Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
File:                     323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa (raw, json)
Hash identifier:          KkADamMBHpPjRqVx1+CEWdVkCgnXBbxmqtbKWSBj9co=
Subject key identifier:   55:50:D0:61:32:9A:F5:56:ED:CB:39:9C:45:B1:FD:F0:CA:94:15:BA
Certificate issuer:       /CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
Certificate serial:       6DE5A2708D7177B6BD1119298346216B63CA7E54
Authority key identifier: CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
Signing time:             Thu 04 Apr 2024 00:32:44 +0000
ROA not before:           Thu 04 Apr 2024 00:27:44 +0000
ROA not after:            Thu 03 Apr 2025 00:32:44 +0000
asID:                     268707
IP address blocks:        2804:5984:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:a2:70:8d:71:77:b6:bd:11:19:29:83:46:21:6b:63:ca:7e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
        Validity
            Not Before: Apr  4 00:27:44 2024 GMT
            Not After : Apr  3 00:32:44 2025 GMT
        Subject: CN=5550D061329AF556EDCB399C45B1FDF0CA9415BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:1c:6c:31:47:0a:9f:e3:93:87:a5:2b:72:
                    ab:44:8b:f0:2b:65:73:91:56:0c:f8:ae:ce:b1:70:
                    af:c9:80:8a:ee:e5:59:b9:25:fe:b5:e5:d7:3a:ee:
                    ff:b2:a8:06:bf:6c:f9:37:87:75:fe:3b:65:87:d1:
                    25:23:6c:ec:ba:6c:81:25:a8:11:e2:79:1e:07:4a:
                    50:19:f3:32:5a:83:2b:f9:09:d5:f9:96:8e:8e:62:
                    8e:33:70:51:9a:82:dc:6f:b4:85:ae:c7:02:d8:1b:
                    5f:2a:57:a4:08:b9:b4:3d:d8:d2:b2:29:2b:a4:1a:
                    d0:7b:d3:da:95:d7:a7:a8:de:df:20:72:0f:40:1d:
                    65:79:64:35:f8:c0:40:7d:77:53:2d:1f:c3:4a:2d:
                    a3:df:63:f6:1d:24:01:dd:d5:d2:cb:53:7f:80:55:
                    b4:b6:2c:9a:d8:31:93:79:ee:0c:e9:36:8b:57:b0:
                    d7:0f:08:ca:f4:96:32:14:e7:7f:b8:e4:39:49:ec:
                    bf:d7:ca:75:20:7f:7c:3c:9c:c9:27:bb:75:c7:a5:
                    0d:dc:a0:91:78:a1:3b:25:79:b5:64:aa:87:13:85:
                    82:bf:38:ed:39:de:64:e4:0c:98:4f:25:e7:2f:85:
                    94:ef:87:51:54:08:67:38:5f:b9:4d:8e:34:0c:dd:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:50:D0:61:32:9A:F5:56:ED:CB:39:9C:45:B1:FD:F0:CA:94:15:BA
            X509v3 Authority Key Identifier:
                keyid:CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:ca:9d:56:f3:0c:6a:ea:bb:b9:72:da:b5:ca:ad:39:fa:bf:
         39:91:19:cd:24:2f:d5:1b:41:f5:e7:59:43:91:58:d7:cf:af:
         92:10:2f:58:f8:b8:fd:a1:2e:03:a7:31:3e:f3:e0:91:c5:f9:
         ac:d8:8b:da:6d:64:af:81:72:64:0d:ca:07:25:d8:d7:96:e3:
         a9:01:c2:66:94:89:3f:8f:88:73:2e:4f:84:7a:d0:65:d0:29:
         dc:a3:9f:94:61:e4:66:42:27:2b:c7:db:87:7e:2f:d3:44:76:
         5a:0b:51:8e:03:79:aa:21:75:dd:bc:0f:28:c8:90:b9:4e:13:
         bb:d2:f2:59:cc:b8:f0:87:33:fe:21:99:ca:ce:65:76:79:40:
         20:8f:1f:ec:bd:df:97:5b:12:82:9b:c0:11:17:14:38:7d:ec:
         69:66:50:d1:ee:c4:f1:31:32:5e:d3:b8:26:20:16:59:7c:2b:
         97:dc:91:05:70:20:82:06:db:37:d4:af:12:a8:b4:33:ed:e5:
         bc:49:00:31:ad:c1:51:b8:1c:36:00:37:87:4d:41:34:a6:22:
         5d:33:6c:9a:7e:a4:44:1d:bf:05:f5:1f:8c:bb:de:22:1a:8f:
         69:68:67:a3:8f:14:d0:e0:3f:dc:4c:d5:61:e2:e8:cd:a5:9e:
         57:69:0e:a2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbeWicI1xd7a9ERkpg0Yha2PKflQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M5NUQ2QjFEMkQwREJDMzhDN0U3QUFBQTM5NUQyMjI0
OUQ0OTFEQjAeFw0yNDA0MDQwMDI3NDRaFw0yNTA0MDMwMDMyNDRaMDMxMTAvBgNV
BAMTKDU1NTBEMDYxMzI5QUY1NTZFRENCMzk5QzQ1QjFGREYwQ0E5NDE1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+khxsMUcKn+OTh6UrcqtEi/Ar
ZXORVgz4rs6xcK/JgIru5Vm5Jf615dc67v+yqAa/bPk3h3X+O2WH0SUjbOy6bIEl
qBHieR4HSlAZ8zJagyv5CdX5lo6OYo4zcFGagtxvtIWuxwLYG18qV6QIubQ92NKy
KSukGtB709qV16eo3t8gcg9AHWV5ZDX4wEB9d1MtH8NKLaPfY/YdJAHd1dLLU3+A
VbS2LJrYMZN57gzpNotXsNcPCMr0ljIU53+45DlJ7L/XynUgf3w8nMknu3XHpQ3c
oJF4oTslebVkqocThYK/OO053mTkDJhPJecvhZTvh1FUCGc4X7lNjjQM3eGZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUVVDQYTKa9VbtyzmcRbH98MqUFbowHwYDVR0j
BBgwFoAUzJXWsdLQ28OMfnqqo5XSIknUkdswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMS9DQzk1RDZCMUQyRDBEQkMzOEM3RTdBQUFBMzk1RDIyMjQ5RDQ5MURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDOTVENkIxRDJEMERCQzM4
QzdFN0FBQUEzOTVEMjIyNDlENDkxREIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzEv
MzIzODMwMzQzYTM1MzkzODM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEWYSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCXyp1W8wxq6ru5ctq1yq05+r85kRnNJC/VG0H151lDkVjXz6+SEC9Y+Lj9
oS4DpzE+8+CRxfms2IvabWSvgXJkDcoHJdjXluOpAcJmlIk/j4hzLk+EetBl0Cnc
o5+UYeRmQicrx9uHfi/TRHZaC1GOA3mqIXXdvA8oyJC5ThO70vJZzLjwhzP+IZnK
zmV2eUAgjx/svd+XWxKCm8ARFxQ4fexpZlDR7sTxMTJe07gmIBZZfCuX3JEFcCCC
Bts31K8SqLQz7eW8SQAxrcFRuBw2ADeHTUE0piJdM2yafqREHb8F9R+Mu94iGo9p
aGejjxTQ4D/cTNVh4ujNpZ5XaQ6i
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org