Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3332203d3e20323638373838.roa
File:                     323830343a356161633a3a2f33322d3332203d3e20323638373838.roa (raw, json)
Hash identifier:          CfvlxLLxde3TUfbT/l+f5JjYZmH8QcKPgeD5wLR45V4=
Subject key identifier:   3B:25:AA:B0:61:53:C4:5F:65:7A:A9:7F:7D:1F:03:86:F4:B0:75:9F
Certificate issuer:       /CN=30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713
Certificate serial:       0EF09CE5AF1433F96DD5F6BB2EFB656D0AD23BBB
Authority key identifier: 30:BB:88:BC:1F:4F:C8:5B:1F:7A:2E:DB:16:61:7D:87:C2:AB:67:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3332203d3e20323638373838.roa
Signing time:             Tue 26 Sep 2023 20:57:43 +0000
ROA not before:           Tue 26 Sep 2023 20:52:43 +0000
ROA not after:            Tue 24 Sep 2024 20:57:43 +0000
asID:                     268788
IP address blocks:        2804:5aac::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f0:9c:e5:af:14:33:f9:6d:d5:f6:bb:2e:fb:65:6d:0a:d2:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713
        Validity
            Not Before: Sep 26 20:52:43 2023 GMT
            Not After : Sep 24 20:57:43 2024 GMT
        Subject: CN=3B25AAB06153C45F657AA97F7D1F0386F4B0759F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:bd:ff:eb:3b:1f:b8:d8:e1:ce:2e:99:f8:
                    13:38:db:81:9e:5d:5a:5f:0e:5a:9e:07:e1:00:3e:
                    6c:40:d1:4a:5f:2f:71:ae:cc:72:d0:36:98:0c:93:
                    eb:ef:a2:c9:91:91:b6:30:71:38:c7:3f:6d:74:4b:
                    8e:9d:ee:92:f3:7e:c5:1e:a0:0d:1a:99:6d:b5:bf:
                    ce:e3:97:7a:58:ec:66:08:ec:1a:42:03:31:79:35:
                    1a:5a:d1:04:0b:36:75:fe:2b:30:60:76:f6:ac:14:
                    76:7a:6c:b7:ef:2a:70:71:1c:98:0e:06:20:73:e1:
                    e4:c6:b6:5a:83:f5:6f:ba:43:d5:42:aa:e4:50:3c:
                    44:60:d7:30:3a:6c:4d:3c:8a:9c:86:1c:12:d3:8c:
                    81:47:ed:9e:d2:2f:56:af:eb:02:06:2f:b8:8f:b5:
                    f6:26:7f:c3:23:15:4d:3b:83:62:af:10:f4:1a:4c:
                    50:14:b4:9e:ea:d6:d8:8f:73:d0:c6:85:f1:62:f1:
                    20:f8:ff:d7:62:b8:8d:0b:c4:be:2c:18:02:a2:25:
                    a4:5b:72:a1:0c:cc:1d:bc:f4:40:da:4a:73:ec:e1:
                    08:a3:ff:d1:34:34:f2:87:21:be:c5:ca:da:31:2d:
                    78:3e:00:4b:d9:c9:5f:38:e0:c9:2e:3e:0e:79:5c:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:25:AA:B0:61:53:C4:5F:65:7A:A9:7F:7D:1F:03:86:F4:B0:75:9F
            X509v3 Authority Key Identifier:
                keyid:30:BB:88:BC:1F:4F:C8:5B:1F:7A:2E:DB:16:61:7D:87:C2:AB:67:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3332203d3e20323638373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aac::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:c4:d2:bf:ce:bb:19:b5:f0:2d:ed:6e:2f:d0:1f:e2:96:7c:
         1a:4d:f4:46:16:b2:e2:de:06:4d:0f:ce:97:b9:8d:85:a3:20:
         a0:3c:80:b1:fa:76:46:8f:ec:7b:65:dd:91:e6:e3:26:b9:71:
         eb:ce:c9:08:24:71:a8:50:79:c0:90:8a:78:d5:c1:2e:ed:91:
         6c:54:78:12:84:23:f3:c3:98:fb:59:40:dc:aa:9a:d6:5f:37:
         18:e3:64:c8:88:df:e7:1a:6f:f2:39:83:8f:09:4d:27:58:08:
         f9:7d:07:67:bb:f8:1b:3d:a2:47:37:cd:bf:bf:49:0c:a6:da:
         11:88:3b:f0:a4:2b:52:15:79:bd:5f:b1:16:4f:7b:b7:1e:bf:
         12:15:9c:a7:f2:3f:d3:58:0b:47:42:85:cf:e4:9e:fe:8f:e3:
         0b:d9:01:84:fe:e0:f1:bc:ac:61:a6:75:41:19:4c:08:ee:ce:
         5e:a6:8e:04:18:d6:24:b8:18:fa:d2:3e:2c:22:41:5f:e4:16:
         64:f6:76:9a:79:81:0d:e2:74:66:0b:39:65:5f:de:3d:3c:a7:
         8b:b2:55:f8:b3:6e:72:e3:9a:7a:52:3f:3c:5b:b2:96:40:9b:
         75:1a:a0:3a:e4:36:85:23:9e:ab:ea:9b:cb:38:dc:b8:2d:79:
         55:b6:16:8a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDvCc5a8UM/lt1fa7LvtlbQrSO7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCQjg4QkMxRjRGQzg1QjFGN0EyRURCMTY2MTdEODdD
MkFCNjcxMzAeFw0yMzA5MjYyMDUyNDNaFw0yNDA5MjQyMDU3NDNaMDMxMTAvBgNV
BAMTKDNCMjVBQUIwNjE1M0M0NUY2NTdBQTk3RjdEMUYwMzg2RjRCMDc1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBr3/6zsfuNjhzi6Z+BM424Ge
XVpfDlqeB+EAPmxA0UpfL3GuzHLQNpgMk+vvosmRkbYwcTjHP210S46d7pLzfsUe
oA0amW21v87jl3pY7GYI7BpCAzF5NRpa0QQLNnX+KzBgdvasFHZ6bLfvKnBxHJgO
BiBz4eTGtlqD9W+6Q9VCquRQPERg1zA6bE08ipyGHBLTjIFH7Z7SL1av6wIGL7iP
tfYmf8MjFU07g2KvEPQaTFAUtJ7q1tiPc9DGhfFi8SD4/9diuI0LxL4sGAKiJaRb
cqEMzB289EDaSnPs4Qij/9E0NPKHIb7FytoxLXg+AEvZyV844MkuPg55XHg5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOyWqsGFTxF9leql/fR8DhvSwdZ8wHwYDVR0j
BBgwFoAUMLuIvB9PyFsfei7bFmF9h8KrZxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq
QkUvMC8zMEJCODhCQzFGNEZDODVCMUY3QTJFREIxNjYxN0Q4N0MyQUI2NzEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwQkI4OEJDMUY0RkM4NUIx
RjdBMkVEQjE2NjE3RDg3QzJBQjY3MTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDV1prd0VVZzJ4c2pLSnhuUzdwNThOOEJYQ2tYYnppc0R3WHBvUDVnakJFLzAv
MzIzODMwMzQzYTM1NjE2MTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzczODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARarDANBgkqhkiG9w0BAQsFAAOCAQEAkcTSv867
GbXwLe1uL9Af4pZ8Gk30Rhay4t4GTQ/Ol7mNhaMgoDyAsfp2Ro/se2XdkebjJrlx
687JCCRxqFB5wJCKeNXBLu2RbFR4EoQj88OY+1lA3Kqa1l83GONkyIjf5xpv8jmD
jwlNJ1gI+X0HZ7v4Gz2iRzfNv79JDKbaEYg78KQrUhV5vV+xFk97tx6/EhWcp/I/
01gLR0KFz+Se/o/jC9kBhP7g8bysYaZ1QRlMCO7OXqaOBBjWJLgY+tI+LCJBX+QW
ZPZ2mnmBDeJ0Zgs5ZV/ePTyni7JV+LNucuOaelI/PFuylkCbdRqgOuQ2hSOeq+qb
yzjcuC15VbYWig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org