Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a3a2f33322d3332203d3e20323730343630.roa
File:                     323830343a366335343a3a2f33322d3332203d3e20323730343630.roa (raw, json)
Hash identifier:          HjqM47cZgP3Pw9W1KO5m8kBzT/1fs81sNqVXg6rg8ts=
Subject key identifier:   B4:CB:9C:5B:15:13:E0:13:EF:4F:2B:45:37:E6:23:38:F7:D6:9E:BC
Certificate issuer:       /CN=4E0CAE2309FE9147886703A0CD45F3878E73AA7F
Certificate serial:       719B4CCE41F25D9D6749270A1F8EB2F9C64A1940
Authority key identifier: 4E:0C:AE:23:09:FE:91:47:88:67:03:A0:CD:45:F3:87:8E:73:AA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E0CAE2309FE9147886703A0CD45F3878E73AA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a3a2f33322d3332203d3e20323730343630.roa
Signing time:             Mon 11 Mar 2024 20:13:59 +0000
ROA not before:           Mon 11 Mar 2024 20:08:59 +0000
ROA not after:            Mon 10 Mar 2025 20:13:59 +0000
asID:                     270460
IP address blocks:        2804:6c54::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9b:4c:ce:41:f2:5d:9d:67:49:27:0a:1f:8e:b2:f9:c6:4a:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E0CAE2309FE9147886703A0CD45F3878E73AA7F
        Validity
            Not Before: Mar 11 20:08:59 2024 GMT
            Not After : Mar 10 20:13:59 2025 GMT
        Subject: CN=B4CB9C5B1513E013EF4F2B4537E62338F7D69EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:11:c3:27:ab:2b:c3:1a:46:f2:f2:96:26:
                    59:57:2f:cd:73:8c:16:7c:24:26:4d:b1:43:38:81:
                    71:4f:ad:86:1b:4c:0e:6c:ca:4f:70:f3:01:a6:c9:
                    7a:40:cc:d0:ac:6c:41:f0:75:44:66:14:ce:19:38:
                    73:f2:4d:05:d3:fd:ab:27:bc:4a:91:5a:cc:f7:36:
                    eb:53:b5:0d:8d:5f:83:72:f5:f8:3e:be:21:bf:60:
                    2e:5d:ed:03:d0:78:8c:b6:3a:4a:03:27:86:a4:e8:
                    37:3a:75:d1:d4:93:17:d2:bc:a7:23:db:5e:ae:a7:
                    33:34:24:27:d7:ac:6e:2d:ba:1b:51:57:eb:ab:fb:
                    49:b2:a5:33:de:b4:c2:b5:1f:e9:ea:2f:a7:bf:ef:
                    80:02:ee:ad:29:87:cb:f0:a0:71:0b:ff:5d:31:45:
                    fe:7a:c7:cc:63:4c:e1:a4:56:c6:6d:67:48:62:63:
                    13:59:19:29:03:c1:58:e5:a3:76:4f:ec:73:fd:a4:
                    49:f8:04:61:aa:4d:02:38:4d:72:a2:3e:4c:3c:19:
                    77:0c:1e:d0:ef:f1:71:d9:09:3c:9e:03:31:dc:eb:
                    df:30:43:6c:55:60:07:ca:6b:1e:15:cc:6b:c6:05:
                    db:8d:ff:df:ae:a6:2d:de:09:b0:ac:61:71:60:b9:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CB:9C:5B:15:13:E0:13:EF:4F:2B:45:37:E6:23:38:F7:D6:9E:BC
            X509v3 Authority Key Identifier:
                keyid:4E:0C:AE:23:09:FE:91:47:88:67:03:A0:CD:45:F3:87:8E:73:AA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/4E0CAE2309FE9147886703A0CD45F3878E73AA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E0CAE2309FE9147886703A0CD45F3878E73AA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/323830343a366335343a3a2f33322d3332203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:be:47:c2:aa:9b:3a:ee:87:65:1b:b8:85:ac:32:1e:14:73:
         7f:92:47:b6:5f:56:12:ea:71:ec:18:88:a7:d3:96:62:e3:3e:
         36:33:8f:5d:90:7c:ed:87:09:49:bf:02:94:52:f2:e7:8d:06:
         0b:85:8d:0a:8b:92:33:f7:e8:be:1c:9b:f1:36:80:5c:40:79:
         89:8f:d5:fb:04:67:22:3d:a7:11:fb:93:a4:ce:cf:b9:a9:86:
         c3:f4:a0:bf:98:ff:50:ab:de:8e:ce:65:cb:c6:8d:37:74:e7:
         d7:4a:81:77:8c:c6:50:21:a4:86:e7:c8:b8:38:66:11:9b:d2:
         1b:ca:8d:b1:a4:92:d4:79:ec:6c:db:a7:f4:4a:dd:7c:95:dd:
         fe:9c:48:f7:04:dc:34:01:39:d2:8c:95:05:26:73:95:8f:ec:
         bc:1e:36:80:00:8d:47:1a:73:15:4b:3a:3e:cb:29:87:58:08:
         7a:61:fa:fd:3c:01:94:ae:f8:26:6d:c3:45:83:60:64:7f:b7:
         5c:0a:f8:d9:dd:2d:a7:55:53:70:e7:ce:04:de:ac:76:43:f3:
         a7:bb:da:33:37:e7:62:04:ff:56:53:cc:79:5f:45:3c:b4:87:
         5e:3a:11:8d:0e:88:66:0e:14:b2:7e:4a:f6:01:6b:aa:0e:e2:
         bb:d9:5b:89
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcZtMzkHyXZ1nSScKH46y+cZKGUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUwQ0FFMjMwOUZFOTE0Nzg4NjcwM0EwQ0Q0NUYzODc4
RTczQUE3RjAeFw0yNDAzMTEyMDA4NTlaFw0yNTAzMTAyMDEzNTlaMDMxMTAvBgNV
BAMTKEI0Q0I5QzVCMTUxM0UwMTNFRjRGMkI0NTM3RTYyMzM4RjdENjlFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHRHDJ6srwxpG8vKWJllXL81z
jBZ8JCZNsUM4gXFPrYYbTA5syk9w8wGmyXpAzNCsbEHwdURmFM4ZOHPyTQXT/asn
vEqRWsz3NutTtQ2NX4Ny9fg+viG/YC5d7QPQeIy2OkoDJ4ak6Dc6ddHUkxfSvKcj
216upzM0JCfXrG4tuhtRV+ur+0mypTPetMK1H+nqL6e/74AC7q0ph8vwoHEL/10x
Rf56x8xjTOGkVsZtZ0hiYxNZGSkDwVjlo3ZP7HP9pEn4BGGqTQI4TXKiPkw8GXcM
HtDv8XHZCTyeAzHc698wQ2xVYAfKax4VzGvGBduN/9+upi3eCbCsYXFguf65AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtMucWxUT4BPvTytFN+YjOPfWnrwwHwYDVR0j
BBgwFoAUTgyuIwn+kUeIZwOgzUXzh45zqn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFUblNlckJlNU1RQzFrSjJabkpybUVFbTl1TGtzYmtRSmg5OWpOdE5F
SmMvMC80RTBDQUUyMzA5RkU5MTQ3ODg2NzAzQTBDRDQ1RjM4NzhFNzNBQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFMENBRTIzMDlGRTkxNDc4
ODY3MDNBMENENDVGMzg3OEU3M0FBN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRVG5TZXJCZTVNUUMxa0oyWm5Kcm1FRW05dUxrc2JrUUpoOTlqTnRORUpjLzAv
MzIzODMwMzQzYTM2NjMzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARsVDANBgkqhkiG9w0BAQsFAAOCAQEAz75Hwqqb
Ou6HZRu4hawyHhRzf5JHtl9WEupx7BiIp9OWYuM+NjOPXZB87YcJSb8ClFLy540G
C4WNCouSM/fovhyb8TaAXEB5iY/V+wRnIj2nEfuTpM7PuamGw/Sgv5j/UKvejs5l
y8aNN3Tn10qBd4zGUCGkhufIuDhmEZvSG8qNsaSS1HnsbNun9ErdfJXd/pxI9wTc
NAE50oyVBSZzlY/svB42gACNRxpzFUs6Pssph1gIemH6/TwBlK74Jm3DRYNgZH+3
XAr42d0tp1VTcOfOBN6sdkPzp7vaMzfnYgT/VlPMeV9FPLSHXjoRjQ6IZg4Usn5K
9gFrqg7iu9lbiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org