVdCbWdFOG9FcGZvcmRqR1A2Mm90bjJmSHJoYUw0Y2di
eS8wL0E0RDhFQkUwNzY1Q0FERjgyMjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvQTREOEVCRTA3NjVDQURGODIy
NEI0NDU2NDM5MkU2RTZDNkU2QUVGNS5jZXIwgbQGCCsGAQUFBwELBIGnMIGkMIGh
BggrBgEFBQcwC4aBlHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNnYnkvMC8z
MjM4MzAzNDNhMzIzODY1MzQzYTY1MzAzMDMyM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzIzODMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEKOTgAjANBgkqhkiG9w0BAQsFAAOC
AQEAM5sEySRrPIHEHesMkWJN1PchfpTsNtFZXV/OBrwwpkddieR17z/utH6hClex
bYdkySU/M+dDyUQvXr8MGsWmWwdYeUsI5xmnrzI36QCad6Wqiuc1lXZ7bCOXlp1z
MSBVlWZ3feNRtbbWhdvxuhtw/crcT5WfrtGJ0bAvCahIFpQrt89FwQY6z3hISMAQ
HxjZwVrGtBNog68s4zn8zpbXPm7OwGihRIgo2Tuem9bnlzANh6Ckfn2kxpC8hmdY
GWbx/qt+LwtVotibdsAtH35CQ5gNubNvc0/Nhq91q3Q8ytS8KkiR9I6sTDho+Vyo
ZgAYpF3xVG9zxKS9dCJEnLoXbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org