Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a343030303a3a2f33342d3334203d3e203533313138.roa
File:                     323830343a3266343a343030303a3a2f33342d3334203d3e203533313138.roa (raw, json)
Hash identifier:          r56H/tXuqPpzdPjoQ+S69x8ZoBjvUp+JaeJbUlMFBfE=
Subject key identifier:   CC:F4:17:58:4B:6D:C9:D5:1B:54:A8:64:30:5E:F1:04:5D:60:8C:80
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       72E268434DDD8FCA08EE9F8A0A2F1C508728D451
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a343030303a3a2f33342d3334203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:10:03 +0000
ROA not before:           Thu 27 Jul 2023 13:05:03 +0000
ROA not after:            Thu 25 Jul 2024 13:10:03 +0000
asID:                     53118
IP address blocks:        2804:2f4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e2:68:43:4d:dd:8f:ca:08:ee:9f:8a:0a:2f:1c:50:87:28:d4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:05:03 2023 GMT
            Not After : Jul 25 13:10:03 2024 GMT
        Subject: CN=CCF417584B6DC9D51B54A864305EF1045D608C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7b:8b:36:0b:24:6f:b4:d8:25:34:3e:a4:5a:
                    b9:f0:90:49:ba:d8:39:e1:4d:1f:89:c0:43:c9:f6:
                    57:e0:d3:0d:6d:29:a3:bc:4e:32:95:02:0c:fe:6a:
                    d6:09:e0:90:e5:c2:7c:40:ca:60:bc:bb:4c:99:d1:
                    22:2a:0a:a0:62:2b:8d:f6:dc:50:ef:35:47:b4:f8:
                    51:a0:d9:d4:82:db:63:21:22:04:e4:5a:d7:e3:38:
                    79:5f:93:7d:71:e7:d8:81:35:da:a8:e4:9e:3e:4f:
                    52:0d:2a:a7:f0:1c:cf:79:48:91:bf:a2:12:7c:fd:
                    dd:85:fc:24:a8:dd:60:da:24:90:ff:42:9f:29:69:
                    5f:e4:88:45:fb:a0:3a:db:d4:72:6e:7f:97:de:eb:
                    6c:8d:e4:a8:1c:52:00:76:7a:65:04:3b:8a:c3:27:
                    2b:50:99:20:65:d8:05:2a:54:ca:52:6d:59:80:12:
                    6d:17:08:3b:c4:6d:b2:03:34:38:ee:00:b7:09:e4:
                    88:04:f4:d7:62:e9:44:43:75:3b:0e:c5:88:d8:9e:
                    06:3a:a5:07:c6:f6:27:60:52:85:01:4a:e0:c1:d5:
                    4b:83:f5:ae:2a:06:97:07:84:51:a3:a2:7d:bc:8d:
                    bb:1a:5c:88:25:4e:74:94:6a:23:36:39:eb:25:56:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F4:17:58:4B:6D:C9:D5:1B:54:A8:64:30:5E:F1:04:5D:60:8C:80
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a343030303a3a2f33342d3334203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c7:50:c2:b3:7c:94:e6:64:ac:33:81:d0:49:65:1a:b5:da:97:
         d3:6a:dd:79:eb:cd:ec:c2:29:21:3d:c7:58:83:29:dd:da:60:
         e7:e0:81:c9:6c:67:9d:6d:c6:44:9e:b1:41:e7:5f:0f:31:57:
         84:93:37:bc:b4:0f:8e:f6:83:c1:5b:53:24:51:f6:cc:5a:f0:
         3a:8a:49:52:c9:b0:3c:5c:97:af:d7:e0:05:d0:c5:ab:e9:69:
         d6:e8:eb:59:d7:14:55:5b:d1:73:cf:17:2d:39:eb:c4:a7:e9:
         ff:63:99:08:5a:bb:55:7a:3f:94:2d:4d:85:76:1f:a9:5c:50:
         d9:07:78:63:0b:4a:ba:96:de:01:e7:72:b8:c5:70:df:c2:b7:
         f0:f8:a4:f7:b1:ee:25:70:1f:fc:f5:de:51:40:04:d3:f8:fd:
         8b:d1:01:00:76:e1:a2:8e:80:b3:9b:65:79:05:ec:bd:05:18:
         b2:45:42:42:51:b4:84:01:cc:14:2c:ac:89:04:bf:a9:d6:13:
         58:89:53:8c:b3:a1:61:cc:66:d0:40:4d:38:1e:c6:e3:21:4a:
         14:4a:56:c0:a7:7b:10:e4:e1:b6:9e:76:50:b6:50:23:dd:4c:
         fa:1d:0e:36:84:a3:39:4b:1b:53:7f:5f:00:69:88:25:b5:c2:
         ca:76:ed:db
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUcuJoQ03dj8oI7p+KCi8cUIco1FEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxMzA1MDNaFw0yNDA3MjUxMzEwMDNaMDMxMTAvBgNV
BAMTKENDRjQxNzU4NEI2REM5RDUxQjU0QTg2NDMwNUVGMTA0NUQ2MDhDODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDce4s2CyRvtNglND6kWrnwkEm6
2DnhTR+JwEPJ9lfg0w1tKaO8TjKVAgz+atYJ4JDlwnxAymC8u0yZ0SIqCqBiK432
3FDvNUe0+FGg2dSC22MhIgTkWtfjOHlfk31x59iBNdqo5J4+T1INKqfwHM95SJG/
ohJ8/d2F/CSo3WDaJJD/Qp8paV/kiEX7oDrb1HJuf5fe62yN5KgcUgB2emUEO4rD
JytQmSBl2AUqVMpSbVmAEm0XCDvEbbIDNDjuALcJ5IgE9Ndi6URDdTsOxYjYngY6
pQfG9idgUoUBSuDB1UuD9a4qBpcHhFGjon28jbsaXIglTnSUaiM2OeslVmxDAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUzPQXWEttydUbVKhkMF7xBF1gjIAwHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzIzODMwMzQzYTMyNjYzNDNhMzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzNTMzMzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKAQC9EAwDQYJKoZIhvcNAQELBQADggEB
AMdQwrN8lOZkrDOB0EllGrXal9Nq3XnrzezCKSE9x1iDKd3aYOfggclsZ51txkSe
sUHnXw8xV4STN7y0D472g8FbUyRR9sxa8DqKSVLJsDxcl6/X4AXQxavpadbo61nX
FFVb0XPPFy0568Sn6f9jmQhau1V6P5QtTYV2H6lcUNkHeGMLSrqW3gHncrjFcN/C
t/D4pPex7iVwH/z13lFABNP4/YvRAQB24aKOgLObZXkF7L0FGLJFQkJRtIQBzBQs
rIkEv6nWE1iJU4yzoWHMZtBATTgexuMhShRKVsCnexDk4baedlC2UCPdTPodDjaE
ozlLG1N/XwBpiCW1wsp27ds=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org