Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
File:                     323830343a3362303a3a2f33322d3438203d3e203533303632.roa (raw, json)
Hash identifier:          wcmBp8xL1XEkraGm9MAgkelzzvglX5SExmdl05g3Ev0=
Subject key identifier:   B1:4F:5B:83:93:10:44:FB:71:AC:F2:B1:6D:D4:D0:58:6C:29:8E:57
Certificate issuer:       /CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Certificate serial:       7E68D0220D6DAB843921971826699A628722274F
Authority key identifier: 59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
Signing time:             Sun 10 Dec 2023 14:29:48 +0000
ROA not before:           Sun 10 Dec 2023 14:24:48 +0000
ROA not after:            Sun 08 Dec 2024 14:29:48 +0000
asID:                     53062
IP address blocks:        2804:3b0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:68:d0:22:0d:6d:ab:84:39:21:97:18:26:69:9a:62:87:22:27:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
        Validity
            Not Before: Dec 10 14:24:48 2023 GMT
            Not After : Dec  8 14:29:48 2024 GMT
        Subject: CN=B14F5B83931044FB71ACF2B16DD4D0586C298E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:63:8e:1b:ca:12:0e:55:de:60:c2:15:ce:
                    60:20:e2:f5:67:73:d8:e9:8a:d3:27:3a:8a:81:cd:
                    8e:8f:57:79:cc:14:ff:b0:ba:1f:84:8f:c8:4e:ed:
                    e1:06:2c:a4:f0:1b:2f:42:b0:50:9c:b5:c2:bf:0d:
                    4c:67:16:a2:cd:b9:44:5d:36:38:ba:02:0d:9b:c7:
                    59:bf:59:b1:bf:d2:17:5c:ef:e9:b3:53:87:16:3c:
                    63:4c:2e:e0:a0:29:62:0e:2c:26:2c:12:10:b2:94:
                    a6:a7:c6:dc:20:01:c7:24:5c:2a:50:80:94:39:c5:
                    5a:99:f5:e9:49:d2:4e:e2:ac:c2:be:86:3f:27:b8:
                    84:d1:c3:92:9c:94:f3:21:41:23:38:de:bd:41:9f:
                    b4:d1:9c:3f:7b:eb:6b:c0:a4:38:ec:86:0a:45:a7:
                    79:ca:32:ed:d5:22:00:96:3c:ab:23:a3:b6:d8:1c:
                    0e:ae:f1:f7:68:d3:8b:b5:f0:fa:b0:24:29:cd:80:
                    c6:39:bd:e4:08:77:90:43:d4:c2:20:5f:0f:94:b6:
                    78:3f:ca:a8:dd:55:c6:bb:32:d8:f1:77:54:84:88:
                    85:fa:5e:41:70:cb:97:45:dc:50:5f:bf:e8:1a:ab:
                    f8:63:b5:ee:48:26:b6:b5:6b:7b:e1:24:3f:09:0a:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:5B:83:93:10:44:FB:71:AC:F2:B1:6D:D4:D0:58:6C:29:8E:57
            X509v3 Authority Key Identifier:
                keyid:59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/323830343a3362303a3a2f33322d3438203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:62:85:f3:6e:a2:95:63:45:22:94:60:25:2b:7d:48:0c:94:
         ab:46:04:65:62:7f:60:63:01:33:93:be:24:7b:ea:27:d5:6b:
         61:03:ba:f2:07:48:1d:a6:ad:62:fe:ba:5d:6e:71:41:11:00:
         be:d9:48:40:71:92:71:a7:35:fa:87:8a:83:ca:e4:0d:80:84:
         ff:dc:f8:a3:73:23:0b:3e:50:05:a0:87:ab:53:d4:75:38:26:
         61:07:58:31:18:94:b1:cc:37:10:06:a3:f3:3d:a8:f2:10:75:
         05:a2:ad:6a:e7:64:cf:f3:fd:b9:63:97:e4:73:c4:5a:cb:6e:
         f7:60:83:17:df:4e:28:a5:c8:2b:04:2f:ae:87:df:4c:b3:49:
         5c:99:ef:0d:82:68:50:68:1b:b5:14:2e:b4:44:9d:df:36:b3:
         23:33:db:9c:99:8c:71:e9:fe:3c:b7:fa:a3:9b:92:54:b8:ae:
         60:f0:47:57:f2:59:1a:ad:cf:ff:4f:be:48:0c:7b:60:62:2c:
         45:ed:a0:90:12:2a:3c:0a:6b:84:26:10:04:e8:20:ff:4e:b5:
         e0:ba:83:19:ef:d0:30:ba:ca:50:b2:29:b0:57:4b:76:5b:3f:
         3a:6f:02:8a:d6:72:70:f7:15:37:b6:f2:e5:59:1c:12:76:09:
         8e:9c:1b:d1
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUfmjQIg1tq4Q5IZcYJmmaYociJ08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlFNUYzQTZBMUZBQTNBQ0I1MEIxREFERkI4RUVBNkM2
QjMyRUQ4RjAeFw0yMzEyMTAxNDI0NDhaFw0yNDEyMDgxNDI5NDhaMDMxMTAvBgNV
BAMTKEIxNEY1QjgzOTMxMDQ0RkI3MUFDRjJCMTZERDREMDU4NkMyOThFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiG2OOG8oSDlXeYMIVzmAg4vVn
c9jpitMnOoqBzY6PV3nMFP+wuh+Ej8hO7eEGLKTwGy9CsFCctcK/DUxnFqLNuURd
Nji6Ag2bx1m/WbG/0hdc7+mzU4cWPGNMLuCgKWIOLCYsEhCylKanxtwgAcckXCpQ
gJQ5xVqZ9elJ0k7irMK+hj8nuITRw5KclPMhQSM43r1Bn7TRnD9762vApDjshgpF
p3nKMu3VIgCWPKsjo7bYHA6u8fdo04u18PqwJCnNgMY5veQId5BD1MIgXw+Utng/
yqjdVca7Mtjxd1SEiIX6XkFwy5dF3FBfv+gaq/hjte5IJra1a3vhJD8JCg3PAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUsU9bg5MQRPtxrPKxbdTQWGwpjlcwHwYDVR0j
BBgwFoAUWeXzpqH6o6y1Cx2t+47qbGsy7Y8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzMvNTlFNUYzQTZBMUZBQTNBQ0I1MEIxREFERkI4RUVBNkM2QjMyRUQ4Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81OUU1RjNBNkExRkFBM0FDQjUw
QjFEQURGQjhFRUE2QzZCMzJFRDhGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzMvMzIz
ODMwMzQzYTMzNjIzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMDM2MzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAoBAOwMA0GCSqGSIb3DQEBCwUAA4IBAQB4YoXzbqKVY0UilGAl
K31IDJSrRgRlYn9gYwEzk74ke+on1WthA7ryB0gdpq1i/rpdbnFBEQC+2UhAcZJx
pzX6h4qDyuQNgIT/3PijcyMLPlAFoIerU9R1OCZhB1gxGJSxzDcQBqPzPajyEHUF
oq1q52TP8/25Y5fkc8Ray273YIMX304opcgrBC+uh99Ms0lcme8NgmhQaBu1FC60
RJ3fNrMjM9ucmYxx6f48t/qjm5JUuK5g8EdX8lkarc//T75IDHtgYixF7aCQEio8
CmuEJhAE6CD/TrXguoMZ79AwuspQsimwV0t2Wz86bwKK1nJw9xU3tvLlWRwSdgmO
nBvR
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org