Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa
File:                     323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa (raw, json)
Hash identifier:          3zC/0tEs/rRsgM5aaMamrfIu7PlnPtWE2kDxG3x5wI8=
Subject key identifier:   40:94:D9:AD:62:7B:E0:F1:30:04:7B:EF:C7:4D:5E:64:92:E6:45:24
Certificate issuer:       /CN=3C4CB5A739493355B552E0184545C33D55B37DD4
Certificate serial:       6E9280F9E2C23D483156B590CC3E7D179DA3E443
Authority key identifier: 3C:4C:B5:A7:39:49:33:55:B5:52:E0:18:45:45:C3:3D:55:B3:7D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4CB5A739493355B552E0184545C33D55B37DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa
Signing time:             Mon 20 Nov 2023 12:16:12 +0000
ROA not before:           Mon 20 Nov 2023 12:11:12 +0000
ROA not after:            Mon 18 Nov 2024 12:16:12 +0000
asID:                     269181
IP address blocks:        2804:60a0:4000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:92:80:f9:e2:c2:3d:48:31:56:b5:90:cc:3e:7d:17:9d:a3:e4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C4CB5A739493355B552E0184545C33D55B37DD4
        Validity
            Not Before: Nov 20 12:11:12 2023 GMT
            Not After : Nov 18 12:16:12 2024 GMT
        Subject: CN=4094D9AD627BE0F130047BEFC74D5E6492E64524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:88:52:4e:54:4f:c4:41:bd:7c:8d:e0:ef:
                    bf:6c:11:42:42:ed:5a:9b:4b:0a:3d:4a:97:b4:52:
                    a7:0d:f2:47:49:c4:d7:3f:a8:d6:e6:a5:b5:b2:1e:
                    ac:34:f6:cf:6e:c9:25:06:04:c2:0b:75:b0:6e:40:
                    7f:1d:a0:7d:1b:ec:47:9a:85:34:6f:fb:1d:a7:b0:
                    b0:19:6a:ee:f8:b4:75:53:28:31:fe:01:b6:2d:c5:
                    7c:76:49:95:0c:42:65:8f:1f:df:a2:b2:88:8f:a9:
                    25:52:35:e5:9a:25:a9:7e:e3:90:12:20:8c:3b:7d:
                    33:26:e4:3d:4f:00:12:db:08:1f:69:49:b5:2d:5a:
                    2a:cf:3e:9f:26:b5:c4:5e:a8:c6:20:f0:b7:83:7d:
                    b5:80:2f:aa:57:a9:8c:8d:fb:a5:a3:4c:e1:21:2a:
                    b9:c9:91:8f:c2:37:de:04:60:90:2c:4e:08:6d:4b:
                    ed:05:e9:b1:4f:90:07:ff:6a:9e:e7:63:df:2e:e2:
                    d4:e2:d3:48:e0:d2:9d:a1:24:6c:e5:a7:af:c5:84:
                    92:f3:f5:28:63:9b:59:65:c6:52:13:53:79:14:93:
                    7e:95:5b:01:d0:88:2e:8e:d9:0f:ec:28:e4:e7:2c:
                    b4:27:02:96:1c:33:27:7d:b3:9f:1d:de:11:b6:23:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:94:D9:AD:62:7B:E0:F1:30:04:7B:EF:C7:4D:5E:64:92:E6:45:24
            X509v3 Authority Key Identifier:
                keyid:3C:4C:B5:A7:39:49:33:55:B5:52:E0:18:45:45:C3:3D:55:B3:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/3C4CB5A739493355B552E0184545C33D55B37DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4CB5A739493355B552E0184545C33D55B37DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/0/323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:15:e9:1e:69:d4:cf:9a:2b:c6:11:46:79:c8:2d:d9:2f:4c:
         f8:0f:2c:b5:eb:72:95:34:11:41:5a:fb:b0:fd:db:91:c6:c4:
         de:53:5d:a2:5c:4f:e1:f7:7f:dc:e7:00:65:6c:b1:cb:12:c2:
         7c:0e:3a:e4:e5:06:63:f9:70:1b:72:db:b2:43:85:2c:ca:5b:
         ac:16:4d:b7:4f:7c:64:88:23:2b:39:3b:a4:ed:71:85:d8:32:
         33:ed:0f:e6:9c:cf:c0:a9:43:c9:69:c6:33:d2:2c:47:be:b4:
         1a:f4:5b:eb:17:cd:d5:05:d6:8a:ca:17:da:02:20:ff:8b:f8:
         24:f3:2d:c4:aa:e9:6e:24:a4:6a:7d:10:32:29:7d:16:fd:8a:
         31:56:fe:e6:9e:78:c8:d1:a1:3b:bc:58:32:06:27:e3:da:8e:
         64:54:85:2f:b0:eb:89:01:e7:05:47:1f:8e:da:27:9e:34:af:
         d3:82:7a:1d:39:0d:cb:8b:09:be:e2:cf:17:84:c1:e5:8b:a5:
         52:e5:5c:16:6d:f1:80:4d:4e:7e:f7:84:49:4e:e7:da:89:5f:
         bd:b3:e9:8c:9a:22:b2:24:f7:7c:6d:b7:7c:11:b7:13:bd:db:
         28:a0:ac:b3:8f:5b:d4:94:df:7d:0a:c9:f6:40:5c:a9:a6:b0:
         47:63:8b:14
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbpKA+eLCPUgxVrWQzD59F52j5EMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M0Q0I1QTczOTQ5MzM1NUI1NTJFMDE4NDU0NUMzM0Q1
NUIzN0RENDAeFw0yMzExMjAxMjExMTJaFw0yNDExMTgxMjE2MTJaMDMxMTAvBgNV
BAMTKDQwOTREOUFENjI3QkUwRjEzMDA0N0JFRkM3NEQ1RTY0OTJFNjQ1MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmO4hSTlRPxEG9fI3g779sEUJC
7VqbSwo9Spe0UqcN8kdJxNc/qNbmpbWyHqw09s9uySUGBMILdbBuQH8doH0b7Eea
hTRv+x2nsLAZau74tHVTKDH+AbYtxXx2SZUMQmWPH9+isoiPqSVSNeWaJal+45AS
IIw7fTMm5D1PABLbCB9pSbUtWirPPp8mtcReqMYg8LeDfbWAL6pXqYyN+6WjTOEh
KrnJkY/CN94EYJAsTghtS+0F6bFPkAf/ap7nY98u4tTi00jg0p2hJGzlp6/FhJLz
9Shjm1llxlITU3kUk36VWwHQiC6O2Q/sKOTnLLQnApYcMyd9s58d3hG2I8X/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQJTZrWJ74PEwBHvvx01eZJLmRSQwHwYDVR0j
BBgwFoAUPEy1pzlJM1W1UuAYRUXDPVWzfdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG5iQ1cybnVLVzl2bldWVVFzYkxnRGNER3NpTUE1eHVQN3VDaW85WDk3
WXIvMC8zQzRDQjVBNzM5NDkzMzU1QjU1MkUwMTg0NTQ1QzMzRDU1QjM3REQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDNENCNUE3Mzk0OTMzNTVC
NTUyRTAxODQ1NDVDMzNENTVCMzdERDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0huYkNXMm51S1c5dm5XVlVRc2JMZ0RjREdzaU1BNXh1UDd1Q2lvOVg5N1lyLzAv
MzIzODMwMzQzYTM2MzA2MTMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDM0MzgyMDNk
M2UyMDMyMzYzOTMxMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEYKBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAkFekeadTPmivGEUZ5yC3ZL0z4Dyy163KVNBFBWvuw/duRxsTeU12iXE/h
93/c5wBlbLHLEsJ8Djrk5QZj+XAbctuyQ4UsylusFk23T3xkiCMrOTuk7XGF2DIz
7Q/mnM/AqUPJacYz0ixHvrQa9FvrF83VBdaKyhfaAiD/i/gk8y3EquluJKRqfRAy
KX0W/YoxVv7mnnjI0aE7vFgyBifj2o5kVIUvsOuJAecFRx+O2ieeNK/TgnodOQ3L
iwm+4s8XhMHli6VS5VwWbfGATU5+94RJTufaiV+9s+mMmiKyJPd8bbd8EbcTvdso
oKyzj1vUlN99Csn2QFypprBHY4sU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org