Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa
File:                     323830343a3962343a3a2f33322d3438203d3e20323632383732.roa (raw, json)
Hash identifier:          nGwE/9uvljI9yi96DlBZyGM/Z4bNEP89lNZS5EvGx+4=
Subject key identifier:   F4:96:B1:90:4D:36:0C:9F:6C:39:4E:44:62:6C:04:BE:58:C4:38:4F
Certificate issuer:       /CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
Certificate serial:       7DF882E9A98A44C731E200A030FCEB1C926DC0A5
Authority key identifier: 58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa
Signing time:             Tue 12 Dec 2023 04:20:32 +0000
ROA not before:           Tue 12 Dec 2023 04:15:32 +0000
ROA not after:            Tue 10 Dec 2024 04:20:32 +0000
asID:                     262872
IP address blocks:        2804:9b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f8:82:e9:a9:8a:44:c7:31:e2:00:a0:30:fc:eb:1c:92:6d:c0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
        Validity
            Not Before: Dec 12 04:15:32 2023 GMT
            Not After : Dec 10 04:20:32 2024 GMT
        Subject: CN=F496B1904D360C9F6C394E44626C04BE58C4384F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:4a:a1:41:d0:90:cf:60:b1:35:6f:d1:0a:
                    6c:38:32:23:2a:48:c2:a4:d1:a9:91:dc:f2:2e:5a:
                    40:eb:43:ad:28:e1:11:5b:12:bf:00:d1:0f:c2:ac:
                    e7:3d:ae:7b:7d:0a:5f:a9:b0:12:c6:d4:c3:0a:00:
                    0a:49:56:b2:f7:7a:42:44:ca:55:2a:9c:d8:bb:4e:
                    6d:de:8e:61:36:01:a0:59:3b:d9:58:2a:71:26:e2:
                    76:59:13:9a:ab:70:fb:48:3e:73:07:7a:eb:c1:ee:
                    44:70:41:db:6f:c3:ea:44:c1:d2:84:da:df:76:53:
                    b5:48:6b:d3:d0:ba:15:b3:86:71:09:9f:15:bd:40:
                    9e:ce:e0:8c:fb:4f:f5:60:cf:4f:64:22:ff:3b:e7:
                    fc:c7:60:00:3a:5d:67:4b:f4:0c:84:df:4c:f6:bb:
                    12:f8:d3:1a:9a:34:86:ec:8a:eb:6b:d4:e7:8f:5c:
                    21:68:3c:d4:eb:b9:22:96:f4:3a:77:30:30:b0:25:
                    3c:20:25:c7:4b:96:85:1a:f4:76:72:2a:e7:1f:05:
                    ff:5f:56:d3:cd:f4:f4:3a:0c:20:dd:d5:65:fb:4b:
                    2e:70:9c:a1:c8:be:8d:1a:17:28:0a:dc:d8:89:0f:
                    6f:c8:a0:ab:b9:74:37:2e:f9:ea:6a:b5:6c:43:3a:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:96:B1:90:4D:36:0C:9F:6C:39:4E:44:62:6C:04:BE:58:C4:38:4F
            X509v3 Authority Key Identifier:
                keyid:58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/323830343a3962343a3a2f33322d3438203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:46:05:94:2d:e5:7a:8e:4a:5e:b0:43:77:71:4c:6a:eb:18:
         24:52:55:d0:9b:58:74:8b:06:06:91:37:59:3e:ff:49:14:14:
         3d:7f:4f:8e:ba:51:02:7b:16:1c:4a:a0:e1:b4:a0:63:45:52:
         ca:22:49:b9:e9:0d:49:a8:74:cd:1b:e4:54:e1:7b:8a:09:2d:
         87:e6:f8:2a:93:47:21:da:a4:1c:a4:a7:ea:4c:e6:38:38:8e:
         54:fc:15:fd:c8:e7:6c:b8:99:33:dd:02:72:57:62:dc:21:1a:
         e9:9c:7b:39:9a:9a:5d:fc:1a:ee:75:21:b8:33:c8:77:bc:00:
         df:ac:35:19:73:db:5b:d3:6a:69:e0:49:79:5c:a1:b6:41:a8:
         c9:9e:be:b6:10:1e:08:b1:ea:54:d2:9a:0a:43:f3:18:9d:45:
         63:7d:87:c4:42:08:fa:0f:ff:d0:53:1a:65:6b:88:73:82:e3:
         e9:4d:0f:5c:80:59:b9:ca:f0:01:bf:1f:07:92:0a:d1:29:cf:
         b5:2f:8f:aa:da:97:5b:26:0e:ae:3d:e5:8b:d1:5e:b3:de:8f:
         fc:75:db:7d:4e:e5:eb:11:b8:2f:a7:c5:c6:fb:45:c7:48:f8:
         9d:28:83:a4:04:8d:97:57:6d:fb:d0:ca:3e:5a:29:a2:e3:30:
         a7:71:a2:c3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUffiC6amKRMcx4gCgMPzrHJJtwKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgzQzUzREZEREFCM0VCMDUxMzEzRTU4RTVCODJFRTg1
NEI5NjFDNzAeFw0yMzEyMTIwNDE1MzJaFw0yNDEyMTAwNDIwMzJaMDMxMTAvBgNV
BAMTKEY0OTZCMTkwNEQzNjBDOUY2QzM5NEU0NDYyNkMwNEJFNThDNDM4NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWEqhQdCQz2CxNW/RCmw4MiMq
SMKk0amR3PIuWkDrQ60o4RFbEr8A0Q/CrOc9rnt9Cl+psBLG1MMKAApJVrL3ekJE
ylUqnNi7Tm3ejmE2AaBZO9lYKnEm4nZZE5qrcPtIPnMHeuvB7kRwQdtvw+pEwdKE
2t92U7VIa9PQuhWzhnEJnxW9QJ7O4Iz7T/Vgz09kIv875/zHYAA6XWdL9AyE30z2
uxL40xqaNIbsiutr1OePXCFoPNTruSKW9Dp3MDCwJTwgJcdLloUa9HZyKucfBf9f
VtPN9PQ6DCDd1WX7Sy5wnKHIvo0aFygK3NiJD2/IoKu5dDcu+epqtWxDOniDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9JaxkE02DJ9sOU5EYmwEvljEOE8wHwYDVR0j
BBgwFoAUWDxT392rPrBRMT5Y5bgu6FS5YccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVRc0VyRlU0c050RzZpSnhoWnl4MWRqNDJzMWhrY1VDRzhzZ01rNnN3
UE0vMC81ODNDNTNERkREQUIzRUIwNTEzMTNFNThFNUI4MkVFODU0Qjk2MUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4M0M1M0RGRERBQjNFQjA1
MTMxM0U1OEU1QjgyRUU4NTRCOTYxQzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1UXNFckZVNHNOdEc2aUp4aFp5eDFkajQyczFoa2NVQ0c4c2dNazZzd1BNLzAv
MzIzODMwMzQzYTM5NjIzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM4
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECbQwDQYJKoZIhvcNAQELBQADggEBABdGBZQt5XqO
Sl6wQ3dxTGrrGCRSVdCbWHSLBgaRN1k+/0kUFD1/T466UQJ7FhxKoOG0oGNFUsoi
SbnpDUmodM0b5FThe4oJLYfm+CqTRyHapBykp+pM5jg4jlT8Ff3I52y4mTPdAnJX
YtwhGumcezmaml38Gu51IbgzyHe8AN+sNRlz21vTamngSXlcobZBqMmevrYQHgix
6lTSmgpD8xidRWN9h8RCCPoP/9BTGmVriHOC4+lND1yAWbnK8AG/HweSCtEpz7Uv
j6ral1smDq495YvRXrPej/x1231O5esRuC+nxcb7RcdI+J0og6QEjZdXbfvQyj5a
KaLjMKdxosM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org