Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          5qqbkBGT8Z9FsUnLDO0NCgoWVABUdd6OUPFw4m2x8iA=
Subject key identifier:   ED:84:56:85:BA:8A:7C:14:42:4D:34:CC:88:07:2C:0C:76:49:F5:22
Certificate issuer:       /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial:       65272E1E3A46F2469DC239EDA708B6F26BF070D5
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Mon 19 Feb 2024 20:58:08 +0000
ROA not before:           Mon 19 Feb 2024 20:53:08 +0000
ROA not after:            Mon 17 Feb 2025 20:58:08 +0000
asID:                     267942
IP address blocks:        2804:5590:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:27:2e:1e:3a:46:f2:46:9d:c2:39:ed:a7:08:b6:f2:6b:f0:70:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
        Validity
            Not Before: Feb 19 20:53:08 2024 GMT
            Not After : Feb 17 20:58:08 2025 GMT
        Subject: CN=ED845685BA8A7C14424D34CC88072C0C7649F522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:56:91:e0:fd:56:24:ae:73:85:79:d4:68:
                    2f:79:ff:e3:4c:1b:56:0e:5e:b5:04:3e:b7:a0:98:
                    c6:7e:42:f3:9f:ee:1b:d6:15:37:d4:e0:18:f1:34:
                    76:dc:cf:eb:51:9c:b5:ba:b9:cc:b4:73:1e:75:66:
                    c1:ae:eb:79:40:51:19:4e:3d:58:d0:a4:ea:5b:a6:
                    28:ef:c7:a7:e5:4e:ab:4e:d0:c1:89:21:c9:47:b2:
                    ec:e7:d0:42:ed:39:45:1b:7a:bc:21:2b:ee:49:60:
                    3b:c6:d6:ec:64:d7:be:5d:ff:91:a7:74:31:f8:a1:
                    0b:71:e8:68:94:16:c6:fb:70:a6:23:d2:71:02:17:
                    be:0d:49:de:d6:f0:4a:c7:21:ef:97:57:a7:56:3f:
                    5c:d0:73:14:be:a2:eb:71:18:02:ba:74:f8:8b:65:
                    ab:f3:e7:24:95:b8:d7:4b:9c:f4:c6:24:4b:d4:06:
                    e6:72:6e:ba:34:6d:1b:1b:e7:35:2d:1d:b7:91:30:
                    3f:31:d1:f7:ff:e1:47:4c:71:31:4d:b7:af:2a:1e:
                    ac:41:dc:29:3e:50:26:6a:1d:69:d5:96:b6:eb:e3:
                    c0:02:a0:5d:e0:93:bc:d8:3c:b6:fc:6b:0b:ca:59:
                    d4:b0:84:0f:3f:ab:2c:08:77:4e:61:0a:10:64:73:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:84:56:85:BA:8A:7C:14:42:4D:34:CC:88:07:2C:0C:76:49:F5:22
            X509v3 Authority Key Identifier:
                keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d1:c5:44:8c:5b:89:d0:13:87:4a:7b:c1:02:f2:72:ef:cb:2f:
         e5:d5:14:8f:83:41:06:70:cc:0b:e8:54:c8:42:41:a0:7c:c1:
         67:b8:d7:6a:d0:00:cc:9f:ca:04:62:c9:0d:01:60:92:59:44:
         44:35:c0:13:db:03:f7:76:f5:6e:62:b2:a2:b7:a5:cd:ec:34:
         b6:ed:dd:d8:ca:3f:e6:77:fa:bc:72:87:b7:5f:9d:2b:0c:a2:
         c0:23:45:f1:7d:1e:b1:1a:1a:46:da:01:12:03:97:6d:24:8d:
         2a:70:eb:de:e4:b8:40:80:18:d4:7a:ee:a3:b3:06:35:2a:7c:
         21:64:08:2e:f7:24:d2:5d:3d:b6:c5:f8:74:07:a3:7e:00:7d:
         8d:06:db:39:df:e5:65:25:02:2d:49:36:fc:10:77:3f:78:fa:
         34:f2:df:b9:fd:bc:82:49:b4:b8:f3:6e:c3:7e:18:09:40:ad:
         bc:87:c9:e4:64:15:6b:e4:6d:da:49:7a:30:7d:ed:b9:bf:d7:
         06:8c:cf:8a:4d:e6:f5:0e:b6:e5:33:3f:79:fd:38:23:e2:93:
         5b:2c:65:ae:41:69:00:95:6e:18:f6:2f:03:e5:e5:98:f7:9f:
         a2:ec:8e:ee:31:cc:3f:40:b9:c7:e6:e4:41:0d:34:25:50:c1:
         aa:30:2e:6b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZScuHjpG8kadwjntpwi28mvwcNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZCRTVGOUQ4QjhDMTdENkVCQTRFNjk0RjM2RkMxRTc5
RjUwRkY3MzAeFw0yNDAyMTkyMDUzMDhaFw0yNTAyMTcyMDU4MDhaMDMxMTAvBgNV
BAMTKEVEODQ1Njg1QkE4QTdDMTQ0MjREMzRDQzg4MDcyQzBDNzY0OUY1MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCib1aR4P1WJK5zhXnUaC95/+NM
G1YOXrUEPregmMZ+QvOf7hvWFTfU4BjxNHbcz+tRnLW6ucy0cx51ZsGu63lAURlO
PVjQpOpbpijvx6flTqtO0MGJIclHsuzn0ELtOUUberwhK+5JYDvG1uxk175d/5Gn
dDH4oQtx6GiUFsb7cKYj0nECF74NSd7W8ErHIe+XV6dWP1zQcxS+outxGAK6dPiL
Zavz5ySVuNdLnPTGJEvUBuZybro0bRsb5zUtHbeRMD8x0ff/4UdMcTFNt68qHqxB
3Ck+UCZqHWnVlrbr48ACoF3gk7zYPLb8awvKWdSwhA8/qywId05hChBkcysnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU7YRWhbqKfBRCTTTMiAcsDHZJ9SIwHwYDVR0j
BBgwFoAUr75fnYuMF9brpOaU82/B559Q/3MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0
aUEvMC9BRkJFNUY5RDhCOEMxN0Q2RUJBNEU2OTRGMzZGQzFFNzlGNTBGRjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGQkU1RjlEOEI4QzE3RDZF
QkE0RTY5NEYzNkZDMUU3OUY1MEZGNzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDQm5GTnBja3ZQZU4xcFVwdllVN2pSNTJIcGIxWDZESDRVd3hQeXdydGlBLzAv
MzIzODMwMzQzYTM1MzUzOTMwM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVZBwMA0GCSqGSIb3DQEBCwUA
A4IBAQDRxUSMW4nQE4dKe8EC8nLvyy/l1RSPg0EGcMwL6FTIQkGgfMFnuNdq0ADM
n8oEYskNAWCSWURENcAT2wP3dvVuYrKit6XN7DS27d3Yyj/md/q8coe3X50rDKLA
I0XxfR6xGhpG2gESA5dtJI0qcOve5LhAgBjUeu6jswY1KnwhZAgu9yTSXT22xfh0
B6N+AH2NBts53+VlJQItSTb8EHc/ePo08t+5/byCSbS4827DfhgJQK28h8nkZBVr
5G3aSXowfe25v9cGjM+KTeb1DrblMz95/Tgj4pNbLGWuQWkAlW4Y9i8D5eWY95+i
7I7uMcw/QLnH5uRBDTQlUMGqMC5r
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org