Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/323830343a353864633a633030303a3a2f33342d3334203d3e20323638313534.roa
File:                     323830343a353864633a633030303a3a2f33342d3334203d3e20323638313534.roa (raw, json)
Hash identifier:          P0bHhStk1xGZaLBAL+ONolczvwVpr49D3FvZ5C0hKHY=
Subject key identifier:   14:AF:15:D8:7D:7C:76:41:1B:91:2C:CF:6D:FF:CC:9D:87:22:BD:67
Certificate issuer:       /CN=18A43826A65928B70C1A033867FABC5F6E4207C0
Certificate serial:       0FF74C873550AC9ED2B2079B98444C778C5F9773
Authority key identifier: 18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/323830343a353864633a633030303a3a2f33342d3334203d3e20323638313534.roa
Signing time:             Sat 18 Mar 2023 05:51:21 +0000
ROA not before:           Sat 18 Mar 2023 05:46:21 +0000
ROA not after:            Sat 16 Mar 2024 05:51:21 +0000
asID:                     268154
IP address blocks:        2804:58dc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f7:4c:87:35:50:ac:9e:d2:b2:07:9b:98:44:4c:77:8c:5f:97:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A43826A65928B70C1A033867FABC5F6E4207C0
        Validity
            Not Before: Mar 18 05:46:21 2023 GMT
            Not After : Mar 16 05:51:21 2024 GMT
        Subject: CN=14AF15D87D7C76411B912CCF6DFFCC9D8722BD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:90:2d:34:fe:f6:04:96:b9:a1:cb:ae:6c:
                    8d:fc:30:50:41:19:c6:de:70:f0:8a:98:33:a4:9b:
                    a9:0e:ab:f0:41:eb:91:b4:a4:5d:2d:1b:e6:2e:06:
                    c8:ed:4f:f8:61:6d:3d:a4:3e:59:fd:79:18:62:b6:
                    04:8c:e5:d6:c5:83:a0:e9:b4:77:90:ae:6b:f3:dc:
                    7f:3d:15:6a:d6:74:f3:37:78:09:24:5a:5f:96:74:
                    07:fb:f7:66:ea:9b:91:02:76:44:34:24:e1:a2:eb:
                    9e:d7:c6:9a:21:d2:2a:83:a7:9c:2b:7e:de:2c:83:
                    06:8b:40:57:24:5c:80:3e:4e:b7:67:ee:e2:cd:8b:
                    0a:94:81:a9:9f:82:c7:f5:2c:54:dc:a5:57:04:ac:
                    28:3c:30:28:c9:d3:ac:40:88:53:19:94:ab:fc:3c:
                    7d:65:f3:7c:5c:c4:1d:08:c3:8c:95:19:03:4e:c5:
                    fd:55:76:e4:72:c1:11:2f:77:f4:07:0e:39:cc:c3:
                    7f:89:d9:7b:fd:e4:a7:58:89:3c:91:f3:5f:63:e5:
                    89:12:48:2c:0d:e6:0d:a0:1a:5d:79:6d:59:ae:a4:
                    60:22:4d:91:0d:31:d9:37:53:da:a4:74:00:d4:8f:
                    12:c5:cf:fc:3a:90:1b:b1:36:72:1f:7d:c5:97:36:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:15:D8:7D:7C:76:41:1B:91:2C:CF:6D:FF:CC:9D:87:22:BD:67
            X509v3 Authority Key Identifier:
                keyid:18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/18A43826A65928B70C1A033867FABC5F6E4207C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/323830343a353864633a633030303a3a2f33342d3334203d3e20323638313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58dc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:1a:b1:e9:14:0b:f4:55:28:02:a8:0c:49:26:37:8d:7c:de:
         e0:bc:78:29:54:41:be:2e:6e:3f:7e:ec:ed:e1:ce:5a:00:a8:
         fe:50:6e:07:e0:ea:da:7b:f4:49:b0:17:24:7b:92:e3:55:1c:
         d3:95:c0:a8:67:4c:a9:58:0e:80:84:a1:76:76:00:c5:28:12:
         4c:ec:90:0a:9c:b2:d6:c8:8e:54:84:ad:c3:89:37:8d:20:d5:
         da:70:6b:3e:24:c9:9f:dc:56:9e:9d:8d:be:e2:9d:ae:9b:85:
         24:64:d3:1c:5a:35:f3:fa:93:f4:7c:fc:7a:09:84:96:e0:e3:
         56:1e:88:1e:51:57:bc:60:95:42:d6:ce:2b:7a:e0:2a:54:63:
         36:c6:83:c3:d4:b4:69:df:22:07:12:10:af:51:d2:1b:30:9e:
         2d:7e:a1:d0:ef:d4:56:e8:50:28:b1:49:22:11:c9:8f:d8:bc:
         e1:15:a8:78:63:92:73:4f:34:b2:8e:0c:41:ba:13:f8:be:e2:
         4a:34:df:61:88:dd:b4:22:b0:63:46:47:4b:d0:d9:33:ff:21:
         c5:4a:2f:40:e4:d9:d4:31:3b:f1:86:98:ba:cd:bc:2c:c5:34:
         9b:4f:41:e4:50:fb:19:1d:d6:05:3e:01:07:3c:da:fe:6d:79:
         bf:2a:20:c6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUD/dMhzVQrJ7SsgebmERMd4xfl3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThBNDM4MjZBNjU5MjhCNzBDMUEwMzM4NjdGQUJDNUY2
RTQyMDdDMDAeFw0yMzAzMTgwNTQ2MjFaFw0yNDAzMTYwNTUxMjFaMDMxMTAvBgNV
BAMTKDE0QUYxNUQ4N0Q3Qzc2NDExQjkxMkNDRjZERkZDQzlEODcyMkJENjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtZAtNP72BJa5ocuubI38MFBB
GcbecPCKmDOkm6kOq/BB65G0pF0tG+YuBsjtT/hhbT2kPln9eRhitgSM5dbFg6Dp
tHeQrmvz3H89FWrWdPM3eAkkWl+WdAf792bqm5ECdkQ0JOGi657Xxpoh0iqDp5wr
ft4sgwaLQFckXIA+Trdn7uLNiwqUgamfgsf1LFTcpVcErCg8MCjJ06xAiFMZlKv8
PH1l83xcxB0Iw4yVGQNOxf1VduRywREvd/QHDjnMw3+J2Xv95KdYiTyR819j5YkS
SCwN5g2gGl15bVmupGAiTZENMdk3U9qkdADUjxLFz/w6kBuxNnIffcWXNmnBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFK8V2H18dkEbkSzPbf/MnYcivWcwHwYDVR0j
BBgwFoAUGKQ4JqZZKLcMGgM4Z/q8X25CB8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRVM0IxZFdEam9vMmE4U21zNGl5ODFkUVZqZ3YzNThVSGJBeVhlWVh6
cWgvMC8xOEE0MzgyNkE2NTkyOEI3MEMxQTAzMzg2N0ZBQkM1RjZFNDIwN0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE4QTQzODI2QTY1OTI4Qjcw
QzFBMDMzODY3RkFCQzVGNkU0MjA3QzAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0VTNCMWRXRGpvbzJhOFNtczRpeTgxZFFWamd2MzU4VUhiQXlYZVlYenFoLzAv
MzIzODMwMzQzYTM1Mzg2NDYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMxMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWNzAMA0GCSqGSIb3DQEBCwUA
A4IBAQBbGrHpFAv0VSgCqAxJJjeNfN7gvHgpVEG+Lm4/fuzt4c5aAKj+UG4H4Ora
e/RJsBcke5LjVRzTlcCoZ0ypWA6AhKF2dgDFKBJM7JAKnLLWyI5UhK3DiTeNINXa
cGs+JMmf3FaenY2+4p2um4UkZNMcWjXz+pP0fPx6CYSW4ONWHogeUVe8YJVC1s4r
euAqVGM2xoPD1LRp3yIHEhCvUdIbMJ4tfqHQ79RW6FAosUkiEcmP2LzhFah4Y5Jz
TzSyjgxBuhP4vuJKNN9hiN20IrBjRkdL0Nkz/yHFSi9A5NnUMTvxhpi6zbwsxTSb
T0HkUPsZHdYFPgEHPNr+bXm/KiDG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org