Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
File:                     323830343a6631383a3a2f33322d3438203d3e20323633353636.roa (raw, json)
Hash identifier:          OfBZ7UUD/7SDXF/GTM1TaB6USoeDAvVChlwXLbJn5Qk=
Subject key identifier:   58:C1:7F:00:96:71:BA:1D:C1:58:D8:E3:F7:03:87:BA:43:F7:DC:37
Certificate issuer:       /CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Certificate serial:       494D9B261D6B7BED24903B3046009F2D53622B83
Authority key identifier: 38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
Signing time:             Wed 20 Dec 2023 15:04:10 +0000
ROA not before:           Wed 20 Dec 2023 14:59:10 +0000
ROA not after:            Wed 18 Dec 2024 15:04:10 +0000
asID:                     263566
IP address blocks:        2804:f18::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4d:9b:26:1d:6b:7b:ed:24:90:3b:30:46:00:9f:2d:53:62:2b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
        Validity
            Not Before: Dec 20 14:59:10 2023 GMT
            Not After : Dec 18 15:04:10 2024 GMT
        Subject: CN=58C17F009671BA1DC158D8E3F70387BA43F7DC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:ec:ba:d9:21:c0:9d:8a:3f:05:0f:d3:b5:
                    a3:df:f5:c4:a4:97:ca:6c:3b:89:d4:1e:ee:88:c7:
                    15:8e:6f:3b:82:80:83:76:ea:f6:7d:3d:8f:3f:c5:
                    c8:ec:d6:4d:65:7f:8b:de:8d:b5:79:8a:da:86:a8:
                    ba:60:54:ae:4b:8c:8a:5b:d6:6a:d2:6b:58:2d:b8:
                    c1:98:78:7f:66:cf:a1:82:44:76:d0:fb:99:7a:45:
                    68:f5:b4:7f:12:b2:db:3e:9e:1e:92:e7:96:8d:30:
                    2f:a6:9f:e6:74:e8:61:38:f7:4a:de:ec:8a:96:a8:
                    8b:8e:e0:e4:06:1e:6c:93:ef:84:6c:67:03:04:47:
                    45:f4:57:38:9c:2b:eb:cc:94:3b:3a:b3:f3:81:7b:
                    03:33:d2:03:02:c3:5e:ac:bb:3e:86:f4:bc:5c:c1:
                    a5:fb:1c:3a:5b:16:31:a3:86:54:8e:6e:70:64:d1:
                    f1:63:c0:32:1f:06:7d:11:4e:41:80:73:d2:da:da:
                    f1:0b:4e:90:c8:0c:77:de:08:ac:b0:4d:c9:c0:57:
                    91:5c:c8:ef:df:77:7b:bb:13:3d:6f:be:45:7f:7b:
                    40:57:9d:e5:12:14:75:11:0d:f8:c7:d2:91:79:d8:
                    5f:bb:88:11:fc:5e:ec:88:a6:46:cd:11:a4:9b:15:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C1:7F:00:96:71:BA:1D:C1:58:D8:E3:F7:03:87:BA:43:F7:DC:37
            X509v3 Authority Key Identifier:
                keyid:38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:c4:50:1a:42:34:af:7f:ef:24:e9:e4:97:70:2d:9d:74:
         ad:e4:95:26:31:b8:db:30:51:1a:e8:d1:51:2b:e9:65:0c:c8:
         14:03:07:f4:cc:14:50:34:ad:65:25:63:53:15:3b:15:e1:67:
         76:d7:05:6d:cc:fb:aa:09:79:c4:98:6b:53:01:45:fa:e1:49:
         5e:21:ba:1b:31:77:5a:6b:21:bc:eb:1b:02:14:bb:d8:dc:c8:
         46:83:10:1f:54:84:b8:4a:15:5e:8c:b4:97:83:37:cf:d5:0f:
         d4:2b:cd:e6:ce:9c:65:15:6f:40:e1:ab:10:34:f2:0c:85:de:
         c7:86:13:6b:8a:e6:1b:bc:94:6e:87:b9:1c:fa:b1:ae:db:74:
         81:dc:5e:4c:4b:84:7b:e4:45:ec:6f:97:2b:7d:28:f0:d6:21:
         5a:10:db:bf:73:a9:c1:2a:f8:5c:3b:59:e5:de:0e:a0:7f:aa:
         62:ea:4e:89:75:bf:18:0b:93:61:37:37:a2:a7:17:01:2b:4d:
         ef:b2:1e:42:8b:f7:c8:78:96:3a:bb:93:9e:4e:62:96:8f:fc:
         08:23:d3:3b:9b:a1:6d:59:6d:bd:36:91:b7:a4:c5:15:40:38:
         32:b7:90:ef:3f:32:64:04:25:e9:4c:80:39:a5:14:59:c0:4b:
         e9:81:03:ee
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSU2bJh1re+0kkDswRgCfLVNiK4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFMjI0MjAzRDAwMzcxMTFCRjY4RjMxN0FBNUI3OUZB
QjNFRkI3NzAeFw0yMzEyMjAxNDU5MTBaFw0yNDEyMTgxNTA0MTBaMDMxMTAvBgNV
BAMTKDU4QzE3RjAwOTY3MUJBMURDMTU4RDhFM0Y3MDM4N0JBNDNGN0RDMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR7ey62SHAnYo/BQ/TtaPf9cSk
l8psO4nUHu6IxxWObzuCgIN26vZ9PY8/xcjs1k1lf4vejbV5itqGqLpgVK5LjIpb
1mrSa1gtuMGYeH9mz6GCRHbQ+5l6RWj1tH8Ssts+nh6S55aNMC+mn+Z06GE490re
7IqWqIuO4OQGHmyT74RsZwMER0X0VzicK+vMlDs6s/OBewMz0gMCw16suz6G9Lxc
waX7HDpbFjGjhlSObnBk0fFjwDIfBn0RTkGAc9La2vELTpDIDHfeCKywTcnAV5Fc
yO/fd3u7Ez1vvkV/e0BXneUSFHURDfjH0pF52F+7iBH8XuyIpkbNEaSbFZKZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWMF/AJZxuh3BWNjj9wOHukP33DcwHwYDVR0j
BBgwFoAUOOIkID0ANxEb9o8xeqW3n6s++3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFw
c2QvMC8zOEUyMjQyMDNEMDAzNzExMUJGNjhGMzE3QUE1Qjc5RkFCM0VGQjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4RTIyNDIwM0QwMDM3MTEx
QkY2OEYzMTdBQTVCNzlGQUIzRUZCNzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0YWZYcmVQZVltYlJDMmlpZVVOWHliRlV3cHdlOHFudHZ2MmkyckpBcHNkLzAv
MzIzODMwMzQzYTY2MzEzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM1
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDxgwDQYJKoZIhvcNAQELBQADggEBAAH7xFAaQjSv
f+8k6eSXcC2ddK3klSYxuNswURro0VEr6WUMyBQDB/TMFFA0rWUlY1MVOxXhZ3bX
BW3M+6oJecSYa1MBRfrhSV4huhsxd1prIbzrGwIUu9jcyEaDEB9UhLhKFV6MtJeD
N8/VD9QrzebOnGUVb0DhqxA08gyF3seGE2uK5hu8lG6HuRz6sa7bdIHcXkxLhHvk
Rexvlyt9KPDWIVoQ279zqcEq+Fw7WeXeDqB/qmLqTol1vxgLk2E3N6KnFwErTe+y
HkKL98h4ljq7k55OYpaP/Agj0zuboW1Zbb02kbekxRVAODK3kO8/MmQEJelMgDml
FFnAS+mBA+4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org