Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a3a2f33342d3334203d3e20323638353733.roa
File:                     323830343a353334343a3a2f33342d3334203d3e20323638353733.roa (raw, json)
Hash identifier:          L47LyIxDseRwVX3m292RzKSEJl72Y5oqAqQf3pPOx40=
Subject key identifier:   9C:6D:27:44:D7:00:DF:44:72:F5:4D:04:D1:13:E7:F4:09:F4:20:E2
Certificate issuer:       /CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
Certificate serial:       4317F92E2029ABE254C6BA6C17A5992DA1F5DD58
Authority key identifier: 4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a3a2f33342d3334203d3e20323638353733.roa
Signing time:             Thu 14 Dec 2023 12:47:40 +0000
ROA not before:           Thu 14 Dec 2023 12:42:40 +0000
ROA not after:            Thu 12 Dec 2024 12:47:40 +0000
asID:                     268573
IP address blocks:        2804:5344::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:f9:2e:20:29:ab:e2:54:c6:ba:6c:17:a5:99:2d:a1:f5:dd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
        Validity
            Not Before: Dec 14 12:42:40 2023 GMT
            Not After : Dec 12 12:47:40 2024 GMT
        Subject: CN=9C6D2744D700DF4472F54D04D113E7F409F420E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:87:4c:e8:8c:d8:c9:7d:e1:71:60:81:52:
                    f6:da:69:7c:30:c1:2d:d7:c9:d1:91:ae:92:39:0c:
                    c5:22:d7:1c:bd:f5:b1:b4:39:f0:30:29:fe:98:fd:
                    ee:1d:f7:5e:d2:69:e8:bd:97:9a:88:8d:d0:a1:22:
                    be:4a:f0:00:fd:b0:33:8d:f3:e3:07:24:ce:df:42:
                    35:41:4c:19:7d:7a:86:21:5b:96:d0:01:02:54:31:
                    e9:d7:af:43:c5:42:e3:f1:09:50:d2:2a:26:be:a4:
                    04:fe:2e:8d:9d:70:a8:83:47:ec:60:90:c5:0b:b9:
                    28:99:5c:a9:88:1f:04:8b:c4:2e:b8:e9:4b:16:37:
                    78:ab:1b:cb:08:b9:87:a8:af:19:18:7a:80:87:c9:
                    b0:05:57:17:55:70:ce:89:92:5f:e5:5f:e4:3d:0b:
                    06:4a:9d:74:a4:98:05:01:e2:02:91:34:ca:07:ee:
                    16:b6:78:3b:2b:db:ab:53:20:4b:5c:cb:65:75:45:
                    80:20:34:00:1b:c2:bb:fc:da:6c:41:9a:4c:b2:89:
                    28:e9:9a:71:f9:84:c8:8f:1a:4c:5f:44:b7:06:aa:
                    5a:67:81:c4:81:0c:40:7c:09:91:ef:73:20:5b:cf:
                    4d:46:01:e1:ff:8d:42:27:ba:9a:ae:00:2d:8a:69:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6D:27:44:D7:00:DF:44:72:F5:4D:04:D1:13:E7:F4:09:F4:20:E2
            X509v3 Authority Key Identifier:
                keyid:4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/323830343a353334343a3a2f33342d3334203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5344::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:a4:c2:f0:1c:fb:19:e9:0b:da:cd:93:a7:19:05:bf:9f:78:
         84:b3:75:c3:fc:50:54:91:19:98:5e:66:d8:37:8f:c3:6a:a8:
         04:f0:6c:7f:2a:d5:c6:65:62:b7:1d:a0:fd:61:2c:e7:6d:a7:
         b9:18:69:69:9a:54:66:5f:33:33:96:ce:9d:f0:46:90:10:8e:
         4c:32:d7:f2:00:18:3d:1e:45:5e:c0:05:74:29:52:fb:19:ee:
         e0:b7:ac:68:aa:c0:ae:14:01:d4:3e:72:22:bd:74:ba:80:c4:
         9c:25:f1:dd:f1:9c:89:61:f7:2c:ff:8f:98:60:76:9c:b5:92:
         ab:3c:69:62:f5:09:5f:96:2e:f4:d9:0b:3f:f3:55:42:aa:02:
         35:28:e0:46:47:b1:cf:b3:e7:44:16:e7:d2:1f:48:15:09:fa:
         f2:2e:77:c2:70:32:68:b7:6e:55:2b:ec:80:d4:1f:6b:f3:41:
         c1:2c:66:7b:1d:ae:03:c3:fa:00:85:3f:20:07:57:1a:57:4e:
         7c:5e:09:67:95:f0:f3:6f:de:e9:a2:0f:26:54:ab:c4:c7:31:
         7c:bc:60:78:8f:f7:45:f8:c1:b4:67:b6:07:23:4c:21:ef:e5:
         df:2b:0b:06:6e:23:13:1c:35:9a:23:bb:b7:91:67:ac:c5:ee:
         ed:f8:16:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQxf5LiApq+JUxrpsF6WZLaH13VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU5ODc2NUQ0RDkyODJEQTEwOEVGMEVFNENCMzg0Njcw
OEVCM0IyRDAeFw0yMzEyMTQxMjQyNDBaFw0yNDEyMTIxMjQ3NDBaMDMxMTAvBgNV
BAMTKDlDNkQyNzQ0RDcwMERGNDQ3MkY1NEQwNEQxMTNFN0Y0MDlGNDIwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4godM6IzYyX3hcWCBUvbaaXww
wS3XydGRrpI5DMUi1xy99bG0OfAwKf6Y/e4d917Saei9l5qIjdChIr5K8AD9sDON
8+MHJM7fQjVBTBl9eoYhW5bQAQJUMenXr0PFQuPxCVDSKia+pAT+Lo2dcKiDR+xg
kMULuSiZXKmIHwSLxC646UsWN3irG8sIuYeorxkYeoCHybAFVxdVcM6Jkl/lX+Q9
CwZKnXSkmAUB4gKRNMoH7ha2eDsr26tTIEtcy2V1RYAgNAAbwrv82mxBmkyyiSjp
mnH5hMiPGkxfRLcGqlpngcSBDEB8CZHvcyBbz01GAeH/jUInupquAC2KaX/7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnG0nRNcA30Ry9U0E0RPn9An0IOIwHwYDVR0j
BBgwFoAUTph2XU2SgtoQjvDuTLOEZwjrOy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVQajJOdXFTcGN1Q3RnV25wVThIUXRka1ZYaG85a2toYTlxV29NQ1c2
RWMvMC80RTk4NzY1RDREOTI4MkRBMTA4RUYwRUU0Q0IzODQ2NzA4RUIzQjJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFOTg3NjVENEQ5MjgyREEx
MDhFRjBFRTRDQjM4NDY3MDhFQjNCMkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1UGoyTnVxU3BjdUN0Z1ducFU4SFF0ZGtWWGhvOWtraGE5cVdvTUNXNkVjLzAv
MzIzODMwMzQzYTM1MzMzNDM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4
MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARTRAAwDQYJKoZIhvcNAQELBQADggEBALykwvAc
+xnpC9rNk6cZBb+feISzdcP8UFSRGZheZtg3j8NqqATwbH8q1cZlYrcdoP1hLOdt
p7kYaWmaVGZfMzOWzp3wRpAQjkwy1/IAGD0eRV7ABXQpUvsZ7uC3rGiqwK4UAdQ+
ciK9dLqAxJwl8d3xnIlh9yz/j5hgdpy1kqs8aWL1CV+WLvTZCz/zVUKqAjUo4EZH
sc+z50QW59IfSBUJ+vIud8JwMmi3blUr7IDUH2vzQcEsZnsdrgPD+gCFPyAHVxpX
TnxeCWeV8PNv3umiDyZUq8THMXy8YHiP90X4wbRntgcjTCHv5d8rCwZuIxMcNZoj
u7eRZ6zF7u34FrI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-ams.rpki-client.org