Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/323830343a313334303a3a2f33332d3333203d3e20323633353234.roa
File:                     323830343a313334303a3a2f33332d3333203d3e20323633353234.roa (raw, json)
Hash identifier:          urw3sVped8Bem9URkfhlluKVmtwc863cCugLQkT6h68=
Subject key identifier:   48:46:92:80:8E:BE:6B:9C:9D:CA:0A:68:9D:B4:AE:76:14:E1:3A:0B
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       7094255C2654043275523E4A913D65BA650E459F
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/323830343a313334303a3a2f33332d3333203d3e20323633353234.roa
Signing time:             Wed 13 Dec 2023 21:24:11 +0000
ROA not before:           Wed 13 Dec 2023 21:19:11 +0000
ROA not after:            Wed 11 Dec 2024 21:24:11 +0000
asID:                     263524
IP address blocks:        2804:1340::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:94:25:5c:26:54:04:32:75:52:3e:4a:91:3d:65:ba:65:0e:45:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Dec 13 21:19:11 2023 GMT
            Not After : Dec 11 21:24:11 2024 GMT
        Subject: CN=484692808EBE6B9C9DCA0A689DB4AE7614E13A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:67:72:cb:4d:c8:9f:fc:b2:3c:28:66:3d:
                    f2:c2:01:d7:97:f0:be:4a:69:d5:9f:8a:4d:cf:6c:
                    4e:b6:c9:83:d9:41:00:49:43:97:a4:27:d6:e9:a2:
                    60:6c:98:55:65:02:2d:12:3b:e9:2b:04:40:ed:c5:
                    f8:e7:7b:97:69:a1:50:f6:e6:8b:08:d7:f4:29:55:
                    f2:3b:b8:6d:5e:04:a3:11:f6:f2:2e:ef:a1:a5:a4:
                    2e:13:dc:ab:ee:28:7c:65:71:c5:16:53:5a:8f:7c:
                    62:a6:1e:67:af:b8:88:e8:60:a7:91:84:e4:0b:86:
                    86:ba:bb:74:74:f2:bb:24:56:da:75:9a:40:77:31:
                    03:ca:49:7a:7c:c4:ec:0f:fe:f9:70:6b:48:7b:97:
                    e4:e2:31:99:0b:65:29:f4:2f:13:51:ed:32:90:a7:
                    6b:94:b5:e0:98:dd:4c:d1:1a:81:c4:ec:55:b7:9f:
                    1c:63:51:02:d9:c4:c8:a5:3b:07:2b:2f:c1:d6:c4:
                    9d:d3:11:6d:c4:b6:2d:df:85:e2:06:4b:d2:24:1f:
                    75:aa:fa:16:83:a3:a2:f8:52:06:db:47:42:f3:66:
                    31:09:6d:85:7b:11:25:2d:a8:3a:a4:55:33:e7:e1:
                    e8:12:0e:00:e2:9c:bd:67:a9:26:a1:73:4d:7f:4c:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:46:92:80:8E:BE:6B:9C:9D:CA:0A:68:9D:B4:AE:76:14:E1:3A:0B
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/323830343a313334303a3a2f33332d3333203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1340::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:2f:aa:99:6b:86:53:02:49:1d:6e:13:b2:a6:90:12:cd:
         fc:09:16:c7:b7:85:49:b0:f0:2b:fd:2a:56:53:2e:1b:9b:ee:
         90:1d:7a:7c:5b:85:96:05:a8:b3:4d:73:56:7c:05:75:8d:35:
         08:e7:d6:e1:87:15:d3:71:cc:05:b5:36:af:5b:89:4b:ef:96:
         2a:2c:32:c6:56:a4:d0:ed:1d:11:bf:03:26:22:23:60:ab:91:
         cf:ad:91:48:0e:4c:d9:e7:dd:34:1b:54:cd:46:eb:07:12:fc:
         80:31:a7:bb:fc:62:f6:07:d4:77:d5:34:a0:cd:8b:e7:5d:01:
         f2:51:8e:b9:13:5c:03:ba:81:7f:75:b3:80:a9:ae:5d:a2:9c:
         81:9d:b3:18:13:3d:22:0b:c3:8b:48:86:9e:5d:ff:51:b1:4e:
         22:ac:0a:d4:50:d0:72:52:63:70:d5:1a:63:3e:5b:da:1d:45:
         5b:2c:ef:2d:9b:40:5d:ea:c9:fe:42:33:9b:7c:0a:81:90:62:
         ce:af:d4:7a:67:3d:d0:ed:5c:17:dc:d5:66:06:37:09:a5:da:
         1a:ac:ff:5b:d0:3e:79:fe:19:20:89:68:cc:4b:4e:e9:a2:89:
         97:fb:98:50:33:7c:90:6f:b0:0e:c2:39:f8:66:8b:31:36:52:
         23:23:af:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcJQlXCZUBDJ1Uj5KkT1lumUORZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGQTlDQzgwRTRERTRBMUE2ODBENkE0REUzQzcyODBD
MjYyNzI1ODAeFw0yMzEyMTMyMTE5MTFaFw0yNDEyMTEyMTI0MTFaMDMxMTAvBgNV
BAMTKDQ4NDY5MjgwOEVCRTZCOUM5RENBMEE2ODlEQjRBRTc2MTRFMTNBMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnn2dyy03In/yyPChmPfLCAdeX
8L5KadWfik3PbE62yYPZQQBJQ5ekJ9bpomBsmFVlAi0SO+krBEDtxfjne5dpoVD2
5osI1/QpVfI7uG1eBKMR9vIu76GlpC4T3KvuKHxlccUWU1qPfGKmHmevuIjoYKeR
hOQLhoa6u3R08rskVtp1mkB3MQPKSXp8xOwP/vlwa0h7l+TiMZkLZSn0LxNR7TKQ
p2uUteCY3UzRGoHE7FW3nxxjUQLZxMilOwcrL8HWxJ3TEW3Eti3fheIGS9IkH3Wq
+haDo6L4UgbbR0LzZjEJbYV7ESUtqDqkVTPn4egSDgDinL1nqSahc01/TNYlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSEaSgI6+a5ydygponbSudhThOgswHwYDVR0j
BBgwFoAUXPqcyA5N5KGmgNak3jxygMJiclgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBDNEpSUzk2OUE3clJ3Qk42RU1oajZ3OVZjWHVLZjNFWVlIWlR5Tkoy
TGkvMC81Q0ZBOUNDODBFNERFNEExQTY4MEQ2QTRERTNDNzI4MEMyNjI3MjU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDRkE5Q0M4MEU0REU0QTFB
NjgwRDZBNERFM0M3MjgwQzI2MjcyNTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQQzRKUlM5NjlBN3JSd0JONkVNaGo2dzlWY1h1S2YzRVlZSFpUeU5KMkxpLzAv
MzIzODMwMzQzYTMxMzMzNDMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQTQAAwDQYJKoZIhvcNAQELBQADggEBAKEpL6qZ
a4ZTAkkdbhOyppASzfwJFse3hUmw8Cv9KlZTLhub7pAdenxbhZYFqLNNc1Z8BXWN
NQjn1uGHFdNxzAW1Nq9biUvvliosMsZWpNDtHRG/AyYiI2Crkc+tkUgOTNnn3TQb
VM1G6wcS/IAxp7v8YvYH1HfVNKDNi+ddAfJRjrkTXAO6gX91s4Cprl2inIGdsxgT
PSILw4tIhp5d/1GxTiKsCtRQ0HJSY3DVGmM+W9odRVss7y2bQF3qyf5CM5t8CoGQ
Ys6v1HpnPdDtXBfc1WYGNwml2hqs/1vQPnn+GSCJaMxLTumiiZf7mFAzfJBvsA7C
OfhmizE2UiMjrwA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org