Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a383030303a3a2f33342d3334203d3e20323633353731.roa
File:                     323830343a6633383a383030303a3a2f33342d3334203d3e20323633353731.roa (raw, json)
Hash identifier:          QzKNRjHYVvwI0yoZz5s9e+OLb897ZIbyQP8HCao8bWc=
Subject key identifier:   DA:25:6C:58:08:8E:06:5E:93:96:56:63:52:63:74:D5:F2:B0:99:46
Certificate issuer:       /CN=41D988C453AB5CA96DA778B690390450C6345EEE
Certificate serial:       0D21961D68404EFC1A13BE7E73225484B0FD4BFF
Authority key identifier: 41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a383030303a3a2f33342d3334203d3e20323633353731.roa
Signing time:             Wed 27 Dec 2023 11:16:39 +0000
ROA not before:           Wed 27 Dec 2023 11:11:39 +0000
ROA not after:            Wed 25 Dec 2024 11:16:39 +0000
asID:                     263571
IP address blocks:        2804:f38:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:21:96:1d:68:40:4e:fc:1a:13:be:7e:73:22:54:84:b0:fd:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D988C453AB5CA96DA778B690390450C6345EEE
        Validity
            Not Before: Dec 27 11:11:39 2023 GMT
            Not After : Dec 25 11:16:39 2024 GMT
        Subject: CN=DA256C58088E065E93965663526374D5F2B09946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:95:e7:ca:86:87:8c:d1:cf:6d:ff:dc:6a:
                    e7:57:d5:af:f0:0f:78:22:30:c7:c1:b2:2e:80:77:
                    87:fd:a1:84:52:1f:f4:59:28:a6:94:a9:d7:8a:d7:
                    7a:c0:e6:d8:31:df:53:b4:5c:3e:a6:06:8e:9d:a8:
                    4f:5a:3e:0d:71:5e:63:f4:63:06:77:14:cd:88:0e:
                    d6:e6:f1:c8:ff:38:df:cd:10:b6:57:1c:ca:45:5d:
                    4f:a7:45:b2:e8:f8:f0:34:43:7c:98:cf:49:27:54:
                    00:d9:73:a1:4c:88:45:76:83:24:60:aa:a9:46:e2:
                    3a:57:35:33:55:36:f1:13:f3:9e:dc:45:6c:85:3d:
                    c4:12:a2:a6:45:63:ab:4c:92:d4:9a:fc:1f:3c:f1:
                    9f:49:d5:91:d7:e0:51:67:3d:45:3b:a4:30:4c:fb:
                    a0:2e:9b:57:3c:2c:a2:54:fc:b3:60:4d:69:a8:b9:
                    0a:7d:bd:91:11:5d:f4:7d:dd:4a:ba:a6:c9:3c:a7:
                    40:49:e4:92:2c:9a:fa:2f:8d:90:c6:17:90:91:86:
                    1e:3f:16:44:4a:00:bf:d2:09:aa:9e:c2:63:a6:09:
                    a8:41:22:dc:b5:04:b4:70:a5:21:d5:cb:9e:31:57:
                    62:d8:0e:8a:c3:d3:02:e3:fd:4a:ef:31:1e:de:56:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:25:6C:58:08:8E:06:5E:93:96:56:63:52:63:74:D5:F2:B0:99:46
            X509v3 Authority Key Identifier:
                keyid:41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a383030303a3a2f33342d3334203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f38:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:7c:6a:18:cb:1f:32:0d:80:cc:ba:78:82:13:58:c1:d8:
         f0:ad:1d:31:69:b4:84:be:6a:b5:4f:f3:cc:be:aa:07:0d:d6:
         8e:36:94:42:89:e7:17:3c:77:3b:43:6d:6c:4b:05:ee:a6:68:
         95:3c:5d:44:cf:3f:4d:2b:79:c0:cf:f3:b6:e3:f0:ab:88:59:
         cb:78:1e:53:92:e1:d2:8b:be:51:37:95:5f:8d:9d:e5:69:22:
         69:56:a1:e8:f1:af:7f:51:a7:b9:a9:29:92:d3:f1:73:ed:2c:
         27:9f:9e:aa:10:e7:14:8f:af:25:37:6c:e0:37:0e:38:e4:ce:
         c9:99:b0:ba:5d:d6:0d:47:b2:f6:6e:c5:7b:9a:52:83:28:62:
         4b:5d:31:01:2b:7d:41:9e:70:fe:d1:fc:1c:52:44:c8:57:22:
         b1:fe:4d:c9:90:50:d5:a8:e5:71:51:79:cc:f2:d6:b7:85:f7:
         21:75:e7:28:30:11:b6:a9:df:b1:ec:cb:bd:e4:50:cd:87:f8:
         27:d5:27:5e:95:7b:21:e8:c6:3f:bd:e2:6f:d8:c7:8f:ac:d6:
         c9:1e:76:b5:f3:46:ec:89:1b:0b:1c:04:18:9f:bf:7b:27:73:
         db:d9:2f:00:57:29:a0:19:8e:65:4b:48:eb:94:be:31:5d:ca:
         8a:34:82:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDSGWHWhATvwaE75+cyJUhLD9S/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFEOTg4QzQ1M0FCNUNBOTZEQTc3OEI2OTAzOTA0NTBD
NjM0NUVFRTAeFw0yMzEyMjcxMTExMzlaFw0yNDEyMjUxMTE2MzlaMDMxMTAvBgNV
BAMTKERBMjU2QzU4MDg4RTA2NUU5Mzk2NTY2MzUyNjM3NEQ1RjJCMDk5NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGJXnyoaHjNHPbf/caudX1a/w
D3giMMfBsi6Ad4f9oYRSH/RZKKaUqdeK13rA5tgx31O0XD6mBo6dqE9aPg1xXmP0
YwZ3FM2IDtbm8cj/ON/NELZXHMpFXU+nRbLo+PA0Q3yYz0knVADZc6FMiEV2gyRg
qqlG4jpXNTNVNvET857cRWyFPcQSoqZFY6tMktSa/B888Z9J1ZHX4FFnPUU7pDBM
+6Aum1c8LKJU/LNgTWmouQp9vZERXfR93Uq6psk8p0BJ5JIsmvovjZDGF5CRhh4/
FkRKAL/SCaqewmOmCahBIty1BLRwpSHVy54xV2LYDorD0wLj/UrvMR7eVjH7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2iVsWAiOBl6TllZjUmN01fKwmUYwHwYDVR0j
BBgwFoAUQdmIxFOrXKltp3i2kDkEUMY0Xu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5
SEEvMC80MUQ5ODhDNDUzQUI1Q0E5NkRBNzc4QjY5MDM5MDQ1MEM2MzQ1RUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxRDk4OEM0NTNBQjVDQTk2
REE3NzhCNjkwMzkwNDUwQzYzNDVFRUUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVyNlBieXdLVVg2eFNrcTd2UmU5R1pDYTcxSzFLSmpKY0duQlVpczNyeUhBLzAv
MzIzODMwMzQzYTY2MzMzODNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzMzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA84gDANBgkqhkiG9w0BAQsFAAOC
AQEAP0h8ahjLHzINgMy6eIITWMHY8K0dMWm0hL5qtU/zzL6qBw3WjjaUQonnFzx3
O0NtbEsF7qZolTxdRM8/TSt5wM/ztuPwq4hZy3geU5Lh0ou+UTeVX42d5WkiaVah
6PGvf1GnuakpktPxc+0sJ5+eqhDnFI+vJTds4DcOOOTOyZmwul3WDUey9m7Fe5pS
gyhiS10xASt9QZ5w/tH8HFJEyFcisf5NyZBQ1ajlcVF5zPLWt4X3IXXnKDARtqnf
sezLveRQzYf4J9UnXpV7IejGP73ib9jHj6zWyR52tfNG7IkbCxwEGJ+/eydz29kv
AFcpoBmOZUtI65S+MV3KijSCFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org