Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/323830343a316262633a3a2f33322d313238203d3e203631373436.roa
File:                     323830343a316262633a3a2f33322d313238203d3e203631373436.roa (raw, json)
Hash identifier:          o42c89Mj0b7WuriCvaOWZ+Hfsx0vMepWxSeFwQIb7YE=
Subject key identifier:   B8:84:AE:73:78:58:35:56:5F:D7:C4:F5:6C:35:89:18:DC:56:E6:0D
Certificate issuer:       /CN=758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC
Certificate serial:       1968119A1294AEB4BC499EDEAC1833674DF72B2F
Authority key identifier: 75:8B:C6:FB:BB:A9:BB:DA:0A:75:71:23:B6:6C:9A:CE:FA:6F:B0:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/323830343a316262633a3a2f33322d313238203d3e203631373436.roa
Signing time:             Sat 01 Jul 2023 12:29:42 +0000
ROA not before:           Sat 01 Jul 2023 12:24:42 +0000
ROA not after:            Sat 29 Jun 2024 12:29:42 +0000
asID:                     61746
IP address blocks:        2804:1bbc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:68:11:9a:12:94:ae:b4:bc:49:9e:de:ac:18:33:67:4d:f7:2b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC
        Validity
            Not Before: Jul  1 12:24:42 2023 GMT
            Not After : Jun 29 12:29:42 2024 GMT
        Subject: CN=B884AE73785835565FD7C4F56C358918DC56E60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:2b:58:77:8b:54:c2:8e:0f:23:7b:a1:b3:
                    89:3b:02:00:06:16:80:5b:7c:c3:4e:58:fe:c1:31:
                    48:18:37:61:ab:06:3c:44:7f:09:3e:c0:81:b4:2f:
                    f1:08:7d:ba:63:a5:91:a6:bf:ff:d9:90:b9:d9:45:
                    60:a1:0f:64:d7:26:3e:89:73:da:25:bd:f2:65:e2:
                    ed:1c:c3:68:e6:a5:56:67:5b:5b:cd:d4:91:2e:ba:
                    43:5d:c7:b6:ca:8f:f0:a6:47:42:4b:50:21:06:a3:
                    53:0f:49:ed:6c:e4:81:f6:ae:f1:3d:1a:25:ae:2d:
                    9e:18:88:5d:5a:9e:b7:2d:7a:a6:9d:30:cf:08:8b:
                    70:d8:99:eb:28:02:be:62:ed:45:73:27:9a:81:4e:
                    46:f5:7c:2c:87:cd:92:d0:7b:36:74:b3:a1:f1:94:
                    fc:73:3e:46:9c:62:93:e2:7e:cd:5e:4b:fd:0b:5f:
                    28:9f:12:06:66:ac:68:11:85:23:c4:8e:a2:50:5b:
                    61:c4:28:e7:af:93:53:91:72:56:70:43:9d:45:a9:
                    72:34:c7:b0:ac:ff:a7:be:d8:27:91:ca:2e:0e:9a:
                    66:cc:19:de:51:ef:d5:db:ce:91:7a:b4:5a:0a:1b:
                    32:5f:4d:5f:13:19:7e:87:a3:9d:e3:22:a5:f1:76:
                    19:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:AE:73:78:58:35:56:5F:D7:C4:F5:6C:35:89:18:DC:56:E6:0D
            X509v3 Authority Key Identifier:
                keyid:75:8B:C6:FB:BB:A9:BB:DA:0A:75:71:23:B6:6C:9A:CE:FA:6F:B0:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/758BC6FBBBA9BBDA0A757123B66C9ACEFA6FB0EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/323830343a316262633a3a2f33322d313238203d3e203631373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:60:94:88:9b:eb:7a:25:c2:68:3f:5e:e2:30:72:d1:d2:d7:
         67:61:6c:fb:b5:78:87:0d:00:aa:85:36:be:87:dc:bb:3a:ea:
         6e:c4:05:0f:a9:09:0b:b6:d9:3c:e1:00:a7:98:a4:30:71:9a:
         b5:56:9b:cb:ff:0a:ca:33:97:db:30:d0:67:c6:82:d6:82:40:
         b2:01:2a:6a:cf:2f:41:31:a5:a9:50:fe:b8:c4:3f:f3:ca:7d:
         b1:77:48:b5:bf:47:5d:63:38:ca:be:33:f1:a4:0a:3f:ed:3b:
         57:b3:7c:b8:42:95:0d:0d:6b:88:97:8a:d1:ed:00:7f:3b:42:
         83:be:56:a1:9f:95:b3:ac:2d:be:1a:10:b1:38:0d:c5:4b:ba:
         b9:1c:b1:aa:96:b6:e5:09:b7:31:91:c1:df:0f:9e:3c:fc:01:
         46:5d:e8:b1:f2:25:f7:85:ae:88:1c:6b:b8:c5:fa:c1:b8:68:
         95:c5:c9:e3:16:0c:5b:76:a5:44:84:e1:e2:a0:83:f0:e9:06:
         30:25:61:17:b7:d9:98:00:74:19:d2:c3:5f:97:fa:d5:00:c7:
         f0:9f:30:e6:cf:be:6c:3b:29:94:03:2b:d8:ef:9a:58:2e:1c:
         6e:0c:f9:0f:f3:d4:dd:eb:c4:10:b7:7c:ac:68:69:83:e8:68:
         4f:2e:88:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGWgRmhKUrrS8SZ7erBgzZ033Ky8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU4QkM2RkJCQkE5QkJEQTBBNzU3MTIzQjY2QzlBQ0VG
QTZGQjBFQzAeFw0yMzA3MDExMjI0NDJaFw0yNDA2MjkxMjI5NDJaMDMxMTAvBgNV
BAMTKEI4ODRBRTczNzg1ODM1NTY1RkQ3QzRGNTZDMzU4OTE4REM1NkU2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2itYd4tUwo4PI3uhs4k7AgAG
FoBbfMNOWP7BMUgYN2GrBjxEfwk+wIG0L/EIfbpjpZGmv//ZkLnZRWChD2TXJj6J
c9olvfJl4u0cw2jmpVZnW1vN1JEuukNdx7bKj/CmR0JLUCEGo1MPSe1s5IH2rvE9
GiWuLZ4YiF1anrcteqadMM8Ii3DYmesoAr5i7UVzJ5qBTkb1fCyHzZLQezZ0s6Hx
lPxzPkacYpPifs1eS/0LXyifEgZmrGgRhSPEjqJQW2HEKOevk1ORclZwQ51FqXI0
x7Cs/6e+2CeRyi4OmmbMGd5R79XbzpF6tFoKGzJfTV8TGX6Ho53jIqXxdhkvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuISuc3hYNVZf18T1bDWJGNxW5g0wHwYDVR0j
BBgwFoAUdYvG+7upu9oKdXEjtmyazvpvsOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVA1RXdSb21IdzhGWGhHNWNtOGVkNHl2YjJlVmVwcXFCVnk3aGF5RzZi
RzEvMC83NThCQzZGQkJCQTlCQkRBMEE3NTcxMjNCNjZDOUFDRUZBNkZCMEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1OEJDNkZCQkJBOUJCREEw
QTc1NzEyM0I2NkM5QUNFRkE2RkIwRUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FQNUV3Um9tSHc4RlhoRzVjbThlZDR5dmIyZVZlcHFxQlZ5N2hheUc2YkcxLzAv
MzIzODMwMzQzYTMxNjI2MjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzczNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQbvDANBgkqhkiG9w0BAQsFAAOCAQEAXGCUiJvr
eiXCaD9e4jBy0dLXZ2Fs+7V4hw0AqoU2vofcuzrqbsQFD6kJC7bZPOEAp5ikMHGa
tVaby/8KyjOX2zDQZ8aC1oJAsgEqas8vQTGlqVD+uMQ/88p9sXdItb9HXWM4yr4z
8aQKP+07V7N8uEKVDQ1riJeK0e0AfztCg75WoZ+Vs6wtvhoQsTgNxUu6uRyxqpa2
5Qm3MZHB3w+ePPwBRl3osfIl94WuiBxruMX6wbholcXJ4xYMW3alRITh4qCD8OkG
MCVhF7fZmAB0GdLDX5f61QDH8J8w5s++bDsplAMr2O+aWC4cbgz5D/PU3evEELd8
rGhpg+hoTy6I6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org