Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/323830343a353965343a3a2f33322d3332203d3e20323638373332.roa
File:                     323830343a353965343a3a2f33322d3332203d3e20323638373332.roa (raw, json)
Hash identifier:          ye1P/gge0Ww183S5yeHLr9Zfwn9136Dv88J7zOJ6VzY=
Subject key identifier:   79:6A:29:EC:CB:74:6A:A9:71:2C:09:BA:90:F7:00:EA:F4:FF:14:19
Certificate issuer:       /CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
Certificate serial:       6962BA76A74AAF98314EAAD94AFC8D34E4EA4469
Authority key identifier: 44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/323830343a353965343a3a2f33322d3332203d3e20323638373332.roa
Signing time:             Thu 18 Jan 2024 18:00:00 +0000
ROA not before:           Thu 18 Jan 2024 17:55:00 +0000
ROA not after:            Thu 16 Jan 2025 18:00:00 +0000
asID:                     268732
IP address blocks:        2804:59e4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:62:ba:76:a7:4a:af:98:31:4e:aa:d9:4a:fc:8d:34:e4:ea:44:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
        Validity
            Not Before: Jan 18 17:55:00 2024 GMT
            Not After : Jan 16 18:00:00 2025 GMT
        Subject: CN=796A29ECCB746AA9712C09BA90F700EAF4FF1419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:85:07:8e:73:59:c9:29:16:5f:b3:0e:2b:
                    11:01:48:b7:52:75:d6:0a:85:ad:c2:08:bd:fb:ac:
                    fd:66:06:12:78:58:f8:f9:df:0e:c4:ba:e7:64:e3:
                    57:1c:46:2a:29:d4:99:c1:6c:e2:af:f9:04:88:8e:
                    bc:dc:0d:51:9d:a1:c8:c9:0b:b0:41:6b:6a:b3:05:
                    4d:54:87:cd:6b:a9:85:aa:c4:d2:c6:cd:39:ab:4d:
                    a3:ea:f6:52:28:c3:88:88:6a:60:17:ea:68:f6:f2:
                    cb:78:57:63:ec:ae:fe:e6:ee:71:3d:e0:82:ce:9b:
                    00:27:08:d6:3e:41:84:17:38:52:cd:31:71:c7:cc:
                    19:a0:b3:23:66:a7:d0:ca:6f:e2:03:0f:fd:d8:bc:
                    f4:07:5f:35:0c:7f:61:5d:65:0e:8f:46:19:75:fb:
                    f1:1b:8a:86:ac:38:2a:76:97:a3:5a:60:f2:99:77:
                    d8:c6:37:e6:52:57:f0:6c:16:eb:d0:57:f3:f3:48:
                    c7:6a:ce:f0:9d:26:a2:43:41:f5:18:60:3a:1e:36:
                    d6:5b:d8:5a:4d:ac:45:78:25:5c:dd:a7:d9:11:d1:
                    f6:39:3e:68:13:ac:70:83:59:2e:44:aa:2d:41:72:
                    c7:f5:9d:d1:b1:ae:4f:ca:91:40:1a:5c:d5:d7:d5:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:29:EC:CB:74:6A:A9:71:2C:09:BA:90:F7:00:EA:F4:FF:14:19
            X509v3 Authority Key Identifier:
                keyid:44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/323830343a353965343a3a2f33322d3332203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:f2:f3:4e:db:be:10:b2:94:80:98:9b:17:4b:43:d5:07:91:
         e7:8a:2d:48:36:09:e0:34:b8:db:3c:5b:11:1c:80:06:16:ed:
         69:b6:06:94:b2:c4:63:1c:b8:c6:8c:97:67:73:41:7c:b3:04:
         fc:a8:43:ef:9f:8f:4f:93:d2:67:59:ae:29:cd:b6:92:7a:f8:
         f0:4a:c5:5f:35:b5:05:41:af:e0:c3:75:e0:6c:22:d3:b0:23:
         d0:92:6a:b2:a0:4e:10:b1:38:9a:bf:55:7a:ef:20:87:64:ed:
         02:46:66:56:67:4d:80:70:08:92:a6:6f:ca:40:98:94:91:87:
         33:74:17:1f:43:cd:d3:59:36:05:1e:0f:6b:c8:a1:8d:a7:7c:
         3c:b9:e4:0f:a9:aa:63:11:cd:a4:4c:06:15:11:87:24:05:ab:
         c3:7b:4e:37:f7:aa:dd:3b:8f:83:bc:05:bc:72:ce:39:4d:c1:
         97:38:80:a3:7e:38:98:b3:62:11:06:1a:d1:fe:19:20:82:e7:
         23:26:e8:3f:d8:8f:5c:1c:05:c9:0c:04:5f:b7:52:03:94:c4:
         a7:58:61:44:a7:bb:64:2e:ce:90:69:fe:67:62:1a:be:82:27:
         62:23:f9:e5:de:61:76:d9:bd:b2:47:30:ef:c6:6c:25:a3:ae:
         c7:fe:a0:56
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaWK6dqdKr5gxTqrZSvyNNOTqRGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRGMUU0Qjk0RkYyMjRDQ0NCQTRCQjA5REU5NjBFNTk0
NTkyNzRGNTAeFw0yNDAxMTgxNzU1MDBaFw0yNTAxMTYxODAwMDBaMDMxMTAvBgNV
BAMTKDc5NkEyOUVDQ0I3NDZBQTk3MTJDMDlCQTkwRjcwMEVBRjRGRjE0MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEYUHjnNZySkWX7MOKxEBSLdS
ddYKha3CCL37rP1mBhJ4WPj53w7Euudk41ccRiop1JnBbOKv+QSIjrzcDVGdocjJ
C7BBa2qzBU1Uh81rqYWqxNLGzTmrTaPq9lIow4iIamAX6mj28st4V2Psrv7m7nE9
4ILOmwAnCNY+QYQXOFLNMXHHzBmgsyNmp9DKb+IDD/3YvPQHXzUMf2FdZQ6PRhl1
+/EbioasOCp2l6NaYPKZd9jGN+ZSV/BsFuvQV/PzSMdqzvCdJqJDQfUYYDoeNtZb
2FpNrEV4JVzdp9kR0fY5PmgTrHCDWS5Eqi1Bcsf1ndGxrk/KkUAaXNXX1RAhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUeWop7Mt0aqlxLAm6kPcA6vT/FBkwHwYDVR0j
BBgwFoAURPHkuU/yJMzLpLsJ3pYOWUWSdPUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uMTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNN
LzAvNDRGMUU0Qjk0RkYyMjRDQ0NCQTRCQjA5REU5NjBFNTk0NTkyNzRGNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80NEYxRTRCOTRGRjIyNENDQ0JB
NEJCMDlERTk2MEU1OTQ1OTI3NEY1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
MTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNNLzAvMzIz
ODMwMzQzYTM1Mzk2NTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4Mzcz
MzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARZ5DANBgkqhkiG9w0BAQsFAAOCAQEACPLzTtu+ELKU
gJibF0tD1QeR54otSDYJ4DS42zxbERyABhbtabYGlLLEYxy4xoyXZ3NBfLME/KhD
75+PT5PSZ1muKc22knr48ErFXzW1BUGv4MN14Gwi07Aj0JJqsqBOELE4mr9Veu8g
h2TtAkZmVmdNgHAIkqZvykCYlJGHM3QXH0PN01k2BR4Pa8ihjad8PLnkD6mqYxHN
pEwGFRGHJAWrw3tON/eq3TuPg7wFvHLOOU3BlziAo344mLNiEQYa0f4ZIILnIybo
P9iPXBwFyQwEX7dSA5TEp1hhRKe7ZC7OkGn+Z2IavoInYiP55d5hdtm9skcw78Zs
JaOux/6gVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org