Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa
File:                     323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa (raw, json)
Hash identifier:          14UiteSvBrJnhqME9iEpvhAdp3edYVeeSrvkuFrEqIo=
Subject key identifier:   A7:C4:EB:D1:B0:35:3B:85:FF:0E:1E:05:E9:BB:09:E6:51:62:09:3B
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       3C16B82343DCCD2E38DE6E2253FFF9E2D25AE370
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa
Signing time:             Tue 15 Aug 2023 21:52:53 +0000
ROA not before:           Tue 15 Aug 2023 21:47:53 +0000
ROA not after:            Tue 13 Aug 2024 21:52:53 +0000
asID:                     269595
IP address blocks:        2804:66f8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:16:b8:23:43:dc:cd:2e:38:de:6e:22:53:ff:f9:e2:d2:5a:e3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Aug 15 21:47:53 2023 GMT
            Not After : Aug 13 21:52:53 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:3e:b0:7f:fd:33:fe:27:a9:67:03:74:fb:
                    b9:fa:9f:42:01:0d:ba:e8:77:f5:9d:ed:b8:da:60:
                    2c:ff:18:a2:e2:3e:f3:b9:7e:c6:e2:ec:b9:64:7f:
                    16:19:60:a2:25:4c:42:d0:a3:07:5d:75:c6:53:9c:
                    ab:94:95:35:40:75:f7:50:1b:90:40:42:ab:1d:08:
                    1c:5f:c4:4d:40:30:91:4d:8c:57:c6:03:dc:92:d0:
                    a1:37:97:79:15:f2:4c:45:95:f7:ce:cc:9f:b9:52:
                    f8:53:cb:65:6a:66:c1:ec:b3:65:12:df:a6:c5:22:
                    1b:ee:b1:51:69:ff:b1:54:b3:ac:65:99:1f:b6:fa:
                    91:ac:19:58:db:20:82:bb:1c:d6:03:95:89:f7:52:
                    ea:a7:5b:d6:75:b8:03:6b:3e:43:05:a8:c3:4c:1c:
                    5b:21:66:73:33:c0:f1:ab:70:80:57:88:28:22:ba:
                    15:ec:6f:1e:25:ec:17:91:03:4c:a0:56:5c:61:7e:
                    c1:62:36:95:97:41:03:58:a8:14:a0:f3:59:56:72:
                    ae:0e:c3:de:29:6d:67:b6:64:cf:81:41:91:54:14:
                    48:fa:96:86:b9:28:fa:98:b7:3f:2b:79:7c:59:86:
                    90:2d:26:97:26:68:ac:28:0b:5d:84:68:49:db:6d:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C4:EB:D1:B0:35:3B:85:FF:0E:1E:05:E9:BB:09:E6:51:62:09:3B
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66f8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:5a:91:a1:4d:e7:13:64:2d:0e:f3:75:79:b0:c6:6e:41:
         2a:5a:3c:8d:f7:f9:ff:4e:a8:77:c2:c2:9d:de:4d:46:e1:d2:
         e5:94:1d:d9:a3:23:64:b6:56:e8:b6:2f:c0:e2:29:31:3e:25:
         c1:32:0d:27:b3:31:bf:87:af:23:d6:51:2e:27:6b:ad:b5:26:
         11:44:f1:f6:c5:d8:49:15:fd:04:10:e7:97:8e:1e:ec:66:85:
         f7:0a:b9:ef:cb:01:07:40:91:b6:19:f1:7c:1a:65:e4:f5:69:
         b3:5b:f4:04:3c:c1:50:19:be:49:4a:18:62:8b:94:8c:c8:8c:
         f3:a3:23:bc:b3:59:fd:47:d3:9e:41:d9:5b:39:ef:e8:23:96:
         b6:09:22:82:3f:5f:b2:45:4a:fd:99:bc:a8:2c:f1:9f:39:a4:
         ba:8b:a9:eb:b4:0b:f3:9e:cd:74:f1:87:61:c5:16:a7:d2:2c:
         94:03:c9:02:63:7b:bc:11:af:d4:5e:79:2e:5d:34:c6:bd:1c:
         34:08:ab:28:33:4b:8d:6f:dc:8d:1d:25:a9:ad:be:4c:5b:85:
         e9:72:00:ff:10:58:37:6d:43:68:9e:63:a8:7e:f0:c3:c8:01:
         32:21:30:30:43:35:4d:0d:c7:f1:4a:ae:3c:eb:c0:0b:9f:9e:
         a1:ce:9b:da
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUPBa4I0PczS443m4iU//54tJa43AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg3OUQ1RTNEMTcxQjVERTVBOEU2NDYwOTMwMDFGMDlF
MEQ5RkQ2MjAeFw0yMzA4MTUyMTQ3NTNaFw0yNDA4MTMyMTUyNTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ0MzNFQjA3RkZEMzNGRTI3
QTk2NzAzNzRGQkI5RkE5RjQyMDEwREJBRTg3N0Y1OURFREI4REE2MDJDRkYxOEEy
RTIzRUYzQjk3RUM2RTJFQ0I5NjQ3RjE2MTk2MEEyMjU0QzQyRDBBMzA3NUQ3NUM2
NTM5Q0FCOTQ5NTM1NDA3NUY3NTAxQjkwNDA0MkFCMUQwODFDNUZDNDRENDAzMDkx
NEQ4QzU3QzYwM0RDOTJEMEExMzc5Nzc5MTVGMjRDNDU5NUY3Q0VDQzlGQjk1MkY4
NTNDQjY1NkE2NkMxRUNCMzY1MTJERkE2QzUyMjFCRUVCMTUxNjlGRkIxNTRCM0FD
NjU5OTFGQjZGQTkxQUMxOTU4REIyMDgyQkIxQ0Q2MDM5NTg5Rjc1MkVBQTc1QkQ2
NzVCODAzNkIzRTQzMDVBOEMzNEMxQzVCMjE2NjczMzNDMEYxQUI3MDgwNTc4ODI4
MjJCQTE1RUM2RjFFMjVFQzE3OTEwMzRDQTA1NjVDNjE3RUMxNjIzNjk1OTc0MTAz
NThBODE0QTBGMzU5NTY3MkFFMEVDM0RFMjk2RDY3QjY2NENGODE0MTkxNTQxNDQ4
RkE5Njg2QjkyOEZBOThCNzNGMkI3OTdDNTk4NjkwMkQyNjk3MjY2OEFDMjgwQjVE
ODQ2ODQ5REI2REIzMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApEM+sH/9M/4nqWcDdPu5+p9CAQ266Hf1ne242mAs/xii4j7zuX7G
4uy5ZH8WGWCiJUxC0KMHXXXGU5yrlJU1QHX3UBuQQEKrHQgcX8RNQDCRTYxXxgPc
ktChN5d5FfJMRZX3zsyfuVL4U8tlambB7LNlEt+mxSIb7rFRaf+xVLOsZZkftvqR
rBlY2yCCuxzWA5WJ91Lqp1vWdbgDaz5DBajDTBxbIWZzM8Dxq3CAV4goIroV7G8e
JewXkQNMoFZcYX7BYjaVl0EDWKgUoPNZVnKuDsPeKW1ntmTPgUGRVBRI+paGuSj6
mLc/K3l8WYaQLSaXJmisKAtdhGhJ222zKQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FKfE69GwNTuF/w4eBem7CeZRYgk7MB8GA1UdIwQYMBaAFIh51ePRcbXeWo5kYJMA
Hwng2f1iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVHRENpcmdoUXZCYUpY
OXJXa0sxd1JQZzVBNlFyOTdvNUJkSmJRVG1ZZFA2LzAvODg3OUQ1RTNEMTcxQjVE
RTVBOEU2NDYwOTMwMDFGMDlFMEQ5RkQ2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84ODc5RDVFM0QxNzFCNURFNUE4RTY0NjA5MzAwMUYwOUUwRDlG
RDYyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81R0RDaXJnaFF2QmFKWDlyV2tL
MXdSUGc1QTZRcjk3bzVCZEpiUVRtWWRQNi8wLzMyMzgzMDM0M2EzNjM2NjYzODNh
MzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzNTM5MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBGb4gDANBgkqhkiG9w0BAQsFAAOCAQEAD/9akaFN5xNkLQ7zdXmw
xm5BKlo8jff5/06od8LCnd5NRuHS5ZQd2aMjZLZW6LYvwOIpMT4lwTINJ7Mxv4ev
I9ZRLidrrbUmEUTx9sXYSRX9BBDnl44e7GaF9wq578sBB0CRthnxfBpl5PVps1v0
BDzBUBm+SUoYYouUjMiM86MjvLNZ/UfTnkHZWznv6COWtgkigj9fskVK/Zm8qCzx
nzmkuoup67QL857NdPGHYcUWp9IslAPJAmN7vBGv1F55Ll00xr0cNAirKDNLjW/c
jR0lqa2+TFuF6XIA/xBYN21DaJ5jqH7ww8gBMiEwMEM1TQ3H8UquPOvAC5+eoc6b
2g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org