Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653836303a3a2f34342d3434203d3e203238323630.roa
File:                     323830343a323865343a653836303a3a2f34342d3434203d3e203238323630.roa (raw, json)
Hash identifier:          XW5fNPTpCqJPUNx57ETTlNP/LM3sc+qFWW0UgHQs6S0=
Subject key identifier:   E6:7E:43:27:69:B4:EC:E7:CA:FB:39:86:B3:1B:CC:3C:6F:A1:B4:4C
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       6F7030CBF8A05201B681DB4529044E3AAF369502
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653836303a3a2f34342d3434203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:44 +0000
ROA not before:           Thu 09 Mar 2023 20:12:44 +0000
ROA not after:            Thu 07 Mar 2024 20:17:44 +0000
asID:                     28260
IP address blocks:        2804:28e4:e860::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:70:30:cb:f8:a0:52:01:b6:81:db:45:29:04:4e:3a:af:36:95:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:44 2023 GMT
            Not After : Mar  7 20:17:44 2024 GMT
        Subject: CN=E67E432769B4ECE7CAFB3986B31BCC3C6FA1B44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:d8:0d:a6:10:c6:93:46:6b:b5:58:b3:01:
                    76:11:8f:ea:69:38:ed:df:02:bd:7b:88:a0:a7:04:
                    a8:3f:0d:d9:c2:6c:8f:21:f5:46:5f:b6:f5:d9:88:
                    ae:69:6f:f5:cd:94:3b:34:ab:da:ac:a7:e5:2e:40:
                    a2:19:5b:8a:62:b6:a8:44:d7:f9:a3:ee:a4:7f:c0:
                    cd:66:29:13:8e:7a:49:ad:5f:04:ee:e4:5a:03:6b:
                    af:4a:2c:4d:df:6a:a7:37:06:fa:eb:66:3c:67:07:
                    64:f4:15:ed:cf:6a:85:38:4a:eb:39:80:38:83:dd:
                    6e:9a:ef:a8:22:3c:04:b9:77:b3:8f:3e:f0:ed:7d:
                    33:d9:9a:33:a9:b7:e0:92:b5:b4:6f:68:db:0a:12:
                    19:c3:9d:25:6e:96:7e:e8:80:10:34:e7:8a:a7:70:
                    f6:3c:44:8e:99:57:8e:c0:88:8d:ed:3e:51:01:68:
                    59:78:18:ac:b7:58:9b:18:44:c1:70:c6:3a:48:62:
                    a5:85:a7:a9:c0:7d:2d:25:6b:99:24:f6:ba:00:10:
                    a6:fb:a9:a8:5c:21:41:83:68:1f:09:40:94:6a:b5:
                    62:fa:18:48:f5:41:95:ed:9b:7c:2d:b5:7e:a8:9a:
                    a1:a9:1e:46:06:ca:5c:4b:51:53:de:18:21:4d:e4:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7E:43:27:69:B4:EC:E7:CA:FB:39:86:B3:1B:CC:3C:6F:A1:B4:4C
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653836303a3a2f34342d3434203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e860::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:4e:62:a9:10:df:f4:6d:7f:b1:1c:17:0e:5e:cd:f5:db:96:
         2b:6d:ec:da:52:1c:19:63:0d:23:83:8e:d9:95:ee:a3:75:30:
         d5:fc:03:71:c5:59:48:68:03:b3:b0:00:6a:55:3e:b6:d3:b1:
         05:14:de:6f:34:db:2a:25:e9:62:ed:f1:3c:cc:f2:a2:b2:7a:
         0d:9d:a8:81:fc:bb:f8:fb:c7:89:54:07:b1:e1:17:8e:f4:2b:
         4b:66:a8:d0:a0:5d:23:3a:e2:bd:2c:17:a5:aa:4f:33:c3:fc:
         94:02:30:47:b3:d1:36:5e:86:d6:d2:77:23:35:34:eb:1b:27:
         c1:86:ad:42:81:40:c4:cc:36:45:7d:0c:cf:46:9f:27:dd:dc:
         74:46:ee:ee:ee:21:66:9b:47:5f:44:1e:09:6b:b5:c2:bd:f5:
         15:b3:c4:67:53:14:a9:a0:60:a6:65:05:ee:44:88:5f:9a:74:
         3a:e3:7d:ad:31:8b:c4:bc:c4:2c:3c:5c:a9:79:67:7e:62:f8:
         17:8b:2b:f9:14:44:39:0f:00:ab:47:d1:02:ac:7a:9a:fe:27:
         71:02:a6:44:95:31:7f:26:ed:13:06:43:d3:aa:42:77:04:91:
         7b:25:fc:f0:89:fb:83:f9:5d:5c:e5:5c:ec:c7:88:a6:e2:ed:
         f6:56:d9:2b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUb3Awy/igUgG2gdtFKQROOq82lQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNDRaFw0yNDAzMDcyMDE3NDRaMDMxMTAvBgNV
BAMTKEU2N0U0MzI3NjlCNEVDRTdDQUZCMzk4NkIzMUJDQzNDNkZBMUI0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ltgNphDGk0ZrtVizAXYRj+pp
OO3fAr17iKCnBKg/DdnCbI8h9UZftvXZiK5pb/XNlDs0q9qsp+UuQKIZW4pitqhE
1/mj7qR/wM1mKROOekmtXwTu5FoDa69KLE3faqc3BvrrZjxnB2T0Fe3PaoU4Sus5
gDiD3W6a76giPAS5d7OPPvDtfTPZmjOpt+CStbRvaNsKEhnDnSVuln7ogBA054qn
cPY8RI6ZV47AiI3tPlEBaFl4GKy3WJsYRMFwxjpIYqWFp6nAfS0la5kk9roAEKb7
qahcIUGDaB8JQJRqtWL6GEj1QZXtm3wttX6omqGpHkYGylxLUVPeGCFN5PKlAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU5n5DJ2m07OfK+zmGsxvMPG+htEwwHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzIzODMwMzQzYTMyMzg2NTM0M2E2NTM4MzYzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBCjk6GAwDQYJKoZIhvcNAQELBQAD
ggEBAFpOYqkQ3/Rtf7EcFw5ezfXblitt7NpSHBljDSODjtmV7qN1MNX8A3HFWUho
A7OwAGpVPrbTsQUU3m802yol6WLt8TzM8qKyeg2dqIH8u/j7x4lUB7HhF470K0tm
qNCgXSM64r0sF6WqTzPD/JQCMEez0TZehtbSdyM1NOsbJ8GGrUKBQMTMNkV9DM9G
nyfd3HRG7u7uIWabR19EHglrtcK99RWzxGdTFKmgYKZlBe5EiF+adDrjfa0xi8S8
xCw8XKl5Z35i+BeLK/kURDkPAKtH0QKsepr+J3ECpkSVMX8m7RMGQ9OqQncEkXsl
/PCJ+4P5XVzlXOzHiKbi7fZW2Ss=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org