Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653831363a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a653831363a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          0DKiBrZGu+eP8+PTwQcqnNkVuZcdXpYw4E+PJMWy7z0=
Subject key identifier:   57:30:9C:46:C8:A6:28:40:73:EC:16:90:81:CF:A8:4C:55:3A:E3:7D
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       45294D8C75438D558047A56996356E9314494C57
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653831363a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:57 +0000
ROA not before:           Thu 09 Mar 2023 20:12:57 +0000
ROA not after:            Thu 07 Mar 2024 20:17:57 +0000
asID:                     28260
IP address blocks:        2804:28e4:e816::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:29:4d:8c:75:43:8d:55:80:47:a5:69:96:35:6e:93:14:49:4c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:57 2023 GMT
            Not After : Mar  7 20:17:57 2024 GMT
        Subject: CN=57309C46C8A6284073EC169081CFA84C553AE37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:c4:35:57:ca:47:be:6a:9a:46:9c:2c:15:
                    03:e4:f5:29:e4:c8:a2:da:8a:da:1f:dc:ad:cd:ce:
                    8f:90:43:c9:93:a1:ea:11:af:e6:69:e8:2b:af:f2:
                    f5:56:67:45:9d:dd:75:ba:e3:a5:bb:45:6d:ed:e0:
                    3b:05:37:69:15:07:9d:3f:e0:62:59:03:86:b6:47:
                    8f:bd:a4:3c:fd:4c:c2:e7:a4:84:a4:4b:27:26:07:
                    aa:62:3f:ad:ef:de:05:b7:b7:c7:20:9d:ff:60:cc:
                    8d:8b:3c:ca:0a:ae:23:e2:3b:9f:0a:ba:6e:dc:99:
                    e3:d3:e1:5a:d6:c3:2a:b7:4e:0e:2a:08:b5:a3:91:
                    ab:84:a2:3b:52:19:38:a7:98:53:05:8a:f5:a4:7a:
                    e8:72:d4:11:22:39:03:5b:ec:ec:96:2a:83:14:5a:
                    18:0a:aa:11:ad:a7:11:6d:14:c4:59:d8:4c:ad:db:
                    c0:68:25:41:cd:3f:49:19:4c:98:45:d4:f4:06:be:
                    32:7f:c8:55:d9:b1:de:6b:bd:8f:80:ff:ff:94:f2:
                    2e:b2:c1:02:55:31:97:55:60:1e:58:11:52:d2:d3:
                    d8:39:54:18:da:18:de:5a:b9:b1:11:57:8b:57:02:
                    8d:73:67:75:0b:b4:da:55:0a:78:b1:b7:a9:e8:a7:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:30:9C:46:C8:A6:28:40:73:EC:16:90:81:CF:A8:4C:55:3A:E3:7D
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653831363a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e816::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:4b:5a:cd:98:71:24:14:9c:4f:e6:36:b1:8b:12:91:38:
         0b:5e:19:fc:e5:49:d7:50:db:cb:5a:b2:f6:e6:3c:26:30:fe:
         e3:28:3f:96:f5:10:d4:a9:47:39:27:21:2f:d5:99:5d:7b:92:
         3f:6f:92:85:0f:76:a3:0b:c1:aa:45:0e:99:a5:4b:f1:f7:87:
         0b:6c:49:67:70:b6:81:51:d7:8f:9c:71:6c:54:b8:f8:4e:9b:
         0a:1d:16:f4:91:9f:85:c1:79:fe:53:09:0a:70:3b:b9:3f:17:
         05:31:df:d5:76:e3:70:cf:85:d6:2e:92:4a:67:c8:11:8c:24:
         43:79:22:6f:66:1d:0d:7a:f5:6b:7c:7e:5e:e1:fd:0f:38:1f:
         35:0c:6f:b7:9f:ec:24:54:ba:b5:ae:09:40:16:69:d5:e1:30:
         db:81:7a:5a:cb:f5:5a:4a:ff:04:2e:9b:de:f7:05:7a:b8:ac:
         44:99:f8:91:2f:ff:7c:8c:dc:42:04:ed:27:98:a6:02:79:c9:
         89:65:21:b7:66:33:e1:98:12:f2:2f:fa:1c:5e:79:d6:6c:1e:
         c7:8c:cf:e0:9b:8b:df:59:bd:ae:e5:74:2e:e6:fa:14:7c:bf:
         f7:53:4e:68:0e:c5:e8:50:50:e2:40:99:1d:4c:18:8f:fe:d5:
         53:ca:80:73
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIURSlNjHVDjVWAR6VpljVukxRJTFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNTdaFw0yNDAzMDcyMDE3NTdaMDMxMTAvBgNV
BAMTKDU3MzA5QzQ2QzhBNjI4NDA3M0VDMTY5MDgxQ0ZBODRDNTUzQUUzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRN8Q1V8pHvmqaRpwsFQPk9Snk
yKLaitof3K3Nzo+QQ8mToeoRr+Zp6Cuv8vVWZ0Wd3XW646W7RW3t4DsFN2kVB50/
4GJZA4a2R4+9pDz9TMLnpISkSycmB6piP63v3gW3t8cgnf9gzI2LPMoKriPiO58K
um7cmePT4VrWwyq3Tg4qCLWjkauEojtSGTinmFMFivWkeuhy1BEiOQNb7OyWKoMU
WhgKqhGtpxFtFMRZ2Eyt28BoJUHNP0kZTJhF1PQGvjJ/yFXZsd5rvY+A//+U8i6y
wQJVMZdVYB5YEVLS09g5VBjaGN5aubERV4tXAo1zZ3ULtNpVCnixt6nop+zRAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUVzCcRsimKEBz7BaQgc+oTFU6430wHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzIzODMwMzQzYTMyMzg2NTM0M2E2NTM4MzEzNjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCjk6BYwDQYJKoZIhvcNAQELBQAD
ggEBAAp9S1rNmHEkFJxP5jaxixKROAteGfzlSddQ28tasvbmPCYw/uMoP5b1ENSp
RzknIS/VmV17kj9vkoUPdqMLwapFDpmlS/H3hwtsSWdwtoFR14+ccWxUuPhOmwod
FvSRn4XBef5TCQpwO7k/FwUx39V243DPhdYukkpnyBGMJEN5Im9mHQ169Wt8fl7h
/Q84HzUMb7ef7CRUurWuCUAWadXhMNuBelrL9VpK/wQum973BXq4rESZ+JEv/3yM
3EIE7SeYpgJ5yYllIbdmM+GYEvIv+hxeedZsHseMz+Cbi99Zva7ldC7m+hR8v/dT
TmgOxehQUOJAmR1MGI/+1VPKgHM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org