Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f34382d3438203d3e20323633353733.roa
File:                     323830343a6634303a3a2f34382d3438203d3e20323633353733.roa (raw, json)
Hash identifier:          omXqgs/w90cBblCOJzT3Y52Wb9AZTWXb/FuAD2ZZJWo=
Subject key identifier:   35:44:C8:86:37:AD:7E:AD:E4:EB:2B:72:2D:B7:E3:8A:E2:A0:D6:49
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       53CDBC280D88B71B9B381BF7B15546E23055EDD5
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f34382d3438203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:20:10 +0000
ROA not before:           Wed 12 Jul 2023 14:15:10 +0000
ROA not after:            Wed 10 Jul 2024 14:20:10 +0000
asID:                     263573
IP address blocks:        2804:f40::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cd:bc:28:0d:88:b7:1b:9b:38:1b:f7:b1:55:46:e2:30:55:ed:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:15:10 2023 GMT
            Not After : Jul 10 14:20:10 2024 GMT
        Subject: CN=3544C88637AD7EADE4EB2B722DB7E38AE2A0D649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:3a:d0:ad:f4:b5:d7:2f:a4:4e:e7:1d:60:
                    d4:4f:4d:d5:b9:df:24:8d:29:0d:72:3d:b3:0f:fb:
                    42:b7:ac:33:77:1e:47:ab:7f:61:2d:99:1d:0a:5c:
                    f7:c9:87:aa:2f:4a:03:06:9d:37:17:7c:81:67:fd:
                    fb:3a:46:d1:f1:38:22:72:1c:11:f2:91:24:f2:00:
                    58:5f:d3:7a:1e:50:b8:af:f0:bd:49:66:91:56:86:
                    30:9a:ae:3a:89:91:6d:40:41:b8:52:12:6e:94:6f:
                    46:c6:ae:cb:b2:35:6a:16:74:98:74:01:45:fc:39:
                    12:f4:8b:45:f5:f8:10:0c:3a:3d:c9:70:73:64:56:
                    c2:8f:d4:3a:a2:86:16:c6:6a:a3:5f:73:0f:bb:31:
                    1f:2a:44:80:8d:fc:e1:37:af:51:7d:cc:13:f5:8a:
                    02:bd:79:15:eb:67:dd:2f:94:46:58:e8:71:b3:75:
                    30:ae:e6:1f:f1:23:01:0f:03:d5:d2:df:ed:f1:47:
                    d3:24:4d:b8:b9:1a:0f:cc:54:f5:90:41:1b:49:0a:
                    0c:04:c4:9a:a0:93:f3:17:60:5c:64:8b:3a:ae:a9:
                    5e:84:3c:f0:c0:f3:e7:da:7c:28:26:01:39:94:72:
                    88:77:2c:d8:06:07:26:ed:07:76:87:a5:ff:1d:f7:
                    a8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:44:C8:86:37:AD:7E:AD:E4:EB:2B:72:2D:B7:E3:8A:E2:A0:D6:49
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f34382d3438203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:21:4b:2f:b3:cb:64:da:cb:a1:04:5f:ca:d2:fd:91:a7:e6:
         77:33:5a:1f:91:1f:e5:3c:fe:40:97:2e:b7:86:0d:08:e9:7c:
         65:69:45:a8:3d:b4:58:23:82:93:94:06:67:4d:61:18:9b:47:
         bf:06:03:a7:2c:2c:ca:a0:67:1d:48:8e:74:1b:8f:1a:3e:fa:
         fa:46:87:4d:5e:be:76:5e:d6:1e:bd:87:d2:3b:db:bc:2c:b2:
         d1:0b:41:94:b4:4d:5b:62:78:19:27:fc:66:1a:15:40:6f:68:
         cd:36:15:b5:2d:99:47:6b:52:f2:af:c7:3b:b9:4f:41:4f:2e:
         02:51:39:e9:93:cd:9e:fd:9d:72:de:28:49:aa:2c:7b:ef:f9:
         9a:6e:a5:0f:06:9c:fb:a2:83:2a:0a:56:14:ae:cb:c7:4e:76:
         30:6f:d2:4d:de:e7:b9:4e:49:7a:7c:b8:0f:90:b0:c8:f1:2a:
         4e:2c:79:fb:1b:eb:6c:55:32:37:ee:e0:93:0b:9e:21:1c:79:
         72:e9:f5:6b:40:ec:11:63:4c:44:d2:ab:d2:ed:bc:cc:05:e1:
         de:96:94:e5:6d:be:0e:7a:d2:dd:06:b2:cd:df:9e:a7:f0:d9:
         d9:29:ce:30:a4:e0:da:0c:fc:21:ee:ff:90:41:33:07:4c:a3:
         ec:e6:d4:98
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUU828KA2ItxubOBv3sVVG4jBV7dUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ1REQ3MEUyRUY2NDc5ODMwNjZBMTI1MTU1NzMwOEQ3
ODBDREY1RTAeFw0yMzA3MTIxNDE1MTBaFw0yNDA3MTAxNDIwMTBaMDMxMTAvBgNV
BAMTKDM1NDRDODg2MzdBRDdFQURFNEVCMkI3MjJEQjdFMzhBRTJBMEQ2NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ijrQrfS11y+kTucdYNRPTdW5
3ySNKQ1yPbMP+0K3rDN3Hkerf2EtmR0KXPfJh6ovSgMGnTcXfIFn/fs6RtHxOCJy
HBHykSTyAFhf03oeULiv8L1JZpFWhjCarjqJkW1AQbhSEm6Ub0bGrsuyNWoWdJh0
AUX8ORL0i0X1+BAMOj3JcHNkVsKP1DqihhbGaqNfcw+7MR8qRICN/OE3r1F9zBP1
igK9eRXrZ90vlEZY6HGzdTCu5h/xIwEPA9XS3+3xR9MkTbi5Gg/MVPWQQRtJCgwE
xJqgk/MXYFxkizquqV6EPPDA8+fafCgmATmUcoh3LNgGBybtB3aHpf8d96jdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNUTIhjetfq3k6ytyLbfjiuKg1kkwHwYDVR0j
BBgwFoAUpF3XDi72R5gwZqElFVcwjXgM314wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Od0p2dEdMeTRaV0dqRlNtNjk3MUhHank1VUQ5Q1JrcTEzRm9QZFhxYTl4
LzAvQTQ1REQ3MEUyRUY2NDc5ODMwNjZBMTI1MTU1NzMwOEQ3ODBDREY1RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9BNDVERDcwRTJFRjY0Nzk4MzA2
NkExMjUxNTU3MzA4RDc4MENERjVFLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
d0p2dEdMeTRaV0dqRlNtNjk3MUhHank1VUQ5Q1JrcTEzRm9QZFhxYTl4LzAvMzIz
ODMwMzQzYTY2MzQzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMzM1Mzcz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgED0AAADANBgkqhkiG9w0BAQsFAAOCAQEAKCFLL7PLZNrL
oQRfytL9kafmdzNaH5Ef5Tz+QJcut4YNCOl8ZWlFqD20WCOCk5QGZ01hGJtHvwYD
pywsyqBnHUiOdBuPGj76+kaHTV6+dl7WHr2H0jvbvCyy0QtBlLRNW2J4GSf8ZhoV
QG9ozTYVtS2ZR2tS8q/HO7lPQU8uAlE56ZPNnv2dct4oSaose+/5mm6lDwac+6KD
KgpWFK7Lx052MG/STd7nuU5Jeny4D5CwyPEqTix5+xvrbFUyN+7gkwueIRx5cun1
a0DsEWNMRNKr0u28zAXh3paU5W2+DnrS3Qayzd+ep/DZ2SnOMKTg2gz8Ie7/kEEz
B0yj7ObUmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org