Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          d21h0/T1RA0dtjV4VCnOugjUGswoPWBeke1rG4Hkgmg=
Subject key identifier:   1D:5C:45:A2:3F:6F:4B:96:88:2E:4E:A3:72:15:5B:59:A5:92:53:33
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       6E26400ACFBD6053057EECE95B5E982840F0B2FE
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:48 +0000
ROA not before:           Wed 14 Feb 2024 20:04:48 +0000
ROA not after:            Wed 12 Feb 2025 20:09:48 +0000
asID:                     268678
IP address blocks:        2804:54ec:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:26:40:0a:cf:bd:60:53:05:7e:ec:e9:5b:5e:98:28:40:f0:b2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:48 2024 GMT
            Not After : Feb 12 20:09:48 2025 GMT
        Subject: CN=1D5C45A23F6F4B96882E4EA372155B59A5925333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:2e:d8:f3:a4:e4:38:9a:29:fb:00:23:35:
                    fa:d0:46:73:af:fd:20:0d:a1:85:31:35:fa:4d:0f:
                    94:19:51:e2:59:6d:c1:1b:67:bd:39:52:11:7e:93:
                    88:e1:f5:51:db:7c:c6:ba:d1:1e:15:f8:a0:e0:5c:
                    ee:fe:36:e5:6d:15:3d:9e:aa:bd:e8:ed:6e:b1:ee:
                    84:86:48:3f:3f:61:6d:97:3e:00:a2:3f:88:22:21:
                    d3:36:97:62:92:b4:1d:f5:4e:80:57:d5:b8:e0:95:
                    ed:8b:00:39:6b:fc:d6:7a:a8:75:59:a3:56:f4:fd:
                    8c:f1:dd:20:3e:d7:57:0c:36:ef:a8:29:56:a0:99:
                    d9:35:4f:c7:a3:62:5c:1b:41:f5:cc:3a:46:5d:61:
                    51:64:7e:b2:fd:b8:7b:10:a0:cd:3e:4b:85:b5:32:
                    d5:e6:a4:71:5e:dc:74:f5:1f:cf:d1:8c:d0:b4:25:
                    5b:dd:2b:1c:8c:83:5a:17:09:b1:42:8a:db:04:6b:
                    a7:e0:11:fb:b0:f8:7e:91:6f:a3:96:ca:72:27:2d:
                    aa:68:46:30:46:af:9c:0e:61:a8:b1:5e:da:94:46:
                    bf:74:64:54:d5:a8:4b:82:09:75:6b:00:99:6e:f3:
                    2f:10:a4:22:c1:c4:a2:41:31:d4:e2:b5:e3:a6:ab:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:45:A2:3F:6F:4B:96:88:2E:4E:A3:72:15:5B:59:A5:92:53:33
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:89:41:e3:35:21:f8:cd:83:a8:47:6b:a0:7b:78:bb:e9:2b:
         af:b4:63:a4:1f:fe:5b:72:9f:d8:e0:bf:a5:62:fa:b0:1b:f6:
         33:88:19:4d:c5:34:ba:76:13:5d:34:c1:0c:9a:b4:c1:50:14:
         ef:ed:4d:c1:dc:1b:30:1d:1e:8c:bf:35:ff:3a:82:16:a0:01:
         80:50:ba:0b:a6:7e:69:89:64:78:2c:9f:0f:37:58:ae:ce:bb:
         2c:30:20:0a:e2:01:28:4b:f5:a6:3a:df:f2:cf:99:65:1e:9f:
         05:42:4a:17:2e:2a:22:e9:b0:97:7e:b9:2f:09:4a:1f:79:d0:
         d4:c0:66:da:8a:81:b4:0c:41:ec:d8:a8:61:53:41:43:e3:6a:
         da:9f:09:50:fb:89:ac:8b:2e:3e:ca:d0:a1:2b:b7:bc:fb:2e:
         de:4f:05:74:8c:59:87:7c:5a:82:7f:7b:66:77:8d:a9:3a:c9:
         cc:6a:02:32:e1:24:29:f0:b0:d7:c7:44:9e:71:48:17:45:9f:
         74:e7:fc:3d:a9:90:c2:14:47:74:05:42:1b:b4:d9:3c:d7:9a:
         66:4c:b0:a8:c2:a8:04:9b:58:04:fd:8b:e8:33:ac:bb:49:6f:
         b8:6e:6f:c9:5d:f1:56:8e:87:70:4e:b1:a5:1e:6e:25:cd:6d:
         50:3d:07:5d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbiZACs+9YFMFfuzpW16YKEDwsv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFMzk0QjdBRDg5MDQyRjFGNTRCODEzRUMwREE2REUx
MTJFQzBEMTAeFw0yNDAyMTQyMDA0NDhaFw0yNTAyMTIyMDA5NDhaMDMxMTAvBgNV
BAMTKDFENUM0NUEyM0Y2RjRCOTY4ODJFNEVBMzcyMTU1QjU5QTU5MjUzMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSS7Y86TkOJop+wAjNfrQRnOv
/SANoYUxNfpND5QZUeJZbcEbZ705UhF+k4jh9VHbfMa60R4V+KDgXO7+NuVtFT2e
qr3o7W6x7oSGSD8/YW2XPgCiP4giIdM2l2KStB31ToBX1bjgle2LADlr/NZ6qHVZ
o1b0/Yzx3SA+11cMNu+oKVagmdk1T8ejYlwbQfXMOkZdYVFkfrL9uHsQoM0+S4W1
MtXmpHFe3HT1H8/RjNC0JVvdKxyMg1oXCbFCitsEa6fgEfuw+H6Rb6OWynInLapo
RjBGr5wOYaixXtqURr90ZFTVqEuCCXVrAJlu8y8QpCLBxKJBMdTiteOmq69NAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUHVxFoj9vS5aILk6jchVbWaWSUzMwHwYDVR0j
BBgwFoAUFuOUt62JBC8fVLgT7A2m3hEuwNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMC8xNkUzOTRCN0FEODkwNDJGMUY1NEI4MTNFQzBEQTZERTExMkVDMEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2RTM5NEI3QUQ4OTA0MkYx
RjU0QjgxM0VDMERBNkRFMTEyRUMwRDEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv
MzIzODMwMzQzYTM1MzQ2NTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVOyAMA0GCSqGSIb3DQEBCwUA
A4IBAQA3iUHjNSH4zYOoR2uge3i76SuvtGOkH/5bcp/Y4L+lYvqwG/YziBlNxTS6
dhNdNMEMmrTBUBTv7U3B3BswHR6MvzX/OoIWoAGAULoLpn5piWR4LJ8PN1iuzrss
MCAK4gEoS/WmOt/yz5llHp8FQkoXLioi6bCXfrkvCUofedDUwGbaioG0DEHs2Khh
U0FD42ranwlQ+4msiy4+ytChK7e8+y7eTwV0jFmHfFqCf3tmd42pOsnMagIy4SQp
8LDXx0SecUgXRZ905/w9qZDCFEd0BUIbtNk815pmTLCowqgEm1gE/YvoM6y7SW+4
bm/JXfFWjodwTrGlHm4lzW1QPQdd
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org