Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/323830343a3133303a3a2f33322d3438203d3e203238323634.roa
File:                     323830343a3133303a3a2f33322d3438203d3e203238323634.roa (raw, json)
Hash identifier:          EVJun1PY//Vy9n//cYA/G77Bk39Wwbvh5vf3s1feH/s=
Subject key identifier:   D8:FC:E2:E7:1E:37:92:E4:F5:05:BC:DA:C1:AA:93:95:66:04:31:80
Certificate issuer:       /CN=2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0
Certificate serial:       0270F20DEAB0059093916275A147477474AC703E
Authority key identifier: 2F:BC:8D:FF:1B:81:48:C0:C5:3E:48:6A:BF:F0:33:B3:DA:F4:8A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/323830343a3133303a3a2f33322d3438203d3e203238323634.roa
Signing time:             Fri 01 Jul 2022 09:25:28 +0000
ROA not before:           Fri 01 Jul 2022 09:20:28 +0000
ROA not after:            Fri 30 Jun 2023 09:25:28 +0000
asID:                     28264
IP address blocks:        2804:130::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:70:f2:0d:ea:b0:05:90:93:91:62:75:a1:47:47:74:74:ac:70:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0
        Validity
            Not Before: Jul  1 09:20:28 2022 GMT
            Not After : Jun 30 09:25:28 2023 GMT
        Subject: CN=D8FCE2E71E3792E4F505BCDAC1AA939566043180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:19:46:04:6a:3f:41:b4:8b:b9:19:9f:c1:
                    95:7f:65:ae:71:0f:bf:73:19:d0:1d:6f:b6:34:91:
                    74:ba:27:15:b8:b6:c0:56:38:3d:c0:8e:2a:92:4c:
                    db:f8:41:45:72:aa:59:ec:45:4d:4e:cf:bb:62:23:
                    18:31:2c:d4:5e:ab:1c:1c:21:f9:31:e6:02:c5:ac:
                    ad:dd:ae:34:e1:5b:03:20:b5:60:63:25:b7:ef:dc:
                    1b:69:ed:d3:8c:72:36:15:e8:96:88:d8:e5:db:74:
                    e4:5c:cd:88:0e:8a:73:ac:63:21:c8:11:ca:72:19:
                    0e:73:b6:5e:8c:3c:9b:97:d5:dc:b8:df:91:0e:32:
                    9d:9f:4b:59:e1:74:ac:d1:1d:04:ad:b5:50:19:f7:
                    7a:38:45:05:be:2a:c3:11:12:cb:ae:41:4b:e3:9b:
                    1a:9b:86:14:f0:a7:2c:40:5d:36:60:fa:5a:24:51:
                    22:8c:34:bd:e5:a0:36:47:8e:a3:a3:c6:31:05:e1:
                    6b:90:23:a9:89:12:af:be:73:c0:fc:9b:f2:b1:54:
                    cd:b8:31:fc:79:34:bf:93:6a:9d:48:84:7e:49:11:
                    3c:c3:f3:e5:98:9a:e5:61:40:3a:5b:29:e9:48:72:
                    38:2c:da:99:31:26:6a:a1:ad:47:2a:c7:fa:7d:ad:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FC:E2:E7:1E:37:92:E4:F5:05:BC:DA:C1:AA:93:95:66:04:31:80
            X509v3 Authority Key Identifier:
                keyid:2F:BC:8D:FF:1B:81:48:C0:C5:3E:48:6A:BF:F0:33:B3:DA:F4:8A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/323830343a3133303a3a2f33322d3438203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:130::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:ae:b8:0f:f2:37:75:3c:a3:d4:f2:9c:8b:13:60:67:d2:
         78:3e:92:65:41:1f:8b:58:af:4b:8d:28:95:1a:74:51:47:17:
         bf:c3:76:53:82:33:ee:21:38:42:91:b9:4e:e3:47:ef:ff:ed:
         cf:10:74:11:b1:ef:2e:de:89:42:10:c7:b1:fb:9c:19:48:5a:
         f6:ac:38:5c:13:43:71:37:3c:03:d5:b6:73:cc:8f:f0:24:58:
         96:4c:c6:03:b2:c4:e6:58:5f:cf:2c:d2:b2:db:c4:0e:6a:11:
         8b:28:d3:6d:e7:98:ca:1d:a5:35:dc:2d:43:37:54:ef:17:b6:
         c8:26:11:52:24:e4:57:4d:03:91:92:46:6f:ff:fe:6e:3e:f4:
         5d:f4:e0:f0:45:9c:a5:ef:df:58:f1:1b:32:5a:6d:42:b2:9a:
         55:7e:2e:42:d4:20:41:03:2a:29:c9:03:ec:97:45:ad:15:8c:
         53:58:86:4a:84:e7:57:5f:07:31:fd:ec:c7:8f:0f:cf:02:bc:
         7e:58:86:8d:be:26:ea:0c:7e:e1:52:29:3c:53:b9:43:4e:41:
         1f:15:b3:01:ca:59:b5:76:8f:0f:17:38:2d:a0:9b:88:5e:4e:
         c3:c7:c9:b3:95:38:b7:16:9d:2a:ba:3f:25:07:3b:e7:b6:a1:
         b3:61:37:bc
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUAnDyDeqwBZCTkWJ1oUdHdHSscD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCQzhERkYxQjgxNDhDMEM1M0U0ODZBQkZGMDMzQjNE
QUY0OEFBMDAeFw0yMjA3MDEwOTIwMjhaFw0yMzA2MzAwOTI1MjhaMDMxMTAvBgNV
BAMTKEQ4RkNFMkU3MUUzNzkyRTRGNTA1QkNEQUMxQUE5Mzk1NjYwNDMxODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pRlGBGo/QbSLuRmfwZV/Za5x
D79zGdAdb7Y0kXS6JxW4tsBWOD3AjiqSTNv4QUVyqlnsRU1Oz7tiIxgxLNReqxwc
Ifkx5gLFrK3drjThWwMgtWBjJbfv3Btp7dOMcjYV6JaI2OXbdORczYgOinOsYyHI
EcpyGQ5ztl6MPJuX1dy435EOMp2fS1nhdKzRHQSttVAZ93o4RQW+KsMREsuuQUvj
mxqbhhTwpyxAXTZg+lokUSKMNL3loDZHjqOjxjEF4WuQI6mJEq++c8D8m/KxVM24
Mfx5NL+Tap1IhH5JETzD8+WYmuVhQDpbKelIcjgs2pkxJmqhrUcqx/p9rRF/AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU2Pzi5x43kuT1BbzawaqTlWYEMYAwHwYDVR0j
BBgwFoAUL7yN/xuBSMDFPkhqv/Azs9r0iqAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5
WG0vMC8yRkJDOERGRjFCODE0OEMwQzUzRTQ4NkFCRkYwMzNCM0RBRjQ4QUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGQkM4REZGMUI4MTQ4QzBD
NTNFNDg2QUJGRjAzM0IzREFGNDhBQTAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vkd0dOZ1E0Z1hxOHdCVE5IZmhOckc0UVUyTnpKWmdDUnZ2ejkzUVA4eVhtLzAv
MzIzODMwMzQzYTMxMzMzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMjM2
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAEwMA0GCSqGSIb3DQEBCwUAA4IBAQA/Gq64D/I3dTyj
1PKcixNgZ9J4PpJlQR+LWK9LjSiVGnRRRxe/w3ZTgjPuIThCkblO40fv/+3PEHQR
se8u3olCEMex+5wZSFr2rDhcE0NxNzwD1bZzzI/wJFiWTMYDssTmWF/PLNKy28QO
ahGLKNNt55jKHaU13C1DN1TvF7bIJhFSJORXTQORkkZv//5uPvRd9ODwRZyl799Y
8RsyWm1CsppVfi5C1CBBAyopyQPsl0WtFYxTWIZKhOdXXwcx/ezHjw/PArx+WIaN
vibqDH7hUik8U7lDTkEfFbMBylm1do8PFzgtoJuIXk7Dx8mzlTi3Fp0quj8lBzvn
tqGzYTe8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org