Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa
File:                     323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa (raw, json)
Hash identifier:          wVDYmNR5NsnSDtHZ8fHrw3M7hs64W3aVulnybYqgVnI=
Subject key identifier:   E2:10:CC:32:06:9A:76:BB:68:5F:BF:FB:1A:35:76:83:2A:29:E1:0F
Certificate issuer:       /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial:       0A4ECF1EE847F99380EF76674172D7F461E6AA1D
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa
Signing time:             Wed 22 Nov 2023 17:53:00 +0000
ROA not before:           Wed 22 Nov 2023 17:48:00 +0000
ROA not after:            Wed 20 Nov 2024 17:53:00 +0000
asID:                     268011
IP address blocks:        2804:5698:900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4e:cf:1e:e8:47:f9:93:80:ef:76:67:41:72:d7:f4:61:e6:aa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Validity
            Not Before: Nov 22 17:48:00 2023 GMT
            Not After : Nov 20 17:53:00 2024 GMT
        Subject: CN=E210CC32069A76BB685FBFFB1A3576832A29E10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:ec:c5:3d:4a:ed:9f:9a:04:cc:dd:0c:b9:
                    3a:64:4b:94:49:be:89:99:2e:5d:bc:d3:6c:07:b3:
                    c9:17:2e:32:c3:e3:8d:39:98:d3:06:d4:15:eb:7d:
                    9e:f8:79:25:af:2f:cb:20:7c:5c:2b:9d:b6:1f:4a:
                    2b:09:bb:12:27:cd:af:7a:ed:31:cf:e1:85:7b:c6:
                    bb:01:5b:1f:31:83:9b:80:bc:56:63:5f:1c:67:53:
                    97:ab:cc:32:66:cb:dc:11:30:ce:89:9a:5e:7e:ee:
                    48:3f:83:8c:c0:42:8b:f0:db:70:85:a9:ce:7d:d3:
                    37:4e:06:f5:dd:69:4d:b9:cc:32:3d:d1:4f:b8:c9:
                    1a:9e:5a:db:94:3f:43:5d:d9:bb:83:e1:c7:f1:a8:
                    b2:78:99:40:44:07:76:5d:2e:ce:58:00:1d:1c:f8:
                    a8:5a:03:27:30:0d:0a:e4:94:68:f4:c1:56:a8:44:
                    47:41:9c:f2:df:d3:e1:9d:50:b5:e0:4e:a5:57:56:
                    e2:5c:28:83:9f:21:25:44:b3:84:64:52:9e:09:b0:
                    5f:a6:e4:41:60:c7:f2:4b:39:a7:38:a9:63:d6:6c:
                    f3:38:15:c0:08:df:15:87:2e:b8:31:6e:d2:56:d3:
                    6d:e6:cd:81:e6:d7:ab:43:12:62:9d:89:5b:8a:1b:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:CC:32:06:9A:76:BB:68:5F:BF:FB:1A:35:76:83:2A:29:E1:0F
            X509v3 Authority Key Identifier:
                keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5698:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:3a:18:05:17:44:74:fa:c1:ab:45:7b:5b:72:8d:2c:0b:39:
         d9:39:33:b1:fb:f7:69:a7:71:a0:76:0f:5b:30:c9:69:b9:f2:
         c4:fe:ff:48:0c:10:a2:06:91:62:c1:2a:f6:9f:19:b6:08:60:
         15:a2:40:de:1d:e3:b5:ae:20:7e:b2:48:a2:c6:0c:93:ab:9d:
         75:50:98:45:9d:e7:46:c6:49:e3:01:06:cd:5b:1b:f8:7d:8b:
         51:e3:7c:48:5f:2d:8f:b8:2f:ac:8a:06:0b:69:d4:4d:e9:bc:
         be:e3:8f:98:ef:93:85:b6:6b:6c:ba:a2:a2:cf:a5:c7:9e:e4:
         1c:01:28:0b:60:4d:6d:9f:9c:c5:00:23:2a:8f:d4:6f:7a:a2:
         8b:21:b8:c5:41:f4:5f:8d:0d:a7:7f:52:7f:e9:94:a4:3c:a4:
         3d:d1:b5:03:e6:58:22:78:2b:0e:10:ca:43:5d:3a:8e:88:44:
         e4:6d:a3:04:78:22:d7:f0:67:81:17:d3:f8:5b:c7:18:d5:05:
         b5:b1:f4:a0:36:d2:ee:f1:81:20:69:0c:9a:47:37:e9:d6:aa:
         bc:53:7f:e3:bf:34:0b:04:38:e6:5e:3e:44:d3:9f:ee:2b:0f:
         9f:99:90:a7:10:79:bb:c5:60:84:19:c9:50:0d:21:95:d7:b2:
         fd:d2:7f:63
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUCk7PHuhH+ZOA73ZnQXLX9GHmqh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxNDQ1NUU1OTk1RUU3QzY3NEEzMUE2RTUxNDQyRTI5
Q0I2MEZCNTAeFw0yMzExMjIxNzQ4MDBaFw0yNDExMjAxNzUzMDBaMDMxMTAvBgNV
BAMTKEUyMTBDQzMyMDY5QTc2QkI2ODVGQkZGQjFBMzU3NjgzMkEyOUUxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOOzFPUrtn5oEzN0MuTpkS5RJ
vomZLl2802wHs8kXLjLD4405mNMG1BXrfZ74eSWvL8sgfFwrnbYfSisJuxInza96
7THP4YV7xrsBWx8xg5uAvFZjXxxnU5erzDJmy9wRMM6Jml5+7kg/g4zAQovw23CF
qc590zdOBvXdaU25zDI90U+4yRqeWtuUP0Nd2buD4cfxqLJ4mUBEB3ZdLs5YAB0c
+KhaAycwDQrklGj0wVaoREdBnPLf0+GdULXgTqVXVuJcKIOfISVEs4RkUp4JsF+m
5EFgx/JLOac4qWPWbPM4FcAI3xWHLrgxbtJW023mzYHm16tDEmKdiVuKG4KbAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU4hDMMgaadrtoX7/7GjV2gyop4Q8wHwYDVR0j
BBgwFoAUhBRFXlmV7nxnSjGm5RRC4py2D7UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0
LzAvODQxNDQ1NUU1OTk1RUU3QzY3NEEzMUE2RTUxNDQyRTI5Q0I2MEZCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84NDE0NDU1RTU5OTVFRTdDNjc0
QTMxQTZFNTE0NDJFMjlDQjYwRkI1LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84
QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0LzAvMzIz
ODMwMzQzYTM1MzYzOTM4M2EzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz
MjM2MzgzMDMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBFaYCTANBgkqhkiG9w0BAQsFAAOCAQEA
GzoYBRdEdPrBq0V7W3KNLAs52Tkzsfv3aadxoHYPWzDJabnyxP7/SAwQogaRYsEq
9p8ZtghgFaJA3h3jta4gfrJIosYMk6uddVCYRZ3nRsZJ4wEGzVsb+H2LUeN8SF8t
j7gvrIoGC2nUTem8vuOPmO+ThbZrbLqios+lx57kHAEoC2BNbZ+cxQAjKo/Ub3qi
iyG4xUH0X40Np39Sf+mUpDykPdG1A+ZYIngrDhDKQ106johE5G2jBHgi1/BngRfT
+FvHGNUFtbH0oDbS7vGBIGkMmkc36daqvFN/4780CwQ45l4+RNOf7isPn5mQpxB5
u8VghBnJUA0hldey/dJ/Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org