Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a383030303a3a2f33342d3334203d3e203631383835.roa
File:                     323830343a316163383a383030303a3a2f33342d3334203d3e203631383835.roa (raw, json)
Hash identifier:          8uAvm7jnzS6vW1BgTHkaBe4lCbZOrCJc3vWYPZpt5bc=
Subject key identifier:   0D:B3:AC:8E:22:16:D3:E7:F1:4D:74:F9:98:E5:8D:3D:AA:BB:AC:A6
Certificate issuer:       /CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
Certificate serial:       4B503EF888DD19A67995441C901782A0282BE8D1
Authority key identifier: DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a383030303a3a2f33342d3334203d3e203631383835.roa
Signing time:             Tue 27 Feb 2024 15:17:40 +0000
ROA not before:           Tue 27 Feb 2024 15:12:40 +0000
ROA not after:            Tue 25 Feb 2025 15:17:40 +0000
asID:                     61885
IP address blocks:        2804:1ac8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:50:3e:f8:88:dd:19:a6:79:95:44:1c:90:17:82:a0:28:2b:e8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
        Validity
            Not Before: Feb 27 15:12:40 2024 GMT
            Not After : Feb 25 15:17:40 2025 GMT
        Subject: CN=0DB3AC8E2216D3E7F14D74F998E58D3DAABBACA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:76:93:eb:65:2b:92:c5:f6:31:14:d0:5d:
                    e2:3a:0e:6a:bf:4d:79:f7:f9:35:d8:da:b5:7b:e8:
                    61:2e:d2:76:ce:92:26:4a:c3:25:65:af:2e:83:31:
                    1e:f4:c8:df:c5:af:1e:c8:48:56:30:91:59:7e:70:
                    62:9f:e6:c8:3b:3a:dd:3c:03:e4:a3:99:50:13:df:
                    c9:a6:0c:ed:0a:25:35:6e:53:59:63:0f:08:67:6e:
                    01:b6:73:53:7b:f7:9b:fb:59:ba:01:47:2a:dc:6c:
                    6d:5a:fb:b6:20:84:2c:03:bb:ce:a7:63:1f:24:fe:
                    ba:9a:1f:b2:7b:d2:fc:a7:db:4a:da:a9:85:87:d5:
                    c8:8b:54:d1:2a:03:d8:f9:c8:9e:56:ac:ec:d6:3e:
                    ee:b5:2b:18:47:fe:bc:80:88:27:5e:b9:05:18:f2:
                    44:f1:9b:02:00:a8:6a:32:e6:21:28:9d:e3:94:2b:
                    ce:10:84:74:ff:7d:4a:2b:ec:99:ec:d6:5f:c2:83:
                    ae:d4:94:44:03:92:fc:01:35:95:bd:23:34:8c:46:
                    7a:d8:4d:ed:f7:db:6e:46:aa:9e:20:79:01:69:43:
                    51:7d:b7:95:83:4c:9e:6d:ba:47:8f:1d:80:0e:d5:
                    f6:12:bd:65:d3:e7:cf:81:d1:1d:12:65:9d:66:ba:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:AC:8E:22:16:D3:E7:F1:4D:74:F9:98:E5:8D:3D:AA:BB:AC:A6
            X509v3 Authority Key Identifier:
                keyid:DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a383030303a3a2f33342d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:dd:42:45:8f:f9:3c:15:8f:f0:44:95:c4:40:be:d1:4e:
         23:e1:4c:9a:1a:6d:1a:e9:55:00:d7:f3:7e:66:fd:b2:d4:b1:
         5f:e3:44:57:fc:8f:60:4b:ca:79:0f:ca:4d:a0:f8:c8:9d:68:
         c6:21:3a:3a:1d:a5:ed:7d:51:77:dc:6e:36:dc:bd:b0:89:5f:
         9a:bc:ec:45:b0:f9:95:f9:de:a0:91:14:38:5f:93:cb:a2:b9:
         30:da:7a:04:b8:cb:04:b3:e7:69:68:c5:b9:45:c0:e5:8b:fe:
         1e:9f:dd:e5:e2:00:32:9e:d2:ce:12:b9:7f:29:4b:d3:4f:0e:
         e8:1b:2a:c6:af:ce:14:29:e0:6e:a4:42:d0:c1:02:f6:d3:11:
         69:53:92:d7:f2:97:f4:03:c9:b8:a7:2b:3b:2d:04:a3:9b:4f:
         b9:cb:35:99:3f:dd:77:5f:1b:d5:72:9a:bc:60:8f:74:6c:1d:
         5a:49:66:b9:bb:50:0f:f1:55:e3:af:5c:4e:80:7c:80:0c:7f:
         52:8d:b2:0c:5b:27:95:42:c9:4e:55:d4:95:09:ae:f7:bd:e5:
         87:a1:47:4d:7e:27:fa:d3:aa:94:ef:84:4c:7f:3b:3e:97:fe:
         bf:4d:f9:01:e9:f4:4d:36:25:f1:fc:08:ef:a1:18:d9:e2:63:
         71:73:1e:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS1A++IjdGaZ5lUQckBeCoCgr6NEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZBNjM4QTZFNDFGN0FGNzk3ODM1N0U4Qjg0MzRCMkI5
NUM5MDhFRjAeFw0yNDAyMjcxNTEyNDBaFw0yNTAyMjUxNTE3NDBaMDMxMTAvBgNV
BAMTKDBEQjNBQzhFMjIxNkQzRTdGMTRENzRGOTk4RTU4RDNEQUFCQkFDQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWHaT62UrksX2MRTQXeI6Dmq/
TXn3+TXY2rV76GEu0nbOkiZKwyVlry6DMR70yN/Frx7ISFYwkVl+cGKf5sg7Ot08
A+SjmVAT38mmDO0KJTVuU1ljDwhnbgG2c1N795v7WboBRyrcbG1a+7YghCwDu86n
Yx8k/rqaH7J70vyn20raqYWH1ciLVNEqA9j5yJ5WrOzWPu61KxhH/ryAiCdeuQUY
8kTxmwIAqGoy5iEoneOUK84QhHT/fUor7Jns1l/Cg67UlEQDkvwBNZW9IzSMRnrY
Te33225Gqp4geQFpQ1F9t5WDTJ5tukePHYAO1fYSvWXT58+B0R0SZZ1muk0PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDbOsjiIW0+fxTXT5mOWNPaq7rKYwHwYDVR0j
BBgwFoAU36Y4puQfeveXg1fouENLK5XJCO8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5
ZHQvMC9ERkE2MzhBNkU0MUY3QUY3OTc4MzU3RThCODQzNEIyQjk1QzkwOEVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RGQTYzOEE2RTQxRjdBRjc5
NzgzNTdFOEI4NDM0QjJCOTVDOTA4RUYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hES1NpczdZQU5GdWpyOWRMRUdWZkZnaUdHOTlneVpwUVc3cXZBdGphOWR0LzAv
MzIzODMwMzQzYTMxNjE2MzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzODM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBrIgDANBgkqhkiG9w0BAQsFAAOC
AQEAN7jdQkWP+TwVj/BElcRAvtFOI+FMmhptGulVANfzfmb9stSxX+NEV/yPYEvK
eQ/KTaD4yJ1oxiE6Oh2l7X1Rd9xuNty9sIlfmrzsRbD5lfneoJEUOF+Ty6K5MNp6
BLjLBLPnaWjFuUXA5Yv+Hp/d5eIAMp7SzhK5fylL008O6Bsqxq/OFCngbqRC0MEC
9tMRaVOS1/KX9APJuKcrOy0Eo5tPucs1mT/dd18b1XKavGCPdGwdWklmubtQD/FV
469cToB8gAx/Uo2yDFsnlULJTlXUlQmu973lh6FHTX4n+tOqlO+ETH87Ppf+v035
Aen0TTYl8fwI76EY2eJjcXMeMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org