Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a636166653a3a2f34382d3438203d3e20323638373037.roa
File:                     323830343a353938343a636166653a3a2f34382d3438203d3e20323638373037.roa (raw, json)
Hash identifier:          l5EouHeBNNiHBE0eEVdDfcahTwDi19iCb15OD/dhHuU=
Subject key identifier:   A4:98:23:68:96:E7:58:06:3B:79:F7:E0:A2:E6:C9:FD:1E:F4:43:0B
Certificate issuer:       /CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
Certificate serial:       2967640FA1F3FBDD02F15B14A43F6050C212EC2D
Authority key identifier: CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a636166653a3a2f34382d3438203d3e20323638373037.roa
Signing time:             Thu 04 Apr 2024 00:32:44 +0000
ROA not before:           Thu 04 Apr 2024 00:27:44 +0000
ROA not after:            Thu 03 Apr 2025 00:32:44 +0000
asID:                     268707
IP address blocks:        2804:5984:cafe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:67:64:0f:a1:f3:fb:dd:02:f1:5b:14:a4:3f:60:50:c2:12:ec:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
        Validity
            Not Before: Apr  4 00:27:44 2024 GMT
            Not After : Apr  3 00:32:44 2025 GMT
        Subject: CN=A498236896E758063B79F7E0A2E6C9FD1EF4430B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:ff:12:83:72:44:7b:ed:00:0b:5f:ae:87:
                    a0:85:db:91:00:22:ce:2c:01:bf:47:11:2a:b9:23:
                    bf:6b:ae:0d:d7:b5:cc:2a:60:00:36:da:6a:be:6d:
                    2e:b9:a8:44:ac:ca:43:90:3c:83:47:b3:84:10:bf:
                    cc:6a:00:ee:0c:3e:2e:b6:2f:14:b3:d3:ec:1c:63:
                    3c:b1:3f:f6:eb:b1:da:b2:ea:db:ec:ff:61:07:4e:
                    a5:8e:cd:fc:dd:6e:91:68:41:e0:dc:9c:7b:a3:e8:
                    3a:00:06:54:c7:f8:47:45:04:a0:87:bb:d0:6a:77:
                    8b:fa:86:e1:7f:0b:8e:a9:9f:ae:0e:a5:d4:7d:10:
                    59:5e:2d:79:7c:f4:21:60:27:ab:87:a9:31:d2:fe:
                    04:79:3e:85:32:9c:3e:67:01:c8:52:cc:cc:b3:ea:
                    7f:5b:a3:9e:c9:11:7e:cf:21:83:8c:fd:46:31:3f:
                    8f:1a:6e:c8:3f:1a:43:2a:75:e1:d5:59:57:2e:fc:
                    3b:5c:7d:3e:f1:ee:ed:92:ea:e0:21:a2:c5:51:d0:
                    05:51:f4:b6:fa:77:8d:c4:21:45:57:b0:db:c0:cf:
                    62:22:ad:b9:29:22:9b:84:c8:c6:f8:45:c4:4c:dc:
                    c8:6b:79:5f:e9:9e:14:c6:6a:a0:c4:44:4f:09:fb:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:98:23:68:96:E7:58:06:3B:79:F7:E0:A2:E6:C9:FD:1E:F4:43:0B
            X509v3 Authority Key Identifier:
                keyid:CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a636166653a3a2f34382d3438203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:63:f0:f3:92:46:81:1e:4d:e7:09:12:57:c1:21:3a:6f:
         a0:a1:cb:da:ad:00:be:6a:0f:b3:d1:b6:ae:36:0d:58:38:bf:
         61:04:35:43:06:88:ed:64:46:8d:83:b8:12:bd:13:43:29:39:
         74:19:42:15:4d:bc:f3:2a:e5:0e:b5:47:22:a0:c1:36:69:82:
         5b:e7:6d:44:7f:df:2a:97:10:4a:0e:0a:2c:4b:be:2d:ca:41:
         94:2f:0a:fd:ce:c2:29:64:a1:e7:48:be:45:65:94:06:32:9b:
         43:9c:d7:c5:3a:34:c8:dd:28:b6:1d:9b:b2:81:13:c9:e1:9a:
         38:1a:5c:12:cb:cc:1b:ea:7d:03:e2:52:81:45:5a:ab:5e:a3:
         47:bc:db:75:11:b7:6f:94:a2:68:44:ec:c8:03:cf:c8:c0:0b:
         e1:7f:8a:f5:25:77:23:13:2c:8b:e0:b8:a0:46:f3:f9:26:e3:
         bb:bc:fe:2f:cd:9f:b4:c6:fa:17:ea:1a:2f:39:cc:a0:6b:77:
         6d:97:6a:5f:55:f6:b6:e7:71:ab:31:63:55:96:70:16:b4:63:
         8d:b6:42:9e:be:9f:a6:85:aa:99:a4:bd:d8:c8:ae:8d:1e:2b:
         77:7a:af:d6:04:cd:52:20:29:15:ca:d3:95:52:95:29:f3:97:
         4b:42:38:ca
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUKWdkD6Hz+90C8VsUpD9gUMIS7C0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M5NUQ2QjFEMkQwREJDMzhDN0U3QUFBQTM5NUQyMjI0
OUQ0OTFEQjAeFw0yNDA0MDQwMDI3NDRaFw0yNTA0MDMwMDMyNDRaMDMxMTAvBgNV
BAMTKEE0OTgyMzY4OTZFNzU4MDYzQjc5RjdFMEEyRTZDOUZEMUVGNDQzMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPv8Sg3JEe+0AC1+uh6CF25EA
Is4sAb9HESq5I79rrg3XtcwqYAA22mq+bS65qESsykOQPINHs4QQv8xqAO4MPi62
LxSz0+wcYzyxP/brsdqy6tvs/2EHTqWOzfzdbpFoQeDcnHuj6DoABlTH+EdFBKCH
u9Bqd4v6huF/C46pn64OpdR9EFleLXl89CFgJ6uHqTHS/gR5PoUynD5nAchSzMyz
6n9bo57JEX7PIYOM/UYxP48absg/GkMqdeHVWVcu/DtcfT7x7u2S6uAhosVR0AVR
9Lb6d43EIUVXsNvAz2IirbkpIpuEyMb4RcRM3MhreV/pnhTGaqDERE8J+2U5AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUpJgjaJbnWAY7effgoubJ/R70QwswHwYDVR0j
BBgwFoAUzJXWsdLQ28OMfnqqo5XSIknUkdswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMS9DQzk1RDZCMUQyRDBEQkMzOEM3RTdBQUFBMzk1RDIyMjQ5RDQ5MURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDOTVENkIxRDJEMERCQzM4
QzdFN0FBQUEzOTVEMjIyNDlENDkxREIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzEv
MzIzODMwMzQzYTM1MzkzODM0M2E2MzYxNjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEWYTK/jANBgkqhkiG9w0BAQsF
AAOCAQEAr+9j8POSRoEeTecJElfBITpvoKHL2q0AvmoPs9G2rjYNWDi/YQQ1QwaI
7WRGjYO4Er0TQyk5dBlCFU288yrlDrVHIqDBNmmCW+dtRH/fKpcQSg4KLEu+LcpB
lC8K/c7CKWSh50i+RWWUBjKbQ5zXxTo0yN0oth2bsoETyeGaOBpcEsvMG+p9A+JS
gUVaq16jR7zbdRG3b5SiaETsyAPPyMAL4X+K9SV3IxMsi+C4oEbz+Sbju7z+L82f
tMb6F+oaLznMoGt3bZdqX1X2tudxqzFjVZZwFrRjjbZCnr6fpoWqmaS92MiujR4r
d3qv1gTNUiApFcrTlVKVKfOXS0I4yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org