Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a623030303a3a2f33362d3336203d3e20323635343936.roa
File:                     323830343a333530383a623030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier:          5BXaINGJ9svTOJHPtYaXVtQ/VbAAlmHhB8uRkr59/2k=
Subject key identifier:   27:3C:84:1D:42:1C:E5:19:80:E7:31:CB:14:0C:9C:BE:E8:07:27:D6
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       23451F3820C8BE2E65E0F081501655D63DC844AF
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a623030303a3a2f33362d3336203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:38 +0000
ROA not before:           Mon 03 Apr 2023 10:51:38 +0000
ROA not after:            Mon 01 Apr 2024 10:56:38 +0000
asID:                     265496
IP address blocks:        2804:3508:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:45:1f:38:20:c8:be:2e:65:e0:f0:81:50:16:55:d6:3d:c8:44:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:38 2023 GMT
            Not After : Apr  1 10:56:38 2024 GMT
        Subject: CN=273C841D421CE51980E731CB140C9CBEE80727D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:79:9b:98:11:6c:14:fd:75:54:5f:08:d4:83:
                    4b:76:56:f6:37:69:c2:b9:a5:ca:31:6d:99:ff:6e:
                    86:84:4d:25:70:05:49:10:6d:d4:e0:bc:c6:39:98:
                    1e:d8:60:77:89:42:b3:8f:64:6e:1f:27:86:e7:61:
                    46:45:b9:2d:f4:d9:52:72:ac:a1:bb:83:65:3f:0e:
                    75:92:4b:b0:a5:c4:2a:8b:d2:99:98:5d:64:a4:f0:
                    46:f4:00:de:a6:72:6b:f3:80:09:67:1e:55:ea:49:
                    5d:c8:ed:b0:fd:c7:fa:35:ad:25:80:a2:55:4e:a5:
                    15:db:d7:c9:60:a7:da:e5:6f:15:94:21:0f:fa:04:
                    03:e6:f4:19:c8:75:c7:b1:c8:7d:4a:12:66:ff:66:
                    4f:3b:f3:08:26:24:e4:69:b7:91:5a:d2:75:91:b2:
                    78:72:83:2e:ff:a6:13:75:0e:6c:b5:b7:21:1a:a6:
                    8c:4a:43:a2:94:4f:0a:43:1f:80:de:6f:1b:08:e1:
                    b7:0c:ea:a0:69:90:f9:f6:c9:f6:f8:e9:f5:9b:ed:
                    e4:70:f0:40:a2:a0:35:dc:f8:a9:d5:81:6f:32:3f:
                    6f:13:9d:93:bc:35:bf:65:74:95:7e:00:76:4c:76:
                    b2:7e:a8:97:34:0e:70:7a:8d:4b:17:05:73:ef:bc:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3C:84:1D:42:1C:E5:19:80:E7:31:CB:14:0C:9C:BE:E8:07:27:D6
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a623030303a3a2f33362d3336203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:d3:06:34:3b:b2:4c:e6:02:40:fb:31:75:c2:3f:58:de:04:
         f0:3e:46:ed:73:52:b0:7e:8d:8f:fa:52:96:d4:f2:16:d5:af:
         09:88:d3:9f:34:d1:e0:5b:59:de:09:c5:54:77:51:1c:4d:6d:
         b1:ab:26:2e:a7:bc:53:53:b8:39:c2:20:9e:51:d1:34:9e:97:
         82:6f:88:80:5a:e8:eb:2f:fc:38:4c:a4:2d:9c:12:36:19:81:
         66:20:94:5b:cc:9a:56:e1:c3:2a:5f:48:1f:43:47:88:d3:96:
         cd:5d:46:f4:18:4e:2e:5b:fd:65:4c:4f:b9:5d:7e:54:16:f5:
         d5:31:e6:36:ca:86:c3:4e:da:82:a3:62:85:27:80:5c:88:bc:
         cf:cd:ad:74:89:60:13:60:18:f2:c8:f4:a0:03:b0:ea:12:23:
         56:4a:da:01:e0:2a:5c:ce:0c:cb:37:0e:2e:d8:9a:d6:19:b2:
         ff:a5:98:be:24:d9:da:74:5e:9c:04:25:ad:29:32:9a:3d:81:
         cb:91:0c:23:22:69:a0:40:96:ea:5f:da:7f:16:09:8f:eb:40:
         cc:28:a7:7c:4c:8e:c7:01:af:ef:71:54:18:f4:73:93:82:61:
         99:83:cd:b6:51:e7:15:2a:7d:18:1a:00:c5:53:88:67:40:48:
         70:d0:55:9a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUI0UfOCDIvi5l4PCBUBZV1j3IRK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ1M0UwRjM0Q0ZDODAyMEE4QkJBMkExN0NDREI3Q0FC
QzlDMDUxNzAeFw0yMzA0MDMxMDUxMzhaFw0yNDA0MDExMDU2MzhaMDMxMTAvBgNV
BAMTKDI3M0M4NDFENDIxQ0U1MTk4MEU3MzFDQjE0MEM5Q0JFRTgwNzI3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2eZuYEWwU/XVUXwjUg0t2VvY3
acK5pcoxbZn/boaETSVwBUkQbdTgvMY5mB7YYHeJQrOPZG4fJ4bnYUZFuS302VJy
rKG7g2U/DnWSS7ClxCqL0pmYXWSk8Eb0AN6mcmvzgAlnHlXqSV3I7bD9x/o1rSWA
olVOpRXb18lgp9rlbxWUIQ/6BAPm9BnIdcexyH1KEmb/Zk878wgmJORpt5Fa0nWR
snhygy7/phN1Dmy1tyEapoxKQ6KUTwpDH4DebxsI4bcM6qBpkPn2yfb46fWb7eRw
8ECioDXc+KnVgW8yP28TnZO8Nb9ldJV+AHZMdrJ+qJc0DnB6jUsXBXPvvNvVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJzyEHUIc5RmA5zHLFAycvugHJ9YwHwYDVR0j
BBgwFoAUFFPg80z8gCCou6KhfM23yrycBRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTY4UWtLaWc1bzZtcjR1VFRhZFZ3SGVvNll0TUVzemtLOXhRY3FZQjFh
QXYvMC8xNDUzRTBGMzRDRkM4MDIwQThCQkEyQTE3Q0NEQjdDQUJDOUMwNTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0NTNFMEYzNENGQzgwMjBB
OEJCQTJBMTdDQ0RCN0NBQkM5QzA1MTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk2OFFrS2lnNW82bXI0dVRUYWRWd0hlbzZZdE1Fc3prSzl4UWNxWUIxYUF2LzAv
MzIzODMwMzQzYTMzMzUzMDM4M2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNTM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgENQiwMA0GCSqGSIb3DQEBCwUA
A4IBAQAS0wY0O7JM5gJA+zF1wj9Y3gTwPkbtc1Kwfo2P+lKW1PIW1a8JiNOfNNHg
W1neCcVUd1EcTW2xqyYup7xTU7g5wiCeUdE0npeCb4iAWujrL/w4TKQtnBI2GYFm
IJRbzJpW4cMqX0gfQ0eI05bNXUb0GE4uW/1lTE+5XX5UFvXVMeY2yobDTtqCo2KF
J4BciLzPza10iWATYBjyyPSgA7DqEiNWStoB4CpczgzLNw4u2JrWGbL/pZi+JNna
dF6cBCWtKTKaPYHLkQwjImmgQJbqX9p/FgmP60DMKKd8TI7HAa/vcVQY9HOTgmGZ
g822UecVKn0YGgDFU4hnQEhw0FWa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org