Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a636330303a3a2f34302d3430203d3e203532383338.roa
File:                     323830343a6264383a636330303a3a2f34302d3430203d3e203532383338.roa (raw, json)
Hash identifier:          pGwwAhhsTlfbY5xT0J1Ry0kQg3lQtkQwOD8B+J57e6Q=
Subject key identifier:   03:AC:68:4B:82:61:EE:65:43:87:D0:FC:FF:B5:BC:DA:94:AA:FF:79
Certificate issuer:       /CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
Certificate serial:       03489437CE4F6E3C6DDCFFC867845C7F005EB118
Authority key identifier: CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a636330303a3a2f34302d3430203d3e203532383338.roa
Signing time:             Tue 14 Jun 2022 20:09:11 +0000
ROA not before:           Tue 14 Jun 2022 20:04:11 +0000
ROA not after:            Tue 13 Jun 2023 20:09:11 +0000
asID:                     52838
IP address blocks:        2804:bd8:cc00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:48:94:37:ce:4f:6e:3c:6d:dc:ff:c8:67:84:5c:7f:00:5e:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
        Validity
            Not Before: Jun 14 20:04:11 2022 GMT
            Not After : Jun 13 20:09:11 2023 GMT
        Subject: CN=03AC684B8261EE654387D0FCFFB5BCDA94AAFF79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:fc:05:15:1a:7f:54:27:23:bc:25:8d:9c:
                    03:29:57:cc:3a:df:0a:87:80:2f:21:20:71:be:47:
                    65:7e:cc:90:cc:5b:6f:cc:8e:45:66:bb:cb:5a:d1:
                    5a:1c:85:55:71:c0:7c:43:10:7d:40:7e:c4:ba:dc:
                    56:d0:4b:f9:39:43:b3:19:77:bc:a5:06:55:63:83:
                    db:85:ed:9e:b1:32:0c:80:f4:62:d6:aa:21:11:38:
                    30:df:0b:4c:be:c7:88:de:3f:36:6d:2d:74:17:6b:
                    e9:a5:f1:76:88:54:57:cc:d6:92:08:dc:a0:34:24:
                    9a:ab:c5:f6:11:ee:1f:07:97:0d:ea:7d:4d:61:1e:
                    e8:fe:34:f6:e3:12:9f:89:f6:f3:62:6a:60:03:e1:
                    a3:20:c9:1d:49:08:55:1e:46:20:f0:e7:65:fc:1b:
                    a9:62:eb:20:a2:ea:a3:24:7a:30:ec:3b:29:42:02:
                    7f:f4:37:3c:81:23:33:35:d9:ca:0f:c8:7b:f8:03:
                    97:16:59:2f:63:fc:9b:2e:8f:58:ec:d2:07:31:04:
                    a9:98:2f:53:81:e4:b8:df:8d:74:ab:f3:2d:eb:b2:
                    0a:5a:5e:75:8e:a0:90:20:3b:c8:d8:45:3e:f4:1f:
                    42:47:07:a5:36:30:8f:69:1c:7a:c5:7a:12:6f:3c:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:68:4B:82:61:EE:65:43:87:D0:FC:FF:B5:BC:DA:94:AA:FF:79
            X509v3 Authority Key Identifier:
                keyid:CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a636330303a3a2f34302d3430203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bd8:cc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:07:b4:2d:47:f6:ea:d1:4f:2e:82:88:2f:56:40:59:07:
         4b:22:16:6c:03:7b:f8:21:60:7b:f1:c7:e5:1e:69:22:22:8d:
         04:d7:9c:5c:51:22:a7:ec:25:c1:26:cd:0a:1f:29:cb:c4:c6:
         73:64:73:a4:a6:20:a4:d5:d0:8d:c8:16:2a:51:ea:3f:7f:dc:
         a7:c8:e3:7c:39:eb:9c:5c:2c:cb:a9:cc:c4:84:08:31:7d:7e:
         9c:e8:55:85:18:61:cb:13:21:a8:84:6a:73:7b:35:a3:5b:dd:
         59:3f:52:6c:e7:14:ae:ce:01:e3:00:cc:f3:dc:28:18:50:cc:
         94:f3:8b:1b:a2:42:d0:cb:24:9a:18:b0:7b:98:2b:27:0b:2e:
         47:ed:7d:10:d7:c4:8e:cb:84:db:93:74:a9:9d:20:56:6d:b4:
         f4:31:4b:ee:7f:93:0d:d4:01:ea:74:50:bc:a7:83:c5:0d:4d:
         fd:62:d2:dd:e9:d3:d8:96:b5:42:cd:69:f7:6e:9a:8f:bb:05:
         10:ef:77:e9:b4:ac:2b:8b:bf:fa:fd:aa:3f:98:f1:f9:c3:9d:
         2a:2f:28:4e:9b:5f:59:8d:10:c0:51:0e:13:60:18:9c:d9:aa:
         c2:45:75:48:a6:d3:be:5f:0b:61:97:aa:2f:a6:ad:03:bd:7c:
         e7:7e:1a:2f
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUA0iUN85Pbjxt3P/IZ4RcfwBesRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q3MTM0NEM0NkZENUQ5RUYxRUE2MUEyRURGOTc2OTg1
MUUxNkJFMjAeFw0yMjA2MTQyMDA0MTFaFw0yMzA2MTMyMDA5MTFaMDMxMTAvBgNV
BAMTKDAzQUM2ODRCODI2MUVFNjU0Mzg3RDBGQ0ZGQjVCQ0RBOTRBQUZGNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbvwFFRp/VCcjvCWNnAMpV8w6
3wqHgC8hIHG+R2V+zJDMW2/MjkVmu8ta0VochVVxwHxDEH1AfsS63FbQS/k5Q7MZ
d7ylBlVjg9uF7Z6xMgyA9GLWqiERODDfC0y+x4jePzZtLXQXa+ml8XaIVFfM1pII
3KA0JJqrxfYR7h8Hlw3qfU1hHuj+NPbjEp+J9vNiamAD4aMgyR1JCFUeRiDw52X8
G6li6yCi6qMkejDsOylCAn/0NzyBIzM12coPyHv4A5cWWS9j/Jsuj1js0gcxBKmY
L1OB5LjfjXSr8y3rsgpaXnWOoJAgO8jYRT70H0JHB6U2MI9pHHrFehJvPCKNAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUA6xoS4Jh7mVDh9D8/7W82pSq/3kwHwYDVR0j
BBgwFoAUzXE0TEb9XZ7x6mGi7fl2mFHha+IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG
LzAvQ0Q3MTM0NEM0NkZENUQ5RUYxRUE2MUEyRURGOTc2OTg1MUUxNkJFMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9DRDcxMzQ0QzQ2RkQ1RDlFRjFF
QTYxQTJFREY5NzY5ODUxRTE2QkUyLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4G
CCsGAQUFBzALhoGRcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzIz
ODMwMzQzYTYyNjQzODNhNjM2MzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz
NTMyMzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQL2MwwDQYJKoZIhvcNAQELBQADggEBAIKu
B7QtR/bq0U8ugogvVkBZB0siFmwDe/ghYHvxx+UeaSIijQTXnFxRIqfsJcEmzQof
KcvExnNkc6SmIKTV0I3IFipR6j9/3KfI43w565xcLMupzMSECDF9fpzoVYUYYcsT
IaiEanN7NaNb3Vk/UmznFK7OAeMAzPPcKBhQzJTzixuiQtDLJJoYsHuYKycLLkft
fRDXxI7LhNuTdKmdIFZttPQxS+5/kw3UAep0ULyng8UNTf1i0t3p09iWtULNafdu
mo+7BRDvd+m0rCuLv/r9qj+Y8fnDnSovKE6bX1mNEMBRDhNgGJzZqsJFdUim075f
C2GXqi+mrQO9fOd+Gi8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org