Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3330303a3a2f34302d3430203d3e20323632393031.roa
File:                     323830343a313131303a3330303a3a2f34302d3430203d3e20323632393031.roa (raw, json)
Hash identifier:          GDlygn+MK8zJegaCmA31TQCsBJbEmWvnsqHdWEQON8g=
Subject key identifier:   35:E0:FA:43:97:47:77:C8:06:3D:AF:F3:81:9F:EE:E3:86:9B:9D:CF
Certificate issuer:       /CN=C705331F0A907F8D2B8A4719ECE2288993AFDA38
Certificate serial:       4432FE0B8990E76B12C706AC23A64457E8C51118
Authority key identifier: C7:05:33:1F:0A:90:7F:8D:2B:8A:47:19:EC:E2:28:89:93:AF:DA:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3330303a3a2f34302d3430203d3e20323632393031.roa
Signing time:             Fri 24 Feb 2023 13:25:05 +0000
ROA not before:           Fri 24 Feb 2023 13:20:05 +0000
ROA not after:            Fri 23 Feb 2024 13:25:05 +0000
asID:                     262901
IP address blocks:        2804:1110:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:32:fe:0b:89:90:e7:6b:12:c7:06:ac:23:a6:44:57:e8:c5:11:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C705331F0A907F8D2B8A4719ECE2288993AFDA38
        Validity
            Not Before: Feb 24 13:20:05 2023 GMT
            Not After : Feb 23 13:25:05 2024 GMT
        Subject: CN=35E0FA43974777C8063DAFF3819FEEE3869B9DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:a7:67:09:b5:66:29:c1:fb:b7:c6:28:14:
                    7d:dd:c5:c4:5c:37:9c:2e:38:a0:d5:be:e3:38:1d:
                    39:dd:6d:b0:54:da:98:e9:03:99:5d:d1:27:98:3a:
                    ee:dd:dd:f0:3d:38:af:64:83:3f:7b:6e:f4:80:94:
                    ad:7f:66:12:13:ba:9a:26:43:7b:85:6c:09:8f:58:
                    d7:d8:29:8c:bb:70:6b:29:2a:d0:f1:cd:c7:44:08:
                    8d:d2:98:ae:45:47:72:30:31:18:65:cd:6c:ab:94:
                    9d:f0:27:d7:1e:46:de:bf:10:56:5c:98:b9:4c:a6:
                    a5:be:6e:0a:5a:6c:80:6c:8d:3d:ce:de:05:fb:72:
                    3c:ad:c3:e2:fc:6e:15:4f:2c:fe:5a:46:0e:36:7c:
                    90:c8:88:da:d2:51:8f:56:cb:8f:fb:b6:ae:f0:a8:
                    34:60:c3:7b:35:10:7d:eb:5d:ad:06:25:8b:07:94:
                    26:d0:e0:7b:3a:da:75:87:a7:bc:11:8a:db:30:f7:
                    19:3f:9e:17:b6:54:5f:16:66:cd:5a:c2:22:11:d2:
                    53:3e:5c:1c:3e:f4:40:5c:73:3a:e2:ae:2e:66:aa:
                    5f:52:2d:61:d1:f4:94:76:bf:b3:1e:ff:cb:36:2e:
                    43:4d:b2:dc:05:fa:04:89:5c:ff:41:3b:a3:9c:90:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E0:FA:43:97:47:77:C8:06:3D:AF:F3:81:9F:EE:E3:86:9B:9D:CF
            X509v3 Authority Key Identifier:
                keyid:C7:05:33:1F:0A:90:7F:8D:2B:8A:47:19:EC:E2:28:89:93:AF:DA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C705331F0A907F8D2B8A4719ECE2288993AFDA38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3330303a3a2f34302d3430203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1110:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:0c:ea:a0:14:8b:49:00:4d:b1:fb:0f:12:51:76:13:c7:d2:
         65:80:29:ef:38:68:41:f4:d6:0e:bc:ff:58:66:e9:0a:bf:07:
         5c:0a:f2:49:1c:a2:7a:2d:7e:a0:86:1b:66:f2:df:93:80:44:
         ab:f9:28:f0:c2:14:07:f6:07:02:4d:75:16:b4:96:7f:f1:7e:
         57:6e:ea:e3:b8:b8:a6:83:b5:19:13:8b:f6:f3:0c:b2:6d:10:
         65:44:f1:1f:3a:f8:3d:35:dd:74:ab:3c:3f:a0:e3:c5:a1:42:
         4b:b7:5d:5b:22:fa:e2:12:2e:b3:06:f3:fc:d7:05:c6:99:86:
         f4:b7:54:7e:2c:f0:17:ac:84:5c:5c:9e:24:93:6c:d9:61:f4:
         7a:a8:91:c0:7c:4d:7c:5e:eb:ec:70:c8:81:36:16:cb:53:fa:
         76:0b:9f:9d:98:40:15:eb:6b:53:25:1d:f6:ac:df:43:71:9c:
         83:af:1b:b9:9c:1f:e5:42:3f:7c:d7:87:a1:61:fa:25:e1:4e:
         e8:7e:3d:85:fe:87:cf:7a:20:de:8c:0d:42:87:2a:d6:bc:b4:
         4d:bc:d8:66:af:d2:35:95:84:9c:62:62:98:83:80:3d:17:06:
         84:b9:c8:2c:59:db:03:4d:b7:80:57:34:19:a1:ae:c3:fa:c3:
         d7:e3:e4:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURDL+C4mQ52sSxwasI6ZEV+jFERgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcwNTMzMUYwQTkwN0Y4RDJCOEE0NzE5RUNFMjI4ODk5
M0FGREEzODAeFw0yMzAyMjQxMzIwMDVaFw0yNDAyMjMxMzI1MDVaMDMxMTAvBgNV
BAMTKDM1RTBGQTQzOTc0Nzc3QzgwNjNEQUZGMzgxOUZFRUUzODY5QjlEQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsKdnCbVmKcH7t8YoFH3dxcRc
N5wuOKDVvuM4HTndbbBU2pjpA5ld0SeYOu7d3fA9OK9kgz97bvSAlK1/ZhITupom
Q3uFbAmPWNfYKYy7cGspKtDxzcdECI3SmK5FR3IwMRhlzWyrlJ3wJ9ceRt6/EFZc
mLlMpqW+bgpabIBsjT3O3gX7cjytw+L8bhVPLP5aRg42fJDIiNrSUY9Wy4/7tq7w
qDRgw3s1EH3rXa0GJYsHlCbQ4Hs62nWHp7wRitsw9xk/nhe2VF8WZs1awiIR0lM+
XBw+9EBcczriri5mql9SLWHR9JR2v7Me/8s2LkNNstwF+gSJXP9BO6OckMNLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNeD6Q5dHd8gGPa/zgZ/u44abnc8wHwYDVR0j
BBgwFoAUxwUzHwqQf40rikcZ7OIoiZOv2jgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC9DNzA1MzMxRjBBOTA3RjhEMkI4QTQ3MTlFQ0UyMjg4OTkzQUZEQTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M3MDUzMzFGMEE5MDdGOEQy
QjhBNDcxOUVDRTIyODg5OTNBRkRBMzguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzIzODMwMzQzYTMxMzEzMTMwM2EzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzIzOTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBEQAzANBgkqhkiG9w0BAQsFAAOC
AQEAoAzqoBSLSQBNsfsPElF2E8fSZYAp7zhoQfTWDrz/WGbpCr8HXArySRyiei1+
oIYbZvLfk4BEq/ko8MIUB/YHAk11FrSWf/F+V27q47i4poO1GROL9vMMsm0QZUTx
Hzr4PTXddKs8P6DjxaFCS7ddWyL64hIuswbz/NcFxpmG9LdUfizwF6yEXFyeJJNs
2WH0eqiRwHxNfF7r7HDIgTYWy1P6dgufnZhAFetrUyUd9qzfQ3Gcg68buZwf5UI/
fNeHoWH6JeFO6H49hf6Hz3og3owNQocq1ry0TbzYZq/SNZWEnGJimIOAPRcGhLnI
LFnbA023gFc0GaGuw/rD1+PkzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org