Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33332d3333203d3e20323638373836.roa
File:                     323830343a356161343a383030303a3a2f33332d3333203d3e20323638373836.roa (raw, json)
Hash identifier:          3YvN8HJatZ6CxL/jbaghy6Xd/rrwSETAA09MH11GjNU=
Subject key identifier:   B5:68:78:1B:EF:CD:6B:80:9C:C1:EC:38:B3:D5:55:C7:8A:74:F0:2A
Certificate issuer:       /CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Certificate serial:       4307B0B370DFF0C362F6EFE29BE0FA03244F5E92
Authority key identifier: 5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33332d3333203d3e20323638373836.roa
Signing time:             Fri 05 Jan 2024 20:10:33 +0000
ROA not before:           Fri 05 Jan 2024 20:05:33 +0000
ROA not after:            Fri 03 Jan 2025 20:10:33 +0000
asID:                     268786
IP address blocks:        2804:5aa4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:07:b0:b3:70:df:f0:c3:62:f6:ef:e2:9b:e0:fa:03:24:4f:5e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
        Validity
            Not Before: Jan  5 20:05:33 2024 GMT
            Not After : Jan  3 20:10:33 2025 GMT
        Subject: CN=B568781BEFCD6B809CC1EC38B3D555C78A74F02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:cc:ec:ad:ab:fc:49:24:d8:63:14:6d:10:
                    ae:8e:97:1e:23:ef:93:03:e2:4f:86:a2:11:c1:c9:
                    bf:14:54:32:c8:a4:b3:4c:60:5f:b8:b2:ad:b8:30:
                    dd:0f:54:d6:6a:b8:ea:6d:10:ce:19:fd:ce:a6:e5:
                    ac:64:6a:70:18:3e:da:1a:73:a5:54:03:66:d2:e6:
                    43:48:b2:c0:69:12:70:35:41:84:da:83:6e:a4:bd:
                    f6:b5:9c:53:9a:7c:73:39:f1:89:07:6c:96:da:48:
                    ba:53:e5:73:b4:14:e7:7b:c4:24:95:26:60:f8:79:
                    4e:61:92:3c:fa:f4:77:b8:e2:ef:e2:63:02:e5:e3:
                    2b:5d:78:83:dc:6c:8f:68:f8:c4:3e:9f:5c:9a:d5:
                    09:6a:21:25:73:d4:e3:5c:0a:b5:16:af:93:99:06:
                    6d:c3:35:0c:b8:b8:0f:2f:5a:ce:29:d0:a2:ad:17:
                    02:9d:81:0b:26:84:a9:cd:b5:b6:01:69:ea:3d:12:
                    34:b3:75:77:b0:b7:db:f3:6d:da:7d:1a:4b:e4:95:
                    e5:8e:92:f0:ec:94:f6:1c:e2:41:55:de:21:de:a0:
                    57:88:77:98:87:2e:1c:1f:3a:62:b3:ea:fc:74:fd:
                    95:af:64:b8:8f:1b:22:01:21:19:12:bc:f4:b6:89:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:68:78:1B:EF:CD:6B:80:9C:C1:EC:38:B3:D5:55:C7:8A:74:F0:2A
            X509v3 Authority Key Identifier:
                keyid:5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a383030303a3a2f33332d3333203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:94:4a:ba:d6:85:41:79:15:29:d7:f1:3a:28:04:4c:b2:
         ec:9d:bf:61:40:48:d6:44:9d:ef:f3:f1:f4:80:24:55:6f:1b:
         7c:7e:ff:f9:dc:ba:4c:a3:84:c7:3d:43:cb:80:e4:8f:b2:76:
         4b:e0:6e:83:2d:20:f3:dd:60:b9:b3:e7:80:3d:82:bc:16:fd:
         45:48:74:9b:7a:93:e6:fe:21:f2:00:87:c0:52:91:86:54:17:
         a2:9c:bb:0a:90:04:91:0e:0e:28:4c:10:73:d5:ac:04:9a:70:
         06:d6:2f:12:1b:c0:65:f1:5b:8b:d5:8b:91:d6:1c:2f:df:17:
         24:ef:5b:a8:9e:dc:2f:ea:aa:6b:7c:94:96:0c:2a:0d:8f:05:
         23:2b:24:bf:19:7d:16:81:00:d5:aa:f4:48:e3:1e:aa:2f:7a:
         a7:4f:2b:73:d9:cb:96:e7:55:37:66:40:a9:a0:e7:05:ee:3a:
         eb:94:d7:be:c4:7c:44:73:36:01:44:2e:c2:7e:fd:a6:7d:24:
         13:e0:51:e2:95:6e:f7:ed:df:bf:61:89:fe:bb:e1:6b:e2:86:
         94:06:84:fb:28:69:9d:df:a0:1e:f5:7a:cf:2a:23:65:62:a5:
         50:01:95:bb:07:f0:29:cc:c7:43:1e:da:88:cb:ee:e4:6f:48:
         39:aa:cc:9c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQwews3Df8MNi9u/im+D6AyRPXpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUIwRTM0QjI3NUM4NzZDNEI0M0YwMURDNzFEMjhCRTQz
OTZBRTQ3QTAeFw0yNDAxMDUyMDA1MzNaFw0yNTAxMDMyMDEwMzNaMDMxMTAvBgNV
BAMTKEI1Njg3ODFCRUZDRDZCODA5Q0MxRUMzOEIzRDU1NUM3OEE3NEYwMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Qszsrav8SSTYYxRtEK6Olx4j
75MD4k+GohHByb8UVDLIpLNMYF+4sq24MN0PVNZquOptEM4Z/c6m5axkanAYPtoa
c6VUA2bS5kNIssBpEnA1QYTag26kvfa1nFOafHM58YkHbJbaSLpT5XO0FOd7xCSV
JmD4eU5hkjz69He44u/iYwLl4ytdeIPcbI9o+MQ+n1ya1QlqISVz1ONcCrUWr5OZ
Bm3DNQy4uA8vWs4p0KKtFwKdgQsmhKnNtbYBaeo9EjSzdXewt9vzbdp9GkvkleWO
kvDslPYc4kFV3iHeoFeId5iHLhwfOmKz6vx0/ZWvZLiPGyIBIRkSvPS2iTzlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUtWh4G+/Na4Ccwew4s9VVx4p08CowHwYDVR0j
BBgwFoAUWw40snXIdsS0PwHccdKL5Dlq5HowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHgzcXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3
aDEvMC81QjBFMzRCMjc1Qzg3NkM0QjQzRjAxREM3MUQyOEJFNDM5NkFFNDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCMEUzNEIyNzVDODc2QzRC
NDNGMDFEQzcxRDI4QkU0Mzk2QUU0N0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzAv
MzIzODMwMzQzYTM1NjE2MTM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM3MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEWqSAMA0GCSqGSIb3DQEBCwUA
A4IBAQA+iJRKutaFQXkVKdfxOigETLLsnb9hQEjWRJ3v8/H0gCRVbxt8fv/53LpM
o4THPUPLgOSPsnZL4G6DLSDz3WC5s+eAPYK8Fv1FSHSbepPm/iHyAIfAUpGGVBei
nLsKkASRDg4oTBBz1awEmnAG1i8SG8Bl8VuL1YuR1hwv3xck71uontwv6qprfJSW
DCoNjwUjKyS/GX0WgQDVqvRI4x6qL3qnTytz2cuW51U3ZkCpoOcF7jrrlNe+xHxE
czYBRC7Cfv2mfSQT4FHilW737d+/YYn+u+Fr4oaUBoT7KGmd36Ae9XrPKiNlYqVQ
AZW7B/ApzMdDHtqIy+7kb0g5qsyc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org