Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa
File:                     323830343a353865303a3a2f33322d3334203d3e20323638313535.roa (raw, json)
Hash identifier:          JFIwoMlOrSGNbowj0frlNDJfN7eituAPL0h7ru9ahNE=
Subject key identifier:   DF:2F:16:EA:19:DD:16:1A:48:98:96:20:BB:5B:13:6D:38:DE:E2:F7
Certificate issuer:       /CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
Certificate serial:       72A9C1A5E08DB4575E803CC2B8C848F2C40BD729
Authority key identifier: 98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa
Signing time:             Mon 08 Apr 2024 17:09:31 +0000
ROA not before:           Mon 08 Apr 2024 17:04:31 +0000
ROA not after:            Mon 07 Apr 2025 17:09:31 +0000
asID:                     268155
IP address blocks:        2804:58e0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a9:c1:a5:e0:8d:b4:57:5e:80:3c:c2:b8:c8:48:f2:c4:0b:d7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F
        Validity
            Not Before: Apr  8 17:04:31 2024 GMT
            Not After : Apr  7 17:09:31 2025 GMT
        Subject: CN=DF2F16EA19DD161A48989620BB5B136D38DEE2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:6b:f1:1b:2c:2a:e9:01:68:fa:db:c7:78:
                    43:3b:74:a4:4b:a1:a0:22:a2:f8:ba:e8:a0:48:02:
                    a9:e3:02:d2:63:56:97:38:57:ef:aa:8c:0f:9b:87:
                    ea:91:03:2c:d1:df:43:7e:16:ea:e8:4b:fe:14:0b:
                    ae:78:b5:c9:57:80:27:32:fd:5c:a1:91:7d:16:e5:
                    5a:e3:d7:54:95:54:c6:df:28:6e:7f:99:a6:62:14:
                    a7:4c:3c:dd:d7:09:93:e8:71:41:40:d2:69:68:91:
                    c7:aa:07:3f:3e:4a:a9:64:69:b9:f3:84:a6:fd:a5:
                    f0:d1:b1:c5:6c:96:93:ff:9f:52:21:7a:db:39:9d:
                    aa:7e:36:6e:37:ed:e0:e6:8e:81:ee:97:c6:eb:e0:
                    1f:c8:7b:d6:87:5f:22:4d:69:fd:e9:cd:ec:fd:7f:
                    a6:79:b9:cc:ad:b2:e3:91:0d:62:15:cb:f8:8e:52:
                    77:cb:5b:9e:ca:b3:9f:fc:2c:12:74:cc:a8:4d:ae:
                    1e:72:32:5c:c3:dd:f3:a3:2c:4e:14:f8:b7:33:1f:
                    16:6d:02:c2:d7:3f:70:36:5b:1b:2c:75:bb:3c:b7:
                    38:49:c3:dc:2c:62:ae:09:dd:6a:4c:fe:d6:09:86:
                    0f:c1:04:51:0a:d1:8b:74:6b:c9:46:13:bd:23:11:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2F:16:EA:19:DD:16:1A:48:98:96:20:BB:5B:13:6D:38:DE:E2:F7
            X509v3 Authority Key Identifier:
                keyid:98:B1:57:CD:A1:8C:70:DD:E1:02:B0:44:B9:BB:3F:25:EF:DC:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98B157CDA18C70DDE102B044B9BB3F25EFDC9A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/323830343a353865303a3a2f33322d3334203d3e20323638313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:03:56:0f:b4:c1:a3:06:e1:4a:31:9c:3a:a2:3b:5c:9d:0f:
         07:74:d8:23:5c:e9:f4:f7:da:ff:69:8c:a8:c8:a9:7e:37:12:
         fc:6b:88:bb:cf:37:98:6d:c9:aa:ad:2e:08:d2:4d:db:ec:ef:
         e8:5f:74:90:51:ed:f7:e8:ab:c1:17:f9:73:bd:ef:b5:41:f9:
         cb:c7:ce:e5:43:8a:4a:13:04:46:dd:f8:f1:c5:3b:85:97:59:
         ba:e1:cd:76:b8:8c:1b:3b:bb:74:84:44:c3:1e:d8:8c:bc:f5:
         f5:ff:62:b5:77:99:3d:56:74:cd:a9:89:63:29:cf:9c:40:4f:
         2a:9c:1e:55:18:ac:0a:03:bc:b6:f9:30:49:5e:6e:ab:6c:63:
         58:3d:b1:0a:bc:54:fb:cd:8c:3c:80:f8:7c:dd:86:0c:61:5e:
         91:ca:b8:be:6d:5c:1e:71:d5:5c:0b:69:da:b0:50:19:82:ed:
         21:0d:a9:ab:32:fd:f3:b1:af:34:85:d8:39:9e:ca:9b:db:be:
         0c:31:14:7d:5a:85:4c:37:be:fe:70:3b:3b:b2:ce:f4:30:e1:
         d4:85:80:8b:4a:e3:ff:84:9c:89:41:de:ae:7a:60:92:a4:80:
         a1:be:91:df:4a:b7:d1:a2:70:57:54:ca:32:b3:da:c3:2a:51:
         eb:4a:44:0c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcqnBpeCNtFdegDzCuMhI8sQL1ykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThCMTU3Q0RBMThDNzBEREUxMDJCMDQ0QjlCQjNGMjVF
RkRDOUE2RjAeFw0yNDA0MDgxNzA0MzFaFw0yNTA0MDcxNzA5MzFaMDMxMTAvBgNV
BAMTKERGMkYxNkVBMTlERDE2MUE0ODk4OTYyMEJCNUIxMzZEMzhERUUyRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8mvxGywq6QFo+tvHeEM7dKRL
oaAiovi66KBIAqnjAtJjVpc4V++qjA+bh+qRAyzR30N+FuroS/4UC654tclXgCcy
/VyhkX0W5Vrj11SVVMbfKG5/maZiFKdMPN3XCZPocUFA0mlokceqBz8+Sqlkabnz
hKb9pfDRscVslpP/n1Ihets5nap+Nm437eDmjoHul8br4B/Ie9aHXyJNaf3pzez9
f6Z5ucytsuORDWIVy/iOUnfLW57Ks5/8LBJ0zKhNrh5yMlzD3fOjLE4U+LczHxZt
AsLXP3A2Wxssdbs8tzhJw9wsYq4J3WpM/tYJhg/BBFEK0Yt0a8lGE70jEebpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3y8W6hndFhpImJYgu1sTbTje4vcwHwYDVR0j
BBgwFoAUmLFXzaGMcN3hArBEubs/Je/cmm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgz
cnAvMC85OEIxNTdDREExOEM3MERERTEwMkIwNDRCOUJCM0YyNUVGREM5QTZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4QjE1N0NEQTE4QzcwRERF
MTAyQjA0NEI5QkIzRjI1RUZEQzlBNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR1UldUU1ZydDl3NVVDWUpUVnZLTVpjOUZFVlRxM3RIWlp5ajZETW5YM3JwLzAv
MzIzODMwMzQzYTM1Mzg2NTMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzEzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARY4DANBgkqhkiG9w0BAQsFAAOCAQEAYQNWD7TB
owbhSjGcOqI7XJ0PB3TYI1zp9Pfa/2mMqMipfjcS/GuIu883mG3Jqq0uCNJN2+zv
6F90kFHt9+irwRf5c73vtUH5y8fO5UOKShMERt348cU7hZdZuuHNdriMGzu7dIRE
wx7YjLz19f9itXeZPVZ0zamJYynPnEBPKpweVRisCgO8tvkwSV5uq2xjWD2xCrxU
+82MPID4fN2GDGFekcq4vm1cHnHVXAtp2rBQGYLtIQ2pqzL987GvNIXYOZ7Km9u+
DDEUfVqFTDe+/nA7O7LO9DDh1IWAi0rj/4SciUHernpgkqSAob6R30q30aJwV1TK
MrPawypR60pEDA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org