Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a323030303a3a2f33362d3336203d3e20323730363834.roa
File:                     323830343a366663383a323030303a3a2f33362d3336203d3e20323730363834.roa (raw, json)
Hash identifier:          OpU76dF9VqIqaCyF//FHF/O2mq1CK71zkZzpJ4ShWk0=
Subject key identifier:   57:0D:B4:C8:0A:08:D0:1E:9E:CA:4F:18:C3:26:60:5D:0F:ED:CF:CD
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       1E46168CF5EEFBF9A28C101C883BC6E3080B60D6
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a323030303a3a2f33362d3336203d3e20323730363834.roa
Signing time:             Sat 03 Feb 2024 21:18:13 +0000
ROA not before:           Sat 03 Feb 2024 21:13:13 +0000
ROA not after:            Sat 01 Feb 2025 21:18:13 +0000
asID:                     270684
IP address blocks:        2804:6fc8:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:46:16:8c:f5:ee:fb:f9:a2:8c:10:1c:88:3b:c6:e3:08:0b:60:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 21:13:13 2024 GMT
            Not After : Feb  1 21:18:13 2025 GMT
        Subject: CN=570DB4C80A08D01E9ECA4F18C326605D0FEDCFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:92:8b:d0:26:89:99:45:a9:94:f3:c2:05:
                    0b:ca:ab:93:ee:58:31:cc:2d:0b:5d:8d:44:01:f0:
                    ae:d4:d6:db:c4:4d:8c:33:86:7b:06:47:b8:a3:87:
                    ce:da:7b:be:97:bd:bc:90:e2:08:54:b9:19:08:b1:
                    49:6b:be:90:cd:20:e3:52:79:37:9c:9a:da:e8:18:
                    79:93:65:10:61:c9:63:42:58:2d:07:d1:7f:01:ef:
                    11:b5:a9:8a:fe:c0:d8:58:f7:db:3f:2c:c8:14:6c:
                    99:28:d3:db:66:63:2f:58:e9:12:20:09:ca:fe:d0:
                    c4:60:56:4d:5c:0f:ea:b9:2b:97:90:4a:ed:61:6b:
                    d8:3d:51:a1:9d:67:a2:6b:3b:bd:99:bb:f7:e7:53:
                    a2:d4:fe:e3:7f:31:ba:81:a4:19:71:ac:73:e4:4c:
                    93:ab:1c:05:bb:be:b2:c1:c4:33:d6:53:38:20:41:
                    bf:8b:57:79:e1:e1:89:f7:c0:4b:44:72:fd:5f:95:
                    35:25:31:b6:85:42:af:64:06:70:ac:9f:85:4e:25:
                    9c:2a:fe:43:9b:e6:e5:08:5d:c1:db:5c:d7:93:13:
                    37:bb:d7:ee:6a:68:72:56:73:85:0d:eb:47:a6:bb:
                    a0:9b:45:be:9d:08:bc:40:4c:f8:ad:87:3e:6c:e8:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0D:B4:C8:0A:08:D0:1E:9E:CA:4F:18:C3:26:60:5D:0F:ED:CF:CD
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a323030303a3a2f33362d3336203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         db:d8:40:21:b7:fb:6b:51:a0:d4:12:17:b6:9c:04:c8:57:38:
         37:b4:bc:98:ab:53:16:fc:52:63:57:1b:05:bc:ef:0f:97:b7:
         34:f5:66:e3:91:3b:93:81:d7:b4:5e:31:32:77:cd:9a:5b:e6:
         41:a4:66:c3:47:d7:c1:ca:e5:f0:86:b2:96:a9:b2:28:78:33:
         66:94:80:46:c5:e2:ac:aa:5a:e4:9a:0c:42:c6:bb:d9:0d:a0:
         d0:28:d7:91:85:cd:d5:5f:61:29:09:81:47:cf:3a:38:fb:b3:
         af:06:4b:08:af:32:a6:ad:cc:e0:91:ae:0e:68:a9:1f:90:d2:
         f2:81:4b:20:f6:39:cf:eb:72:c5:76:6e:ed:7b:74:16:ee:89:
         a8:b2:d4:cc:08:1e:bf:0c:10:2a:08:e1:ee:76:cd:28:d0:96:
         a2:0d:97:17:8c:04:f4:0f:1d:ff:61:ed:f2:75:7b:64:31:93:
         9b:7c:70:8f:ed:66:ad:0c:0b:2a:e6:54:f2:0f:00:2f:5e:5e:
         56:0f:ef:dc:f8:f1:e1:79:ac:a3:93:f0:31:4f:ba:03:c6:fb:
         24:4c:7d:e6:dd:4c:46:d6:ee:97:4b:91:9b:90:9d:74:77:40:
         a6:e5:88:34:05:ad:fb:71:f3:dc:35:26:b9:d6:d5:d2:4d:ae:
         d7:8e:af:3a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHkYWjPXu+/mijBAciDvG4wgLYNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJBQzdCRUZCRkQ0RTU3MjY3ODczMjkxQUE5QTc0RTc5
RTgyQjMxQjAeFw0yNDAyMDMyMTEzMTNaFw0yNTAyMDEyMTE4MTNaMDMxMTAvBgNV
BAMTKDU3MERCNEM4MEEwOEQwMUU5RUNBNEYxOEMzMjY2MDVEMEZFRENGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0D5KL0CaJmUWplPPCBQvKq5Pu
WDHMLQtdjUQB8K7U1tvETYwzhnsGR7ijh87ae76XvbyQ4ghUuRkIsUlrvpDNIONS
eTecmtroGHmTZRBhyWNCWC0H0X8B7xG1qYr+wNhY99s/LMgUbJko09tmYy9Y6RIg
Ccr+0MRgVk1cD+q5K5eQSu1ha9g9UaGdZ6JrO72Zu/fnU6LU/uN/MbqBpBlxrHPk
TJOrHAW7vrLBxDPWUzggQb+LV3nh4Yn3wEtEcv1flTUlMbaFQq9kBnCsn4VOJZwq
/kOb5uUIXcHbXNeTEze71+5qaHJWc4UN60emu6CbRb6dCLxATPithz5s6DQDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUVw20yAoI0B6eyk8YwyZgXQ/tz80wHwYDVR0j
BBgwFoAUUqx777/U5XJnhzKRqpp0556CsxswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1b2NMUXBZQnpp
NnYvMC81MkFDN0JFRkJGRDRFNTcyNjc4NzMyOTFBQTlBNzRFNzlFODJCMzFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyQUM3QkVGQkZENEU1NzI2
Nzg3MzI5MUFBOUE3NEU3OUU4MkIzMUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZYXE0dVRRS1F6TGR1eXh0UnVxbnBmVDJRd0J3TjJjNW9jTFFwWUJ6aTZ2LzAv
MzIzODMwMzQzYTM2NjY2MzM4M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEb8ggMA0GCSqGSIb3DQEBCwUA
A4IBAQDb2EAht/trUaDUEhe2nATIVzg3tLyYq1MW/FJjVxsFvO8Pl7c09WbjkTuT
gde0XjEyd82aW+ZBpGbDR9fByuXwhrKWqbIoeDNmlIBGxeKsqlrkmgxCxrvZDaDQ
KNeRhc3VX2EpCYFHzzo4+7OvBksIrzKmrczgka4OaKkfkNLygUsg9jnP63LFdm7t
e3QW7omostTMCB6/DBAqCOHuds0o0JaiDZcXjAT0Dx3/Ye3ydXtkMZObfHCP7Wat
DAsq5lTyDwAvXl5WD+/c+PHheayjk/AxT7oDxvskTH3m3UxG1u6XS5GbkJ10d0Cm
5Yg0Ba37cfPcNSa51tXSTa7Xjq86
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org