Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/1/323830343a3933633a3a2f33322d3438203d3e203532383738.roa
File:                     323830343a3933633a3a2f33322d3438203d3e203532383738.roa (raw, json)
Hash identifier:          d7iG3FNKYjd6VdGn0znWl9N6jQnPHAig3cStKR5AzSQ=
Subject key identifier:   3D:46:EE:AA:F0:F3:02:0E:B0:CD:08:75:77:20:90:35:35:CE:DD:03
Certificate issuer:       /CN=E8E326619C7C719152A4AA0EDE71A409A12D0903
Certificate serial:       22376847C81820643A79A52D2F4F59F7C3587639
Authority key identifier: E8:E3:26:61:9C:7C:71:91:52:A4:AA:0E:DE:71:A4:09:A1:2D:09:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8E326619C7C719152A4AA0EDE71A409A12D0903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/1/323830343a3933633a3a2f33322d3438203d3e203532383738.roa
Signing time:             Fri 05 Apr 2024 04:22:15 +0000
ROA not before:           Fri 05 Apr 2024 04:17:15 +0000
ROA not after:            Fri 04 Apr 2025 04:22:15 +0000
asID:                     52878
IP address blocks:        2804:93c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:37:68:47:c8:18:20:64:3a:79:a5:2d:2f:4f:59:f7:c3:58:76:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8E326619C7C719152A4AA0EDE71A409A12D0903
        Validity
            Not Before: Apr  5 04:17:15 2024 GMT
            Not After : Apr  4 04:22:15 2025 GMT
        Subject: CN=3D46EEAAF0F3020EB0CD08757720903535CEDD03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:c1:4d:0f:9b:55:8d:2f:d0:04:60:00:8f:
                    98:8e:8c:f8:8f:2d:31:d9:3e:91:62:d9:cb:4f:c7:
                    31:64:96:c8:8e:d8:c0:06:14:9b:bb:76:e7:b6:10:
                    70:0d:92:83:ac:cf:0e:83:6c:66:86:6e:32:ef:55:
                    6b:ec:65:92:b1:f8:45:65:a6:e3:c5:a9:e4:30:d7:
                    9a:55:94:ba:dc:1c:ca:76:c8:1a:69:4d:52:de:77:
                    05:f2:2e:d7:3b:37:a3:76:3c:a3:23:a4:6b:7a:b6:
                    b5:8a:23:a6:d6:a3:21:4d:c1:3b:d0:b3:06:59:12:
                    60:61:9d:9f:68:e8:62:c3:d5:75:e1:6b:e0:b2:7a:
                    18:23:8b:af:c3:30:f5:42:a1:b6:9a:c0:98:46:ad:
                    21:f7:af:d7:41:47:68:27:5f:6a:74:57:f2:96:4a:
                    04:f6:b0:9e:44:1e:a7:1b:8e:3f:8d:b7:92:0d:91:
                    93:7e:73:f2:22:16:99:06:47:72:7b:ea:b6:d2:50:
                    ec:00:d0:60:01:b4:81:3a:32:f8:32:eb:ea:17:a6:
                    a1:04:88:79:4d:37:80:67:5c:bf:43:70:88:f7:06:
                    e4:d6:c4:98:8b:1b:7d:7b:0b:cd:a6:73:c1:24:16:
                    d5:0f:96:79:f9:c5:af:4a:fc:e8:37:4a:eb:18:32:
                    9d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:46:EE:AA:F0:F3:02:0E:B0:CD:08:75:77:20:90:35:35:CE:DD:03
            X509v3 Authority Key Identifier:
                keyid:E8:E3:26:61:9C:7C:71:91:52:A4:AA:0E:DE:71:A4:09:A1:2D:09:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/1/E8E326619C7C719152A4AA0EDE71A409A12D0903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8E326619C7C719152A4AA0EDE71A409A12D0903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/1/323830343a3933633a3a2f33322d3438203d3e203532383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:93c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:fb:0b:cf:4d:d6:78:80:5b:bc:0d:d9:90:88:f8:2c:05:
         5f:9f:bc:a2:f1:71:00:04:31:cb:71:0f:49:31:f4:68:61:0a:
         5c:e4:49:06:97:64:a5:2e:30:22:13:07:63:af:3d:ad:f7:9f:
         df:36:cf:d5:39:d5:b0:3a:ec:cb:8f:38:be:49:fd:b0:d3:e3:
         1c:ff:19:67:aa:b1:53:b3:b7:7e:9d:ca:d9:73:91:18:24:7d:
         b4:fe:0e:e3:95:79:82:5c:ed:5a:3c:36:c8:ee:38:fc:5e:b5:
         60:d5:59:85:fb:16:c6:b0:a3:52:e6:f9:c9:bf:b8:c8:b9:2b:
         8a:fc:1e:69:28:4f:7e:78:98:82:64:47:22:ef:b2:18:15:cb:
         1a:fd:77:0f:49:20:2f:eb:6f:6d:3e:fb:46:82:9a:79:54:cf:
         21:35:25:45:3b:61:08:14:b6:8e:43:84:16:8d:64:5c:56:fe:
         b8:f8:e2:6b:69:48:58:1f:00:ba:94:4e:72:4e:df:05:43:55:
         60:40:d4:34:2b:fa:18:99:e9:36:a8:47:56:34:ac:ee:a1:64:
         44:67:ed:74:16:0b:b4:49:e8:8b:74:05:c9:da:d9:02:02:a4:
         35:d7:d7:d9:7a:81:4d:88:ad:27:74:1d:2f:b1:f0:34:26:9e:
         e0:bd:88:35
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUIjdoR8gYIGQ6eaUtL09Z98NYdjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThFMzI2NjE5QzdDNzE5MTUyQTRBQTBFREU3MUE0MDlB
MTJEMDkwMzAeFw0yNDA0MDUwNDE3MTVaFw0yNTA0MDQwNDIyMTVaMDMxMTAvBgNV
BAMTKDNENDZFRUFBRjBGMzAyMEVCMENEMDg3NTc3MjA5MDM1MzVDRUREMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2c8FND5tVjS/QBGAAj5iOjPiP
LTHZPpFi2ctPxzFklsiO2MAGFJu7due2EHANkoOszw6DbGaGbjLvVWvsZZKx+EVl
puPFqeQw15pVlLrcHMp2yBppTVLedwXyLtc7N6N2PKMjpGt6trWKI6bWoyFNwTvQ
swZZEmBhnZ9o6GLD1XXha+Cyehgji6/DMPVCobaawJhGrSH3r9dBR2gnX2p0V/KW
SgT2sJ5EHqcbjj+Nt5INkZN+c/IiFpkGR3J76rbSUOwA0GABtIE6Mvgy6+oXpqEE
iHlNN4BnXL9DcIj3BuTWxJiLG317C82mc8EkFtUPlnn5xa9K/Og3SusYMp1HAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUPUbuqvDzAg6wzQh1dyCQNTXO3QMwHwYDVR0j
BBgwFoAU6OMmYZx8cZFSpKoO3nGkCaEtCQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1N1R1JCc2VUMm9Ea0c2NWs1VWY4WXRwVFZxRnkyWjdpcHNGUFVmQmQ2
QzQvMS9FOEUzMjY2MTlDN0M3MTkxNTJBNEFBMEVERTcxQTQwOUExMkQwOTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4RTMyNjYxOUM3QzcxOTE1
MkE0QUEwRURFNzFBNDA5QTEyRDA5MDMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dTdUdSQnNlVDJvRGtHNjVrNVVmOFl0cFRWcUZ5Mlo3aXBzRlBVZkJkNkM0LzEv
MzIzODMwMzQzYTM5MzM2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzODM3
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAk8MA0GCSqGSIb3DQEBCwUAA4IBAQA9BvsLz03WeIBb
vA3ZkIj4LAVfn7yi8XEABDHLcQ9JMfRoYQpc5EkGl2SlLjAiEwdjrz2t95/fNs/V
OdWwOuzLjzi+Sf2w0+Mc/xlnqrFTs7d+ncrZc5EYJH20/g7jlXmCXO1aPDbI7jj8
XrVg1VmF+xbGsKNS5vnJv7jIuSuK/B5pKE9+eJiCZEci77IYFcsa/XcPSSAv629t
PvtGgpp5VM8hNSVFO2EIFLaOQ4QWjWRcVv64+OJraUhYHwC6lE5yTt8FQ1VgQNQ0
K/oYmek2qEdWNKzuoWREZ+10Fgu0SeiLdAXJ2tkCAqQ119fZeoFNiK0ndB0vsfA0
Jp7gvYg1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org