Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33322d3438203d3e20323637303739.roa
File:                     323830343a343764343a3a2f33322d3438203d3e20323637303739.roa (raw, json)
Hash identifier:          Tvy0P/n9RlbtoNWld1mkj0UrsBEDvN9CO7+dPCjfcW4=
Subject key identifier:   73:15:82:24:D1:9A:6A:E4:66:17:86:6A:83:09:7E:3B:EA:15:14:DB
Certificate issuer:       /CN=35095E12F171817DDE4EC0B91231CC009AC6496C
Certificate serial:       7459D9C5139DAA564773CAC63A5DFD3C2C4F1D47
Authority key identifier: 35:09:5E:12:F1:71:81:7D:DE:4E:C0:B9:12:31:CC:00:9A:C6:49:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35095E12F171817DDE4EC0B91231CC009AC6496C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33322d3438203d3e20323637303739.roa
Signing time:             Thu 20 Apr 2023 14:32:52 +0000
ROA not before:           Thu 20 Apr 2023 14:27:52 +0000
ROA not after:            Thu 18 Apr 2024 14:32:52 +0000
asID:                     267079
IP address blocks:        2804:47d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:59:d9:c5:13:9d:aa:56:47:73:ca:c6:3a:5d:fd:3c:2c:4f:1d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35095E12F171817DDE4EC0B91231CC009AC6496C
        Validity
            Not Before: Apr 20 14:27:52 2023 GMT
            Not After : Apr 18 14:32:52 2024 GMT
        Subject: CN=73158224D19A6AE46617866A83097E3BEA1514DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:2a:56:d1:ce:41:65:22:f0:52:ad:db:43:
                    30:8b:26:4c:ac:7c:05:5a:17:eb:1d:33:e7:93:f8:
                    b9:b4:78:35:a4:34:fb:a5:d2:a0:12:9e:c5:ab:d9:
                    85:c7:53:33:7b:b0:1b:5b:65:96:c8:ac:d0:d4:5a:
                    84:75:31:ae:3c:bc:dc:c7:cd:aa:7c:5b:ec:80:dc:
                    ac:1e:fc:26:9d:f1:1b:8f:28:54:42:e8:88:95:17:
                    bf:f0:58:2d:41:06:ab:64:d0:84:90:65:3f:6b:db:
                    ae:0e:eb:d9:00:6b:cd:77:3a:18:3b:44:e4:3d:c1:
                    ce:4e:10:af:f5:96:04:94:6f:c6:20:ea:cd:ef:fb:
                    78:83:d3:17:52:64:41:72:cb:b7:95:6d:0a:6f:34:
                    40:46:d6:7b:8a:1a:4d:9e:f8:d4:f5:97:14:f5:04:
                    b8:cf:c0:e6:59:59:82:96:eb:0e:4e:55:96:9d:e8:
                    40:0a:4c:54:76:37:46:42:92:0b:b9:a9:2f:b8:3c:
                    ba:f2:ed:fb:d7:00:45:c6:4f:b4:00:64:dc:06:d3:
                    90:ff:bd:ae:50:68:46:fa:a7:20:90:9f:be:e8:32:
                    76:29:56:7d:58:f6:27:80:fb:87:bc:df:3f:70:82:
                    d5:8c:82:01:81:c0:6e:c3:9e:dc:70:ba:04:ad:81:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:82:24:D1:9A:6A:E4:66:17:86:6A:83:09:7E:3B:EA:15:14:DB
            X509v3 Authority Key Identifier:
                keyid:35:09:5E:12:F1:71:81:7D:DE:4E:C0:B9:12:31:CC:00:9A:C6:49:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/35095E12F171817DDE4EC0B91231CC009AC6496C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35095E12F171817DDE4EC0B91231CC009AC6496C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33322d3438203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:4a:9e:e4:2b:3f:3a:f0:5a:e6:f9:45:7b:d4:d6:fe:f6:16:
         a3:75:1c:85:d0:ff:f8:23:f3:84:a3:a5:07:e8:96:99:07:b8:
         1d:f6:2d:6a:f2:6a:7a:40:7a:12:f7:7c:54:26:da:80:f0:dd:
         7b:41:b7:76:c9:4b:d8:69:a3:29:4b:18:cf:ed:f2:21:0f:53:
         20:b2:a4:a2:d8:e9:ca:41:e9:6d:48:6f:e6:47:95:be:19:9f:
         9f:74:fc:e6:50:ae:22:e4:37:81:72:cb:b1:cd:dd:44:99:97:
         16:8c:21:ae:f2:66:e8:24:b7:5d:5e:ba:1f:12:fe:d9:d9:33:
         a5:e0:d4:96:37:c3:f9:40:80:c0:c6:a2:22:f5:14:5b:2e:59:
         c9:c8:e5:cc:b7:e0:ac:44:68:58:dc:76:89:3a:47:0b:4a:3f:
         42:81:f0:86:7e:18:ae:00:75:3f:0a:dd:31:2c:bf:cc:91:cc:
         c6:22:eb:b8:ff:14:7c:3a:dc:70:86:84:ae:04:f6:e8:a5:4c:
         18:3d:36:68:a6:35:f5:da:b3:e6:d3:0b:90:8a:40:06:29:88:
         0a:52:ab:fb:03:48:ba:aa:df:54:b0:2e:19:7b:c1:75:9b:d4:
         1d:f9:06:be:0d:c4:60:ee:db:48:fc:ff:91:fd:bc:2e:de:12:
         a7:59:82:19
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdFnZxROdqlZHc8rGOl39PCxPHUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwOTVFMTJGMTcxODE3RERFNEVDMEI5MTIzMUNDMDA5
QUM2NDk2QzAeFw0yMzA0MjAxNDI3NTJaFw0yNDA0MTgxNDMyNTJaMDMxMTAvBgNV
BAMTKDczMTU4MjI0RDE5QTZBRTQ2NjE3ODY2QTgzMDk3RTNCRUExNTE0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9CpW0c5BZSLwUq3bQzCLJkys
fAVaF+sdM+eT+Lm0eDWkNPul0qASnsWr2YXHUzN7sBtbZZbIrNDUWoR1Ma48vNzH
zap8W+yA3Kwe/Cad8RuPKFRC6IiVF7/wWC1BBqtk0ISQZT9r264O69kAa813Ohg7
ROQ9wc5OEK/1lgSUb8Yg6s3v+3iD0xdSZEFyy7eVbQpvNEBG1nuKGk2e+NT1lxT1
BLjPwOZZWYKW6w5OVZad6EAKTFR2N0ZCkgu5qS+4PLry7fvXAEXGT7QAZNwG05D/
va5QaEb6pyCQn77oMnYpVn1Y9ieA+4e83z9wgtWMggGBwG7DntxwugStgX4bAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcxWCJNGaauRmF4Zqgwl+O+oVFNswHwYDVR0j
BBgwFoAUNQleEvFxgX3eTsC5EjHMAJrGSWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRy
QXUvMC8zNTA5NUUxMkYxNzE4MTdEREU0RUMwQjkxMjMxQ0MwMDlBQzY0OTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1MDk1RTEyRjE3MTgxN0RE
RTRFQzBCOTEyMzFDQzAwOUFDNjQ5NkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ3Y1VaNnljR01aNFhDbzlmM1F5ZHRKaVVHRmpwc3JveGNpdWZXWmZkckF1LzAv
MzIzODMwMzQzYTM0Mzc2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARH1DANBgkqhkiG9w0BAQsFAAOCAQEAzkqe5Cs/
OvBa5vlFe9TW/vYWo3UchdD/+CPzhKOlB+iWmQe4HfYtavJqekB6Evd8VCbagPDd
e0G3dslL2GmjKUsYz+3yIQ9TILKkotjpykHpbUhv5keVvhmfn3T85lCuIuQ3gXLL
sc3dRJmXFowhrvJm6CS3XV66HxL+2dkzpeDUljfD+UCAwMaiIvUUWy5ZycjlzLfg
rERoWNx2iTpHC0o/QoHwhn4YrgB1PwrdMSy/zJHMxiLruP8UfDrccIaErgT26KVM
GD02aKY19dqz5tMLkIpABimIClKr+wNIuqrfVLAuGXvBdZvUHfkGvg3EYO7bSPz/
kf28Lt4Sp1mCGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org