Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa
File:                     323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (raw, json)
Hash identifier:          BFGnDtSIoEt4/biFSyXiz3Jw1KlyR8e7UC/+l+z+AME=
Subject key identifier:   09:B1:20:49:E5:85:C5:3B:D7:78:AB:3A:94:22:15:97:D2:8C:2A:15
Certificate issuer:       /CN=3508ABC74EC71F9482F4469C06D817E172192BCC
Certificate serial:       285EC992CA77ECFEFB5CC05176D1BE81EC339E74
Authority key identifier: 35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa
Signing time:             Wed 20 Mar 2024 13:43:30 +0000
ROA not before:           Wed 20 Mar 2024 13:38:30 +0000
ROA not after:            Wed 19 Mar 2025 13:43:30 +0000
asID:                     272614
IP address blocks:        2804:8604:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5e:c9:92:ca:77:ec:fe:fb:5c:c0:51:76:d1:be:81:ec:33:9e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3508ABC74EC71F9482F4469C06D817E172192BCC
        Validity
            Not Before: Mar 20 13:38:30 2024 GMT
            Not After : Mar 19 13:43:30 2025 GMT
        Subject: CN=09B12049E585C53BD778AB3A94221597D28C2A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:74:99:b7:2b:7c:b1:ac:9e:55:69:b2:67:
                    46:27:a1:2c:3c:3a:33:99:f9:1c:b6:22:a1:35:00:
                    bd:d7:a0:5a:0b:a5:22:ea:ce:4d:40:39:f8:da:c7:
                    6c:ec:81:c4:83:65:30:bb:1a:df:9a:b0:66:73:1f:
                    a8:db:60:45:29:83:0b:2b:96:4f:da:5f:f3:34:b0:
                    e6:33:97:0c:43:30:5f:9c:b1:06:14:a8:6a:18:0c:
                    76:39:24:9a:46:7c:ee:5f:a9:2f:13:37:88:2b:f5:
                    16:ab:02:cf:e7:3c:e1:cd:ac:89:ca:9e:ac:48:6b:
                    2d:37:8b:de:6c:38:ca:31:08:53:a2:d4:ae:06:c1:
                    8b:e7:f2:a1:97:65:ef:24:fc:9e:82:67:c7:5e:6a:
                    ac:29:4c:db:69:8b:f8:0f:e0:85:0f:0e:93:85:75:
                    88:75:eb:41:b3:96:3f:7c:34:7f:6c:3a:a5:9c:d3:
                    d7:52:30:a7:94:ef:d5:c9:f4:c5:4b:da:5d:34:55:
                    ee:3b:e2:01:04:c3:0a:a4:ce:22:b9:54:61:f8:c3:
                    a8:91:9c:ac:24:4b:8d:e6:34:6a:ad:66:06:55:b0:
                    13:98:84:35:7e:f2:c0:c5:f6:a1:19:c2:93:6a:6c:
                    b3:4e:76:80:dc:54:48:65:52:9e:e4:b7:2f:d1:72:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B1:20:49:E5:85:C5:3B:D7:78:AB:3A:94:22:15:97:D2:8C:2A:15
            X509v3 Authority Key Identifier:
                keyid:35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:45:0a:1d:53:18:fe:4e:9b:2a:da:04:57:b0:86:59:55:
         22:d9:25:28:38:bb:cd:0e:8d:38:61:d5:75:6e:b6:1e:62:bd:
         35:29:a7:d8:06:fc:fd:93:c1:45:81:6b:4a:1f:56:aa:e0:52:
         c6:b8:4c:20:67:4d:03:0e:5c:ec:8f:63:b3:9e:39:98:d9:63:
         b1:2f:20:64:ca:99:88:a9:2e:b2:96:c7:f0:e2:a6:f0:37:e8:
         27:35:e8:01:ce:a3:d4:e6:f6:08:0e:b8:f2:1e:89:84:4b:ae:
         f8:5e:91:46:00:74:6c:7f:ff:c4:c0:e4:b4:70:81:3a:1b:b1:
         cf:e8:db:f5:9f:52:9a:d8:1b:7b:e3:fd:50:07:37:10:49:1f:
         91:54:45:17:88:e8:93:05:8c:24:b3:a1:b0:f8:03:69:d1:6d:
         e0:28:01:ba:79:b9:dc:3e:41:5a:11:24:56:25:6c:ad:62:87:
         63:03:e6:59:5a:6b:75:52:a6:4e:a9:2e:e7:db:8a:8e:27:19:
         c8:ce:fb:88:68:89:7e:11:d9:da:a5:b1:4d:66:3c:40:cd:25:
         9a:cc:20:70:26:f6:9c:5e:ac:38:32:de:71:c5:2f:a9:b8:58:
         24:d2:0c:4d:07:a9:09:cd:bf:6a:f1:76:57:ed:cb:ac:b7:f5:
         0e:d2:40:2c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKF7Jksp37P77XMBRdtG+gewznnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwOEFCQzc0RUM3MUY5NDgyRjQ0NjlDMDZEODE3RTE3
MjE5MkJDQzAeFw0yNDAzMjAxMzM4MzBaFw0yNTAzMTkxMzQzMzBaMDMxMTAvBgNV
BAMTKDA5QjEyMDQ5RTU4NUM1M0JENzc4QUIzQTk0MjIxNTk3RDI4QzJBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTe3SZtyt8sayeVWmyZ0YnoSw8
OjOZ+Ry2IqE1AL3XoFoLpSLqzk1AOfjax2zsgcSDZTC7Gt+asGZzH6jbYEUpgwsr
lk/aX/M0sOYzlwxDMF+csQYUqGoYDHY5JJpGfO5fqS8TN4gr9RarAs/nPOHNrInK
nqxIay03i95sOMoxCFOi1K4GwYvn8qGXZe8k/J6CZ8deaqwpTNtpi/gP4IUPDpOF
dYh160Gzlj98NH9sOqWc09dSMKeU79XJ9MVL2l00Ve474gEEwwqkziK5VGH4w6iR
nKwkS43mNGqtZgZVsBOYhDV+8sDF9qEZwpNqbLNOdoDcVEhlUp7kty/Rct3zAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCbEgSeWFxTvXeKs6lCIVl9KMKhUwHwYDVR0j
BBgwFoAUNQirx07HH5SC9EacBtgX4XIZK8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh
bk4vMC8zNTA4QUJDNzRFQzcxRjk0ODJGNDQ2OUMwNkQ4MTdFMTcyMTkyQkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1MDhBQkM3NEVDNzFGOTQ4
MkY0NDY5QzA2RDgxN0UxNzIxOTJCQ0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZeTRhSk1QdnphY2trTEhnNGs5b0hISFo3Z2puRXJrUVBKVWFzdnA2YW5OLzAv
MzIzODMwMzQzYTM4MzYzMDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMjM2MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEhgSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAYTEUKHVMY/k6bKtoEV7CGWVUi2SUoOLvNDo04YdV1brYeYr01KafYBvz9
k8FFgWtKH1aq4FLGuEwgZ00DDlzsj2OznjmY2WOxLyBkypmIqS6ylsfw4qbwN+gn
NegBzqPU5vYIDrjyHomES674XpFGAHRsf//EwOS0cIE6G7HP6Nv1n1Ka2Bt74/1Q
BzcQSR+RVEUXiOiTBYwks6Gw+ANp0W3gKAG6ebncPkFaESRWJWytYodjA+ZZWmt1
UqZOqS7n24qOJxnIzvuIaIl+EdnapbFNZjxAzSWazCBwJvacXqw4Mt5xxS+puFgk
0gxNB6kJzb9q8XZX7cust/UO0kAs
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org