Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a323130303a3a2f34302d3430203d3e20323636333630.roa
File:                     323830343a333661303a323130303a3a2f34302d3430203d3e20323636333630.roa (raw, json)
Hash identifier:          uU/p3rqO/Z6JGoyXDFWY/wuOWaKQzkXAeTeg1KbfHo4=
Subject key identifier:   66:34:C7:C8:60:2E:B8:6D:04:54:65:3C:AC:34:91:6E:D4:2D:88:2F
Certificate issuer:       /CN=8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742
Certificate serial:       2FD2A6C76222D85B19A41C4B5DFEE6F52CE05A78
Authority key identifier: 8C:E5:AB:DB:7C:EF:7B:FE:57:62:FB:9B:68:A5:86:B1:31:0B:17:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a323130303a3a2f34302d3430203d3e20323636333630.roa
Signing time:             Tue 05 Dec 2023 17:44:43 +0000
ROA not before:           Tue 05 Dec 2023 17:39:43 +0000
ROA not after:            Tue 03 Dec 2024 17:44:43 +0000
asID:                     266360
IP address blocks:        2804:36a0:2100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d2:a6:c7:62:22:d8:5b:19:a4:1c:4b:5d:fe:e6:f5:2c:e0:5a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742
        Validity
            Not Before: Dec  5 17:39:43 2023 GMT
            Not After : Dec  3 17:44:43 2024 GMT
        Subject: CN=6634C7C8602EB86D0454653CAC34916ED42D882F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:75:d9:d1:42:65:b5:dc:23:96:89:c0:95:
                    df:09:ac:a7:3a:3d:25:8d:ae:76:6e:94:d6:7c:f3:
                    6c:0a:33:ae:65:5b:32:32:24:31:d9:81:8d:ec:26:
                    12:25:89:89:23:ff:85:0e:3f:91:26:13:f8:73:90:
                    43:05:8b:9c:a9:ca:93:30:9a:44:85:f4:d4:1c:50:
                    fc:0a:bc:70:bf:be:ed:81:0b:b2:d5:30:0c:40:89:
                    f1:de:6b:3c:b4:4b:27:df:7c:89:43:e5:e3:58:0f:
                    a0:4a:44:a1:ba:12:70:68:e7:32:c5:98:6d:8b:55:
                    b1:4e:e8:b3:26:ee:d6:69:8f:93:04:cc:f8:d3:ef:
                    f6:75:6f:24:68:60:3a:bf:bd:5c:04:14:60:76:65:
                    ea:a6:7d:30:fd:3f:22:e2:5b:3a:c3:93:07:95:06:
                    d9:60:29:ae:80:31:ff:3b:3d:cb:f1:50:9a:09:2b:
                    e6:b3:f9:2a:04:22:e7:a8:69:62:4b:db:6d:7f:e0:
                    9d:b2:d1:ae:2c:52:e1:65:20:96:bf:bd:0c:37:0a:
                    fc:bf:21:89:3c:aa:cb:74:6d:f7:e8:f8:27:bf:bd:
                    45:8d:6a:19:e8:48:00:9f:17:2a:a3:d8:eb:5c:94:
                    76:e5:e8:50:b4:77:92:7a:8c:cc:51:40:b4:12:3b:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:34:C7:C8:60:2E:B8:6D:04:54:65:3C:AC:34:91:6E:D4:2D:88:2F
            X509v3 Authority Key Identifier:
                keyid:8C:E5:AB:DB:7C:EF:7B:FE:57:62:FB:9B:68:A5:86:B1:31:0B:17:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CE5ABDB7CEF7BFE5762FB9B68A586B1310B1742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/323830343a333661303a323130303a3a2f34302d3430203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36a0:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:39:35:0b:a6:27:79:67:9f:40:e8:cb:e9:b4:c2:42:5c:8e:
         eb:a9:46:ef:8a:ae:39:44:7c:fe:99:a2:6e:a8:9d:55:0a:93:
         c1:11:cf:7f:fe:7a:93:5e:a7:a2:0e:eb:2a:72:ce:5a:c8:88:
         98:52:26:79:fc:d1:12:17:28:04:2b:f2:71:14:cd:68:c5:08:
         15:93:35:35:31:4e:e8:fe:f5:d5:f6:58:f9:1e:59:3b:d5:6b:
         53:2f:00:6a:91:af:5a:67:d9:5f:ad:56:5c:50:d8:b1:36:94:
         bc:7a:8a:de:6a:cd:fd:dc:d1:f3:c9:8c:7e:39:58:ec:da:47:
         a0:b4:df:92:ea:a1:1b:7e:eb:3f:5b:a7:e0:18:36:8b:48:55:
         d2:fe:19:af:a8:91:7d:0e:9a:43:5a:e3:b6:87:47:3e:b5:86:
         8d:d2:01:03:09:d3:77:9d:e0:af:89:69:0f:a9:6c:81:68:f3:
         b8:7a:b4:24:52:6e:fb:af:00:51:a3:49:00:3e:a0:26:f3:d9:
         3d:b5:79:f7:72:29:8f:c2:be:cf:a9:8a:ff:a8:4f:4f:ae:d6:
         74:cd:d5:17:34:02:ac:56:cc:4f:e2:df:4e:35:fa:e5:ab:5b:
         e2:87:f0:54:b5:69:07:60:d7:06:4b:c7:c4:2b:3e:88:81:ea:
         d4:1d:3d:65
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUL9Kmx2Ii2FsZpBxLXf7m9SzgWngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENFNUFCREI3Q0VGN0JGRTU3NjJGQjlCNjhBNTg2QjEz
MTBCMTc0MjAeFw0yMzEyMDUxNzM5NDNaFw0yNDEyMDMxNzQ0NDNaMDMxMTAvBgNV
BAMTKDY2MzRDN0M4NjAyRUI4NkQwNDU0NjUzQ0FDMzQ5MTZFRDQyRDg4MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9HXZ0UJltdwjlonAld8JrKc6
PSWNrnZulNZ882wKM65lWzIyJDHZgY3sJhIliYkj/4UOP5EmE/hzkEMFi5ypypMw
mkSF9NQcUPwKvHC/vu2BC7LVMAxAifHeazy0SyfffIlD5eNYD6BKRKG6EnBo5zLF
mG2LVbFO6LMm7tZpj5MEzPjT7/Z1byRoYDq/vVwEFGB2ZeqmfTD9PyLiWzrDkweV
BtlgKa6AMf87PcvxUJoJK+az+SoEIueoaWJL221/4J2y0a4sUuFlIJa/vQw3Cvy/
IYk8qst0bffo+Ce/vUWNahnoSACfFyqj2OtclHbl6FC0d5J6jMxRQLQSO47hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZjTHyGAuuG0EVGU8rDSRbtQtiC8wHwYDVR0j
BBgwFoAUjOWr23zve/5XYvubaKWGsTELF0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK
U1MvMC84Q0U1QUJEQjdDRUY3QkZFNTc2MkZCOUI2OEE1ODZCMTMxMEIxNzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDRTVBQkRCN0NFRjdCRkU1
NzYyRkI5QjY4QTU4NkIxMzEwQjE3NDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFTll4VVhFeHVTeXdFOFJhVjZrRGl2SlVSVncySmFwTW5GMUdTWkFwSlNTLzAv
MzIzODMwMzQzYTMzMzY2MTMwM2EzMjMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjMzMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgENqAhMA0GCSqGSIb3DQEBCwUA
A4IBAQDBOTULpid5Z59A6MvptMJCXI7rqUbviq45RHz+maJuqJ1VCpPBEc9//nqT
XqeiDusqcs5ayIiYUiZ5/NESFygEK/JxFM1oxQgVkzU1MU7o/vXV9lj5Hlk71WtT
LwBqka9aZ9lfrVZcUNixNpS8eoreas393NHzyYx+OVjs2kegtN+S6qEbfus/W6fg
GDaLSFXS/hmvqJF9DppDWuO2h0c+tYaN0gEDCdN3neCviWkPqWyBaPO4erQkUm77
rwBRo0kAPqAm89k9tXn3cimPwr7PqYr/qE9PrtZ0zdUXNAKsVsxP4t9ONfrlq1vi
h/BUtWkHYNcGS8fEKz6IgerUHT1l
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org