Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a616130303a3a2f34302d3430203d3e20323632393031.roa
File:                     323830343a313131303a616130303a3a2f34302d3430203d3e20323632393031.roa (raw, json)
Hash identifier:          ipsbIKwPptBwfijOONOr4d7NBo9C7L8C6L/7qj2rp0Y=
Subject key identifier:   64:A3:DE:CF:47:BB:05:19:E1:2A:3C:D3:D6:66:8C:AD:7B:C4:09:7D
Certificate issuer:       /CN=CE2031538936B5B61BE1EFB8D018F452C187C5E4
Certificate serial:       46C95878A226296CFBE80AB4CE3C5CC8F7399B28
Authority key identifier: CE:20:31:53:89:36:B5:B6:1B:E1:EF:B8:D0:18:F4:52:C1:87:C5:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE2031538936B5B61BE1EFB8D018F452C187C5E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a616130303a3a2f34302d3430203d3e20323632393031.roa
Signing time:             Thu 17 Feb 2022 22:22:59 +0000
ROA not before:           Thu 17 Feb 2022 22:17:59 +0000
ROA not after:            Thu 16 Feb 2023 22:22:59 +0000
asID:                     262901
IP address blocks:        2804:1110:aa00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:58:78:a2:26:29:6c:fb:e8:0a:b4:ce:3c:5c:c8:f7:39:9b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2031538936B5B61BE1EFB8D018F452C187C5E4
        Validity
            Not Before: Feb 17 22:17:59 2022 GMT
            Not After : Feb 16 22:22:59 2023 GMT
        Subject: CN=64A3DECF47BB0519E12A3CD3D6668CAD7BC4097D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:2d:87:07:88:6f:d4:7b:c8:42:6a:16:8b:
                    c2:f1:11:4a:68:0e:09:80:b1:77:38:77:c9:aa:87:
                    98:6a:62:ec:62:70:ad:5d:78:39:8c:16:16:81:d3:
                    b5:c4:0e:3c:80:58:89:d0:be:b8:ad:6a:21:1c:47:
                    fc:7e:dc:9f:7c:cf:44:91:46:45:52:2a:31:27:f1:
                    cc:c8:e6:ea:b0:9e:43:b8:5a:49:e0:27:35:23:28:
                    50:3f:9c:eb:68:29:25:57:dd:5e:ab:d3:dd:f7:b2:
                    d7:19:67:82:a1:17:d4:2f:cf:f7:cb:c4:e3:f6:fb:
                    d3:5d:ce:0d:55:87:bf:a2:a5:e0:e6:98:28:53:38:
                    9f:4e:54:37:43:5f:58:0d:25:e7:39:cc:20:2e:8b:
                    6b:2c:b1:03:29:29:5b:bb:67:b5:eb:20:2b:8f:68:
                    df:54:c8:4e:45:65:13:f2:93:45:0c:81:d8:7e:61:
                    b6:71:c9:ca:dd:23:2e:ee:75:14:01:a1:93:04:3f:
                    5f:98:8b:e9:3a:e3:bf:fb:aa:dd:ed:f7:6e:b6:b2:
                    0b:e2:30:d7:34:b3:c3:ac:a5:c9:d1:2b:00:9f:ac:
                    fa:07:e6:5e:c0:c3:f6:f8:69:44:5c:99:22:4c:24:
                    af:a6:e1:ef:95:60:8d:2d:71:98:f6:a1:2f:5b:e1:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A3:DE:CF:47:BB:05:19:E1:2A:3C:D3:D6:66:8C:AD:7B:C4:09:7D
            X509v3 Authority Key Identifier:
                keyid:CE:20:31:53:89:36:B5:B6:1B:E1:EF:B8:D0:18:F4:52:C1:87:C5:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/CE2031538936B5B61BE1EFB8D018F452C187C5E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE2031538936B5B61BE1EFB8D018F452C187C5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/323830343a313131303a616130303a3a2f34302d3430203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1110:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:27:8f:e9:53:60:11:55:1b:ee:88:da:49:ac:47:86:20:67:
         eb:31:1d:29:9d:51:1f:b8:5d:ce:5c:a9:03:7f:32:23:09:9e:
         4f:e3:e3:7e:ab:d9:10:7b:96:ed:ad:80:cc:d8:dc:7b:c0:ae:
         63:23:7d:75:96:91:77:f7:a4:97:63:88:79:ae:aa:d0:2e:c3:
         52:ec:44:85:d8:4e:44:fb:3f:62:6c:ce:05:d8:ac:6e:c2:6e:
         b3:a3:86:fa:38:10:ba:0b:d7:96:2a:06:1a:38:0b:cb:d2:9c:
         21:92:d4:3d:80:9e:fa:15:3f:1f:89:ea:dc:8a:3a:30:ff:64:
         3f:8b:ed:3d:eb:43:33:fc:c7:bc:78:94:27:8f:7d:d2:ab:af:
         0a:93:f3:aa:34:b3:4a:f0:bc:d8:af:7f:88:b7:a9:c0:a3:55:
         3f:b7:aa:d3:d1:f5:82:89:73:65:67:69:6a:c6:42:52:12:cb:
         6d:eb:66:ba:ff:0e:4a:8b:cf:72:6e:47:60:e1:5e:81:d0:28:
         c4:71:28:96:20:4d:e8:62:bd:8e:66:4a:e1:20:43:ac:23:c9:
         f5:89:4a:3f:d8:73:68:b3:27:e1:60:9e:60:10:98:d8:b9:45:
         68:d2:a8:ea:03:c5:fc:d6:f7:1c:1d:1e:4d:57:f1:86:3a:8d:
         f2:21:8d:b6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURslYeKImKWz76Aq0zjxcyPc5mygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyMDMxNTM4OTM2QjVCNjFCRTFFRkI4RDAxOEY0NTJD
MTg3QzVFNDAeFw0yMjAyMTcyMjE3NTlaFw0yMzAyMTYyMjIyNTlaMDMxMTAvBgNV
BAMTKDY0QTNERUNGNDdCQjA1MTlFMTJBM0NEM0Q2NjY4Q0FEN0JDNDA5N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dy2HB4hv1HvIQmoWi8LxEUpo
DgmAsXc4d8mqh5hqYuxicK1deDmMFhaB07XEDjyAWInQvritaiEcR/x+3J98z0SR
RkVSKjEn8czI5uqwnkO4WkngJzUjKFA/nOtoKSVX3V6r0933stcZZ4KhF9Qvz/fL
xOP2+9Ndzg1Vh7+ipeDmmChTOJ9OVDdDX1gNJec5zCAui2sssQMpKVu7Z7XrICuP
aN9UyE5FZRPyk0UMgdh+YbZxycrdIy7udRQBoZMEP1+Yi+k647/7qt3t9262sgvi
MNc0s8OspcnRKwCfrPoH5l7Aw/b4aURcmSJMJK+m4e+VYI0tcZj2oS9b4fbHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZKPez0e7BRnhKjzT1maMrXvECX0wHwYDVR0j
BBgwFoAUziAxU4k2tbYb4e+40Bj0UsGHxeQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMC9DRTIwMzE1Mzg5MzZCNUI2MUJFMUVGQjhEMDE4RjQ1MkMxODdDNUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFMjAzMTUzODkzNkI1QjYx
QkUxRUZCOEQwMThGNDUyQzE4N0M1RTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAv
MzIzODMwMzQzYTMxMzEzMTMwM2E2MTYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMjM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEERCqMA0GCSqGSIb3DQEBCwUA
A4IBAQBHJ4/pU2ARVRvuiNpJrEeGIGfrMR0pnVEfuF3OXKkDfzIjCZ5P4+N+q9kQ
e5btrYDM2Nx7wK5jI311lpF396SXY4h5rqrQLsNS7ESF2E5E+z9ibM4F2Kxuwm6z
o4b6OBC6C9eWKgYaOAvL0pwhktQ9gJ76FT8fiercijow/2Q/i+0960Mz/Me8eJQn
j33Sq68Kk/OqNLNK8LzYr3+It6nAo1U/t6rT0fWCiXNlZ2lqxkJSEstt62a6/w5K
i89ybkdg4V6B0CjEcSiWIE3oYr2OZkrhIEOsI8n1iUo/2HNosyfhYJ5gEJjYuUVo
0qjqA8X81vccHR5NV/GGOo3yIY22
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org