Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/323830343a323965343a3a2f33322d3438203d3e20323634303432.roa
File:                     323830343a323965343a3a2f33322d3438203d3e20323634303432.roa (raw, json)
Hash identifier:          laoeE0z4kucVD7pc7PfaVoeaXQzG3fewpl2DRupNsrs=
Subject key identifier:   70:E3:41:C5:98:33:EC:82:6C:25:91:24:EB:FB:C9:88:C4:66:A9:F7
Certificate issuer:       /CN=58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC
Certificate serial:       53A605D8307767FD804A6A47D6461E9D2B06B7CA
Authority key identifier: 58:A8:18:05:DF:D8:71:28:E5:A7:C3:CB:4F:D0:5D:5F:5D:00:06:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/323830343a323965343a3a2f33322d3438203d3e20323634303432.roa
Signing time:             Wed 07 Feb 2024 00:59:42 +0000
ROA not before:           Wed 07 Feb 2024 00:54:42 +0000
ROA not after:            Wed 05 Feb 2025 00:59:42 +0000
asID:                     264042
IP address blocks:        2804:29e4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a6:05:d8:30:77:67:fd:80:4a:6a:47:d6:46:1e:9d:2b:06:b7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC
        Validity
            Not Before: Feb  7 00:54:42 2024 GMT
            Not After : Feb  5 00:59:42 2025 GMT
        Subject: CN=70E341C59833EC826C259124EBFBC988C466A9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:88:05:65:b4:b5:5a:bf:bd:64:34:d1:af:
                    4a:d9:08:e0:5e:2f:fc:99:ff:23:5a:81:c6:72:95:
                    d5:0d:f5:d8:b9:41:40:06:e0:73:6d:29:f8:6e:5f:
                    29:7d:15:0d:da:23:5c:5c:e6:13:44:c2:12:09:5e:
                    e7:55:a0:a3:34:5f:ba:30:5b:68:22:3e:b9:0b:08:
                    e9:3b:66:37:00:c2:b9:41:a2:7c:24:13:f9:fb:6b:
                    36:90:4e:30:71:70:75:bf:c9:69:68:98:c1:71:97:
                    c3:b5:96:d5:23:57:f5:e1:b1:b6:e0:18:26:20:3c:
                    a7:4b:01:59:59:88:75:02:88:8a:1c:7a:43:00:fc:
                    34:9a:f9:64:10:b7:85:ab:d6:1b:16:50:c9:b2:b1:
                    04:07:cc:92:8f:b3:74:1c:77:10:0d:2b:c6:d4:a4:
                    32:3d:32:e2:1a:f3:24:e3:cf:e4:f1:7b:5a:30:de:
                    14:63:4a:37:96:91:8d:92:b0:b8:85:fa:86:0c:5f:
                    65:56:7d:f6:98:c3:c2:4f:44:07:eb:d1:76:4e:a0:
                    d8:bd:ae:07:7d:f3:9c:94:8d:42:83:4e:11:cd:3f:
                    22:6d:63:5c:08:bf:4b:0a:7a:be:e2:cc:35:9b:58:
                    1d:ef:02:db:4c:7a:47:eb:8f:42:e9:82:21:0a:24:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E3:41:C5:98:33:EC:82:6C:25:91:24:EB:FB:C9:88:C4:66:A9:F7
            X509v3 Authority Key Identifier:
                keyid:58:A8:18:05:DF:D8:71:28:E5:A7:C3:CB:4F:D0:5D:5F:5D:00:06:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58A81805DFD87128E5A7C3CB4FD05D5F5D0006DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/323830343a323965343a3a2f33322d3438203d3e20323634303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:e7:70:84:d4:33:53:e7:6f:d6:7e:19:91:09:39:a0:db:10:
         06:eb:e1:bd:26:45:3d:1a:c4:b7:c3:0d:ad:60:84:82:01:66:
         09:cf:48:ab:6c:3f:82:a7:aa:90:6e:a5:64:2c:73:49:57:1b:
         9b:6c:df:95:51:d9:9a:a6:1e:17:8a:8c:9d:92:5b:ca:29:06:
         ee:9c:af:dd:4d:4f:80:83:91:3a:c0:ce:8b:04:cf:db:ce:af:
         71:1d:54:b4:c5:20:70:5b:9c:ae:71:a1:69:01:94:48:c4:e3:
         bd:1a:1b:80:1f:eb:ad:c8:28:fa:62:d0:97:d0:35:ea:20:91:
         56:16:0d:c9:ed:26:bd:c7:3a:46:fa:3c:43:84:87:44:68:0a:
         f2:97:f2:f9:d3:43:d4:dd:e9:ac:f7:f5:7c:a4:16:c3:cc:4f:
         54:ff:30:c9:58:de:7e:96:a0:a9:bb:6b:b9:74:08:22:cb:bb:
         2e:af:9f:96:58:25:0b:18:66:98:73:2d:a9:78:ac:bd:c2:d5:
         03:ac:f2:e1:56:3f:43:d7:30:33:63:db:bd:8b:cb:c7:7c:ee:
         6a:07:9f:ce:d7:cb:70:47:42:8b:97:37:08:da:b7:7e:55:d0:
         27:b7:83:e7:06:f1:e0:02:03:dd:ee:d1:62:a7:16:48:57:a8:
         5e:0e:87:72
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUU6YF2DB3Z/2ASmpH1kYenSsGt8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThBODE4MDVERkQ4NzEyOEU1QTdDM0NCNEZEMDVENUY1
RDAwMDZEQzAeFw0yNDAyMDcwMDU0NDJaFw0yNTAyMDUwMDU5NDJaMDMxMTAvBgNV
BAMTKDcwRTM0MUM1OTgzM0VDODI2QzI1OTEyNEVCRkJDOTg4QzQ2NkE5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCa4gFZbS1Wr+9ZDTRr0rZCOBe
L/yZ/yNagcZyldUN9di5QUAG4HNtKfhuXyl9FQ3aI1xc5hNEwhIJXudVoKM0X7ow
W2giPrkLCOk7ZjcAwrlBonwkE/n7azaQTjBxcHW/yWlomMFxl8O1ltUjV/Xhsbbg
GCYgPKdLAVlZiHUCiIocekMA/DSa+WQQt4Wr1hsWUMmysQQHzJKPs3QcdxANK8bU
pDI9MuIa8yTjz+Txe1ow3hRjSjeWkY2SsLiF+oYMX2VWffaYw8JPRAfr0XZOoNi9
rgd985yUjUKDThHNPyJtY1wIv0sKer7izDWbWB3vAttMekfrj0LpgiEKJEj3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcONBxZgz7IJsJZEk6/vJiMRmqfcwHwYDVR0j
BBgwFoAUWKgYBd/YcSjlp8PLT9BdX10ABtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFaRzdMZ01makVSamZiNDNjMzE4akg1dlBpeWoySzRTMUpnZFlTRGtR
WmIvMC81OEE4MTgwNURGRDg3MTI4RTVBN0MzQ0I0RkQwNUQ1RjVEMDAwNkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4QTgxODA1REZEODcxMjhF
NUE3QzNDQjRGRDA1RDVGNUQwMDA2REMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxWkc3TGdNZmpFUmpmYjQzYzMxOGpINXZQaXlqMks0UzFKZ2RZU0RrUVpiLzAv
MzIzODMwMzQzYTMyMzk2NTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzAzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQp5DANBgkqhkiG9w0BAQsFAAOCAQEAaudwhNQz
U+dv1n4ZkQk5oNsQBuvhvSZFPRrEt8MNrWCEggFmCc9Iq2w/gqeqkG6lZCxzSVcb
m2zflVHZmqYeF4qMnZJbyikG7pyv3U1PgIOROsDOiwTP286vcR1UtMUgcFucrnGh
aQGUSMTjvRobgB/rrcgo+mLQl9A16iCRVhYNye0mvcc6Rvo8Q4SHRGgK8pfy+dND
1N3prPf1fKQWw8xPVP8wyVjefpagqbtruXQIIsu7Lq+fllglCxhmmHMtqXisvcLV
A6zy4VY/Q9cwM2PbvYvLx3zuagefztfLcEdCi5c3CNq3flXQJ7eD5wbx4AID3e7R
YqcWSFeoXg6Hcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org