Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d3332203d3e20323632393031.roa
File:                     323830343a313131303a3a2f33322d3332203d3e20323632393031.roa (raw, json)
Hash identifier:          VnjM+o0hYqzPgx9D7GWHM5oUWJrZspfhLXJ1l9XGbmU=
Subject key identifier:   7E:D1:E3:AB:E8:EF:67:D8:5C:4E:C0:65:AB:F5:25:0D:66:3A:B9:35
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       5EB94A997F8092E21E5A6065BA00CB65E765C9C9
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d3332203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:42 +0000
ROA not before:           Mon 04 Dec 2023 19:39:42 +0000
ROA not after:            Mon 02 Dec 2024 19:44:42 +0000
asID:                     262901
IP address blocks:        2804:1110::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b9:4a:99:7f:80:92:e2:1e:5a:60:65:ba:00:cb:65:e7:65:c9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:42 2023 GMT
            Not After : Dec  2 19:44:42 2024 GMT
        Subject: CN=7ED1E3ABE8EF67D85C4EC065ABF5250D663AB935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:0a:40:7a:b6:d8:31:6d:0e:bd:0a:26:92:
                    69:8e:09:f2:70:64:6e:01:cb:2a:4c:b4:c4:ba:e3:
                    ec:e2:8b:50:5d:c4:86:81:a9:c4:9a:ae:17:d7:83:
                    eb:b1:69:87:00:77:d5:e7:80:94:94:0f:58:9c:bb:
                    e9:e9:65:33:e4:fb:7c:b2:20:11:f6:bb:fb:58:f0:
                    7b:ce:b9:bc:b8:06:65:b2:51:d7:d7:85:9b:24:93:
                    51:21:e4:72:4e:b4:e1:7b:b7:e9:d8:64:db:de:06:
                    09:dd:12:de:02:6a:ba:ba:f7:51:82:74:74:b8:5d:
                    72:4b:03:c2:ac:45:0b:77:26:d0:dc:a4:35:3d:f3:
                    c6:ef:a2:18:6b:b4:45:1a:83:7b:89:a0:67:5f:d7:
                    a4:ca:57:61:1c:5c:b0:69:10:52:ed:c2:d8:ee:d3:
                    92:01:79:a2:4a:41:ed:2c:ce:ad:14:fc:fd:22:ee:
                    e5:12:a0:55:cb:62:b1:c7:09:e4:ad:1a:06:45:32:
                    94:bc:20:0e:4d:3f:5b:6a:1f:01:0c:17:5e:21:c3:
                    08:b6:26:63:60:75:97:3a:3b:2d:1e:fc:77:65:46:
                    49:e7:9d:39:88:18:c0:a3:7b:75:18:c9:c3:81:6c:
                    f8:5a:ba:be:cc:c6:6b:1c:81:77:76:1c:f9:ce:4a:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D1:E3:AB:E8:EF:67:D8:5C:4E:C0:65:AB:F5:25:0D:66:3A:B9:35
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a3a2f33322d3332203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1110::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:53:a0:5a:29:e7:5d:30:a0:93:fc:b5:f6:bd:3c:7d:a1:48:
         07:51:04:a6:7e:47:12:26:9f:e6:ff:c4:e0:f2:4b:48:74:f8:
         f0:7b:ef:8d:e9:67:43:f7:70:b3:01:6c:fb:a3:66:82:53:1b:
         6c:4e:dc:35:67:46:34:97:ed:0b:ec:7f:15:38:44:97:d4:bf:
         5a:64:d8:ea:6b:90:07:77:96:e5:8f:83:95:0e:eb:0e:08:b8:
         dc:6b:2a:cd:52:c1:03:ff:36:b8:19:c6:62:cb:3d:d5:4c:b9:
         bc:b4:b3:b2:cb:a0:03:3c:be:84:6d:97:18:4e:b2:ce:7c:24:
         ab:70:be:f0:ae:5f:ee:ba:e4:45:ee:cc:d9:d0:49:6f:01:e2:
         e9:05:fa:7e:cf:3f:24:25:cd:f2:ad:20:2a:8b:70:f2:79:14:
         6b:be:c3:91:37:3f:1e:b8:17:45:e1:46:7b:0b:69:08:18:d2:
         7d:1a:95:29:b4:a4:0f:35:a8:8e:f2:d3:3b:ab:28:3e:20:bd:
         73:f1:52:2f:1a:5c:55:16:8c:95:f0:8c:6e:3a:74:69:63:9d:
         2d:4d:4b:d1:fc:53:3c:a2:d5:9b:13:cd:82:02:d9:6e:c2:a3:
         28:d7:e1:32:1e:93:a3:fe:b0:53:c8:bc:26:c3:80:c7:4d:e5:
         eb:48:b7:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXrlKmX+AkuIeWmBlugDLZedlyckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyM0Y0MDVCMkQ2RDBGMTA3RDQ4MTNEQkIwNEIwN0FD
MzcxNTg2RTAeFw0yMzEyMDQxOTM5NDJaFw0yNDEyMDIxOTQ0NDJaMDMxMTAvBgNV
BAMTKDdFRDFFM0FCRThFRjY3RDg1QzRFQzA2NUFCRjUyNTBENjYzQUI5MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQwpAerbYMW0OvQomkmmOCfJw
ZG4ByypMtMS64+zii1BdxIaBqcSarhfXg+uxaYcAd9XngJSUD1icu+npZTPk+3yy
IBH2u/tY8HvOuby4BmWyUdfXhZskk1Eh5HJOtOF7t+nYZNveBgndEt4Carq691GC
dHS4XXJLA8KsRQt3JtDcpDU988bvohhrtEUag3uJoGdf16TKV2EcXLBpEFLtwtju
05IBeaJKQe0szq0U/P0i7uUSoFXLYrHHCeStGgZFMpS8IA5NP1tqHwEMF14hwwi2
JmNgdZc6Oy0e/HdlRknnnTmIGMCje3UYycOBbPhaur7MxmscgXd2HPnOSgB1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUftHjq+jvZ9hcTsBlq/UlDWY6uTUwHwYDVR0j
BBgwFoAUFSP0BbLW0PEH1IE9uwSwesNxWG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC8xNTIzRjQwNUIyRDZEMEYxMDdENDgxM0RCQjA0QjA3QUMzNzE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1MjNGNDA1QjJENkQwRjEw
N0Q0ODEzREJCMDRCMDdBQzM3MTU4NkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzIzODMwMzQzYTMxMzEzMTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQREDANBgkqhkiG9w0BAQsFAAOCAQEAoVOgWinn
XTCgk/y19r08faFIB1EEpn5HEiaf5v/E4PJLSHT48HvvjelnQ/dwswFs+6NmglMb
bE7cNWdGNJftC+x/FThEl9S/WmTY6muQB3eW5Y+DlQ7rDgi43GsqzVLBA/82uBnG
Yss91Uy5vLSzssugAzy+hG2XGE6yznwkq3C+8K5f7rrkRe7M2dBJbwHi6QX6fs8/
JCXN8q0gKotw8nkUa77DkTc/HrgXReFGewtpCBjSfRqVKbSkDzWojvLTO6soPiC9
c/FSLxpcVRaMlfCMbjp0aWOdLU1L0fxTPKLVmxPNggLZbsKjKNfhMh6To/6wU8i8
JsOAx03l60i3sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org