Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a343030303a3a2f33342d3334203d3e203631363738.roa
File:                     323830343a316364343a343030303a3a2f33342d3334203d3e203631363738.roa (raw, json)
Hash identifier:          eH6wxG0Wsakf3MhasxiNu8JhLXSUyxXO4vgmN6G3+Ko=
Subject key identifier:   D9:CD:E6:70:CF:43:6E:8B:4A:63:2D:2B:8C:F0:A7:4F:38:F4:07:AF
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       635EAA834B07E03ADE08B9742E50DCA21E95C39F
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a343030303a3a2f33342d3334203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:44 +0000
ROA not before:           Tue 24 Oct 2023 12:38:44 +0000
ROA not after:            Tue 22 Oct 2024 12:43:44 +0000
asID:                     61678
IP address blocks:        2804:1cd4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5e:aa:83:4b:07:e0:3a:de:08:b9:74:2e:50:dc:a2:1e:95:c3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:44 2023 GMT
            Not After : Oct 22 12:43:44 2024 GMT
        Subject: CN=D9CDE670CF436E8B4A632D2B8CF0A74F38F407AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:8d:59:e2:d7:93:b9:98:9a:5d:b5:48:3d:
                    36:e7:e0:1a:19:c2:8a:e6:7a:dc:0d:b5:40:40:a7:
                    13:a0:74:fe:d9:11:4a:36:00:a5:da:eb:f6:5b:7c:
                    0e:c0:9b:14:1f:40:09:6f:32:03:bf:bb:d2:a5:c5:
                    76:e6:33:05:36:52:cd:ad:25:d4:90:66:ea:cc:10:
                    a2:be:45:da:09:2f:0f:e4:b5:fd:42:57:8b:92:51:
                    71:48:9a:1f:37:f6:15:51:e0:e4:e0:9f:82:d3:3c:
                    39:7f:ae:02:54:c8:7c:1a:e3:98:d2:ed:66:56:9e:
                    2a:0c:0b:40:05:b0:60:6a:9c:4a:a4:14:c9:78:f8:
                    33:fd:5a:bc:30:ac:7d:8f:62:5a:ee:0f:75:48:5e:
                    e7:20:30:0d:ba:45:a1:59:db:e0:49:ee:aa:2f:7a:
                    6e:c7:07:b8:64:14:aa:e7:d2:82:27:3e:0b:8d:0b:
                    44:da:3d:90:6e:f9:26:cf:2b:99:ba:a3:54:5e:3a:
                    2e:25:32:7c:7a:a8:4a:8f:eb:2a:07:7a:ca:ba:1d:
                    cb:51:00:8f:c4:5a:8d:18:fa:aa:aa:16:19:cc:a2:
                    ca:0e:73:f0:24:58:3b:b0:aa:8d:03:75:cf:60:47:
                    c0:ad:d3:be:86:bb:a7:b2:d5:18:1b:fa:d9:2a:90:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CD:E6:70:CF:43:6E:8B:4A:63:2D:2B:8C:F0:A7:4F:38:F4:07:AF
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a343030303a3a2f33342d3334203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:02:f2:58:1b:9b:e7:b2:2c:73:5e:eb:a1:c1:0a:a4:fe:
         21:30:7c:3c:5d:8b:c2:c2:a7:4e:5b:7b:c3:58:96:1e:4a:01:
         ea:e5:08:f6:7a:5c:af:6e:fd:66:3b:6e:35:26:2e:0b:7e:5f:
         c2:c1:22:f1:13:99:bf:5e:89:0c:60:b8:99:23:c0:00:79:65:
         ac:ef:10:b0:72:79:0c:5c:62:49:7f:e4:41:79:9f:b3:61:0e:
         1d:03:46:18:94:0b:d1:33:c4:10:ab:14:63:6d:59:be:32:8e:
         25:13:ca:85:52:e2:f5:ad:a7:55:bb:e4:34:42:0b:8e:84:e0:
         19:14:47:7e:65:d5:fa:69:61:7d:99:dd:79:d7:8b:2d:5d:c6:
         d1:0e:5a:63:91:7e:8a:84:04:9f:38:59:75:86:99:b6:3c:15:
         66:63:2c:ea:96:2a:30:ab:d8:2e:da:e7:c7:89:01:19:74:bc:
         02:79:36:24:5a:fd:9d:75:43:ad:ee:60:17:3f:5c:13:96:7d:
         19:38:51:2f:e8:4e:42:c8:07:09:10:fc:d1:ca:42:8d:0f:6a:
         ec:3b:03:72:1d:75:ac:08:a2:a5:83:f5:f5:c0:f1:42:7b:38:
         de:c3:a3:b6:1c:fb:12:22:66:51:3e:22:27:75:6b:4b:8d:85:
         44:ca:f2:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUY16qg0sH4DreCLl0LlDcoh6Vw58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGRjFEM0E5NDdCOEI1RkY3NURENzFGRjFDRUQ3MEQ0
RTNGQTBCNDAeFw0yMzEwMjQxMjM4NDRaFw0yNDEwMjIxMjQzNDRaMDMxMTAvBgNV
BAMTKEQ5Q0RFNjcwQ0Y0MzZFOEI0QTYzMkQyQjhDRjBBNzRGMzhGNDA3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDY1Z4teTuZiaXbVIPTbn4BoZ
wormetwNtUBApxOgdP7ZEUo2AKXa6/ZbfA7AmxQfQAlvMgO/u9KlxXbmMwU2Us2t
JdSQZurMEKK+RdoJLw/ktf1CV4uSUXFImh839hVR4OTgn4LTPDl/rgJUyHwa45jS
7WZWnioMC0AFsGBqnEqkFMl4+DP9WrwwrH2PYlruD3VIXucgMA26RaFZ2+BJ7qov
em7HB7hkFKrn0oInPguNC0TaPZBu+SbPK5m6o1ReOi4lMnx6qEqP6yoHesq6HctR
AI/EWo0Y+qqqFhnMosoOc/AkWDuwqo0Ddc9gR8Ct076Gu6ey1Rgb+tkqkOuxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2c3mcM9DbotKYy0rjPCnTzj0B68wHwYDVR0j
BBgwFoAUX/8dOpR7i1/3Xdcf8c7XDU4/oLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC81RkZGMUQzQTk0N0I4QjVGRjc1REQ3MUZGMUNFRDcwRDRFM0ZBMEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGRkYxRDNBOTQ3QjhCNUZG
NzVERDcxRkYxQ0VENzBENEUzRkEwQjQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzIzODMwMzQzYTMxNjM2NDM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBzUQDANBgkqhkiG9w0BAQsFAAOC
AQEAGo4C8lgbm+eyLHNe66HBCqT+ITB8PF2LwsKnTlt7w1iWHkoB6uUI9npcr279
ZjtuNSYuC35fwsEi8ROZv16JDGC4mSPAAHllrO8QsHJ5DFxiSX/kQXmfs2EOHQNG
GJQL0TPEEKsUY21ZvjKOJRPKhVLi9a2nVbvkNEILjoTgGRRHfmXV+mlhfZndedeL
LV3G0Q5aY5F+ioQEnzhZdYaZtjwVZmMs6pYqMKvYLtrnx4kBGXS8Ank2JFr9nXVD
re5gFz9cE5Z9GThRL+hOQsgHCRD80cpCjQ9q7DsDch11rAiipYP19cDxQns43sOj
thz7EiJmUT4iJ3VrS42FRMry8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org