Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323032.roa
File:                     323830343a363336383a3a2f33322d3438203d3e20323032.roa (raw, json)
Hash identifier:          LKe5XqnSSf3LXJ2zpt2IXhxfu2PENjSw26IabNYkRZQ=
Subject key identifier:   38:F6:91:3F:8A:FF:2B:09:D0:9C:31:B4:BB:EF:86:DD:2F:67:9C:DE
Certificate issuer:       /CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Certificate serial:       6BC33EF4B8096320A6B8AC667EDD31539BC33A2C
Authority key identifier: EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323032.roa
Signing time:             Thu 22 Feb 2024 01:08:30 +0000
ROA not before:           Thu 22 Feb 2024 01:03:30 +0000
ROA not after:            Thu 20 Feb 2025 01:08:30 +0000
asID:                     202
IP address blocks:        2804:6368::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c3:3e:f4:b8:09:63:20:a6:b8:ac:66:7e:dd:31:53:9b:c3:3a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
        Validity
            Not Before: Feb 22 01:03:30 2024 GMT
            Not After : Feb 20 01:08:30 2025 GMT
        Subject: CN=38F6913F8AFF2B09D09C31B4BBEF86DD2F679CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:42:c5:b5:eb:95:a9:29:56:2f:6b:5b:47:
                    5a:d2:4e:0b:93:d2:d2:dd:96:1e:39:af:bb:9d:a2:
                    ab:02:8b:93:94:2e:62:59:5f:56:3e:46:4e:18:bc:
                    84:08:9c:2a:86:ae:11:3f:72:de:7b:ec:51:90:95:
                    97:f2:02:78:a3:1e:08:98:69:7a:d9:01:8f:de:cc:
                    12:5a:d9:75:8a:96:50:cd:07:01:45:58:1b:89:25:
                    18:a2:89:6b:55:fb:3f:91:e7:c1:9a:a6:c1:68:70:
                    5e:66:93:d8:77:57:14:70:7b:c5:24:94:0f:62:c0:
                    9d:73:7b:1e:f5:ca:2b:27:c9:47:fe:78:78:6c:22:
                    ff:76:34:fe:78:82:d9:74:b9:33:23:65:96:49:03:
                    08:6a:49:d7:b2:36:1c:37:85:78:38:d2:71:ab:37:
                    4e:d7:e5:96:a9:94:32:1b:80:04:77:6d:7e:1c:13:
                    97:6a:04:67:81:68:ea:d7:be:91:57:12:e2:ee:92:
                    11:91:2a:43:09:35:a0:6d:1e:34:7c:8b:31:7d:67:
                    46:3d:c0:66:e3:a3:bc:71:bc:90:2c:8b:bb:d2:54:
                    fa:c3:ab:fc:b2:88:43:7f:6f:49:f4:ea:72:37:db:
                    b1:12:18:a7:4b:ac:f8:a0:1c:9d:82:22:8b:f9:55:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:91:3F:8A:FF:2B:09:D0:9C:31:B4:BB:EF:86:DD:2F:67:9C:DE
            X509v3 Authority Key Identifier:
                keyid:EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ca:ec:75:fb:0a:49:81:6b:0c:1b:89:7a:dc:6f:41:4f:5e:
         a9:f2:47:85:c5:f8:15:d8:24:29:50:29:1b:5c:f1:5b:3b:00:
         c6:26:f9:df:c7:3a:e6:c0:94:b6:47:a0:3f:cd:80:09:6f:89:
         19:13:7e:7b:19:fe:eb:7d:e7:74:fe:2f:43:1a:2a:61:c2:2c:
         ca:6b:6a:5a:d2:f0:c4:8b:1a:8f:b5:0b:44:48:dc:8d:be:67:
         a5:be:c8:f3:ab:84:c1:73:51:4d:a2:e3:a2:c2:ed:d5:df:83:
         14:d1:89:7d:6a:e3:bc:6b:52:14:78:23:52:86:4b:4a:d9:fc:
         10:27:04:4d:eb:ae:5f:c6:4b:49:4b:e5:0f:ec:e3:0b:fa:f8:
         13:5f:d0:79:18:99:42:37:16:6f:40:b7:07:2d:fc:7d:57:b4:
         1e:ac:9a:63:ed:b4:4d:18:e0:02:a3:b7:d4:99:40:2e:5c:7a:
         9d:37:54:29:47:73:ff:c6:57:c4:6c:04:c5:fd:f7:68:a9:3d:
         a0:f8:c2:48:9a:47:92:db:51:14:e9:9c:da:08:cf:a3:99:16:
         c7:20:32:11:2e:f6:cc:92:26:2a:2a:1e:f8:d3:cd:45:61:3d:
         da:bc:b2:e4:aa:f4:46:ea:00:a6:d0:e5:23:0f:c3:0c:fa:3c:
         ad:8f:b5:1b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUa8M+9LgJYyCmuKxmft0xU5vDOiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEwNzZBNTMxNDU1N0JFREQ0RkE4NDYxMkQxMkVEMUEz
M0VDN0Q4QTAeFw0yNDAyMjIwMTAzMzBaFw0yNTAyMjAwMTA4MzBaMDMxMTAvBgNV
BAMTKDM4RjY5MTNGOEFGRjJCMDlEMDlDMzFCNEJCRUY4NkREMkY2NzlDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrULFteuVqSlWL2tbR1rSTguT
0tLdlh45r7udoqsCi5OULmJZX1Y+Rk4YvIQInCqGrhE/ct577FGQlZfyAnijHgiY
aXrZAY/ezBJa2XWKllDNBwFFWBuJJRiiiWtV+z+R58GapsFocF5mk9h3VxRwe8Uk
lA9iwJ1zex71yisnyUf+eHhsIv92NP54gtl0uTMjZZZJAwhqSdeyNhw3hXg40nGr
N07X5ZaplDIbgAR3bX4cE5dqBGeBaOrXvpFXEuLukhGRKkMJNaBtHjR8izF9Z0Y9
wGbjo7xxvJAsi7vSVPrDq/yyiEN/b0n06nI327ESGKdLrPigHJ2CIov5VS4jAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUOPaRP4r/KwnQnDG0u++G3S9nnN4wHwYDVR0j
BBgwFoAU6gdqUxRVe+3U+oRhLRLtGjPsfYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC9FQTA3NkE1MzE0NTU3QkVERDRGQTg0NjEyRDEyRUQxQTMzRUM3RDhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBMDc2QTUzMTQ1NTdCRURE
NEZBODQ2MTJEMTJFRDFBMzNFQzdEOEEuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzIzODMwMzQzYTM2MzMzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMDMy
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKARjaDANBgkqhkiG9w0BAQsFAAOCAQEAXcrsdfsKSYFrDBuJ
etxvQU9eqfJHhcX4FdgkKVApG1zxWzsAxib538c65sCUtkegP82ACW+JGRN+exn+
633ndP4vQxoqYcIsymtqWtLwxIsaj7ULREjcjb5npb7I86uEwXNRTaLjosLt1d+D
FNGJfWrjvGtSFHgjUoZLStn8ECcETeuuX8ZLSUvlD+zjC/r4E1/QeRiZQjcWb0C3
By38fVe0HqyaY+20TRjgAqO31JlALlx6nTdUKUdz/8ZXxGwExf33aKk9oPjCSJpH
kttRFOmc2gjPo5kWxyAyES72zJImKioe+NPNRWE92ryy5Kr0RuoAptDlIw/DDPo8
rY+1Gw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org