Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a623030303a3a2f33362d3336203d3e20323634323831.roa
File:                     323830343a323537303a623030303a3a2f33362d3336203d3e20323634323831.roa (raw, json)
Hash identifier:          poxdlcHoY8I0v+6aqDzFo9isAbl6G+qD65PaTvdDiy4=
Subject key identifier:   5D:D9:0F:5F:4D:FE:0B:7C:85:45:BE:AA:EE:C8:8D:7E:18:59:4A:24
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       70D94B80357782CA82F9E34CC5B730AAD7C1C566
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a623030303a3a2f33362d3336203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:04:58 +0000
ROA not before:           Sat 08 Apr 2023 13:59:58 +0000
ROA not after:            Sat 06 Apr 2024 14:04:58 +0000
asID:                     264281
IP address blocks:        2804:2570:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d9:4b:80:35:77:82:ca:82:f9:e3:4c:c5:b7:30:aa:d7:c1:c5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 13:59:58 2023 GMT
            Not After : Apr  6 14:04:58 2024 GMT
        Subject: CN=5DD90F5F4DFE0B7C8545BEAAEEC88D7E18594A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:22:dc:47:6b:ed:0d:2e:58:c7:43:ac:2f:
                    55:80:7f:9b:d4:83:b6:30:98:5b:64:7c:4c:2c:67:
                    06:8e:bc:78:c2:52:75:5d:8a:48:34:54:6a:bd:0e:
                    0b:ef:67:ec:49:24:c0:35:cc:fa:26:00:72:05:2c:
                    de:d4:2c:a7:09:3a:4f:0e:71:52:b5:68:58:7b:96:
                    e9:5e:6b:0c:6a:c9:71:5a:94:9c:c1:8e:55:cf:7e:
                    e9:d6:5f:e8:c2:6a:53:24:73:fe:cb:e2:58:ac:61:
                    05:d6:66:8e:5a:20:80:8f:59:9f:e4:20:a6:29:b4:
                    1e:be:6a:be:c1:b5:47:bc:49:71:3f:f5:64:cb:68:
                    0f:e5:c4:3d:d1:50:42:05:f8:c1:b2:c6:7f:bd:25:
                    49:9f:d4:2c:49:87:e4:f2:c4:a4:27:f7:c3:ff:1b:
                    85:fe:05:f1:02:93:5e:06:26:0f:e8:d9:9c:f0:b6:
                    e6:e4:5d:f0:e8:2a:12:e9:57:d7:d6:0c:37:fb:15:
                    4b:ae:ec:97:ec:4c:76:18:c3:99:90:9f:09:7f:3f:
                    e8:2c:ff:c2:81:4f:88:00:d3:75:6a:2f:ce:4a:92:
                    09:03:4c:fd:03:41:29:8e:c2:ee:16:57:20:af:f6:
                    9f:57:e8:51:ed:14:72:03:21:62:fd:25:df:65:b3:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D9:0F:5F:4D:FE:0B:7C:85:45:BE:AA:EE:C8:8D:7E:18:59:4A:24
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a623030303a3a2f33362d3336203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2570:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a3:7e:e4:58:f9:fc:6a:86:59:28:fd:e9:bf:4d:80:17:33:cd:
         35:af:f6:c3:32:b4:29:0c:17:59:b8:7b:82:8c:d5:b3:6d:fa:
         54:d6:c1:06:de:d7:16:12:41:f1:94:bd:f1:e6:d1:ba:49:52:
         6e:01:97:28:b1:f9:4e:93:a4:3f:6f:a9:9d:1b:3e:04:32:6f:
         1f:e2:c2:d3:d4:ba:76:59:86:f5:3e:43:28:58:cd:04:db:bf:
         0e:16:72:d0:cf:6e:de:2e:dc:25:ea:82:5c:87:a0:7f:37:75:
         d8:d2:81:67:db:05:42:29:29:21:3d:97:cf:19:fc:0e:df:a5:
         7c:90:95:38:fc:14:94:a7:64:a8:3d:e4:be:29:90:cc:53:23:
         4e:5a:d1:24:70:96:b5:a7:d9:51:a0:6a:8b:ee:f1:b4:7c:7a:
         8e:b4:e2:bb:e3:fc:c5:ef:63:de:4c:e1:0d:25:0f:be:be:83:
         ff:32:9d:56:96:3b:7c:98:04:4c:41:22:d9:68:51:a4:c8:6e:
         14:bd:76:68:69:bc:3d:56:75:b8:c8:0d:bf:0e:33:24:1b:ac:
         92:3e:0a:0f:02:38:fd:55:d2:fc:61:c3:98:8c:bf:11:6d:d4:
         89:db:89:0c:8d:ae:8e:84:b0:33:34:e0:df:36:18:a3:7c:86:
         71:41:20:33
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcNlLgDV3gsqC+eNMxbcwqtfBxWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMyODRCMjk4QkQ4M0IyQ0Q3OTUyNDEwODVBNTEzNDRD
QUFBNjkxNDAeFw0yMzA0MDgxMzU5NThaFw0yNDA0MDYxNDA0NThaMDMxMTAvBgNV
BAMTKDVERDkwRjVGNERGRTBCN0M4NTQ1QkVBQUVFQzg4RDdFMTg1OTRBMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YyLcR2vtDS5Yx0OsL1WAf5vU
g7YwmFtkfEwsZwaOvHjCUnVdikg0VGq9DgvvZ+xJJMA1zPomAHIFLN7ULKcJOk8O
cVK1aFh7luleawxqyXFalJzBjlXPfunWX+jCalMkc/7L4lisYQXWZo5aIICPWZ/k
IKYptB6+ar7BtUe8SXE/9WTLaA/lxD3RUEIF+MGyxn+9JUmf1CxJh+TyxKQn98P/
G4X+BfECk14GJg/o2ZzwtubkXfDoKhLpV9fWDDf7FUuu7JfsTHYYw5mQnwl/P+gs
/8KBT4gA03VqL85KkgkDTP0DQSmOwu4WVyCv9p9X6FHtFHIDIWL9Jd9ls2/zAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXdkPX03+C3yFRb6q7siNfhhZSiQwHwYDVR0j
BBgwFoAUTChLKYvYOyzXlSQQhaUTRMqqaRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR
VzIvMC80QzI4NEIyOThCRDgzQjJDRDc5NTI0MTA4NUE1MTM0NENBQUE2OTE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDMjg0QjI5OEJEODNCMkNE
Nzk1MjQxMDg1QTUxMzQ0Q0FBQTY5MTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzAv
MzIzODMwMzQzYTMyMzUzNzMwM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJXCwMA0GCSqGSIb3DQEBCwUA
A4IBAQCjfuRY+fxqhlko/em/TYAXM801r/bDMrQpDBdZuHuCjNWzbfpU1sEG3tcW
EkHxlL3x5tG6SVJuAZcosflOk6Q/b6mdGz4EMm8f4sLT1Lp2WYb1PkMoWM0E278O
FnLQz27eLtwl6oJch6B/N3XY0oFn2wVCKSkhPZfPGfwO36V8kJU4/BSUp2SoPeS+
KZDMUyNOWtEkcJa1p9lRoGqL7vG0fHqOtOK74/zF72PeTOENJQ++voP/Mp1Wljt8
mARMQSLZaFGkyG4UvXZoabw9VnW4yA2/DjMkG6ySPgoPAjj9VdL8YcOYjL8RbdSJ
24kMja6OhLAzNODfNhijfIZxQSAz
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org