Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33322d3332203d3e20323636333835.roa
File:                     323830343a333730383a3a2f33322d3332203d3e20323636333835.roa (raw, json)
Hash identifier:          NdNuxxcq3hmJQZCULjmQGN9mQ8oK3k06ARwDEBGhkiM=
Subject key identifier:   A7:9E:C7:90:D1:94:CA:0B:F2:CF:63:1E:B3:94:CE:D6:7B:1B:3F:5D
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       5E3E9B2D97A011615A10778C93888CEBCBEAC785
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33322d3332203d3e20323636333835.roa
Signing time:             Tue 30 Jan 2024 16:44:00 +0000
ROA not before:           Tue 30 Jan 2024 16:39:00 +0000
ROA not after:            Tue 28 Jan 2025 16:44:00 +0000
asID:                     266385
IP address blocks:        2804:3708::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3e:9b:2d:97:a0:11:61:5a:10:77:8c:93:88:8c:eb:cb:ea:c7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Jan 30 16:39:00 2024 GMT
            Not After : Jan 28 16:44:00 2025 GMT
        Subject: CN=A79EC790D194CA0BF2CF631EB394CED67B1B3F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:19:6e:16:e5:78:aa:e0:67:55:6a:24:85:
                    30:d4:aa:f7:0f:9e:46:ed:1f:ab:74:37:a6:a6:03:
                    7d:a0:f4:b6:ac:ee:79:c7:12:41:dc:70:39:38:0e:
                    21:61:9b:9d:b6:2f:1b:b5:29:12:45:85:67:d2:e4:
                    1a:e2:02:03:3f:29:91:50:fd:37:10:4b:b2:97:6b:
                    a8:94:ca:eb:9d:60:ee:fa:67:13:2f:68:b6:15:73:
                    e5:e5:b0:c1:1e:3d:25:0e:5b:5c:41:ce:ad:72:d4:
                    ea:38:60:17:21:95:f4:31:d3:a5:7f:33:21:5d:8a:
                    ae:5f:fa:ac:ca:83:cd:35:a1:07:5c:f2:60:28:81:
                    6a:c5:d0:84:df:93:10:11:4b:fe:d6:9c:1f:7e:15:
                    f9:8d:77:5a:bb:eb:a5:fe:cb:d8:a1:fa:5c:28:e8:
                    75:cf:c9:26:fc:9f:22:c7:6f:27:2b:79:63:6b:d3:
                    5d:51:95:4c:77:f4:82:2b:12:9b:2e:a0:8e:d7:07:
                    d5:63:ce:7a:33:54:33:cf:1d:ab:79:52:e0:ee:3d:
                    98:f6:0f:da:2c:d5:b0:c6:32:80:36:5d:a9:30:6a:
                    f7:53:54:db:6c:73:d9:da:05:06:6b:e6:83:e5:7e:
                    89:ec:1c:e3:62:37:d1:83:eb:76:1b:fa:4c:f9:5b:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9E:C7:90:D1:94:CA:0B:F2:CF:63:1E:B3:94:CE:D6:7B:1B:3F:5D
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a3a2f33322d3332203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:19:b2:55:a2:60:d6:b6:a8:8a:95:b6:0b:0f:31:3c:33:3d:
         6c:5a:2c:66:55:46:b4:26:6c:e1:4a:ab:84:07:7e:19:32:73:
         d0:c5:61:34:cb:b8:49:a1:0c:76:b2:d3:c6:1d:e6:30:b6:4b:
         de:af:0a:d3:c9:cf:3e:e2:86:e5:36:5c:e8:47:d1:84:04:ef:
         dd:0e:72:bb:5d:f9:87:d3:77:ab:ba:2f:41:62:7b:ae:d3:04:
         54:e4:21:db:b1:49:f5:3c:ae:ca:74:61:4b:be:cc:f5:af:68:
         22:65:b2:bd:8c:00:c4:a5:a5:c7:a6:ed:83:d4:92:15:de:a8:
         85:c1:39:98:00:7f:99:6d:49:75:40:3b:29:55:3e:89:7e:ca:
         92:94:49:91:10:1b:dd:85:9b:8f:9d:d7:1d:42:55:fe:ad:8d:
         35:5d:d0:2e:90:b5:34:01:33:63:ae:f6:3d:bd:7c:9a:b1:1e:
         ea:a1:d2:ae:9a:34:e4:e1:2b:d0:a6:e5:bf:6c:c2:3c:e0:d2:
         20:52:2f:c4:ff:1e:ee:fe:1f:4b:23:95:3d:6c:80:c8:c6:b7:
         6e:93:bc:ef:76:b5:5d:91:07:18:b5:34:13:8a:3e:8e:f4:ff:
         58:cf:61:f8:bd:e1:b2:04:88:48:5e:7d:03:3c:56:a4:c1:b1:
         b0:f0:a5:27
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXj6bLZegEWFaEHeMk4iM68vqx4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzNDBCQkNGMzUxMUU3RkYwQzBEOTc5MDMwRENDODU1
M0UxNjY3NjAeFw0yNDAxMzAxNjM5MDBaFw0yNTAxMjgxNjQ0MDBaMDMxMTAvBgNV
BAMTKEE3OUVDNzkwRDE5NENBMEJGMkNGNjMxRUIzOTRDRUQ2N0IxQjNGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06xluFuV4quBnVWokhTDUqvcP
nkbtH6t0N6amA32g9Las7nnHEkHccDk4DiFhm522Lxu1KRJFhWfS5BriAgM/KZFQ
/TcQS7KXa6iUyuudYO76ZxMvaLYVc+XlsMEePSUOW1xBzq1y1Oo4YBchlfQx06V/
MyFdiq5f+qzKg801oQdc8mAogWrF0ITfkxARS/7WnB9+FfmNd1q766X+y9ih+lwo
6HXPySb8nyLHbycreWNr011RlUx39IIrEpsuoI7XB9VjznozVDPPHat5UuDuPZj2
D9os1bDGMoA2XakwavdTVNtsc9naBQZr5oPlfonsHONiN9GD63Yb+kz5W2a7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUp57HkNGUygvyz2Mes5TO1nsbP10wHwYDVR0j
BBgwFoAU1DQLvPNRHn/wwNl5Aw3MhVPhZnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdGUkc0ODZVTlFwOE14dE5SWWhvTW1nZFh2dUN5WWs5MXhxSHpROGRM
elAvMC9ENDM0MEJCQ0YzNTExRTdGRjBDMEQ5NzkwMzBEQ0M4NTUzRTE2Njc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0MzQwQkJDRjM1MTFFN0ZG
MEMwRDk3OTAzMERDQzg1NTNFMTY2NzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3RlJHNDg2VU5RcDhNeHROUllob01tZ2RYdnVDeVlrOTF4cUh6UThkTHpQLzAv
MzIzODMwMzQzYTMzMzczMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzMzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ3CDANBgkqhkiG9w0BAQsFAAOCAQEANBmyVaJg
1raoipW2Cw8xPDM9bFosZlVGtCZs4UqrhAd+GTJz0MVhNMu4SaEMdrLTxh3mMLZL
3q8K08nPPuKG5TZc6EfRhATv3Q5yu135h9N3q7ovQWJ7rtMEVOQh27FJ9TyuynRh
S77M9a9oImWyvYwAxKWlx6btg9SSFd6ohcE5mAB/mW1JdUA7KVU+iX7KkpRJkRAb
3YWbj53XHUJV/q2NNV3QLpC1NAEzY672Pb18mrEe6qHSrpo05OEr0Kblv2zCPODS
IFIvxP8e7v4fSyOVPWyAyMa3bpO873a1XZEHGLU0E4o+jvT/WM9h+L3hsgSISF59
AzxWpMGxsPClJw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org