Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa
File:                     323830343a346564383a3a2f33322d3438203d3e20323638323836.roa (raw, json)
Hash identifier:          xQXdq0/E6gl/Wcr8n012A6VT+LYYdO7JTuneGbFkKH8=
Subject key identifier:   F0:E3:41:1B:62:F0:3C:FC:90:97:1C:FC:BC:9F:F7:0E:0B:48:18:5B
Certificate issuer:       /CN=3832929AE6AF0F77BC724C2E06806883AB2AC9A0
Certificate serial:       74FC489A7060992CD4E1AD1ED409F06C6C15A798
Authority key identifier: 38:32:92:9A:E6:AF:0F:77:BC:72:4C:2E:06:80:68:83:AB:2A:C9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa
Signing time:             Tue 19 Mar 2024 13:32:31 +0000
ROA not before:           Tue 19 Mar 2024 13:27:31 +0000
ROA not after:            Tue 18 Mar 2025 13:32:31 +0000
asID:                     268286
IP address blocks:        2804:4ed8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fc:48:9a:70:60:99:2c:d4:e1:ad:1e:d4:09:f0:6c:6c:15:a7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3832929AE6AF0F77BC724C2E06806883AB2AC9A0
        Validity
            Not Before: Mar 19 13:27:31 2024 GMT
            Not After : Mar 18 13:32:31 2025 GMT
        Subject: CN=F0E3411B62F03CFC90971CFCBC9FF70E0B48185B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:ba:98:4b:9b:e6:a7:d3:4a:2e:27:d8:01:
                    a3:38:4d:8c:bb:7c:03:b7:53:40:a6:54:fb:5e:f2:
                    96:74:d0:04:e8:ce:5d:6e:26:9b:52:f9:89:c6:64:
                    6d:68:1c:0a:fe:43:0f:58:f1:d4:df:0f:47:68:bf:
                    2f:35:17:c1:86:5f:a6:0f:af:a3:d6:61:0d:80:b4:
                    6f:59:90:46:92:23:70:bf:ba:c3:ba:e8:e7:a5:78:
                    4f:65:1d:9d:29:c3:43:2d:b0:9a:5b:5e:a2:5a:4d:
                    1d:0f:41:38:d1:22:86:b8:36:5e:bc:9d:0d:8b:fe:
                    84:03:07:4a:fe:33:4f:20:59:0e:94:79:c9:ac:09:
                    e2:2a:fc:e0:4e:e5:07:28:c4:05:2b:77:b4:36:ac:
                    f5:ff:8f:7d:f9:29:6d:6d:de:07:3a:53:f9:ea:6e:
                    4d:27:f2:21:91:31:3a:10:77:0e:05:b9:ea:4c:88:
                    2f:59:f8:0b:f2:a3:0d:28:f2:54:c7:01:5d:8d:d2:
                    ed:c4:f3:1a:20:8c:66:ea:b6:c9:d2:15:08:80:14:
                    1f:aa:1b:fa:dc:21:13:81:ae:94:09:b9:a9:2e:1e:
                    77:da:dd:07:6b:14:54:96:db:30:48:a3:d0:9d:62:
                    a2:a0:a8:fd:08:66:8f:af:1f:42:06:60:8d:41:01:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E3:41:1B:62:F0:3C:FC:90:97:1C:FC:BC:9F:F7:0E:0B:48:18:5B
            X509v3 Authority Key Identifier:
                keyid:38:32:92:9A:E6:AF:0F:77:BC:72:4C:2E:06:80:68:83:AB:2A:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3832929AE6AF0F77BC724C2E06806883AB2AC9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:cc:df:50:c5:77:71:84:b0:27:b7:fb:23:60:a2:81:10:f0:
         1d:66:27:c8:74:0e:83:ee:ba:40:7a:db:37:b6:e9:0c:61:21:
         8a:f5:63:b9:6b:ec:fc:42:8c:c1:a8:70:c9:c4:c4:14:45:78:
         b7:22:ec:a5:eb:bc:fb:c3:54:62:ce:a4:eb:c7:d3:ea:ee:15:
         ce:f4:6c:be:da:42:2b:19:ef:1c:48:72:7c:aa:f5:e8:dd:a8:
         5e:db:5a:98:51:be:18:72:8b:f1:49:a5:31:76:b0:1e:16:46:
         bd:af:94:cd:45:10:fe:11:01:90:4f:de:11:93:9a:73:df:72:
         e6:2e:cc:7e:a0:1c:06:cf:b4:94:44:30:00:08:d1:84:76:98:
         a9:69:bb:20:df:a0:51:3c:c6:f9:01:54:77:0e:40:88:63:1f:
         ea:a4:54:1b:b6:f3:ac:cf:7c:55:9c:ea:4e:64:ea:0a:df:c2:
         a8:c9:fa:b5:67:a7:3e:d9:7f:72:b9:1b:98:96:24:14:1b:1d:
         bb:25:e5:e8:a9:f1:86:95:1b:3a:10:52:04:2a:e7:98:7d:35:
         ab:0c:5a:f7:e4:91:44:36:b2:4a:aa:04:44:3e:8f:b2:ca:94:
         29:96:0d:51:c8:bc:24:6a:52:c9:7b:f0:f0:aa:49:14:96:7e:
         46:7d:73:ba
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdPxImnBgmSzU4a0e1AnwbGwVp5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgzMjkyOUFFNkFGMEY3N0JDNzI0QzJFMDY4MDY4ODNB
QjJBQzlBMDAeFw0yNDAzMTkxMzI3MzFaFw0yNTAzMTgxMzMyMzFaMDMxMTAvBgNV
BAMTKEYwRTM0MTFCNjJGMDNDRkM5MDk3MUNGQ0JDOUZGNzBFMEI0ODE4NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+rqYS5vmp9NKLifYAaM4TYy7
fAO3U0CmVPte8pZ00ATozl1uJptS+YnGZG1oHAr+Qw9Y8dTfD0dovy81F8GGX6YP
r6PWYQ2AtG9ZkEaSI3C/usO66OeleE9lHZ0pw0MtsJpbXqJaTR0PQTjRIoa4Nl68
nQ2L/oQDB0r+M08gWQ6UecmsCeIq/OBO5QcoxAUrd7Q2rPX/j335KW1t3gc6U/nq
bk0n8iGRMToQdw4FuepMiC9Z+Avyow0o8lTHAV2N0u3E8xogjGbqtsnSFQiAFB+q
G/rcIROBrpQJuakuHnfa3QdrFFSW2zBIo9CdYqKgqP0IZo+vH0IGYI1BAd0BAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8ONBG2LwPPyQlxz8vJ/3DgtIGFswHwYDVR0j
BBgwFoAUODKSmuavD3e8ckwuBoBog6sqyaAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFQ5WUNGVjJoTXF5dkdNNUtWSHVuR3lyamdiWFBVTXBXaEhMUEp6YmRo
QzMvMC8zODMyOTI5QUU2QUYwRjc3QkM3MjRDMkUwNjgwNjg4M0FCMkFDOUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4MzI5MjlBRTZBRjBGNzdC
QzcyNEMyRTA2ODA2ODgzQUIyQUM5QTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUOVlDRlYyaE1xeXZHTTVLVkh1bkd5cmpnYlhQVU1wV2hITFBKemJkaEMzLzAv
MzIzODMwMzQzYTM0NjU2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARO2DANBgkqhkiG9w0BAQsFAAOCAQEAi8zfUMV3
cYSwJ7f7I2CigRDwHWYnyHQOg+66QHrbN7bpDGEhivVjuWvs/EKMwahwycTEFEV4
tyLspeu8+8NUYs6k68fT6u4VzvRsvtpCKxnvHEhyfKr16N2oXttamFG+GHKL8Uml
MXawHhZGva+UzUUQ/hEBkE/eEZOac99y5i7MfqAcBs+0lEQwAAjRhHaYqWm7IN+g
UTzG+QFUdw5AiGMf6qRUG7bzrM98VZzqTmTqCt/CqMn6tWenPtl/crkbmJYkFBsd
uyXl6KnxhpUbOhBSBCrnmH01qwxa9+SRRDaySqoERD6PssqUKZYNUci8JGpSyXvw
8KpJFJZ+Rn1zug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org