Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa
File:                     323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (raw, json)
Hash identifier:          P5dGd7QRLrOFtukh0zHglqX4hyZu+OLp+wJ4LD/Vtoc=
Subject key identifier:   57:BC:F7:41:50:9B:4D:C3:50:53:1A:25:DE:3E:FC:88:78:07:EB:D1
Certificate issuer:       /CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
Certificate serial:       5B7BFDE96053BEDFEF52FBD0AB4D5105404A60F6
Authority key identifier: 4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa
Signing time:             Thu 04 Jan 2024 13:08:27 +0000
ROA not before:           Thu 04 Jan 2024 13:03:27 +0000
ROA not after:            Thu 02 Jan 2025 13:08:27 +0000
asID:                     264891
IP address blocks:        2804:2f70:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7b:fd:e9:60:53:be:df:ef:52:fb:d0:ab:4d:51:05:40:4a:60:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138
        Validity
            Not Before: Jan  4 13:03:27 2024 GMT
            Not After : Jan  2 13:08:27 2025 GMT
        Subject: CN=57BCF741509B4DC350531A25DE3EFC887807EBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d1:90:6d:d4:9c:a1:e8:e6:27:8b:d5:25:62:
                    0a:80:c2:82:90:75:db:50:aa:72:66:5d:4e:db:02:
                    33:b3:8b:23:b2:c3:58:63:b7:79:32:61:a7:13:bd:
                    e8:6e:51:da:4d:33:49:d9:74:f9:01:f0:09:f9:36:
                    78:91:16:00:ac:74:1a:b8:78:67:15:09:f5:24:67:
                    00:77:54:c7:7d:9e:04:83:19:05:71:8a:29:e0:71:
                    91:d4:11:1b:8a:e6:50:03:68:77:b3:78:7f:1b:07:
                    11:6a:43:3e:41:93:d8:57:79:ff:80:78:ca:9d:f5:
                    b9:02:1e:4e:93:fb:a5:b9:22:6a:66:6d:64:b7:a6:
                    fc:e5:bd:0f:60:cd:96:91:15:5a:4b:57:6f:15:3e:
                    34:be:45:80:67:39:e7:52:b3:2d:f3:54:eb:e5:a2:
                    75:4f:04:18:46:83:3e:88:50:47:c3:9b:13:ac:a2:
                    94:c8:c1:aa:88:a3:15:7d:c5:4b:57:9c:cb:c8:e9:
                    a1:19:e7:27:01:6e:d7:a4:8a:8b:55:69:ed:11:9a:
                    79:88:e5:f9:39:9b:7e:70:fe:a4:c4:7f:41:73:91:
                    83:ad:4f:00:aa:c4:71:b5:7f:2f:a1:61:ce:ac:1d:
                    eb:48:4e:13:24:ca:9b:9f:01:b6:56:67:a7:8c:48:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BC:F7:41:50:9B:4D:C3:50:53:1A:25:DE:3E:FC:88:78:07:EB:D1
            X509v3 Authority Key Identifier:
                keyid:4E:6D:A4:3B:69:CD:8C:7E:9E:C9:EF:84:3C:CE:24:BE:36:F9:41:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E6DA43B69CD8C7E9EC9EF843CCE24BE36F94138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:d1:f4:41:e5:96:38:6d:71:3e:28:01:3a:fe:c5:ff:22:a8:
         b0:65:8d:40:e9:87:eb:99:18:0d:9b:25:95:48:bd:31:0c:38:
         0c:b2:cc:db:f6:2a:00:12:6e:25:e0:2e:1d:9d:78:31:a7:b3:
         42:1d:f0:63:a9:f4:9b:ad:52:02:a8:f6:b3:99:a5:72:a2:40:
         1e:92:b3:e8:a9:3f:89:f2:da:0d:2f:67:08:92:20:84:0e:de:
         b7:e7:f7:79:fd:ff:36:ce:22:b5:55:f7:34:bb:39:7b:7f:20:
         ed:b6:5f:16:a9:77:4e:c2:1b:22:07:d9:11:63:b5:6b:71:1f:
         98:5f:9a:09:01:38:c1:9b:ac:9a:5a:2a:29:d6:fa:5d:0e:16:
         8f:5c:4a:5a:8c:24:c5:c6:39:d4:78:33:2e:66:93:3a:ba:3d:
         1d:8d:9f:d8:0a:3e:b0:46:36:61:b2:c4:a7:e5:8c:d5:c9:e3:
         ed:43:f9:cb:13:33:1a:54:a7:af:1f:d6:57:54:81:53:60:05:
         7e:8e:00:20:ca:9f:ed:5a:f8:67:34:36:c1:48:02:cb:27:b5:
         f5:5b:ce:53:04:3b:96:b6:31:5b:93:55:31:fc:74:90:f4:e0:
         c6:ac:fa:78:29:21:31:6b:3e:a3:92:ed:98:64:ba:c4:47:68:
         76:b7:bd:bf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUW3v96WBTvt/vUvvQq01RBUBKYPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU2REE0M0I2OUNEOEM3RTlFQzlFRjg0M0NDRTI0QkUz
NkY5NDEzODAeFw0yNDAxMDQxMzAzMjdaFw0yNTAxMDIxMzA4MjdaMDMxMTAvBgNV
BAMTKDU3QkNGNzQxNTA5QjREQzM1MDUzMUEyNURFM0VGQzg4NzgwN0VCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD10ZBt1Jyh6OYni9UlYgqAwoKQ
ddtQqnJmXU7bAjOziyOyw1hjt3kyYacTvehuUdpNM0nZdPkB8An5NniRFgCsdBq4
eGcVCfUkZwB3VMd9ngSDGQVxiingcZHUERuK5lADaHezeH8bBxFqQz5Bk9hXef+A
eMqd9bkCHk6T+6W5ImpmbWS3pvzlvQ9gzZaRFVpLV28VPjS+RYBnOedSsy3zVOvl
onVPBBhGgz6IUEfDmxOsopTIwaqIoxV9xUtXnMvI6aEZ5ycBbtekiotVae0RmnmI
5fk5m35w/qTEf0FzkYOtTwCqxHG1fy+hYc6sHetIThMkypufAbZWZ6eMSMbHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUV7z3QVCbTcNQUxol3j78iHgH69EwHwYDVR0j
BBgwFoAUTm2kO2nNjH6eye+EPM4kvjb5QTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC80RTZEQTQzQjY5Q0Q4QzdFOUVDOUVGODQzQ0NFMjRCRTM2Rjk0MTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFNkRBNDNCNjlDRDhDN0U5
RUM5RUY4NDNDQ0UyNEJFMzZGOTQxMzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzAv
MzIzODMwMzQzYTMyNjYzNzMwM2EzNDMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEL3BAMA0GCSqGSIb3DQEBCwUA
A4IBAQCv0fRB5ZY4bXE+KAE6/sX/IqiwZY1A6YfrmRgNmyWVSL0xDDgMsszb9ioA
Em4l4C4dnXgxp7NCHfBjqfSbrVICqPazmaVyokAekrPoqT+J8toNL2cIkiCEDt63
5/d5/f82ziK1Vfc0uzl7fyDttl8WqXdOwhsiB9kRY7VrcR+YX5oJATjBm6yaWiop
1vpdDhaPXEpajCTFxjnUeDMuZpM6uj0djZ/YCj6wRjZhssSn5YzVyePtQ/nLEzMa
VKevH9ZXVIFTYAV+jgAgyp/tWvhnNDbBSALLJ7X1W85TBDuWtjFbk1Ux/HSQ9ODG
rPp4KSExaz6jku2YZLrER2h2t72/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org