Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/323830343a386333383a3a2f33322d313238203d3e20323733373838.roa
File:                     323830343a386333383a3a2f33322d313238203d3e20323733373838.roa (raw, json)
Hash identifier:          1ET5vrrZJrbmpeGY3wZZoiPZYE95mQITK6uZF7qxr7o=
Subject key identifier:   5D:27:2B:51:C5:3D:9F:8B:12:2E:E5:5B:F1:EE:1E:F1:CE:78:E0:41
Certificate issuer:       /CN=49B7446F60C4089A75A346EAD9D246F02C994ED2
Certificate serial:       468EA6E54CBA6AB2FB7E13FF51EA094AC0004053
Authority key identifier: 49:B7:44:6F:60:C4:08:9A:75:A3:46:EA:D9:D2:46:F0:2C:99:4E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/323830343a386333383a3a2f33322d313238203d3e20323733373838.roa
Signing time:             Tue 05 Dec 2023 13:57:22 +0000
ROA not before:           Tue 05 Dec 2023 13:52:22 +0000
ROA not after:            Tue 03 Dec 2024 13:57:22 +0000
asID:                     273788
IP address blocks:        2804:8c38::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8e:a6:e5:4c:ba:6a:b2:fb:7e:13:ff:51:ea:09:4a:c0:00:40:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49B7446F60C4089A75A346EAD9D246F02C994ED2
        Validity
            Not Before: Dec  5 13:52:22 2023 GMT
            Not After : Dec  3 13:57:22 2024 GMT
        Subject: CN=5D272B51C53D9F8B122EE55BF1EE1EF1CE78E041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:4c:79:c6:60:62:76:ab:1a:ca:f1:06:72:
                    33:9c:89:c6:f1:61:8f:4a:e0:a2:3b:f1:74:9b:27:
                    9c:eb:bb:1d:82:9a:77:9a:e2:c2:b1:c2:cf:b3:48:
                    ea:23:03:bb:69:ec:f7:b9:cd:17:50:5b:7f:5a:b1:
                    ef:e4:ce:ba:94:cd:de:16:d7:c3:4d:aa:45:8f:25:
                    b2:2d:65:e7:b7:70:45:f6:1a:4d:50:59:f8:a5:1c:
                    fe:a5:df:d0:6a:59:5b:88:80:ed:d8:98:1b:4d:db:
                    a0:e7:2a:46:e9:da:8a:82:c0:6e:2d:fa:0c:99:69:
                    65:80:dc:f9:2d:ee:71:07:5e:38:3a:5c:e7:9e:f8:
                    af:e8:23:3b:03:8b:2d:b7:0e:6a:14:2e:e5:f9:46:
                    58:db:13:30:42:c3:86:c8:54:22:07:66:f7:ae:39:
                    88:66:d8:c0:bd:49:9f:06:a9:ec:f4:bd:81:f7:69:
                    c9:20:e8:28:13:67:e8:75:7d:b2:11:27:9a:47:0e:
                    53:e2:df:27:d8:c8:d3:f6:80:23:67:1e:40:4c:76:
                    28:91:28:03:fe:86:81:18:e4:d5:6d:af:ec:68:72:
                    b7:76:89:f4:ac:c9:f9:02:d4:49:88:94:34:d8:c2:
                    67:27:6e:70:4c:aa:cf:e3:c0:81:e8:a9:ea:30:e2:
                    6d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:27:2B:51:C5:3D:9F:8B:12:2E:E5:5B:F1:EE:1E:F1:CE:78:E0:41
            X509v3 Authority Key Identifier:
                keyid:49:B7:44:6F:60:C4:08:9A:75:A3:46:EA:D9:D2:46:F0:2C:99:4E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/323830343a386333383a3a2f33322d313238203d3e20323733373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:42:c8:94:c0:c3:20:0f:c5:9f:50:d4:6c:6e:a7:5d:1b:83:
         2d:ba:f6:eb:0b:7a:55:bf:c9:76:72:9c:7a:d5:4a:55:ac:b3:
         47:79:14:0b:41:3a:46:4a:0f:6b:9a:a8:66:f2:fd:3e:fa:12:
         61:14:97:7f:6e:b8:6d:b7:c9:ed:3b:2a:ce:fd:44:ec:b7:6d:
         7e:16:88:9e:62:21:64:83:ff:d7:9b:4a:6a:93:39:a9:b2:82:
         04:1a:e4:87:b7:a5:e4:89:2c:5b:78:9f:18:f2:c9:d0:b7:90:
         7e:76:d0:65:48:66:7b:30:42:b0:9a:ca:f7:00:66:38:57:ba:
         60:c2:4e:5c:e3:26:d3:15:e0:a1:17:17:c3:56:93:47:13:78:
         fb:df:a5:31:65:90:f3:2f:d9:c9:92:e0:99:5a:10:2f:d7:32:
         b3:f1:a4:be:cf:c8:1d:c2:bf:37:38:bf:57:27:4f:9b:93:b7:
         87:ce:95:e8:a6:50:b5:b3:c1:37:27:b7:40:bf:e8:a1:0c:df:
         81:8c:7e:5c:11:f0:28:07:9b:d6:53:45:43:3b:5f:6f:6c:7f:
         62:33:c7:22:74:57:6f:23:05:40:70:d2:81:e2:17:10:e6:d5:
         7b:2f:06:a2:ac:3a:d3:5f:d1:52:cf:84:1c:d8:2d:55:c8:96:
         45:fa:98:4d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIURo6m5Uy6arL7fhP/UeoJSsAAQFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCNzQ0NkY2MEM0MDg5QTc1QTM0NkVBRDlEMjQ2RjAy
Qzk5NEVEMjAeFw0yMzEyMDUxMzUyMjJaFw0yNDEyMDMxMzU3MjJaMDMxMTAvBgNV
BAMTKDVEMjcyQjUxQzUzRDlGOEIxMjJFRTU1QkYxRUUxRUYxQ0U3OEUwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYaEx5xmBidqsayvEGcjOcicbx
YY9K4KI78XSbJ5zrux2Cmnea4sKxws+zSOojA7tp7Pe5zRdQW39ase/kzrqUzd4W
18NNqkWPJbItZee3cEX2Gk1QWfilHP6l39BqWVuIgO3YmBtN26DnKkbp2oqCwG4t
+gyZaWWA3Pkt7nEHXjg6XOee+K/oIzsDiy23DmoULuX5RljbEzBCw4bIVCIHZveu
OYhm2MC9SZ8Gqez0vYH3ackg6CgTZ+h1fbIRJ5pHDlPi3yfYyNP2gCNnHkBMdiiR
KAP+hoEY5NVtr+xocrd2ifSsyfkC1EmIlDTYwmcnbnBMqs/jwIHoqeow4m2DAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUXScrUcU9n4sSLuVb8e4e8c544EEwHwYDVR0j
BBgwFoAUSbdEb2DECJp1o0bq2dJG8CyZTtIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5jc0dzSzloQlVDdUQxZXpDZnB3NWhHVGdTaGFKWUJmU0ROUms3TEZV
WmMvMC80OUI3NDQ2RjYwQzQwODlBNzVBMzQ2RUFEOUQyNDZGMDJDOTk0RUQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5Qjc0NDZGNjBDNDA4OUE3
NUEzNDZFQUQ5RDI0NkYwMkM5OTRFRDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuY3NHc0s5aEJVQ3VEMWV6Q2ZwdzVoR1RnU2hhSllCZlNETlJrN0xGVVpjLzAv
MzIzODMwMzQzYTM4NjMzMzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIw4MA0GCSqGSIb3DQEBCwUAA4IBAQBSQsiU
wMMgD8WfUNRsbqddG4MtuvbrC3pVv8l2cpx61UpVrLNHeRQLQTpGSg9rmqhm8v0+
+hJhFJd/brhtt8ntOyrO/UTst21+FoieYiFkg//Xm0pqkzmpsoIEGuSHt6XkiSxb
eJ8Y8snQt5B+dtBlSGZ7MEKwmsr3AGY4V7pgwk5c4ybTFeChFxfDVpNHE3j736Ux
ZZDzL9nJkuCZWhAv1zKz8aS+z8gdwr83OL9XJ0+bk7eHzpXoplC1s8E3J7dAv+ih
DN+BjH5cEfAoB5vWU0VDO19vbH9iM8cidFdvIwVAcNKB4hcQ5tV7LwairDrTX9FS
z4Qc2C1VyJZF+phN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:33 2024 by rpki-client on console-fra.rpki-client.org