Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a313130313a3a2f34382d3438203d3e20323632353838.roa
File:                     323830343a323930343a313130313a3a2f34382d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          m8zM8EFHk9JkoACe4YYfhxBnCGwGcxliAK3zdsb5kEA=
Subject key identifier:   B4:73:E5:52:E0:04:07:A6:39:B8:6D:8B:04:22:4C:12:24:08:4B:32
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       12715E484C8FA206402CC12F978E19330DA389A1
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a313130313a3a2f34382d3438203d3e20323632353838.roa
Signing time:             Tue 12 Sep 2023 20:43:44 +0000
ROA not before:           Tue 12 Sep 2023 20:38:44 +0000
ROA not after:            Tue 10 Sep 2024 20:43:44 +0000
asID:                     262588
IP address blocks:        2804:2904:1101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:71:5e:48:4c:8f:a2:06:40:2c:c1:2f:97:8e:19:33:0d:a3:89:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Sep 12 20:38:44 2023 GMT
            Not After : Sep 10 20:43:44 2024 GMT
        Subject: CN=B473E552E00407A639B86D8B04224C1224084B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:4e:a8:44:ea:53:5d:2c:b2:03:df:b9:93:
                    da:72:b4:d2:70:dd:da:3b:e1:92:ee:fe:34:fc:b9:
                    02:fc:92:87:f0:37:cd:54:c0:8b:49:e8:a9:3a:e8:
                    09:d8:d2:56:ae:13:f7:79:6b:3b:9a:bc:d3:e9:95:
                    ca:cd:aa:9f:b2:e0:e1:ed:08:11:b1:52:9c:3d:1f:
                    b4:2e:4f:89:23:94:a0:e1:d6:d7:e1:d1:87:30:86:
                    68:c2:d6:77:74:43:91:f5:b1:97:ac:18:60:b9:c0:
                    02:be:6a:53:0a:89:74:73:32:b1:c1:5b:c1:91:d0:
                    dd:e7:be:e7:f4:4a:11:bf:6e:e6:d5:b4:66:f5:f6:
                    4a:69:e8:63:f3:97:cf:33:3e:f3:53:0d:b9:4a:09:
                    b3:92:73:40:3e:2e:37:60:33:d6:6c:5a:d9:f3:d7:
                    34:40:2b:38:c0:c3:50:12:63:5c:bc:a5:10:80:01:
                    b8:c7:42:cb:28:df:a5:ec:66:ce:e7:3d:e1:c1:f2:
                    dd:07:4b:60:b4:d6:14:45:95:f0:b4:93:a5:fa:a6:
                    b4:c2:c2:a1:2b:5b:21:84:8f:ba:0e:5a:19:a1:2f:
                    7a:16:68:1e:c6:78:75:39:be:15:c5:97:31:c4:87:
                    3e:f1:97:e5:64:7b:23:9a:f8:d5:79:93:4d:e4:1e:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:73:E5:52:E0:04:07:A6:39:B8:6D:8B:04:22:4C:12:24:08:4B:32
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a313130313a3a2f34382d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904:1101::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:01:0b:5e:35:02:2f:fe:08:6b:29:90:ec:f9:8b:c6:a3:0a:
         e8:d9:ff:99:90:9e:24:bd:38:c3:50:f7:92:58:7a:ac:58:b1:
         c4:41:7b:90:f6:86:36:3e:13:af:b3:ee:60:f9:f8:ee:7b:7f:
         21:7f:56:33:5d:af:89:cf:1c:b3:47:8f:27:ad:ae:55:d2:8a:
         d1:81:09:36:49:11:ac:d8:cb:37:ec:cb:b8:a6:2b:fe:3f:92:
         0b:22:b1:9f:42:ec:4d:d6:df:f2:c9:65:55:dc:6c:3e:06:f8:
         7f:62:1a:63:a9:ed:f0:2c:b7:99:8f:83:85:92:e9:21:2f:16:
         75:a1:59:41:0d:49:97:3c:1b:e8:e7:a5:c5:3b:6c:2a:4c:2a:
         bc:25:eb:55:f0:8b:ab:89:e9:08:cf:2d:c3:75:6b:97:1e:37:
         86:85:73:0b:21:20:c1:18:a0:49:e0:f6:70:74:46:26:43:bf:
         37:ef:bc:8e:cf:6d:9f:6e:9a:66:46:48:56:12:ee:7f:e0:10:
         03:d3:de:d0:66:c1:f9:1e:eb:9a:f5:40:9e:0e:ad:29:7c:46:
         2c:0a:ad:4b:2c:99:42:d8:c9:3d:4a:a0:a2:b6:54:31:57:93:
         26:b3:1e:8f:2f:bf:58:b2:50:10:00:0b:94:d4:51:8c:e1:6f:
         85:09:70:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEnFeSEyPogZALMEvl44ZMw2jiaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgz
NTQ2QTU3RDAeFw0yMzA5MTIyMDM4NDRaFw0yNDA5MTAyMDQzNDRaMDMxMTAvBgNV
BAMTKEI0NzNFNTUyRTAwNDA3QTYzOUI4NkQ4QjA0MjI0QzEyMjQwODRCMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVE6oROpTXSyyA9+5k9pytNJw
3do74ZLu/jT8uQL8kofwN81UwItJ6Kk66AnY0lauE/d5azuavNPplcrNqp+y4OHt
CBGxUpw9H7QuT4kjlKDh1tfh0YcwhmjC1nd0Q5H1sZesGGC5wAK+alMKiXRzMrHB
W8GR0N3nvuf0ShG/bubVtGb19kpp6GPzl88zPvNTDblKCbOSc0A+LjdgM9ZsWtnz
1zRAKzjAw1ASY1y8pRCAAbjHQsso36XsZs7nPeHB8t0HS2C01hRFlfC0k6X6prTC
wqErWyGEj7oOWhmhL3oWaB7GeHU5vhXFlzHEhz7xl+VkeyOa+NV5k03kHj4/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtHPlUuAEB6Y5uG2LBCJMEiQISzIwHwYDVR0j
BBgwFoAUXMAujik4r63qRnKJ1MeTWDVGpX0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB
LzAvNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgzNTQ2QTU3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0MwMkU4RTI5MzhBRkFERUE0
NjcyODlENEM3OTM1ODM1NDZBNTdELmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzAvMzIz
ODMwMzQzYTMyMzkzMDM0M2EzMTMxMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2Uy
MDMyMzYzMjM1MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEKQQRATANBgkqhkiG9w0BAQsFAAOC
AQEArwELXjUCL/4IaymQ7PmLxqMK6Nn/mZCeJL04w1D3klh6rFixxEF7kPaGNj4T
r7PuYPn47nt/IX9WM12vic8cs0ePJ62uVdKK0YEJNkkRrNjLN+zLuKYr/j+SCyKx
n0LsTdbf8sllVdxsPgb4f2IaY6nt8Cy3mY+DhZLpIS8WdaFZQQ1Jlzwb6OelxTts
KkwqvCXrVfCLq4npCM8tw3Vrlx43hoVzCyEgwRigSeD2cHRGJkO/N++8js9tn26a
ZkZIVhLuf+AQA9Pe0GbB+R7rmvVAng6tKXxGLAqtSyyZQtjJPUqgorZUMVeTJrMe
jy+/WLJQEAALlNRRjOFvhQlwkQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org