Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a3a2f33322d3332203d3e20323637343236.roa
File:                     323830343a343135303a3a2f33322d3332203d3e20323637343236.roa (raw, json)
Hash identifier:          Ii/AQpFkiZqu71xyQl4vTF8VGH8Vk3DmtJQRodt5KLg=
Subject key identifier:   8E:82:A9:B7:0C:A0:18:DF:AB:C8:0F:8A:68:FA:DA:A9:57:3F:43:1E
Certificate issuer:       /CN=959F004623105A3C7B4F85C41B8104B26D38122E
Certificate serial:       306DA59C68F8E1A79348D3E45515F8209A482953
Authority key identifier: 95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a3a2f33322d3332203d3e20323637343236.roa
Signing time:             Wed 29 Nov 2023 22:18:37 +0000
ROA not before:           Wed 29 Nov 2023 22:13:37 +0000
ROA not after:            Wed 27 Nov 2024 22:18:37 +0000
asID:                     267426
IP address blocks:        2804:4150::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6d:a5:9c:68:f8:e1:a7:93:48:d3:e4:55:15:f8:20:9a:48:29:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959F004623105A3C7B4F85C41B8104B26D38122E
        Validity
            Not Before: Nov 29 22:13:37 2023 GMT
            Not After : Nov 27 22:18:37 2024 GMT
        Subject: CN=8E82A9B70CA018DFABC80F8A68FADAA9573F431E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:c2:26:89:16:6a:cd:14:29:1a:cf:a8:1b:
                    bc:17:fb:5f:98:d3:32:2e:a8:df:2c:94:ef:86:a5:
                    91:fb:c5:48:61:5f:72:03:b9:41:54:4d:c3:c9:55:
                    85:99:d7:d8:b5:66:48:7c:6c:f1:5c:e5:4b:c0:f6:
                    45:1f:bf:3b:95:dd:97:8a:f1:b7:43:e1:17:92:43:
                    99:b2:68:53:7b:35:35:e1:ef:60:a5:62:09:62:d5:
                    d1:7b:fa:3c:aa:b1:b3:7e:a2:7c:32:24:cd:9b:a9:
                    0e:dc:95:8b:b5:07:0c:d8:fd:f8:c5:b5:cb:3e:d1:
                    a5:f4:e5:20:70:38:dd:1a:77:ce:4f:1f:d7:f6:75:
                    1e:c6:22:76:b1:79:3d:d9:97:cd:78:bc:e4:a0:2d:
                    54:ea:81:bc:57:43:57:1d:68:ce:44:55:80:b9:d1:
                    4e:7b:42:cd:96:da:e3:f4:c6:89:be:bc:3f:4b:8b:
                    72:7f:70:3f:ea:9f:9a:a2:b5:06:cc:ab:64:9b:31:
                    9c:65:92:1c:d8:4b:91:91:2e:88:86:81:5a:67:53:
                    bd:83:27:46:18:bc:4c:da:46:02:89:6d:ed:fe:28:
                    42:4c:74:1b:29:93:5a:77:c5:da:bf:1b:0e:10:10:
                    c9:8e:b7:54:4a:6e:ef:5c:c9:d7:36:98:03:92:b0:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:82:A9:B7:0C:A0:18:DF:AB:C8:0F:8A:68:FA:DA:A9:57:3F:43:1E
            X509v3 Authority Key Identifier:
                keyid:95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/323830343a343135303a3a2f33322d3332203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4150::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:ef:bc:14:a7:c2:08:98:2e:6a:d7:f7:a6:4f:3f:73:bb:
         58:10:23:b7:90:1e:fa:5d:92:d6:64:25:4f:95:12:10:d4:ed:
         18:19:ff:96:dd:3e:ba:3d:27:c7:73:fb:5f:b5:f2:1a:8c:a7:
         1a:61:fc:e4:ef:ed:6f:90:4f:52:90:21:22:74:d2:a2:d5:74:
         08:08:da:c0:ab:5d:32:44:a1:d7:26:37:d4:f0:f1:5f:ff:6f:
         1d:67:18:d4:83:7a:79:98:c6:5d:7b:b4:2b:1c:fd:fe:ce:87:
         14:e7:fe:e2:bd:03:8a:a6:5b:d2:59:33:15:3c:c5:84:8f:27:
         e3:85:f9:e2:ac:53:fc:f1:2d:bb:b2:13:2a:d9:3b:8f:74:75:
         e3:9a:66:7e:eb:21:c2:82:6f:ac:ba:34:98:12:a6:27:19:3c:
         a5:2d:c7:43:18:bb:ae:9a:3f:21:b4:43:a6:62:48:47:90:fd:
         f2:79:c1:38:87:d2:dd:a1:17:3a:fb:f9:bf:ed:4d:31:33:bc:
         45:17:47:19:da:94:c0:8b:39:df:f5:1a:a9:00:bf:44:14:f0:
         23:03:d3:63:2e:cf:ae:ea:20:6d:a3:fd:c8:ed:5f:1e:a1:82:
         9e:04:a9:36:5e:c9:a1:bf:34:12:f4:61:e0:f0:29:2d:f7:77:
         63:bb:64:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMG2lnGj44aeTSNPkVRX4IJpIKVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU5RjAwNDYyMzEwNUEzQzdCNEY4NUM0MUI4MTA0QjI2
RDM4MTIyRTAeFw0yMzExMjkyMjEzMzdaFw0yNDExMjcyMjE4MzdaMDMxMTAvBgNV
BAMTKDhFODJBOUI3MENBMDE4REZBQkM4MEY4QTY4RkFEQUE5NTczRjQzMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUMImiRZqzRQpGs+oG7wX+1+Y
0zIuqN8slO+GpZH7xUhhX3IDuUFUTcPJVYWZ19i1Zkh8bPFc5UvA9kUfvzuV3ZeK
8bdD4ReSQ5myaFN7NTXh72ClYgli1dF7+jyqsbN+onwyJM2bqQ7clYu1BwzY/fjF
tcs+0aX05SBwON0ad85PH9f2dR7GInaxeT3Zl814vOSgLVTqgbxXQ1cdaM5EVYC5
0U57Qs2W2uP0xom+vD9Li3J/cD/qn5qitQbMq2SbMZxlkhzYS5GRLoiGgVpnU72D
J0YYvEzaRgKJbe3+KEJMdBspk1p3xdq/Gw4QEMmOt1RKbu9cydc2mAOSsNV5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjoKptwygGN+ryA+KaPraqVc/Qx4wHwYDVR0j
BBgwFoAUlZ8ARiMQWjx7T4XEG4EEsm04Ei4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdZeWtndFFXRUZxajdGdTN4WlRoTjJEclg5amR2Q2FWbjJ3TVhGYjZV
NTIvMC85NTlGMDA0NjIzMTA1QTNDN0I0Rjg1QzQxQjgxMDRCMjZEMzgxMjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1OUYwMDQ2MjMxMDVBM0M3
QjRGODVDNDFCODEwNEIyNkQzODEyMkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3WXlrZ3RRV0VGcWo3RnUzeFpUaE4yRHJYOWpkdkNhVm4yd01YRmI2VTUyLzAv
MzIzODMwMzQzYTM0MzEzNTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzQzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARBUDANBgkqhkiG9w0BAQsFAAOCAQEATPLvvBSn
wgiYLmrX96ZPP3O7WBAjt5Ae+l2S1mQlT5USENTtGBn/lt0+uj0nx3P7X7XyGoyn
GmH85O/tb5BPUpAhInTSotV0CAjawKtdMkSh1yY31PDxX/9vHWcY1IN6eZjGXXu0
Kxz9/s6HFOf+4r0DiqZb0lkzFTzFhI8n44X54qxT/PEtu7ITKtk7j3R145pmfush
woJvrLo0mBKmJxk8pS3HQxi7rpo/IbRDpmJIR5D98nnBOIfS3aEXOvv5v+1NMTO8
RRdHGdqUwIs53/UaqQC/RBTwIwPTYy7PruogbaP9yO1fHqGCngSpNl7Job80EvRh
4PApLfd3Y7tkHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org