Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/323830343a353236633a3a2f33322d3438203d3e20323638353137.roa
File:                     323830343a353236633a3a2f33322d3438203d3e20323638353137.roa (raw, json)
Hash identifier:          4Pk0N7OlxQLY66UycsL+SE4EDa+38A3vMB1rM54zJZI=
Subject key identifier:   39:22:8C:C7:1E:40:00:C0:FE:EF:BE:8F:E7:16:33:94:26:7E:9E:C9
Certificate issuer:       /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial:       7A809DADC02BA0FA613E1B8428F133A3C081E895
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/323830343a353236633a3a2f33322d3438203d3e20323638353137.roa
Signing time:             Thu 11 Apr 2024 10:41:48 +0000
ROA not before:           Thu 11 Apr 2024 10:36:48 +0000
ROA not after:            Thu 10 Apr 2025 10:41:48 +0000
asID:                     268517
IP address blocks:        2804:526c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:80:9d:ad:c0:2b:a0:fa:61:3e:1b:84:28:f1:33:a3:c0:81:e8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
        Validity
            Not Before: Apr 11 10:36:48 2024 GMT
            Not After : Apr 10 10:41:48 2025 GMT
        Subject: CN=39228CC71E4000C0FEEFBE8FE7163394267E9EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:e9:e6:1f:e2:06:c3:e9:ac:49:20:af:bd:
                    fe:ba:16:a5:2c:0a:0a:d6:f1:f6:09:e6:c1:e2:ff:
                    7c:ea:11:89:6f:46:e4:63:e2:35:2e:3b:ad:8d:0f:
                    17:d2:21:63:0e:ef:5c:29:16:b6:af:8d:b9:7e:5b:
                    99:31:f4:77:5c:b2:be:ca:92:f9:d5:a6:2b:f8:c8:
                    b7:cf:36:fc:d1:f4:1b:b2:72:c3:07:07:e5:6c:54:
                    ea:af:d4:56:bf:6a:82:b9:5a:6c:de:2f:74:96:38:
                    96:58:da:ec:ec:b9:9f:63:4e:8b:bc:5b:38:c1:ab:
                    33:71:7f:9e:9d:97:24:2e:63:1b:2b:2d:55:bd:12:
                    bb:ae:51:c7:41:03:fe:c0:fc:d6:de:a3:54:f1:e0:
                    24:2a:9f:5c:13:a8:83:c4:66:75:2c:86:33:6f:36:
                    ea:3c:8a:21:46:31:d5:fe:9d:13:e0:a6:fa:55:54:
                    5d:12:b4:a2:ca:69:09:d4:34:5e:fe:e3:3d:cd:54:
                    b1:c3:bb:f3:e7:62:a5:c5:a0:4e:81:fe:c3:b8:db:
                    30:ce:0e:bd:ed:94:ec:9c:bb:ec:6b:4c:9e:4c:20:
                    1f:68:ef:e7:be:92:33:bc:1d:1d:48:1f:b5:f6:0a:
                    08:e9:cb:70:bc:2d:a4:29:90:d5:07:8d:b8:bc:60:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:22:8C:C7:1E:40:00:C0:FE:EF:BE:8F:E7:16:33:94:26:7E:9E:C9
            X509v3 Authority Key Identifier:
                keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/323830343a353236633a3a2f33322d3438203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:526c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:e9:36:80:a7:e6:14:58:2a:40:a4:09:9b:f4:6d:46:11:
         05:0e:28:cd:eb:9b:27:aa:11:1a:9a:19:48:3d:85:94:3a:e7:
         39:0f:f7:04:8b:99:8d:b7:37:44:eb:de:69:8e:e9:2c:0a:19:
         4a:b3:71:19:83:ea:0b:db:24:f4:40:0e:3a:e4:6e:e0:50:35:
         eb:18:e7:8a:35:5c:fe:a9:78:ba:72:fb:ee:68:a4:be:ea:60:
         18:9f:b1:dd:d5:2d:4b:01:47:ca:b6:5c:df:15:35:09:ee:d6:
         30:ce:bc:72:20:55:a9:6b:96:bd:41:6b:df:b8:fc:fc:ba:54:
         74:cb:db:d3:ae:e2:d4:02:54:aa:7d:2d:16:28:a4:d5:3e:31:
         db:cd:33:f5:a9:9b:0f:2e:d0:95:20:1e:2b:f6:09:34:8b:a6:
         42:70:db:3f:18:dd:60:e9:77:cc:fc:47:7b:f9:5c:eb:a9:c0:
         10:35:06:1d:93:23:e6:22:fa:1f:ef:02:c0:55:9d:11:34:38:
         72:65:2f:53:2d:5b:85:61:90:da:bb:26:0f:48:41:49:a3:0d:
         f6:ae:fa:b8:d3:e6:5a:a9:36:54:83:eb:7e:6f:79:5c:1e:50:
         d5:c0:1d:ed:cc:fd:e0:87:7e:7b:dc:7c:93:ed:e7:d8:3b:4e:
         9d:40:75:f5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeoCdrcAroPphPhuEKPEzo8CB6JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAyOUEzRTc0Nzg5OTg0OTNEOTZEMEQ2QjlDMjEyQ0RD
NTUzMDY1OTAeFw0yNDA0MTExMDM2NDhaFw0yNTA0MTAxMDQxNDhaMDMxMTAvBgNV
BAMTKDM5MjI4Q0M3MUU0MDAwQzBGRUVGQkU4RkU3MTYzMzk0MjY3RTlFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQenmH+IGw+msSSCvvf66FqUs
CgrW8fYJ5sHi/3zqEYlvRuRj4jUuO62NDxfSIWMO71wpFravjbl+W5kx9Hdcsr7K
kvnVpiv4yLfPNvzR9BuycsMHB+VsVOqv1Fa/aoK5WmzeL3SWOJZY2uzsuZ9jTou8
WzjBqzNxf56dlyQuYxsrLVW9EruuUcdBA/7A/Nbeo1Tx4CQqn1wTqIPEZnUshjNv
Nuo8iiFGMdX+nRPgpvpVVF0StKLKaQnUNF7+4z3NVLHDu/PnYqXFoE6B/sO42zDO
Dr3tlOycu+xrTJ5MIB9o7+e+kjO8HR1IH7X2Cgjpy3C8LaQpkNUHjbi8YKefAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOSKMxx5AAMD+776P5xYzlCZ+nskwHwYDVR0j
BBgwFoAU0Cmj50eJmEk9ltDWucISzcVTBlkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE5hcU4zcmRrQU5QcVFkdzhkZmthZFF2UUdWcTFRb1RBMkJzaUJUZHNn
a1QvMS9EMDI5QTNFNzQ3ODk5ODQ5M0Q5NkQwRDZCOUMyMTJDREM1NTMwNjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwMjlBM0U3NDc4OTk4NDkz
RDk2RDBENkI5QzIxMkNEQzU1MzA2NTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hOYXFOM3Jka0FOUHFRZHc4ZGZrYWRRdlFHVnExUW9UQTJCc2lCVGRzZ2tULzEv
MzIzODMwMzQzYTM1MzIzNjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARSbDANBgkqhkiG9w0BAQsFAAOCAQEALSfpNoCn
5hRYKkCkCZv0bUYRBQ4ozeubJ6oRGpoZSD2FlDrnOQ/3BIuZjbc3ROveaY7pLAoZ
SrNxGYPqC9sk9EAOOuRu4FA16xjnijVc/ql4unL77mikvupgGJ+x3dUtSwFHyrZc
3xU1Ce7WMM68ciBVqWuWvUFr37j8/LpUdMvb067i1AJUqn0tFiik1T4x280z9amb
Dy7QlSAeK/YJNIumQnDbPxjdYOl3zPxHe/lc66nAEDUGHZMj5iL6H+8CwFWdETQ4
cmUvUy1bhWGQ2rsmD0hBSaMN9q76uNPmWqk2VIPrfm95XB5Q1cAd7cz94Id+e9x8
k+3n2DtOnUB19Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org