Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a636164653a3a2f34382d3438203d3e20323638373037.roa
File:                     323830343a353938343a636164653a3a2f34382d3438203d3e20323638373037.roa (raw, json)
Hash identifier:          MklDFgFsI346unL75YnabfNZvuN4DuUNyUfFZySD7BM=
Subject key identifier:   1C:F1:68:91:F2:49:D3:74:8A:07:B0:78:AA:F3:1B:95:19:0E:00:E8
Certificate issuer:       /CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
Certificate serial:       4C56F09F497AB393F6D33479B409A7BAFCCB6954
Authority key identifier: CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a636164653a3a2f34382d3438203d3e20323638373037.roa
Signing time:             Thu 04 Apr 2024 00:32:44 +0000
ROA not before:           Thu 04 Apr 2024 00:27:44 +0000
ROA not after:            Thu 03 Apr 2025 00:32:44 +0000
asID:                     268707
IP address blocks:        2804:5984:cade::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:56:f0:9f:49:7a:b3:93:f6:d3:34:79:b4:09:a7:ba:fc:cb:69:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
        Validity
            Not Before: Apr  4 00:27:44 2024 GMT
            Not After : Apr  3 00:32:44 2025 GMT
        Subject: CN=1CF16891F249D3748A07B078AAF31B95190E00E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:00:9a:95:87:31:8d:31:d3:62:74:9a:20:
                    58:ac:4a:57:62:6c:fe:13:f7:9f:90:5e:b2:23:a6:
                    5d:b9:11:86:3b:c6:bf:65:58:02:fa:c5:5b:96:e0:
                    4f:e2:6d:34:5b:fd:55:db:d0:1a:96:df:1f:3c:5c:
                    fa:23:e3:25:d8:bf:2b:c1:f1:66:41:34:d9:8e:99:
                    15:f0:0b:95:4e:1e:5e:48:33:8a:3b:a2:b5:5d:32:
                    c9:af:fe:cc:b5:13:a7:1a:36:62:1e:6c:8f:d9:86:
                    c8:4c:4d:f1:9c:66:0c:33:23:f1:a5:9d:ae:4e:c4:
                    5e:b7:79:98:2c:8d:62:a7:71:b6:05:e2:4c:5d:42:
                    30:8b:c7:12:fa:31:e1:19:d9:d4:a3:e1:84:58:9e:
                    13:1c:73:b8:a4:3f:fc:2a:12:ee:9b:89:5c:99:8a:
                    82:ea:31:de:2e:41:3d:6d:89:ee:b5:e8:85:a1:7e:
                    23:1e:a0:b3:5c:ef:0f:52:46:fb:af:ea:e2:a4:06:
                    d4:75:1c:59:5c:79:1d:a8:fd:aa:0d:ed:b2:3a:8c:
                    df:b1:ef:7d:e7:82:26:12:3e:10:56:9c:8f:da:0e:
                    fd:8a:58:92:fd:d0:6e:38:8f:19:e3:d8:2a:72:21:
                    75:9e:81:66:e2:7a:c4:76:ac:6c:a4:4e:50:48:44:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F1:68:91:F2:49:D3:74:8A:07:B0:78:AA:F3:1B:95:19:0E:00:E8
            X509v3 Authority Key Identifier:
                keyid:CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a636164653a3a2f34382d3438203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:cade::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:4f:d8:4a:00:60:a6:dc:8d:bc:f7:ce:13:c4:fa:9b:42:4a:
         b3:e7:7b:c1:0f:67:a7:29:f1:c5:f0:b3:8f:ac:65:cf:cd:c7:
         c0:15:94:42:b7:f9:93:1d:3a:33:ce:4f:84:30:f3:f7:eb:b5:
         c7:03:0e:b5:fc:82:7c:8f:c2:6f:43:1e:6b:a3:c6:c9:34:0e:
         50:e7:4b:6c:d2:bf:ee:4d:1a:ea:11:f3:ae:4b:ac:3e:1c:38:
         96:80:62:e0:7e:04:bd:4a:78:6e:e9:b6:f5:c7:a5:55:3b:3b:
         15:54:89:3b:12:ad:9c:c1:d5:13:f6:ae:fe:b1:27:ad:04:a1:
         e9:d9:56:1d:ca:5e:6d:11:65:52:ea:4c:4c:e5:96:b8:81:a8:
         f4:c5:cf:2b:5d:95:43:ee:75:45:8a:0c:37:04:a5:1b:99:5a:
         96:d8:98:e3:16:89:20:38:33:cd:81:c9:26:fe:10:db:8b:bf:
         e5:ce:f7:e7:ac:65:cd:c3:97:64:a6:63:d5:6d:71:2e:f5:36:
         9a:86:53:eb:e4:1d:f3:ca:8a:7b:a1:15:38:2b:9a:b3:1d:19:
         40:e9:d9:46:bc:07:b3:c3:f3:d7:af:9f:a8:81:7f:d8:e1:ad:
         13:ba:bd:56:6c:71:18:9c:be:62:64:4a:9a:ed:d2:7f:b7:5a:
         30:82:be:cf
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUTFbwn0l6s5P20zR5tAmnuvzLaVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M5NUQ2QjFEMkQwREJDMzhDN0U3QUFBQTM5NUQyMjI0
OUQ0OTFEQjAeFw0yNDA0MDQwMDI3NDRaFw0yNTA0MDMwMDMyNDRaMDMxMTAvBgNV
BAMTKDFDRjE2ODkxRjI0OUQzNzQ4QTA3QjA3OEFBRjMxQjk1MTkwRTAwRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFgCalYcxjTHTYnSaIFisSldi
bP4T95+QXrIjpl25EYY7xr9lWAL6xVuW4E/ibTRb/VXb0BqW3x88XPoj4yXYvyvB
8WZBNNmOmRXwC5VOHl5IM4o7orVdMsmv/sy1E6caNmIebI/ZhshMTfGcZgwzI/Gl
na5OxF63eZgsjWKncbYF4kxdQjCLxxL6MeEZ2dSj4YRYnhMcc7ikP/wqEu6biVyZ
ioLqMd4uQT1tie616IWhfiMeoLNc7w9SRvuv6uKkBtR1HFlceR2o/aoN7bI6jN+x
733ngiYSPhBWnI/aDv2KWJL90G44jxnj2CpyIXWegWbiesR2rGykTlBIRJczAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUHPFokfJJ03SKB7B4qvMblRkOAOgwHwYDVR0j
BBgwFoAUzJXWsdLQ28OMfnqqo5XSIknUkdswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMS9DQzk1RDZCMUQyRDBEQkMzOEM3RTdBQUFBMzk1RDIyMjQ5RDQ5MURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDOTVENkIxRDJEMERCQzM4
QzdFN0FBQUEzOTVEMjIyNDlENDkxREIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzEv
MzIzODMwMzQzYTM1MzkzODM0M2E2MzYxNjQ2NTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEWYTK3jANBgkqhkiG9w0BAQsF
AAOCAQEAz0/YSgBgptyNvPfOE8T6m0JKs+d7wQ9npynxxfCzj6xlz83HwBWUQrf5
kx06M85PhDDz9+u1xwMOtfyCfI/Cb0Mea6PGyTQOUOdLbNK/7k0a6hHzrkusPhw4
loBi4H4EvUp4bum29celVTs7FVSJOxKtnMHVE/au/rEnrQSh6dlWHcpebRFlUupM
TOWWuIGo9MXPK12VQ+51RYoMNwSlG5laltiY4xaJIDgzzYHJJv4Q24u/5c7356xl
zcOXZKZj1W1xLvU2moZT6+Qd88qKe6EVOCuasx0ZQOnZRrwHs8Pz16+fqIF/2OGt
E7q9VmxxGJy+YmRKmu3Sf7daMIK+zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org