Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/323830343a353032633a3a2f33322d3332203d3e20323638333733.roa
File:                     323830343a353032633a3a2f33322d3332203d3e20323638333733.roa (raw, json)
Hash identifier:          k1fZ8rwIKQWyV3PFmDBrEvSHgqXqyxnLVR1wesoozvY=
Subject key identifier:   5D:13:74:B5:65:F5:4E:67:AE:3C:38:66:B3:58:B3:2D:C9:6D:7E:64
Certificate issuer:       /CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
Certificate serial:       2D486531E1A8048EF36F732125452C38E9E9875B
Authority key identifier: 70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/323830343a353032633a3a2f33322d3332203d3e20323638333733.roa
Signing time:             Thu 22 Feb 2024 13:04:31 +0000
ROA not before:           Thu 22 Feb 2024 12:59:31 +0000
ROA not after:            Thu 20 Feb 2025 13:04:31 +0000
asID:                     268373
IP address blocks:        2804:502c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:65:31:e1:a8:04:8e:f3:6f:73:21:25:45:2c:38:e9:e9:87:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
        Validity
            Not Before: Feb 22 12:59:31 2024 GMT
            Not After : Feb 20 13:04:31 2025 GMT
        Subject: CN=5D1374B565F54E67AE3C3866B358B32DC96D7E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:cc:4b:36:28:1b:b2:b4:95:ba:29:16:bb:
                    f3:00:81:26:d3:18:20:32:2c:ed:7e:a8:90:14:d7:
                    9e:3d:b4:4f:fa:78:e7:a9:a6:e0:c3:ce:3b:52:e1:
                    3e:c6:05:a3:a8:54:ea:23:da:b1:2a:ed:7b:9d:bf:
                    25:a6:30:52:f9:fc:cd:4d:c1:fc:ba:75:c7:49:ec:
                    1b:ae:e3:b9:3b:3a:7e:7a:74:66:f3:51:5b:35:54:
                    2b:06:3c:5c:d7:0f:94:f9:1d:c0:9b:8e:07:98:f7:
                    67:07:cc:69:9d:70:2e:e1:2c:99:da:9a:54:aa:07:
                    4c:e5:6e:72:17:bb:a7:06:37:1b:e6:7f:1f:d8:5a:
                    5a:42:78:5b:05:5e:90:bf:5e:1a:c4:d3:9d:3b:75:
                    88:92:07:09:d4:5b:07:7e:6e:c7:8c:db:a1:6d:cc:
                    da:5d:6b:bc:5e:86:30:05:67:ba:a2:6c:7b:cd:84:
                    ed:2d:27:21:a2:21:02:d2:c8:12:c6:8a:e1:0a:a3:
                    ca:15:08:34:27:f4:41:16:04:b4:d8:b4:f4:24:01:
                    88:f3:3c:6b:0b:8d:e5:90:d6:32:ee:55:33:c9:e2:
                    58:3f:44:13:fb:d7:45:07:b7:da:bc:61:96:ac:ef:
                    20:09:32:e6:a6:dc:2f:a2:3c:00:25:ba:77:6a:d2:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:13:74:B5:65:F5:4E:67:AE:3C:38:66:B3:58:B3:2D:C9:6D:7E:64
            X509v3 Authority Key Identifier:
                keyid:70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/323830343a353032633a3a2f33322d3332203d3e20323638333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:502c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:88:47:4b:07:b8:42:ff:3c:5d:fe:87:0e:b9:5c:d9:28:4e:
         31:6d:83:d0:d6:54:0e:b8:da:fc:e0:9f:85:48:94:4e:c5:74:
         cb:cf:5c:bf:7f:d9:fe:80:97:9f:33:74:23:c6:43:95:5c:d8:
         4c:35:fe:2f:5e:05:14:ea:d1:60:39:7b:51:df:37:db:10:99:
         51:de:03:07:0a:c3:d6:b6:4c:ff:30:5c:27:e1:0a:7a:6f:09:
         3c:b2:63:ff:83:be:0e:83:6e:66:01:41:41:70:b2:ba:bf:e9:
         67:a1:01:a6:ed:2c:df:3f:b3:5f:4c:5e:ed:8a:b2:8d:db:02:
         ac:1f:b3:06:e3:86:d9:24:38:76:69:d2:7c:50:4c:ce:d0:9a:
         44:c1:e0:5e:54:4f:62:a4:8b:3d:ef:c4:2b:1c:4f:30:e2:af:
         c3:65:92:81:6d:9e:67:53:73:31:82:50:28:5f:89:8e:03:04:
         ed:c6:7a:1d:c9:f9:72:54:e9:17:e4:82:f3:49:b2:bd:85:d6:
         25:af:32:df:d5:71:2b:d0:9f:3d:ac:65:20:f6:de:4a:93:df:
         61:12:1b:58:98:e5:ea:22:34:34:6b:bc:e4:78:70:da:65:85:
         62:de:1f:f2:66:ea:76:b0:44:27:7f:a9:d9:2f:93:37:26:8c:
         fc:39:af:ed
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULUhlMeGoBI7zb3MhJUUsOOnph1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBENzk4QjY5N0UyREFCRTc2RjI5MjU4OENCRTFCMkZC
RUIyMkM5RTAeFw0yNDAyMjIxMjU5MzFaFw0yNTAyMjAxMzA0MzFaMDMxMTAvBgNV
BAMTKDVEMTM3NEI1NjVGNTRFNjdBRTNDMzg2NkIzNThCMzJEQzk2RDdFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKcxLNigbsrSVuikWu/MAgSbT
GCAyLO1+qJAU1549tE/6eOeppuDDzjtS4T7GBaOoVOoj2rEq7XudvyWmMFL5/M1N
wfy6dcdJ7Buu47k7On56dGbzUVs1VCsGPFzXD5T5HcCbjgeY92cHzGmdcC7hLJna
mlSqB0zlbnIXu6cGNxvmfx/YWlpCeFsFXpC/XhrE0507dYiSBwnUWwd+bseM26Ft
zNpda7xehjAFZ7qibHvNhO0tJyGiIQLSyBLGiuEKo8oVCDQn9EEWBLTYtPQkAYjz
PGsLjeWQ1jLuVTPJ4lg/RBP710UHt9q8YZas7yAJMuam3C+iPAAlundq0tEDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXRN0tWX1TmeuPDhms1izLcltfmQwHwYDVR0j
BBgwFoAUcNeYtpfi2r528pJYjL4bL76yLJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFyeW95SjM0bkdHR2NmRTFXbkdDRWNpVWNrOFJkaDFnWDJBdUZGaUR0
djQvMC83MEQ3OThCNjk3RTJEQUJFNzZGMjkyNTg4Q0JFMUIyRkJFQjIyQzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwRDc5OEI2OTdFMkRBQkU3
NkYyOTI1ODhDQkUxQjJGQkVCMjJDOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBcnlveUozNG5HR0djZkUxV25HQ0VjaVVjazhSZGgxZ1gyQXVGRmlEdHY0LzAv
MzIzODMwMzQzYTM1MzAzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzMzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARQLDANBgkqhkiG9w0BAQsFAAOCAQEAbYhHSwe4
Qv88Xf6HDrlc2ShOMW2D0NZUDrja/OCfhUiUTsV0y89cv3/Z/oCXnzN0I8ZDlVzY
TDX+L14FFOrRYDl7Ud832xCZUd4DBwrD1rZM/zBcJ+EKem8JPLJj/4O+DoNuZgFB
QXCyur/pZ6EBpu0s3z+zX0xe7YqyjdsCrB+zBuOG2SQ4dmnSfFBMztCaRMHgXlRP
YqSLPe/EKxxPMOKvw2WSgW2eZ1NzMYJQKF+JjgME7cZ6Hcn5clTpF+SC80myvYXW
Ja8y39VxK9CfPaxlIPbeSpPfYRIbWJjl6iI0NGu85Hhw2mWFYt4f8mbqdrBEJ3+p
2S+TNyaM/Dmv7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org