Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          gXEQPYagwjccEJUlZk4g+pDfvCI/lU3j4LGBzHhEBe4=
Subject key identifier:   BA:E6:71:86:0C:6C:73:39:56:5B:4A:21:06:F5:AA:DC:CC:B7:34:D3
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       770D8B4D1422B6D75F7A26AA524C59201741F81F
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Wed 06 Sep 2023 17:31:52 +0000
ROA not before:           Wed 06 Sep 2023 17:26:52 +0000
ROA not after:            Wed 04 Sep 2024 17:31:52 +0000
asID:                     262578
IP address blocks:        2804:658:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0d:8b:4d:14:22:b6:d7:5f:7a:26:aa:52:4c:59:20:17:41:f8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Sep  6 17:26:52 2023 GMT
            Not After : Sep  4 17:31:52 2024 GMT
        Subject: CN=BAE671860C6C7339565B4A2106F5AADCCCB734D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:53:23:06:7a:84:5e:48:83:35:fb:d3:a5:
                    03:15:b9:dc:4a:1f:f7:86:cf:3a:fa:59:62:3c:cf:
                    f2:6a:22:3b:4f:15:d6:96:65:f9:94:39:19:51:a3:
                    5e:76:a9:46:ec:00:56:1b:78:bb:44:ba:9d:d5:24:
                    58:8b:39:6e:cd:d3:15:35:55:59:ef:88:e1:15:aa:
                    96:63:e6:46:ee:3a:cc:97:fc:5b:72:e4:03:9e:24:
                    24:59:30:a7:3d:30:1b:51:e1:10:72:57:ae:3c:d0:
                    27:19:aa:58:e7:36:26:2c:f2:ab:8c:c1:20:e6:2b:
                    22:d0:b0:b2:d1:40:ed:b7:53:fa:72:ff:79:bf:06:
                    bf:01:49:35:0e:71:e2:2a:2d:54:18:28:e6:e2:d9:
                    fc:1f:20:14:9c:64:59:d5:c0:76:a3:81:f9:b9:60:
                    0a:80:14:51:6e:f4:0e:ba:0c:27:62:81:4f:87:2b:
                    b5:05:69:77:88:0e:e1:62:64:69:c0:f0:71:87:49:
                    f8:5e:5f:0d:35:94:df:32:a4:db:ec:28:08:63:25:
                    c7:5e:ec:b5:5e:c1:88:31:74:00:bf:a8:5b:f8:32:
                    fe:45:e8:28:22:7e:df:53:81:80:4f:1d:42:5f:b9:
                    7b:4b:b9:5b:c3:95:16:68:34:1d:79:b1:67:25:ab:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E6:71:86:0C:6C:73:39:56:5B:4A:21:06:F5:AA:DC:CC:B7:34:D3
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9a:3c:3c:0b:d6:70:d4:63:b2:ba:f1:97:03:6e:96:08:1c:f6:
         16:4b:15:15:fb:c6:f4:4d:42:16:5f:05:0e:3b:ab:8d:d9:96:
         28:db:9a:63:d5:f1:c9:11:60:2d:b4:de:d9:93:9b:f1:ef:e6:
         ed:17:d0:aa:7a:e8:07:5e:aa:34:18:69:2e:65:0a:cf:7b:43:
         2c:a0:66:06:e6:90:e5:13:ac:3f:4e:93:43:18:e5:98:f9:05:
         f7:7f:49:12:aa:5f:f8:24:98:82:62:7e:f5:1c:4b:f0:50:5f:
         57:c6:90:3d:a5:be:5b:57:32:14:6b:8a:79:c1:75:27:f7:e1:
         15:bf:de:c8:b1:2b:4f:6c:60:4b:81:2d:d5:98:57:5e:8e:5d:
         61:1f:18:16:2a:12:5c:d4:e3:ef:1c:12:00:66:cf:d7:d1:00:
         3b:ce:0a:80:60:61:37:8a:02:ed:fd:41:91:0e:06:d0:f4:a5:
         67:ab:65:65:c6:21:5a:22:9e:0c:3f:d2:27:70:e4:1c:3d:52:
         e2:20:32:9f:ba:81:61:a9:1c:b3:3d:66:0d:c4:29:9b:66:49:
         38:3c:45:91:1b:39:e5:7d:75:43:0d:86:ac:d2:19:be:66:b3:
         55:61:75:c3:67:53:ce:50:80:79:45:f2:1b:20:e1:3f:18:ef:
         32:22:45:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdw2LTRQittdfeiaqUkxZIBdB+B8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVBNkUwRjg4MjVDMTY4OEM5MTU3MkM4MUMxN0YxRTkz
NUMzNTNEODAeFw0yMzA5MDYxNzI2NTJaFw0yNDA5MDQxNzMxNTJaMDMxMTAvBgNV
BAMTKEJBRTY3MTg2MEM2QzczMzk1NjVCNEEyMTA2RjVBQURDQ0NCNzM0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz31MjBnqEXkiDNfvTpQMVudxK
H/eGzzr6WWI8z/JqIjtPFdaWZfmUORlRo152qUbsAFYbeLtEup3VJFiLOW7N0xU1
VVnviOEVqpZj5kbuOsyX/Fty5AOeJCRZMKc9MBtR4RByV6480CcZqljnNiYs8quM
wSDmKyLQsLLRQO23U/py/3m/Br8BSTUOceIqLVQYKObi2fwfIBScZFnVwHajgfm5
YAqAFFFu9A66DCdigU+HK7UFaXeIDuFiZGnA8HGHSfheXw01lN8ypNvsKAhjJcde
7LVewYgxdAC/qFv4Mv5F6Cgift9TgYBPHUJfuXtLuVvDlRZoNB15sWclq16FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuuZxhgxsczlWW0ohBvWq3My3NNMwHwYDVR0j
BBgwFoAUTqbg+IJcFojJFXLIHBfx6TXDU9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0
QkEvMC80RUE2RTBGODgyNUMxNjg4QzkxNTcyQzgxQzE3RjFFOTM1QzM1M0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFQTZFMEY4ODI1QzE2ODhD
OTE1NzJDODFDMTdGMUU5MzVDMzUzRDguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzAv
MzIzODMwMzQzYTM2MzUzODNhNjEzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzMjM2MzIzNTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAZYoDANBgkqhkiG9w0BAQsFAAOC
AQEAmjw8C9Zw1GOyuvGXA26WCBz2FksVFfvG9E1CFl8FDjurjdmWKNuaY9XxyRFg
LbTe2ZOb8e/m7RfQqnroB16qNBhpLmUKz3tDLKBmBuaQ5ROsP06TQxjlmPkF939J
Eqpf+CSYgmJ+9RxL8FBfV8aQPaW+W1cyFGuKecF1J/fhFb/eyLErT2xgS4Et1ZhX
Xo5dYR8YFioSXNTj7xwSAGbP19EAO84KgGBhN4oC7f1BkQ4G0PSlZ6tlZcYhWiKe
DD/SJ3DkHD1S4iAyn7qBYakcsz1mDcQpm2ZJODxFkRs55X11Qw2GrNIZvmazVWF1
w2dTzlCAeUXyGyDhPxjvMiJF4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org