Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/323830343a356166343a3a2f33322d3332203d3e20323638383039.roa
File:                     323830343a356166343a3a2f33322d3332203d3e20323638383039.roa (raw, json)
Hash identifier:          bpXddPLCHcMH8MyVON1W2otOcNcOECmAGnnqNN3C3No=
Subject key identifier:   7D:8F:A9:A4:BD:52:88:13:AB:51:62:2A:0C:23:09:F6:AA:51:1C:78
Certificate issuer:       /CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
Certificate serial:       64D6CAD618692C1B4D221DE45BF7BB96702F041B
Authority key identifier: A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/323830343a356166343a3a2f33322d3332203d3e20323638383039.roa
Signing time:             Wed 16 Aug 2023 21:49:21 +0000
ROA not before:           Wed 16 Aug 2023 21:44:21 +0000
ROA not after:            Wed 14 Aug 2024 21:49:21 +0000
asID:                     268809
IP address blocks:        2804:5af4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d6:ca:d6:18:69:2c:1b:4d:22:1d:e4:5b:f7:bb:96:70:2f:04:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
        Validity
            Not Before: Aug 16 21:44:21 2023 GMT
            Not After : Aug 14 21:49:21 2024 GMT
        Subject: CN=7D8FA9A4BD528813AB51622A0C2309F6AA511C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:98:3d:5a:c0:ca:ad:be:25:aa:d8:2a:68:
                    d9:21:55:f4:ce:23:4d:5e:b8:b1:cb:b0:61:14:d5:
                    01:0f:7a:a2:d7:7b:59:96:b0:85:b8:e8:ac:aa:cd:
                    bb:85:ec:85:0e:2a:5b:4c:64:1f:33:fe:54:db:7e:
                    76:72:f2:aa:f0:fa:ce:77:35:4c:79:6f:08:b9:f9:
                    41:7a:e2:14:42:9b:f7:8a:bc:da:f8:62:d2:cf:e7:
                    59:80:f6:9f:ae:b5:2f:25:ac:ab:c1:6d:fd:9e:a0:
                    4a:24:3b:a3:6d:cd:9e:b9:12:7e:b8:f9:cc:1b:73:
                    4e:60:bd:be:34:50:d7:aa:35:c6:43:49:ec:20:77:
                    e5:55:92:ee:cf:d6:b6:3d:2f:ad:56:7b:ac:04:f6:
                    99:75:ea:87:39:67:71:5c:d5:94:44:1b:28:d6:f5:
                    5d:35:f4:47:04:dc:67:3f:2c:86:b2:6a:01:09:6f:
                    15:28:9c:83:ce:33:6e:3f:e2:9b:91:b4:28:c1:2f:
                    5b:13:16:92:54:46:7c:4b:4b:bb:dd:83:0f:40:4c:
                    8d:4f:9b:b2:df:ff:2c:60:16:41:6f:fa:2a:b7:ba:
                    f1:6d:fd:80:94:e3:57:26:5b:99:32:2e:7c:73:12:
                    38:d7:33:f1:f3:77:1e:db:61:18:93:04:c7:e1:98:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8F:A9:A4:BD:52:88:13:AB:51:62:2A:0C:23:09:F6:AA:51:1C:78
            X509v3 Authority Key Identifier:
                keyid:A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/323830343a356166343a3a2f33322d3332203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:be:4d:33:a9:81:f8:82:34:ee:79:c9:53:45:0b:c7:44:4d:
         93:3e:0d:7f:3a:2c:be:6b:ca:f0:01:71:32:97:c6:b7:93:d7:
         ac:0d:2d:a3:fd:c2:04:d9:9b:79:25:78:59:e0:b4:5e:4f:fa:
         44:a2:6f:0e:a2:f0:10:86:ad:3d:96:c5:5f:9c:fd:f1:da:42:
         22:6e:75:70:2b:a5:73:17:5d:56:07:38:84:ab:e9:dd:00:af:
         3e:c1:b1:24:7b:04:df:b3:af:16:2e:6d:6f:3f:d6:ed:9e:c7:
         10:e0:39:ea:48:02:02:d9:d9:d1:85:9c:97:2c:8a:68:50:b1:
         2e:50:33:dd:80:e1:53:32:1d:5a:e8:6c:2c:e9:50:4b:69:8e:
         ea:8b:21:f8:9f:1c:2c:dd:0e:84:d2:98:e4:39:d8:8a:67:5b:
         f9:52:e7:35:a8:e2:c0:36:44:cb:28:ec:ca:f6:b7:fd:87:d3:
         dd:96:93:38:0c:45:fd:4f:bc:46:37:3c:d3:ff:85:35:37:d5:
         a6:31:97:e5:d5:c0:58:aa:20:24:ad:e2:bb:42:62:dc:ec:3f:
         66:85:3a:a4:20:a6:bd:6a:67:ac:39:2c:a2:fe:0f:46:dd:8c:
         18:3b:f3:18:6f:30:01:d7:6b:d2:c9:02:97:08:36:fe:1b:e6:
         a9:b8:51:9d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZNbK1hhpLBtNIh3kW/e7lnAvBBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVCMDBEQ0U1QTNFRDZERjc2QkUzNEVFQTM1NjQ3QUQ1
MUI4QTkzMTAeFw0yMzA4MTYyMTQ0MjFaFw0yNDA4MTQyMTQ5MjFaMDMxMTAvBgNV
BAMTKDdEOEZBOUE0QkQ1Mjg4MTNBQjUxNjIyQTBDMjMwOUY2QUE1MTFDNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs75g9WsDKrb4lqtgqaNkhVfTO
I01euLHLsGEU1QEPeqLXe1mWsIW46KyqzbuF7IUOKltMZB8z/lTbfnZy8qrw+s53
NUx5bwi5+UF64hRCm/eKvNr4YtLP51mA9p+utS8lrKvBbf2eoEokO6NtzZ65En64
+cwbc05gvb40UNeqNcZDSewgd+VVku7P1rY9L61We6wE9pl16oc5Z3Fc1ZREGyjW
9V019EcE3Gc/LIayagEJbxUonIPOM24/4puRtCjBL1sTFpJURnxLS7vdgw9ATI1P
m7Lf/yxgFkFv+iq3uvFt/YCU41cmW5kyLnxzEjjXM/Hzdx7bYRiTBMfhmDTFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfY+ppL1SiBOrUWIqDCMJ9qpRHHgwHwYDVR0j
BBgwFoAUpbANzlo+1t92vjTuo1ZHrVG4qTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1m
TW0vMS9BNUIwMERDRTVBM0VENkRGNzZCRTM0RUVBMzU2NDdBRDUxQjhBOTMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E1QjAwRENFNUEzRUQ2REY3
NkJFMzRFRUEzNTY0N0FENTFCOEE5MzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBS2tzRGVUQkxNQ0dtalpIdXF2NjFOdFhXQ1lKVzZzNG1WS2o3TEpNZk1tLzEv
MzIzODMwMzQzYTM1NjE2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARa9DANBgkqhkiG9w0BAQsFAAOCAQEAf75NM6mB
+II07nnJU0ULx0RNkz4NfzosvmvK8AFxMpfGt5PXrA0to/3CBNmbeSV4WeC0Xk/6
RKJvDqLwEIatPZbFX5z98dpCIm51cCulcxddVgc4hKvp3QCvPsGxJHsE37OvFi5t
bz/W7Z7HEOA56kgCAtnZ0YWclyyKaFCxLlAz3YDhUzIdWuhsLOlQS2mO6osh+J8c
LN0OhNKY5DnYimdb+VLnNajiwDZEyyjsyva3/YfT3ZaTOAxF/U+8Rjc80/+FNTfV
pjGX5dXAWKogJK3iu0Ji3Ow/ZoU6pCCmvWpnrDksov4PRt2MGDvzGG8wAddr0skC
lwg2/hvmqbhRnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org