Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          XYIuYg1hvANvm7ygPBpvt4qF+s4eDDL5bmrsyklfQeo=
Subject key identifier:   CC:CA:D6:31:6C:DA:3A:F7:EB:32:C2:D5:E0:56:A7:BE:4F:CA:A1:55
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       093BFA656947B28269FA13DB297C2849CCFD8FF0
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:45 +0000
ROA not before:           Sun 18 Feb 2024 03:12:45 +0000
ROA not after:            Sun 16 Feb 2025 03:17:45 +0000
asID:                     267218
IP address blocks:        2804:4a18:bbbc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3b:fa:65:69:47:b2:82:69:fa:13:db:29:7c:28:49:cc:fd:8f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:45 2024 GMT
            Not After : Feb 16 03:17:45 2025 GMT
        Subject: CN=CCCAD6316CDA3AF7EB32C2D5E056A7BE4FCAA155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:64:a6:77:22:94:ed:b7:7a:37:ca:f6:55:
                    67:0d:2b:d5:0a:d5:14:6d:5f:7c:2a:34:b4:1e:5d:
                    be:60:83:91:f2:4f:50:2a:df:8e:6d:30:49:8a:09:
                    24:18:c5:bb:b0:47:95:e9:df:69:b0:9a:73:39:8a:
                    e1:97:4c:ca:0f:c4:62:99:d8:ec:28:bf:6f:ab:2f:
                    37:4e:1d:5d:5f:21:f0:fa:39:d1:34:e0:24:a4:0c:
                    df:9e:f6:85:eb:29:bb:31:72:79:aa:fc:25:41:fe:
                    15:22:54:28:89:99:04:4e:a7:47:27:97:6b:3e:63:
                    7c:98:91:2e:7e:2f:09:f1:a5:47:8d:e3:52:c4:72:
                    0e:54:3b:13:e7:32:9c:14:6a:e6:78:0e:d9:01:66:
                    4c:ca:31:b2:23:45:4b:cc:87:85:f8:b4:b1:32:bd:
                    2c:5d:bc:e3:6b:e8:e4:57:97:bd:fe:e5:72:65:65:
                    49:e4:af:45:1a:9a:fb:ab:66:ae:12:a4:6e:ba:62:
                    b3:3e:aa:3d:36:32:8f:e0:c1:f7:d0:5a:d8:4a:80:
                    73:bd:01:9a:84:c2:db:aa:1a:7c:99:f8:db:fd:9c:
                    40:ef:4b:20:80:33:b1:bd:52:3d:96:83:7b:9b:54:
                    4c:63:ad:ed:78:e3:eb:c5:2f:74:ea:31:b0:eb:bf:
                    23:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CA:D6:31:6C:DA:3A:F7:EB:32:C2:D5:E0:56:A7:BE:4F:CA:A1:55
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:bbbc::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:05:80:f9:1d:69:94:7b:f1:51:2a:01:3c:b9:d0:cf:10:b3:
         25:5e:83:ff:3b:1a:84:a5:35:d6:8a:91:39:5e:4e:ab:19:15:
         b1:9a:a3:31:8c:08:27:73:51:fa:e6:9d:f6:40:8f:b0:11:5f:
         a6:35:2c:da:c5:11:88:c3:3b:2d:89:3c:2a:43:42:42:13:14:
         c8:bc:d1:68:da:eb:4d:36:3f:07:33:c7:f0:94:34:e0:52:1b:
         7b:6f:7f:d8:75:19:67:4d:9f:c5:4f:d2:14:dd:62:25:8b:31:
         b1:8d:6e:b7:80:cd:0c:5b:2b:88:f7:ec:fb:bb:c6:04:d1:13:
         72:c4:5b:5e:f3:a3:a3:e3:ef:87:99:e4:a3:3d:62:1a:ba:b7:
         b3:fd:96:79:91:cf:d1:6b:3a:00:ad:e7:18:30:f6:a8:05:47:
         70:cb:20:d5:56:92:39:49:8e:f5:ec:01:d1:16:76:b2:81:11:
         5f:9c:fc:9c:2b:13:00:86:42:e8:f3:e8:ac:47:a2:9a:e6:98:
         04:0f:a0:02:ab:79:80:65:50:a2:17:6d:97:d1:7e:2e:31:c7:
         38:81:14:0f:50:2d:7b:58:05:6a:37:97:e9:de:95:9a:fc:4f:
         2e:20:b4:58:39:ad:4d:34:c5:a6:9a:f6:02:63:8f:d3:fa:52:
         3d:4e:e2:50
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUCTv6ZWlHsoJp+hPbKXwoScz9j/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2MjVBMkM3QTY4NzMyNzc1NTI4MEE2OEE5NDRFRUQ0
OTEzMzQ5MTAeFw0yNDAyMTgwMzEyNDVaFw0yNTAyMTYwMzE3NDVaMDMxMTAvBgNV
BAMTKENDQ0FENjMxNkNEQTNBRjdFQjMyQzJENUUwNTZBN0JFNEZDQUExNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ImSmdyKU7bd6N8r2VWcNK9UK
1RRtX3wqNLQeXb5gg5HyT1Aq345tMEmKCSQYxbuwR5Xp32mwmnM5iuGXTMoPxGKZ
2Owov2+rLzdOHV1fIfD6OdE04CSkDN+e9oXrKbsxcnmq/CVB/hUiVCiJmQROp0cn
l2s+Y3yYkS5+LwnxpUeN41LEcg5UOxPnMpwUauZ4DtkBZkzKMbIjRUvMh4X4tLEy
vSxdvONr6ORXl73+5XJlZUnkr0UamvurZq4SpG66YrM+qj02Mo/gwffQWthKgHO9
AZqEwtuqGnyZ+Nv9nEDvSyCAM7G9Uj2Wg3ubVExjre144+vFL3TqMbDrvyPbAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUzMrWMWzaOvfrMsLV4Fanvk/KoVUwHwYDVR0j
BBgwFoAUimJaLHpocyd1UoCmipRO7UkTNJEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXk1TFIxVFFxTVBkS01GYTRncU1MdHhaelRaWTlhdlN0UURhcXpMUkxk
VjEvMC84QTYyNUEyQzdBNjg3MzI3NzU1MjgwQTY4QTk0NEVFRDQ5MTMzNDkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBNjI1QTJDN0E2ODczMjc3
NTUyODBBNjhBOTQ0RUVENDkxMzM0OTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5NUxSMVRRcU1QZEtNRmE0Z3FNTHR4WnpUWlk5YXZTdFFEYXF6TFJMZFYxLzAv
MzIzODMwMzQzYTM0NjEzMTM4M2E2MjYyNjI2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNzMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEShi7vDANBgkqhkiG9w0BAQsF
AAOCAQEAXwWA+R1plHvxUSoBPLnQzxCzJV6D/zsahKU11oqROV5OqxkVsZqjMYwI
J3NR+uad9kCPsBFfpjUs2sURiMM7LYk8KkNCQhMUyLzRaNrrTTY/BzPH8JQ04FIb
e29/2HUZZ02fxU/SFN1iJYsxsY1ut4DNDFsriPfs+7vGBNETcsRbXvOjo+Pvh5nk
oz1iGrq3s/2WeZHP0Ws6AK3nGDD2qAVHcMsg1VaSOUmO9ewB0RZ2soERX5z8nCsT
AIZC6PPorEeimuaYBA+gAqt5gGVQohdtl9F+LjHHOIEUD1Ate1gFajeX6d6VmvxP
LiC0WDmtTTTFppr2AmOP0/pSPU7iUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org