Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/323830343a356532383a3a2f33322d3334203d3e20323639303135.roa
File:                     323830343a356532383a3a2f33322d3334203d3e20323639303135.roa (raw, json)
Hash identifier:          3mOAypHVLFFatRnu8VI9DjqfXAsuykSCtQgirwP4Gzc=
Subject key identifier:   E4:30:75:C2:72:CC:08:17:A0:64:63:45:49:BB:26:57:D5:FF:31:B5
Certificate issuer:       /CN=C50CA4FF7E2D11574F46D0D7274665DAA95B21B5
Certificate serial:       4FDF24C5E4D1EF00E72F776E7663C3E7C6C004DF
Authority key identifier: C5:0C:A4:FF:7E:2D:11:57:4F:46:D0:D7:27:46:65:DA:A9:5B:21:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/323830343a356532383a3a2f33322d3334203d3e20323639303135.roa
Signing time:             Mon 10 Apr 2023 14:45:28 +0000
ROA not before:           Mon 10 Apr 2023 14:40:28 +0000
ROA not after:            Mon 08 Apr 2024 14:45:28 +0000
asID:                     269015
IP address blocks:        2804:5e28::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:df:24:c5:e4:d1:ef:00:e7:2f:77:6e:76:63:c3:e7:c6:c0:04:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C50CA4FF7E2D11574F46D0D7274665DAA95B21B5
        Validity
            Not Before: Apr 10 14:40:28 2023 GMT
            Not After : Apr  8 14:45:28 2024 GMT
        Subject: CN=E43075C272CC0817A064634549BB2657D5FF31B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:66:39:5e:64:46:69:87:1e:ef:11:47:da:
                    75:e4:5e:17:d1:fe:95:9b:50:2e:2b:d9:b9:09:f4:
                    18:8d:c8:a6:62:c0:de:2e:ff:85:36:47:1c:51:aa:
                    a3:d5:eb:77:a1:8d:34:6e:c1:a1:51:48:c0:01:68:
                    72:bc:1d:d2:e5:6f:47:e5:4b:fb:43:f1:c7:50:ce:
                    ae:2d:e8:5d:37:78:45:42:3d:bf:5a:fa:40:70:49:
                    61:76:88:eb:a5:2d:4c:38:17:9a:0d:69:96:be:05:
                    fe:c2:00:91:3a:22:3d:a1:f2:1c:41:39:f1:0f:b7:
                    2b:dd:8f:b5:0c:da:8f:71:f5:e9:a9:83:8b:38:e3:
                    c3:70:08:d1:eb:82:ba:13:64:57:17:fc:22:0e:59:
                    02:f5:82:75:9e:2a:bb:cb:3f:6a:f9:27:3e:6c:12:
                    1a:a7:2b:90:3d:0a:c3:a5:84:3f:89:8f:f5:96:13:
                    6f:42:f3:68:6a:63:b7:47:e7:3f:3f:d2:b3:3f:5f:
                    63:ed:e4:6d:a0:98:b7:f0:3d:e3:a1:18:d1:be:b3:
                    78:43:61:bc:dd:04:62:7e:b4:5b:aa:2a:d7:cb:c8:
                    41:0d:61:3d:b4:73:d3:70:b6:ef:63:14:2f:7f:e7:
                    8b:fc:ae:bc:84:2e:c7:5a:b3:ec:33:b9:3c:6e:d5:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:30:75:C2:72:CC:08:17:A0:64:63:45:49:BB:26:57:D5:FF:31:B5
            X509v3 Authority Key Identifier:
                keyid:C5:0C:A4:FF:7E:2D:11:57:4F:46:D0:D7:27:46:65:DA:A9:5B:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/323830343a356532383a3a2f33322d3334203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:9a:97:5e:82:8e:fb:27:18:05:16:f3:c9:5b:44:76:cf:
         f6:a4:06:74:d1:59:01:86:4f:60:95:29:cc:8b:fa:2e:21:58:
         be:67:4b:03:d4:76:ef:fd:02:2a:90:b7:66:7f:bb:d7:45:a4:
         d6:30:a4:3a:3d:24:71:aa:89:41:0e:0a:cb:fe:88:dc:72:91:
         d1:3a:20:87:cd:ff:a6:0b:b8:af:8a:89:a2:fa:ec:a1:56:ea:
         99:0b:48:dd:77:d2:57:08:4f:89:79:b7:ff:d3:d6:16:f7:9b:
         da:d4:fc:5d:21:a4:35:22:db:68:87:c0:81:d0:a6:3c:54:aa:
         cf:d0:1f:d6:99:cf:f3:dc:5a:d8:3e:67:4f:39:19:47:ec:1b:
         53:19:79:12:bc:1a:da:ad:b4:d4:44:19:81:38:61:a6:51:62:
         f4:f8:b7:d8:d5:66:5a:3c:da:8b:cd:85:49:9a:2c:7d:c2:08:
         28:6f:5a:3a:dd:a8:03:4f:9c:e5:84:d4:a9:dc:04:29:c7:07:
         75:5f:9f:b4:a3:5f:4b:cf:09:7e:41:da:92:5b:e1:6b:8c:b6:
         e3:e2:93:0e:30:40:20:7c:9a:93:b4:8f:0c:2e:e0:50:97:20:
         36:b0:7a:25:dc:b5:be:44:75:5c:71:95:ba:bc:3e:72:53:70:
         7d:14:a7:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT98kxeTR7wDnL3dudmPD58bABN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUwQ0E0RkY3RTJEMTE1NzRGNDZEMEQ3Mjc0NjY1REFB
OTVCMjFCNTAeFw0yMzA0MTAxNDQwMjhaFw0yNDA0MDgxNDQ1MjhaMDMxMTAvBgNV
BAMTKEU0MzA3NUMyNzJDQzA4MTdBMDY0NjM0NTQ5QkIyNjU3RDVGRjMxQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbWY5XmRGaYce7xFH2nXkXhfR
/pWbUC4r2bkJ9BiNyKZiwN4u/4U2RxxRqqPV63ehjTRuwaFRSMABaHK8HdLlb0fl
S/tD8cdQzq4t6F03eEVCPb9a+kBwSWF2iOulLUw4F5oNaZa+Bf7CAJE6Ij2h8hxB
OfEPtyvdj7UM2o9x9empg4s448NwCNHrgroTZFcX/CIOWQL1gnWeKrvLP2r5Jz5s
EhqnK5A9CsOlhD+Jj/WWE29C82hqY7dH5z8/0rM/X2Pt5G2gmLfwPeOhGNG+s3hD
YbzdBGJ+tFuqKtfLyEENYT20c9Nwtu9jFC9/54v8rryELsdas+wzuTxu1eIRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5DB1wnLMCBegZGNFSbsmV9X/MbUwHwYDVR0j
BBgwFoAUxQyk/34tEVdPRtDXJ0Zl2qlbIbUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMS9DNTBDQTRGRjdFMkQxMTU3NEY0NkQwRDcyNzQ2NjVEQUE5NUIyMUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MENBNEZGN0UyRDExNTc0
RjQ2RDBENzI3NDY2NURBQTk1QjIxQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzEv
MzIzODMwMzQzYTM1NjUzMjM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM5
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAReKDANBgkqhkiG9w0BAQsFAAOCAQEAc9mal16C
jvsnGAUW88lbRHbP9qQGdNFZAYZPYJUpzIv6LiFYvmdLA9R27/0CKpC3Zn+710Wk
1jCkOj0kcaqJQQ4Ky/6I3HKR0Togh83/pgu4r4qJovrsoVbqmQtI3XfSVwhPiXm3
/9PWFveb2tT8XSGkNSLbaIfAgdCmPFSqz9Af1pnP89xa2D5nTzkZR+wbUxl5Erwa
2q201EQZgThhplFi9Pi32NVmWjzai82FSZosfcIIKG9aOt2oA0+c5YTUqdwEKccH
dV+ftKNfS88JfkHaklvha4y24+KTDjBAIHyak7SPDC7gUJcgNrB6Jdy1vkR1XHGV
urw+clNwfRSnWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org