Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa
File:                     323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa (raw, json)
Hash identifier:          kvyzgS8iEcvMdjZ2qZvIF6wWUhQ9Usq9mYreE8FRcGM=
Subject key identifier:   15:4D:20:69:AC:68:06:44:91:83:EE:BF:69:F7:65:85:62:52:6E:6B
Certificate issuer:       /CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
Certificate serial:       44AF52B2C0C52BEF11F9DEDFBDC43CD9FD479BF7
Authority key identifier: 4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa
Signing time:             Thu 14 Dec 2023 12:47:40 +0000
ROA not before:           Thu 14 Dec 2023 12:42:40 +0000
ROA not after:            Thu 12 Dec 2024 12:47:40 +0000
asID:                     268573
IP address blocks:        2804:5344:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:af:52:b2:c0:c5:2b:ef:11:f9:de:df:bd:c4:3c:d9:fd:47:9b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
        Validity
            Not Before: Dec 14 12:42:40 2023 GMT
            Not After : Dec 12 12:47:40 2024 GMT
        Subject: CN=154D2069AC6806449183EEBF69F7658562526E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b7:f5:9e:6a:76:c0:c6:00:2b:68:58:d5:8f:
                    19:4a:ad:67:c7:c4:5e:1f:85:19:43:4d:41:b0:29:
                    9f:47:10:9a:18:a5:ea:f0:e1:ae:f5:17:9c:7f:a9:
                    cf:5e:84:85:bd:56:7b:3e:23:3b:ee:19:d8:f3:8e:
                    ff:7b:84:95:a8:b9:d4:e3:fa:57:3e:a2:14:13:b6:
                    6d:00:51:ad:db:ee:55:e2:f7:37:fb:7c:b7:8b:d3:
                    f2:cb:45:17:32:38:c0:0f:56:a0:de:d2:3c:33:62:
                    2d:bd:e7:99:98:e8:b3:6a:29:62:df:94:17:b6:cb:
                    99:43:e1:30:be:0d:b0:c7:45:e6:7c:13:6a:f4:b0:
                    62:e8:b3:00:9a:7d:08:e4:3d:fb:f6:dc:8c:ea:f1:
                    8a:ca:ff:ec:e4:57:8e:6c:64:f4:85:f4:6d:b0:4e:
                    52:1e:1a:2c:19:70:a4:63:43:b1:7f:75:3e:7b:36:
                    cd:41:27:3c:99:89:c5:c1:89:78:72:98:63:1a:53:
                    70:b7:89:0d:da:95:94:32:88:f7:2f:0e:d8:a0:7a:
                    97:cc:10:0a:11:ba:08:df:d5:bf:6a:28:ed:c3:03:
                    e9:43:08:4d:bb:17:4f:9f:d8:5b:2c:79:f7:47:88:
                    73:3a:76:cd:d5:fa:e5:aa:41:8e:ec:71:30:22:c1:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4D:20:69:AC:68:06:44:91:83:EE:BF:69:F7:65:85:62:52:6E:6B
            X509v3 Authority Key Identifier:
                keyid:4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a343030303a3a2f33342d3334203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:77:b2:13:c3:c6:de:3c:4e:7a:f7:5e:a8:ee:80:eb:fe:
         b9:9a:f8:bd:bf:36:d1:2c:14:52:2e:1d:62:f1:a9:19:5c:74:
         51:81:9a:36:38:30:7b:7e:af:60:07:a3:e2:50:05:b4:9d:6e:
         27:cc:bf:d4:0d:9c:26:de:dc:28:f3:ea:12:99:53:c1:73:61:
         41:9d:9f:54:53:ea:89:62:71:58:58:87:d9:84:df:a6:0b:15:
         2b:19:fe:10:44:df:75:2a:0f:32:64:44:dc:ad:d3:ec:97:4e:
         a2:c4:b9:75:62:24:b8:62:2c:1e:b6:27:a0:d2:94:02:d5:c4:
         32:74:8d:75:f9:e6:59:6e:9e:e6:14:32:48:fc:76:81:94:98:
         ab:f4:d4:f1:9c:eb:d4:63:6c:da:75:8a:a8:96:43:15:f1:f3:
         86:38:a8:cf:de:ca:d5:a5:bf:94:d2:4b:52:cd:e4:40:90:9f:
         ed:2f:a7:0c:1b:cb:0a:cf:c1:5f:a4:87:62:e6:1d:f8:ae:d3:
         61:9b:4b:4e:c9:4c:a2:0a:71:4f:7c:c0:bc:dd:e6:8c:05:82:
         99:81:f8:71:91:72:98:a4:08:6e:bd:35:c8:66:dc:c9:a6:6c:
         c4:9f:ab:9d:37:4c:81:bf:f7:62:32:a0:ff:b9:6d:62:af:2a:
         1e:b9:22:bf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURK9SssDFK+8R+d7fvcQ82f1Hm/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU5ODc2NUQ0RDkyODJEQTEwOEVGMEVFNENCMzg0Njcw
OEVCM0IyRDAeFw0yMzEyMTQxMjQyNDBaFw0yNDEyMTIxMjQ3NDBaMDMxMTAvBgNV
BAMTKDE1NEQyMDY5QUM2ODA2NDQ5MTgzRUVCRjY5Rjc2NTg1NjI1MjZFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqt/WeanbAxgAraFjVjxlKrWfH
xF4fhRlDTUGwKZ9HEJoYperw4a71F5x/qc9ehIW9Vns+IzvuGdjzjv97hJWoudTj
+lc+ohQTtm0AUa3b7lXi9zf7fLeL0/LLRRcyOMAPVqDe0jwzYi2955mY6LNqKWLf
lBe2y5lD4TC+DbDHReZ8E2r0sGLoswCafQjkPfv23Izq8YrK/+zkV45sZPSF9G2w
TlIeGiwZcKRjQ7F/dT57Ns1BJzyZicXBiXhymGMaU3C3iQ3alZQyiPcvDtigepfM
EAoRugjf1b9qKO3DA+lDCE27F0+f2FssefdHiHM6ds3V+uWqQY7scTAiwQm3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFU0gaaxoBkSRg+6/afdlhWJSbmswHwYDVR0j
BBgwFoAUTph2XU2SgtoQjvDuTLOEZwjrOy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVQajJOdXFTcGN1Q3RnV25wVThIUXRka1ZYaG85a2toYTlxV29NQ1c2
RWMvMC80RTk4NzY1RDREOTI4MkRBMTA4RUYwRUU0Q0IzODQ2NzA4RUIzQjJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFOTg3NjVENEQ5MjgyREEx
MDhFRjBFRTRDQjM4NDY3MDhFQjNCMkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1UGoyTnVxU3BjdUN0Z1ducFU4SFF0ZGtWWGhvOWtraGE5cVdvTUNXNkVjLzAv
MzIzODMwMzQzYTM1MzMzNDM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM1MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEU0RAMA0GCSqGSIb3DQEBCwUA
A4IBAQBFi3eyE8PG3jxOevdeqO6A6/65mvi9vzbRLBRSLh1i8akZXHRRgZo2ODB7
fq9gB6PiUAW0nW4nzL/UDZwm3two8+oSmVPBc2FBnZ9UU+qJYnFYWIfZhN+mCxUr
Gf4QRN91Kg8yZETcrdPsl06ixLl1YiS4Yiwetieg0pQC1cQydI11+eZZbp7mFDJI
/HaBlJir9NTxnOvUY2zadYqolkMV8fOGOKjP3srVpb+U0ktSzeRAkJ/tL6cMG8sK
z8FfpIdi5h34rtNhm0tOyUyiCnFPfMC83eaMBYKZgfhxkXKYpAhuvTXIZtzJpmzE
n6udN0yBv/diMqD/uW1iryoeuSK/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org