Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/323830343a343265303a3a2f33322d3430203d3e20323637353333.roa
File:                     323830343a343265303a3a2f33322d3430203d3e20323637353333.roa (raw, json)
Hash identifier:          OsRp977PtS/evUNXnZVqY4lKyEsBpFnJkXilh7ofgXY=
Subject key identifier:   ED:86:9B:1D:90:C4:C4:15:B6:BE:C2:BD:DF:E1:43:E3:19:5F:C3:53
Certificate issuer:       /CN=CAA23EEA631A3796DD41858E8C6EBAD578F1D06A
Certificate serial:       7FFFE0493D762D0C4A7AE8C4B46716B7463F7C53
Authority key identifier: CA:A2:3E:EA:63:1A:37:96:DD:41:85:8E:8C:6E:BA:D5:78:F1:D0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/323830343a343265303a3a2f33322d3430203d3e20323637353333.roa
Signing time:             Wed 22 Nov 2023 23:00:00 +0000
ROA not before:           Wed 22 Nov 2023 22:55:00 +0000
ROA not after:            Wed 20 Nov 2024 23:00:00 +0000
asID:                     267533
IP address blocks:        2804:42e0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ff:e0:49:3d:76:2d:0c:4a:7a:e8:c4:b4:67:16:b7:46:3f:7c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA23EEA631A3796DD41858E8C6EBAD578F1D06A
        Validity
            Not Before: Nov 22 22:55:00 2023 GMT
            Not After : Nov 20 23:00:00 2024 GMT
        Subject: CN=ED869B1D90C4C415B6BEC2BDDFE143E3195FC353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:32:da:5b:ba:c5:eb:65:ed:83:fd:d0:33:
                    40:cc:7e:bd:1b:74:1d:d6:aa:09:63:7f:1d:fc:c0:
                    f1:25:67:15:61:01:fe:a8:ea:a1:34:a7:46:4a:76:
                    b6:1e:3f:9f:a5:b6:5c:5c:5f:84:0e:23:df:4a:88:
                    a8:e7:9f:e0:f2:c8:ab:15:cc:a2:a3:c6:3a:82:aa:
                    b6:59:af:e3:5e:3c:c6:d0:34:d3:35:f9:52:14:c2:
                    8f:e0:cf:e4:a8:98:91:34:2b:df:e5:02:18:9c:a1:
                    6f:84:ee:b6:0a:41:a8:b6:09:fe:07:87:9d:01:ff:
                    1f:4c:fd:f0:03:6c:3f:73:db:74:8b:0f:38:59:8f:
                    96:14:41:cf:6a:9d:01:08:13:7e:eb:6a:cb:90:46:
                    3b:fe:00:d2:a8:6e:16:a7:84:52:3a:f6:2b:75:48:
                    74:19:63:35:bd:93:29:50:e7:fb:7e:fa:06:06:da:
                    49:75:24:6f:dd:fd:98:b0:3e:b1:19:59:56:d3:c5:
                    50:95:4d:37:3e:ec:ff:3b:8f:10:2b:79:5a:2d:d6:
                    20:fa:e4:39:b4:0c:d3:9c:a5:4d:a9:c0:8d:6a:ed:
                    2e:6b:63:d0:b8:b4:45:28:ba:a8:f3:6e:b4:5a:77:
                    69:16:8a:4e:3d:b2:32:34:e9:37:be:f8:4f:d2:6d:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:9B:1D:90:C4:C4:15:B6:BE:C2:BD:DF:E1:43:E3:19:5F:C3:53
            X509v3 Authority Key Identifier:
                keyid:CA:A2:3E:EA:63:1A:37:96:DD:41:85:8E:8C:6E:BA:D5:78:F1:D0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA23EEA631A3796DD41858E8C6EBAD578F1D06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/0/323830343a343265303a3a2f33322d3430203d3e20323637353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:1c:59:6d:0c:1b:82:24:60:8b:03:cc:71:31:4a:9c:c3:98:
         d0:d8:7b:c3:06:61:cd:f9:93:1e:91:02:d3:f2:11:0f:cd:f5:
         4b:5c:26:de:c2:db:18:ed:db:36:dd:17:a8:57:0e:ed:3d:21:
         fd:bf:5e:59:19:75:66:51:86:12:ac:8b:29:f0:de:5c:49:08:
         50:aa:aa:f9:01:7e:ae:c9:3b:a3:6f:3d:c7:87:c2:da:e4:49:
         3b:15:28:5e:3b:f4:6e:f4:6e:66:5c:90:8c:04:02:50:71:f0:
         6d:61:04:43:f9:c0:0c:4f:f4:5a:99:4f:96:24:cd:8f:b9:79:
         ab:da:9b:7b:09:6f:58:94:83:4b:f9:f7:4f:83:11:7c:b3:c1:
         bd:5e:ec:cc:88:4e:44:f3:0d:6c:9b:67:7a:cd:b5:78:30:b7:
         8e:d1:d5:ce:ef:09:81:ee:80:00:ab:3c:14:1b:7b:b0:f1:10:
         ed:20:d4:b6:54:18:2f:84:cf:96:3d:31:d9:6a:00:78:5d:b9:
         10:3d:08:23:86:c1:e9:94:1e:c9:57:9d:d7:28:5a:75:09:f4:
         f8:10:05:30:c4:10:62:91:70:4e:75:78:7d:51:1d:7f:fd:26:
         14:8a:eb:ee:3a:7a:43:6c:10:c3:0d:ca:5c:89:5c:d1:84:c0:
         77:31:58:13
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUf//gST12LQxKeujEtGcWt0Y/fFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBMjNFRUE2MzFBMzc5NkRENDE4NThFOEM2RUJBRDU3
OEYxRDA2QTAeFw0yMzExMjIyMjU1MDBaFw0yNDExMjAyMzAwMDBaMDMxMTAvBgNV
BAMTKEVEODY5QjFEOTBDNEM0MTVCNkJFQzJCRERGRTE0M0UzMTk1RkMzNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGDLaW7rF62Xtg/3QM0DMfr0b
dB3Wqgljfx38wPElZxVhAf6o6qE0p0ZKdrYeP5+ltlxcX4QOI99KiKjnn+DyyKsV
zKKjxjqCqrZZr+NePMbQNNM1+VIUwo/gz+SomJE0K9/lAhicoW+E7rYKQai2Cf4H
h50B/x9M/fADbD9z23SLDzhZj5YUQc9qnQEIE37rasuQRjv+ANKobhanhFI69it1
SHQZYzW9kylQ5/t++gYG2kl1JG/d/ZiwPrEZWVbTxVCVTTc+7P87jxAreVot1iD6
5Dm0DNOcpU2pwI1q7S5rY9C4tEUouqjzbrRad2kWik49sjI06Te++E/SbX11AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7YabHZDExBW2vsK93+FD4xlfw1MwHwYDVR0j
BBgwFoAUyqI+6mMaN5bdQYWOjG661Xjx0GowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pE
cGQvMC9DQUEyM0VFQTYzMUEzNzk2REQ0MTg1OEU4QzZFQkFENTc4RjFEMDZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBQTIzRUVBNjMxQTM3OTZE
RDQxODU4RThDNkVCQUQ1NzhGMUQwNkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyZTJVanhTcDdLa29IVUZ4ZE5xcVExZFF6THdaS0VLMlJ2bnJkS0dKRHBkLzAv
MzIzODMwMzQzYTM0MzI2NTMwM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM3
MzUzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARC4DANBgkqhkiG9w0BAQsFAAOCAQEAlBxZbQwb
giRgiwPMcTFKnMOY0Nh7wwZhzfmTHpEC0/IRD831S1wm3sLbGO3bNt0XqFcO7T0h
/b9eWRl1ZlGGEqyLKfDeXEkIUKqq+QF+rsk7o289x4fC2uRJOxUoXjv0bvRuZlyQ
jAQCUHHwbWEEQ/nADE/0WplPliTNj7l5q9qbewlvWJSDS/n3T4MRfLPBvV7szIhO
RPMNbJtnes21eDC3jtHVzu8Jge6AAKs8FBt7sPEQ7SDUtlQYL4TPlj0x2WoAeF25
ED0II4bB6ZQeyVed1yhadQn0+BAFMMQQYpFwTnV4fVEdf/0mFIrr7jp6Q2wQww3K
XIlc0YTAdzFYEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org