Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/323830343a383431343a3a2f33322d313238203d3e20323732323338.roa
File:                     323830343a383431343a3a2f33322d313238203d3e20323732323338.roa (raw, json)
Hash identifier:          HgckmycM6O8o3MbbWtGB9c9AP/9tcwWIBK7dc/laL3s=
Subject key identifier:   E8:06:8B:4C:7C:58:C8:EE:93:63:ED:F9:82:50:A5:7C:89:0A:10:AD
Certificate issuer:       /CN=BFE3F66A397CD33566E464F94E92472FC3777480
Certificate serial:       3A5291ADD79C03C47EA7A8CF04D1B8B38CC125CA
Authority key identifier: BF:E3:F6:6A:39:7C:D3:35:66:E4:64:F9:4E:92:47:2F:C3:77:74:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE3F66A397CD33566E464F94E92472FC3777480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/323830343a383431343a3a2f33322d313238203d3e20323732323338.roa
Signing time:             Tue 20 Feb 2024 17:51:20 +0000
ROA not before:           Tue 20 Feb 2024 17:46:20 +0000
ROA not after:            Tue 18 Feb 2025 17:51:20 +0000
asID:                     272238
IP address blocks:        2804:8414::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:52:91:ad:d7:9c:03:c4:7e:a7:a8:cf:04:d1:b8:b3:8c:c1:25:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE3F66A397CD33566E464F94E92472FC3777480
        Validity
            Not Before: Feb 20 17:46:20 2024 GMT
            Not After : Feb 18 17:51:20 2025 GMT
        Subject: CN=E8068B4C7C58C8EE9363EDF98250A57C890A10AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:a8:b3:d9:39:b2:ca:e9:74:0b:28:fd:4f:
                    e2:38:08:3d:e0:84:38:23:8c:53:e9:46:a1:16:af:
                    57:35:4f:36:04:87:97:05:79:5a:18:aa:9d:77:d0:
                    f6:74:a9:a0:48:75:67:36:0e:1a:d9:e1:15:34:e1:
                    ee:9f:db:b3:10:15:79:de:1e:46:9a:3d:d7:12:63:
                    2a:34:89:23:3a:a4:4c:16:2c:b2:f4:fb:33:c0:bf:
                    f7:49:98:e8:20:3f:41:7a:03:02:41:eb:8b:e3:4c:
                    e0:73:02:40:52:39:3f:e5:d3:80:89:0d:3f:74:b0:
                    08:18:ea:89:3f:4c:9a:db:2f:ce:29:74:4a:70:15:
                    e6:9f:06:0f:60:fb:8d:97:fa:25:d0:af:a8:5c:be:
                    b8:7e:03:6a:77:5d:be:ac:c7:b9:e7:61:4b:27:44:
                    18:66:7a:d1:7b:23:4d:7f:c4:61:28:39:16:65:da:
                    a6:39:cc:51:8a:f6:f8:aa:d5:56:89:43:00:dc:2f:
                    8f:a8:56:40:9d:2a:95:c2:9c:23:fe:61:26:dd:8c:
                    d5:40:3b:96:7a:05:c7:6b:bf:b9:17:14:9d:e7:91:
                    a8:d4:90:cb:69:69:c3:73:f5:5f:40:a9:64:d6:67:
                    d2:38:1f:e1:34:ed:d8:77:16:88:3d:86:1b:f9:30:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:8B:4C:7C:58:C8:EE:93:63:ED:F9:82:50:A5:7C:89:0A:10:AD
            X509v3 Authority Key Identifier:
                keyid:BF:E3:F6:6A:39:7C:D3:35:66:E4:64:F9:4E:92:47:2F:C3:77:74:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/BFE3F66A397CD33566E464F94E92472FC3777480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE3F66A397CD33566E464F94E92472FC3777480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkBKdGsNfMsUEcRXEebjwZnRQrmYwaUSfC33oUEwL1kk/0/323830343a383431343a3a2f33322d313238203d3e20323732323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8414::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:90:5f:c8:7f:60:c9:d6:aa:54:b4:92:b5:79:24:01:fa:6e:
         ec:15:49:90:b8:54:af:2a:80:67:98:a0:79:c9:b7:47:b4:68:
         35:b4:35:44:a6:cf:fc:6e:db:2f:68:dc:db:e8:21:b5:e4:3a:
         87:4f:db:7d:22:95:7c:fe:9b:20:3d:a0:2a:8d:4f:5c:11:d1:
         f7:04:99:72:6b:f6:aa:d0:d8:5a:4f:1d:a5:73:12:e9:1e:77:
         19:7f:c1:dd:1a:fd:49:33:79:31:74:84:19:f2:c0:c4:8f:f6:
         4e:ca:a8:7f:37:4d:ce:71:69:02:fc:ca:83:7c:44:0b:1c:bb:
         9c:c8:91:0f:82:6f:28:db:35:25:51:bf:c6:41:e6:e9:c1:35:
         f3:30:b2:c2:d2:1c:3d:6b:66:e9:eb:14:2e:e0:4f:66:9e:0b:
         75:cd:dc:7a:ba:5b:ba:49:66:24:8d:51:0f:17:6f:d0:6b:c4:
         01:3a:64:05:1e:60:12:76:22:86:ab:55:7f:95:34:07:43:9c:
         d5:ac:2c:5b:f8:d5:61:8d:31:ca:b2:4a:ce:6d:7e:fc:bb:e9:
         96:3e:d6:8b:5d:fc:cf:88:c0:d5:10:c8:73:de:f2:d3:2d:72:
         46:37:31:4e:c9:ed:3a:99:c8:da:ad:29:42:d8:e8:0f:15:37:
         31:2b:9a:db
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOlKRrdecA8R+p6jPBNG4s4zBJcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZFM0Y2NkEzOTdDRDMzNTY2RTQ2NEY5NEU5MjQ3MkZD
Mzc3NzQ4MDAeFw0yNDAyMjAxNzQ2MjBaFw0yNTAyMTgxNzUxMjBaMDMxMTAvBgNV
BAMTKEU4MDY4QjRDN0M1OEM4RUU5MzYzRURGOTgyNTBBNTdDODkwQTEwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dqiz2Tmyyul0Cyj9T+I4CD3g
hDgjjFPpRqEWr1c1TzYEh5cFeVoYqp130PZ0qaBIdWc2DhrZ4RU04e6f27MQFXne
HkaaPdcSYyo0iSM6pEwWLLL0+zPAv/dJmOggP0F6AwJB64vjTOBzAkBSOT/l04CJ
DT90sAgY6ok/TJrbL84pdEpwFeafBg9g+42X+iXQr6hcvrh+A2p3Xb6sx7nnYUsn
RBhmetF7I01/xGEoORZl2qY5zFGK9viq1VaJQwDcL4+oVkCdKpXCnCP+YSbdjNVA
O5Z6Bcdrv7kXFJ3nkajUkMtpacNz9V9AqWTWZ9I4H+E07dh3Fog9hhv5MNbVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU6AaLTHxYyO6TY+35glClfIkKEK0wHwYDVR0j
BBgwFoAUv+P2ajl80zVm5GT5TpJHL8N3dIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWtCS2RHc05mTXNVRWNSWEVlYmp3Wm5SUXJtWXdhVVNmQzMzb1VFd0wx
a2svMC9CRkUzRjY2QTM5N0NEMzM1NjZFNDY0Rjk0RTkyNDcyRkMzNzc3NDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGRTNGNjZBMzk3Q0QzMzU2
NkU0NjRGOTRFOTI0NzJGQzM3Nzc0ODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VrQktkR3NOZk1zVUVjUlhFZWJqd1puUlFybVl3YVVTZkMzM29VRXdMMWtrLzAv
MzIzODMwMzQzYTM4MzQzMTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIQUMA0GCSqGSIb3DQEBCwUAA4IBAQCikF/I
f2DJ1qpUtJK1eSQB+m7sFUmQuFSvKoBnmKB5ybdHtGg1tDVEps/8btsvaNzb6CG1
5DqHT9t9IpV8/psgPaAqjU9cEdH3BJlya/aq0NhaTx2lcxLpHncZf8HdGv1JM3kx
dIQZ8sDEj/ZOyqh/N03OcWkC/MqDfEQLHLucyJEPgm8o2zUlUb/GQebpwTXzMLLC
0hw9a2bp6xQu4E9mngt1zdx6ulu6SWYkjVEPF2/Qa8QBOmQFHmASdiKGq1V/lTQH
Q5zVrCxb+NVhjTHKskrObX78u+mWPtaLXfzPiMDVEMhz3vLTLXJGNzFOye06mcja
rSlC2OgPFTcxK5rb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org