Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a343030303a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a343030303a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          yxwtQ8JvfCc0o2uj98YYCq5MD7qHUPrM4xEGyWcYTaU=
Subject key identifier:   A8:8D:30:0C:B7:60:F1:9D:CD:05:D8:33:F8:6D:64:0B:96:B9:1E:F0
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       2BD8414BEA9DF39F3A9CAFD0F245B7EE079DD772
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a343030303a3a2f33352d3335203d3e203631373137.roa
Signing time:             Sat 09 Dec 2023 13:03:42 +0000
ROA not before:           Sat 09 Dec 2023 12:58:42 +0000
ROA not after:            Sat 07 Dec 2024 13:03:42 +0000
asID:                     61717
IP address blocks:        2804:1b44:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d8:41:4b:ea:9d:f3:9f:3a:9c:af:d0:f2:45:b7:ee:07:9d:d7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Dec  9 12:58:42 2023 GMT
            Not After : Dec  7 13:03:42 2024 GMT
        Subject: CN=A88D300CB760F19DCD05D833F86D640B96B91EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:91:60:0e:f0:c3:9c:80:94:1f:69:c6:15:
                    51:0a:9b:04:31:e5:e6:24:02:f4:94:a1:57:d9:65:
                    2f:24:7c:a4:3f:0d:a7:14:db:35:f0:c7:16:5d:9f:
                    66:a4:69:5a:58:4f:c6:18:e7:a2:f8:20:de:83:fa:
                    01:70:d8:1c:e1:5b:f0:d0:ea:9d:e0:fc:9e:3d:0d:
                    62:9a:2b:f5:21:1b:b8:fd:81:a9:6c:7b:a2:c9:c3:
                    c3:0b:fe:4c:ca:20:c6:41:55:3d:f1:cf:d0:64:fe:
                    75:ad:01:6f:da:90:86:f9:9d:aa:20:28:0b:82:1f:
                    8b:0b:07:b4:2d:e4:cb:fe:74:40:2d:da:ba:af:97:
                    0c:05:bb:75:46:fa:77:85:82:bd:ab:4c:33:ce:06:
                    d5:7d:0d:3e:b7:00:bc:b6:65:47:e2:4f:48:70:97:
                    66:1f:22:ea:67:31:f4:02:69:cd:92:dc:21:1c:fb:
                    69:fa:28:cd:c9:30:52:1e:0d:a7:b5:a3:05:4f:79:
                    de:9d:3f:89:0b:7b:5f:a5:b9:29:8a:33:d4:cb:de:
                    d7:c8:12:3b:5d:c7:4e:a5:7e:24:28:57:14:d4:9c:
                    6e:8e:dc:6f:15:ea:f1:a5:6a:2f:3d:e5:e6:8a:4c:
                    0f:67:2f:b8:50:63:a5:5b:0b:cb:b4:bf:cd:67:0f:
                    55:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8D:30:0C:B7:60:F1:9D:CD:05:D8:33:F8:6D:64:0B:96:B9:1E:F0
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a343030303a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:a0:4e:e7:83:ce:12:db:b7:f8:17:79:73:15:3a:74:e0:
         92:e3:63:fc:53:bf:93:c3:65:9a:78:b4:2d:1d:6f:87:1f:0e:
         96:d9:05:44:6b:e3:b3:3a:1e:22:e0:81:97:a4:35:a4:38:04:
         33:4f:5a:be:42:bb:78:3f:0f:d7:73:e7:df:9c:8d:40:1e:73:
         9b:25:e5:26:82:b6:6b:a1:db:36:f9:c1:ec:bd:dc:b9:2a:c7:
         b8:4b:90:3a:c8:66:b3:6c:5b:1e:8e:cd:fe:41:5a:36:b6:94:
         9e:ec:31:04:14:56:56:d0:0a:c3:e9:fe:67:2b:7e:7f:29:eb:
         ed:41:9f:5d:08:44:80:e5:35:18:de:8b:7a:29:ec:2f:8c:82:
         79:39:c5:fd:44:5a:87:74:11:81:51:be:8d:db:43:65:35:49:
         da:d4:c4:99:b3:7b:34:d4:1c:12:2d:e1:d3:2a:15:84:76:9c:
         e8:ab:d3:c3:b2:64:f7:24:1d:a3:4a:b6:e0:80:09:8e:5b:58:
         03:b4:0b:c8:09:02:49:82:e8:1d:d8:4d:cd:8c:f1:db:bd:6a:
         9d:f0:e0:b6:dd:82:35:94:5d:ad:a2:2a:b2:da:cc:52:48:7a:
         d0:9c:d9:76:b9:89:e3:ec:2b:12:73:58:39:79:c1:35:be:59:
         d2:b6:94:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK9hBS+qd8586nK/Q8kW37ged13IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5OTE0QTM1QUNCQUJBQzZBNkU1RkFBNTk5NDk3REQ5
N0M0MTJBNTAeFw0yMzEyMDkxMjU4NDJaFw0yNDEyMDcxMzAzNDJaMDMxMTAvBgNV
BAMTKEE4OEQzMDBDQjc2MEYxOURDRDA1RDgzM0Y4NkQ2NDBCOTZCOTFFRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhZFgDvDDnICUH2nGFVEKmwQx
5eYkAvSUoVfZZS8kfKQ/DacU2zXwxxZdn2akaVpYT8YY56L4IN6D+gFw2BzhW/DQ
6p3g/J49DWKaK/UhG7j9galse6LJw8ML/kzKIMZBVT3xz9Bk/nWtAW/akIb5naog
KAuCH4sLB7Qt5Mv+dEAt2rqvlwwFu3VG+neFgr2rTDPOBtV9DT63ALy2ZUfiT0hw
l2YfIupnMfQCac2S3CEc+2n6KM3JMFIeDae1owVPed6dP4kLe1+luSmKM9TL3tfI
Ejtdx06lfiQoVxTUnG6O3G8V6vGlai895eaKTA9nL7hQY6VbC8u0v81nD1VDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqI0wDLdg8Z3NBdgz+G1kC5a5HvAwHwYDVR0j
BBgwFoAUXJkUo1rLq6xqbl+qWZSX3ZfEEqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTd2UE56bmdFOGZFRFZnaWNGWEpBWnl0Zk04MThqWG85UEZrNlQxTEtH
SlgvMC81Qzk5MTRBMzVBQ0JBQkFDNkE2RTVGQUE1OTk0OTdERDk3QzQxMkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDOTkxNEEzNUFDQkFCQUM2
QTZFNUZBQTU5OTQ5N0REOTdDNDEyQTUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3dlBOem5nRThmRURWZ2ljRlhKQVp5dGZNODE4alhvOVBGazZUMUxLR0pYLzAv
MzIzODMwMzQzYTMxNjIzNDM0M2EzNDMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM2MzEzNzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBtEQDANBgkqhkiG9w0BAQsFAAOC
AQEART6gTueDzhLbt/gXeXMVOnTgkuNj/FO/k8Nlmni0LR1vhx8OltkFRGvjszoe
IuCBl6Q1pDgEM09avkK7eD8P13Pn35yNQB5zmyXlJoK2a6HbNvnB7L3cuSrHuEuQ
Oshms2xbHo7N/kFaNraUnuwxBBRWVtAKw+n+Zyt+fynr7UGfXQhEgOU1GN6Leins
L4yCeTnF/URah3QRgVG+jdtDZTVJ2tTEmbN7NNQcEi3h0yoVhHac6KvTw7Jk9yQd
o0q24IAJjltYA7QLyAkCSYLoHdhNzYzx271qnfDgtt2CNZRdraIqstrMUkh60JzZ
drmJ4+wrEnNYOXnBNb5Z0raUjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org