Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa
File:                     323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (raw, json)
Hash identifier:          Aq6VZ4/UcFw5f0iWn3nUl7LbX5GP3nzYqZ14g3yOBRQ=
Subject key identifier:   73:A2:02:45:31:7F:9B:BC:34:29:9B:73:BC:3E:88:65:6A:20:A9:F1
Certificate issuer:       /CN=BEB892E574C47C0A212F34E75C03BA72346E3084
Certificate serial:       601BDA1FBA31516E878841E7AE54D9AF8F3D958B
Authority key identifier: BE:B8:92:E5:74:C4:7C:0A:21:2F:34:E7:5C:03:BA:72:34:6E:30:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEB892E574C47C0A212F34E75C03BA72346E3084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa
Signing time:             Thu 14 Sep 2023 20:27:07 +0000
ROA not before:           Thu 14 Sep 2023 20:22:07 +0000
ROA not after:            Thu 12 Sep 2024 20:27:07 +0000
asID:                     268084
IP address blocks:        2804:57c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1b:da:1f:ba:31:51:6e:87:88:41:e7:ae:54:d9:af:8f:3d:95:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEB892E574C47C0A212F34E75C03BA72346E3084
        Validity
            Not Before: Sep 14 20:22:07 2023 GMT
            Not After : Sep 12 20:27:07 2024 GMT
        Subject: CN=73A20245317F9BBC34299B73BC3E88656A20A9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:10:4b:18:ab:9d:9f:3b:80:f5:00:8c:f9:a8:
                    21:0f:cd:60:a7:5b:c3:95:6b:53:1c:c3:dd:3e:20:
                    77:32:1a:68:b0:b0:36:16:b4:f5:a8:af:48:22:71:
                    47:e0:af:c6:b2:1b:c2:36:df:85:e8:5d:f5:82:ad:
                    d4:1b:65:91:f3:c2:19:29:83:d3:03:74:27:ed:ba:
                    2c:3b:65:84:c7:67:32:b5:9e:9c:80:21:25:6c:e0:
                    9a:cf:5c:38:10:1e:16:eb:f1:7d:bd:2e:f6:e0:b9:
                    a8:44:50:3d:af:a4:40:cc:50:2b:61:ca:9f:94:af:
                    1b:a2:11:04:32:a2:5a:a8:d3:e2:d4:30:85:2e:b4:
                    26:29:aa:20:4d:d2:22:b6:33:c2:73:bf:bc:fb:d5:
                    7f:5d:62:34:8b:4f:d2:f7:e1:10:a2:c4:ba:bf:8c:
                    5f:d3:64:2a:22:ce:91:f9:93:3d:10:17:be:d1:c3:
                    67:2a:d7:2a:ec:35:55:7b:0a:02:76:9f:db:0e:bd:
                    b2:1b:d7:6a:a6:81:37:95:64:20:44:05:99:3f:6a:
                    bb:0d:53:c6:c9:6c:48:9d:0c:8e:39:48:3f:5f:d8:
                    f7:6c:2c:e2:87:2d:35:47:a6:00:5d:5f:6c:56:18:
                    cd:31:43:07:68:05:98:ca:53:68:98:74:f1:f2:fa:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A2:02:45:31:7F:9B:BC:34:29:9B:73:BC:3E:88:65:6A:20:A9:F1
            X509v3 Authority Key Identifier:
                keyid:BE:B8:92:E5:74:C4:7C:0A:21:2F:34:E7:5C:03:BA:72:34:6E:30:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/BEB892E574C47C0A212F34E75C03BA72346E3084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEB892E574C47C0A212F34E75C03BA72346E3084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/323830343a353763303a3a2f33322d3438203d3e20323638303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:1a:3c:5c:05:d5:b4:43:a3:a9:c6:56:c0:e7:55:3c:d7:96:
         4f:90:17:02:8d:e4:ae:0f:df:65:10:b1:a7:e1:45:ca:f0:09:
         8d:21:70:f2:85:ee:f5:bf:6d:6f:ed:21:3b:b0:03:2c:1d:27:
         70:ae:87:31:15:57:8d:d2:05:ea:c8:89:b0:8e:bf:96:7b:e6:
         5b:1f:11:65:53:f8:a7:81:ee:a6:fc:cb:2d:c1:ae:09:75:00:
         e1:8e:6d:e1:16:f4:f3:9a:fc:29:d5:36:61:9d:d6:a3:91:a4:
         a1:0a:db:04:4e:63:06:78:f9:62:5a:08:12:0d:99:f7:b8:73:
         c1:8c:f6:3f:77:72:37:82:89:0a:66:fa:b9:37:ee:e4:09:bb:
         9c:ba:81:ec:0b:e2:b7:dd:8f:95:92:81:97:c5:ce:df:7a:d4:
         9c:45:d8:5e:91:3c:ae:ee:15:90:4c:98:ec:42:95:01:57:20:
         bc:b6:82:ef:dc:fe:33:fb:00:2d:70:ff:9c:e6:cd:dd:05:86:
         a3:54:7f:45:5c:fa:b5:e4:77:66:f7:7f:1e:46:6e:ee:5f:63:
         9d:0b:41:80:d2:b9:06:9c:e4:79:22:18:ab:d5:66:72:52:6d:
         cb:b9:95:da:b7:73:a1:db:03:ba:5a:d1:cc:01:b5:93:ad:31:
         98:89:14:51
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYBvaH7oxUW6HiEHnrlTZr489lYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVCODkyRTU3NEM0N0MwQTIxMkYzNEU3NUMwM0JBNzIz
NDZFMzA4NDAeFw0yMzA5MTQyMDIyMDdaFw0yNDA5MTIyMDI3MDdaMDMxMTAvBgNV
BAMTKDczQTIwMjQ1MzE3RjlCQkMzNDI5OUI3M0JDM0U4ODY1NkEyMEE5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqEEsYq52fO4D1AIz5qCEPzWCn
W8OVa1Mcw90+IHcyGmiwsDYWtPWor0gicUfgr8ayG8I234XoXfWCrdQbZZHzwhkp
g9MDdCftuiw7ZYTHZzK1npyAISVs4JrPXDgQHhbr8X29LvbguahEUD2vpEDMUCth
yp+UrxuiEQQyolqo0+LUMIUutCYpqiBN0iK2M8Jzv7z71X9dYjSLT9L34RCixLq/
jF/TZCoizpH5kz0QF77Rw2cq1yrsNVV7CgJ2n9sOvbIb12qmgTeVZCBEBZk/arsN
U8bJbEidDI45SD9f2PdsLOKHLTVHpgBdX2xWGM0xQwdoBZjKU2iYdPHy+tXTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUc6ICRTF/m7w0KZtzvD6IZWogqfEwHwYDVR0j
BBgwFoAUvriS5XTEfAohLzTnXAO6cjRuMIQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm
VFYvMC9CRUI4OTJFNTc0QzQ3QzBBMjEyRjM0RTc1QzAzQkE3MjM0NkUzMDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFQjg5MkU1NzRDNDdDMEEy
MTJGMzRFNzVDMDNCQTcyMzQ2RTMwODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1d1htVGJqR1hkQ3NqUGc1OGV6YUNpN1pOV2dOWjk3aWc4OUh6REVwZlRWLzAv
MzIzODMwMzQzYTM1Mzc2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzAzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARXwDANBgkqhkiG9w0BAQsFAAOCAQEAuho8XAXV
tEOjqcZWwOdVPNeWT5AXAo3krg/fZRCxp+FFyvAJjSFw8oXu9b9tb+0hO7ADLB0n
cK6HMRVXjdIF6siJsI6/lnvmWx8RZVP4p4HupvzLLcGuCXUA4Y5t4Rb085r8KdU2
YZ3Wo5GkoQrbBE5jBnj5YloIEg2Z97hzwYz2P3dyN4KJCmb6uTfu5Am7nLqB7Avi
t92PlZKBl8XO33rUnEXYXpE8ru4VkEyY7EKVAVcgvLaC79z+M/sALXD/nObN3QWG
o1R/RVz6teR3Zvd/HkZu7l9jnQtBgNK5BpzkeSIYq9VmclJty7mV2rdzodsDulrR
zAG1k60xmIkUUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org