Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a383030303a3a2f33342d3334203d3e20323635343936.roa
File:                     323830343a333530383a383030303a3a2f33342d3334203d3e20323635343936.roa (raw, json)
Hash identifier:          t5gojqu7yqPfaUHz2JiL7H0ay+UrY43oSBmlRp5vEFs=
Subject key identifier:   45:CF:AA:64:58:99:F6:AF:95:8A:4D:13:79:9E:BC:EB:FF:E8:C5:9A
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       7AEBCAB30D92190E621E21CBED83EE5DF27CDBF4
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a383030303a3a2f33342d3334203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:39 +0000
ROA not before:           Mon 03 Apr 2023 10:51:39 +0000
ROA not after:            Mon 01 Apr 2024 10:56:39 +0000
asID:                     265496
IP address blocks:        2804:3508:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:eb:ca:b3:0d:92:19:0e:62:1e:21:cb:ed:83:ee:5d:f2:7c:db:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:39 2023 GMT
            Not After : Apr  1 10:56:39 2024 GMT
        Subject: CN=45CFAA645899F6AF958A4D13799EBCEBFFE8C59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:85:d4:6a:10:a7:04:41:b9:86:b7:53:47:
                    15:90:70:7c:30:17:f2:11:a8:48:94:87:8b:f7:c0:
                    12:32:ad:d5:2f:c1:5d:e1:6b:db:14:28:11:de:9b:
                    26:b5:94:a9:c4:e8:65:c7:06:a6:b4:be:6e:e1:c0:
                    8a:aa:6a:5b:3e:01:07:32:f1:c4:1c:3f:1a:27:f4:
                    1f:91:78:88:69:7f:04:1b:92:b6:2b:1b:25:44:e2:
                    ce:a2:be:e9:5e:ba:b3:71:d0:49:e2:4a:af:a9:f8:
                    e0:89:10:9c:f6:db:15:af:02:cb:83:84:4e:c4:36:
                    ed:c6:81:04:41:7d:cd:d1:8f:22:20:fe:ba:31:42:
                    60:96:b1:92:0c:fc:f9:38:59:b9:87:5b:d4:f8:7e:
                    c4:f2:73:6a:9c:ee:57:43:69:57:29:f0:44:9f:d0:
                    cd:6b:36:17:68:08:63:ab:c1:59:1c:0e:64:b6:b9:
                    c6:16:20:01:79:18:66:23:1e:c7:7c:32:dc:84:ae:
                    bc:cc:4b:74:4e:3a:e5:93:df:32:9f:ba:10:28:2a:
                    e2:25:14:2a:ed:fc:ac:54:5a:9b:bf:c8:f5:b5:0b:
                    02:5e:8d:aa:dd:5e:1b:8b:d0:b6:8c:9e:2d:f6:5c:
                    a6:57:33:b7:91:a4:46:45:90:ee:da:e0:ed:ac:4c:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:AA:64:58:99:F6:AF:95:8A:4D:13:79:9E:BC:EB:FF:E8:C5:9A
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a383030303a3a2f33342d3334203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:8d:16:18:ad:fa:1e:b4:f7:55:eb:57:9f:32:53:a9:8f:
         15:2d:2a:de:37:32:99:34:8b:c7:22:51:d0:d6:c2:ce:65:49:
         07:fb:66:0b:97:a1:5a:92:c8:eb:79:98:90:9e:3e:a9:10:a8:
         9e:8c:d4:95:99:4a:01:2c:f5:9e:c5:09:ec:48:43:8f:db:37:
         a5:77:6d:dd:ff:fe:83:cc:2b:e3:f6:0d:ae:eb:2b:79:ae:0a:
         4f:97:65:c9:25:1f:a0:54:93:6d:e7:66:05:6a:71:f4:5d:98:
         f5:ba:35:5a:0b:5c:de:2f:c1:2b:a8:57:bf:39:ed:fb:9e:f4:
         30:7b:20:e7:70:e2:1b:0c:57:ca:52:8f:e1:26:32:44:22:c5:
         58:02:03:3b:97:d9:fe:79:4d:13:31:72:45:c3:67:0b:ed:95:
         a6:5a:31:69:09:3a:05:f8:6d:f9:88:3e:44:e7:86:5c:df:c3:
         76:39:82:cf:9b:5d:1c:ab:21:69:fd:2a:33:4a:99:cd:6f:da:
         38:75:ce:11:34:5b:28:45:ca:b4:b7:ff:f7:4d:19:ff:4d:70:
         bf:25:dc:7d:1b:77:4b:49:04:50:ae:45:93:db:85:8a:cb:55:
         b9:a9:3d:5c:cd:eb:20:ae:11:62:3e:76:2a:cd:5f:21:92:f9:
         8e:05:a8:42
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeuvKsw2SGQ5iHiHL7YPuXfJ82/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ1M0UwRjM0Q0ZDODAyMEE4QkJBMkExN0NDREI3Q0FC
QzlDMDUxNzAeFw0yMzA0MDMxMDUxMzlaFw0yNDA0MDExMDU2MzlaMDMxMTAvBgNV
BAMTKDQ1Q0ZBQTY0NTg5OUY2QUY5NThBNEQxMzc5OUVCQ0VCRkZFOEM1OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmIXUahCnBEG5hrdTRxWQcHww
F/IRqEiUh4v3wBIyrdUvwV3ha9sUKBHemya1lKnE6GXHBqa0vm7hwIqqals+AQcy
8cQcPxon9B+ReIhpfwQbkrYrGyVE4s6ivuleurNx0EniSq+p+OCJEJz22xWvAsuD
hE7ENu3GgQRBfc3RjyIg/roxQmCWsZIM/Pk4WbmHW9T4fsTyc2qc7ldDaVcp8ESf
0M1rNhdoCGOrwVkcDmS2ucYWIAF5GGYjHsd8MtyErrzMS3ROOuWT3zKfuhAoKuIl
FCrt/KxUWpu/yPW1CwJejardXhuL0LaMni32XKZXM7eRpEZFkO7a4O2sTJ3dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURc+qZFiZ9q+Vik0TeZ686//oxZowHwYDVR0j
BBgwFoAUFFPg80z8gCCou6KhfM23yrycBRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTY4UWtLaWc1bzZtcjR1VFRhZFZ3SGVvNll0TUVzemtLOXhRY3FZQjFh
QXYvMC8xNDUzRTBGMzRDRkM4MDIwQThCQkEyQTE3Q0NEQjdDQUJDOUMwNTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0NTNFMEYzNENGQzgwMjBB
OEJCQTJBMTdDQ0RCN0NBQkM5QzA1MTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk2OFFrS2lnNW82bXI0dVRUYWRWd0hlbzZZdE1Fc3prSzl4UWNxWUIxYUF2LzAv
MzIzODMwMzQzYTMzMzUzMDM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENQiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBDfY0WGK36HrT3VetXnzJTqY8VLSreNzKZNIvHIlHQ1sLOZUkH+2YLl6Fa
ksjreZiQnj6pEKiejNSVmUoBLPWexQnsSEOP2zeld23d//6DzCvj9g2u6yt5rgpP
l2XJJR+gVJNt52YFanH0XZj1ujVaC1zeL8ErqFe/Oe37nvQweyDncOIbDFfKUo/h
JjJEIsVYAgM7l9n+eU0TMXJFw2cL7ZWmWjFpCToF+G35iD5E54Zc38N2OYLPm10c
qyFp/SozSpnNb9o4dc4RNFsoRcq0t//3TRn/TXC/Jdx9G3dLSQRQrkWT24WKy1W5
qT1czesgrhFiPnYqzV8hkvmOBahC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org