Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa
File:                     323830343a353063303a3a2f33322d3332203d3e20323638343038.roa (raw, json)
Hash identifier:          geASsW0/TMOkETm1utEkmglJvpd/GaAQaBFCgZSmIP8=
Subject key identifier:   19:94:5D:0A:CF:E2:C3:34:DD:3E:4E:25:8E:C8:0D:D4:41:52:89:DD
Certificate issuer:       /CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Certificate serial:       4DB1E9429889E9BE47B55D781CC0075E65A6F60C
Authority key identifier: BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa
Signing time:             Mon 08 Jan 2024 15:07:54 +0000
ROA not before:           Mon 08 Jan 2024 15:02:54 +0000
ROA not after:            Mon 06 Jan 2025 15:07:54 +0000
asID:                     268408
IP address blocks:        2804:50c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b1:e9:42:98:89:e9:be:47:b5:5d:78:1c:c0:07:5e:65:a6:f6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
        Validity
            Not Before: Jan  8 15:02:54 2024 GMT
            Not After : Jan  6 15:07:54 2025 GMT
        Subject: CN=19945D0ACFE2C334DD3E4E258EC80DD4415289DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:bd:e7:ee:e4:60:b9:ca:ed:5f:c3:21:f7:
                    dd:48:86:cc:5c:7b:f8:18:ee:e3:e6:11:90:5c:ac:
                    64:03:a7:94:a5:4d:ac:a1:8d:b0:c6:4f:ad:ab:e6:
                    fc:e3:cc:a0:b7:fb:60:fe:16:81:04:12:ad:e8:52:
                    9d:98:08:73:a3:ff:6f:0f:79:27:9d:05:f1:c3:c3:
                    32:43:18:28:89:f4:73:be:d7:bf:a2:ab:a1:e0:fa:
                    e6:7c:89:04:64:74:ed:36:5a:98:69:51:a5:15:10:
                    49:9b:85:61:4f:87:6a:20:30:9e:1d:76:de:49:34:
                    37:61:64:84:9c:d7:f1:6b:85:2e:9a:91:57:86:d8:
                    af:fc:42:a1:27:c4:fe:67:52:94:8f:d6:ec:41:4d:
                    de:51:3f:fe:70:c4:3e:97:d9:ff:2c:66:dd:50:46:
                    8d:d0:14:8b:98:3f:06:e6:c8:0e:0e:b6:ba:18:62:
                    8b:19:d0:a9:32:e4:64:83:97:06:87:02:06:6b:c0:
                    5d:75:96:26:ad:b5:2e:22:30:4f:bc:64:5b:c3:07:
                    20:de:92:a5:a4:59:21:b8:a8:ef:42:b8:76:95:94:
                    bd:14:8e:17:64:5a:23:31:60:61:c6:23:7a:e3:2b:
                    a6:49:35:3d:a6:8c:e0:b7:64:db:eb:b7:02:8b:dc:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:94:5D:0A:CF:E2:C3:34:DD:3E:4E:25:8E:C8:0D:D4:41:52:89:DD
            X509v3 Authority Key Identifier:
                keyid:BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/323830343a353063303a3a2f33322d3332203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:46:5e:69:15:54:36:d2:64:3a:bd:57:fc:2b:db:5a:1b:
         a8:82:f4:69:00:d7:3e:f5:e9:32:8f:a6:85:80:b2:21:81:ba:
         32:60:a0:ac:7b:fe:35:04:45:1d:d8:bd:1b:12:1b:8d:06:6b:
         48:21:8c:0d:27:90:9c:cc:87:d7:46:0f:47:28:26:42:0a:51:
         a4:e9:3a:a6:2e:97:15:a1:63:47:85:6f:c0:ab:59:bd:27:9a:
         6e:ea:04:de:ce:aa:a5:89:e2:51:c6:77:2d:bf:dc:8c:39:47:
         53:78:d5:e0:21:9c:7c:8d:d2:20:6a:f4:ae:d5:a9:e0:ab:09:
         b9:5b:8d:de:43:45:d4:3c:10:fa:cb:b4:84:e1:74:5a:97:ad:
         c2:69:db:cd:1f:48:22:e3:c5:01:64:f3:05:33:4d:e8:25:c2:
         92:2b:a4:b2:46:cc:18:7b:ec:1e:91:75:21:68:a8:40:c4:79:
         54:9c:2b:5f:fd:11:c0:7d:3d:bd:cd:1d:97:a1:99:95:55:b4:
         df:b5:03:d4:b4:b8:69:81:2f:bf:b1:31:61:f4:a5:54:7f:54:
         f1:de:76:42:a3:ae:38:15:19:92:0f:42:a4:8a:c5:16:1c:f0:
         47:e2:92:2a:06:8e:c0:a9:59:fa:a6:46:7b:e4:09:ca:fb:68:
         a7:59:bb:5d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTbHpQpiJ6b5HtV14HMAHXmWm9gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzNDU5N0I3QUJGNzZFRjIwRDIxNEQ0M0YyNUUyNTc5
RjU2MEU3ODAeFw0yNDAxMDgxNTAyNTRaFw0yNTAxMDYxNTA3NTRaMDMxMTAvBgNV
BAMTKDE5OTQ1RDBBQ0ZFMkMzMzRERDNFNEUyNThFQzgwREQ0NDE1Mjg5REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+73n7uRgucrtX8Mh991Ihsxc
e/gY7uPmEZBcrGQDp5SlTayhjbDGT62r5vzjzKC3+2D+FoEEEq3oUp2YCHOj/28P
eSedBfHDwzJDGCiJ9HO+17+iq6Hg+uZ8iQRkdO02WphpUaUVEEmbhWFPh2ogMJ4d
dt5JNDdhZISc1/FrhS6akVeG2K/8QqEnxP5nUpSP1uxBTd5RP/5wxD6X2f8sZt1Q
Ro3QFIuYPwbmyA4OtroYYosZ0Kky5GSDlwaHAgZrwF11liattS4iME+8ZFvDByDe
kqWkWSG4qO9CuHaVlL0UjhdkWiMxYGHGI3rjK6ZJNT2mjOC3ZNvrtwKL3KaJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGZRdCs/iwzTdPk4ljsgN1EFSid0wHwYDVR0j
BBgwFoAUvjRZe3q/du8g0hTUPyXiV59WDngwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNld2t2NkJWSlVGelhIOWsyNVg1alczaWFYRHRaQVF4Z1V0dUd5RGlQ
UWsvMC9CRTM0NTk3QjdBQkY3NkVGMjBEMjE0RDQzRjI1RTI1NzlGNTYwRTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFMzQ1OTdCN0FCRjc2RUYy
MEQyMTRENDNGMjVFMjU3OUY1NjBFNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZXdrdjZCVkpVRnpYSDlrMjVYNWpXM2lhWER0WkFReGdVdHVHeURpUFFrLzAv
MzIzODMwMzQzYTM1MzA2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzQzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARQwDANBgkqhkiG9w0BAQsFAAOCAQEAYeRGXmkV
VDbSZDq9V/wr21obqIL0aQDXPvXpMo+mhYCyIYG6MmCgrHv+NQRFHdi9GxIbjQZr
SCGMDSeQnMyH10YPRygmQgpRpOk6pi6XFaFjR4VvwKtZvSeabuoE3s6qpYniUcZ3
Lb/cjDlHU3jV4CGcfI3SIGr0rtWp4KsJuVuN3kNF1DwQ+su0hOF0WpetwmnbzR9I
IuPFAWTzBTNN6CXCkiukskbMGHvsHpF1IWioQMR5VJwrX/0RwH09vc0dl6GZlVW0
37UD1LS4aYEvv7ExYfSlVH9U8d52QqOuOBUZkg9CpIrFFhzwR+KSKgaOwKlZ+qZG
e+QJyvtop1m7XQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org