Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a383030303a3a2f33342d3334203d3e20323639343333.roa
File:                     323830343a363438383a383030303a3a2f33342d3334203d3e20323639343333.roa (raw, json)
Hash identifier:          Z+krs/0mElRi36W+oITtS95171rXVy2hH0JN5GPRMUk=
Subject key identifier:   CC:88:B9:2C:A8:5E:A1:B8:C9:D9:54:6B:20:3E:AC:9F:D5:C7:05:34
Certificate issuer:       /CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
Certificate serial:       741905E2278D2CD2E7DD8CCF7EB23BC655F727AF
Authority key identifier: 5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a383030303a3a2f33342d3334203d3e20323639343333.roa
Signing time:             Mon 19 Jun 2023 18:18:29 +0000
ROA not before:           Mon 19 Jun 2023 18:13:29 +0000
ROA not after:            Mon 17 Jun 2024 18:18:29 +0000
asID:                     269433
IP address blocks:        2804:6488:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:19:05:e2:27:8d:2c:d2:e7:dd:8c:cf:7e:b2:3b:c6:55:f7:27:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
        Validity
            Not Before: Jun 19 18:13:29 2023 GMT
            Not After : Jun 17 18:18:29 2024 GMT
        Subject: CN=CC88B92CA85EA1B8C9D9546B203EAC9FD5C70534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:7e:05:90:cf:88:e9:85:8a:dc:70:e5:fb:
                    81:e1:18:b9:d5:76:29:af:19:49:ad:ff:8b:67:d4:
                    b4:a1:67:51:cb:c1:b2:fa:7c:54:0d:c6:61:e3:e5:
                    dc:5f:c7:fb:84:94:d6:62:26:bf:56:0c:77:1b:96:
                    77:fc:9a:c6:25:2f:32:10:fd:46:04:6c:1f:8e:4a:
                    58:a2:24:a6:08:b9:64:96:32:26:06:81:00:0f:08:
                    f3:cf:a3:2f:cf:8c:09:49:dd:b5:aa:bc:dc:1a:32:
                    3c:91:20:9c:f7:7f:85:8f:e2:dd:a4:1b:8d:6c:0f:
                    89:85:7e:0a:19:96:36:c9:07:9c:4c:37:99:be:5a:
                    57:d7:c8:ec:d3:aa:2f:b9:02:a9:e0:0c:f5:d5:e8:
                    00:fb:7d:89:d4:47:f6:e1:6f:6c:7a:3b:c4:95:52:
                    2c:43:6a:08:56:fd:a2:4c:70:8f:41:54:08:e1:3d:
                    a2:f6:fb:ae:3c:24:ff:50:ca:fa:b1:89:fb:08:f8:
                    60:68:03:85:65:64:3a:f8:f4:c5:1b:0b:2d:61:cf:
                    4a:45:f8:e3:04:3b:2c:6d:75:47:0e:8b:bb:71:56:
                    31:98:7c:55:d3:9d:cb:a8:21:e5:d4:73:72:f8:51:
                    4b:ad:c6:22:3d:bf:3a:54:cc:ec:02:8c:68:49:0b:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:88:B9:2C:A8:5E:A1:B8:C9:D9:54:6B:20:3E:AC:9F:D5:C7:05:34
            X509v3 Authority Key Identifier:
                keyid:5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/323830343a363438383a383030303a3a2f33342d3334203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6488:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:95:eb:60:ea:66:d4:35:2c:f4:a6:71:7a:a6:e0:a2:0d:41:
         f8:fa:f4:89:e0:62:79:a6:47:d7:68:ea:63:aa:93:56:47:3f:
         7b:d5:02:3a:2b:f5:29:ed:fc:06:82:ab:fb:77:fc:fb:8f:ef:
         dd:dd:76:c4:ef:35:0f:00:94:9b:05:17:af:9c:7d:1e:26:92:
         50:f8:42:e0:ce:2b:d0:3a:03:a1:14:75:7d:9c:5d:be:5d:fc:
         85:5b:44:74:ee:5f:e7:30:81:1b:e7:8d:c5:39:9c:51:01:3b:
         44:2b:9a:08:57:53:a6:10:da:26:0f:1d:ed:0f:5e:6d:db:50:
         f2:59:bc:5f:78:91:91:25:88:7f:60:6b:52:20:35:8a:52:fa:
         f8:c2:d1:05:8c:09:28:e5:7d:1f:51:6f:21:90:52:f5:89:34:
         bf:8e:aa:20:86:76:ed:bb:e4:77:83:2c:a4:27:e6:2f:02:8e:
         85:77:64:5c:9a:5d:4b:3e:90:db:f2:13:d9:17:ba:12:c4:62:
         49:e3:ee:a9:08:50:8c:22:37:9f:48:0f:90:e6:9a:45:02:be:
         ce:0b:44:ef:ab:d0:d2:ea:94:3f:2e:16:83:36:0b:03:4f:37:
         8d:06:df:54:45:1c:a2:5e:48:6c:33:34:8f:ca:18:e1:58:04:
         86:0b:8b:39
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdBkF4ieNLNLn3YzPfrI7xlX3J68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJBQjNGRjMyM0Q2QTdENEE5N0ZGNzc0MzVBQTRBRDUw
NzJBMDExNTAeFw0yMzA2MTkxODEzMjlaFw0yNDA2MTcxODE4MjlaMDMxMTAvBgNV
BAMTKENDODhCOTJDQTg1RUExQjhDOUQ5NTQ2QjIwM0VBQzlGRDVDNzA1MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDch34FkM+I6YWK3HDl+4HhGLnV
dimvGUmt/4tn1LShZ1HLwbL6fFQNxmHj5dxfx/uElNZiJr9WDHcblnf8msYlLzIQ
/UYEbB+OSliiJKYIuWSWMiYGgQAPCPPPoy/PjAlJ3bWqvNwaMjyRIJz3f4WP4t2k
G41sD4mFfgoZljbJB5xMN5m+WlfXyOzTqi+5AqngDPXV6AD7fYnUR/bhb2x6O8SV
UixDaghW/aJMcI9BVAjhPaL2+648JP9QyvqxifsI+GBoA4VlZDr49MUbCy1hz0pF
+OMEOyxtdUcOi7txVjGYfFXTncuoIeXUc3L4UUutxiI9vzpUzOwCjGhJC++dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUzIi5LKheobjJ2VRrID6sn9XHBTQwHwYDVR0j
BBgwFoAUW6s/8yPWp9Spf/d0NapK1QcqARUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmk2Umg0clUyeTY2MWdoYzloZVpRUVVlQXBlUHg2Mk5QZGRjN3E1eEZB
RGgvMC81QkFCM0ZGMzIzRDZBN0Q0QTk3RkY3NzQzNUFBNEFENTA3MkEwMTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCQUIzRkYzMjNENkE3RDRB
OTdGRjc3NDM1QUE0QUQ1MDcyQTAxMTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZpNlJoNHJVMnk2NjFnaGM5aGVaUVFVZUFwZVB4NjJOUGRkYzdxNXhGQURoLzAv
MzIzODMwMzQzYTM2MzQzODM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM0MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZIiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCyletg6mbUNSz0pnF6puCiDUH4+vSJ4GJ5pkfXaOpjqpNWRz971QI6K/Up
7fwGgqv7d/z7j+/d3XbE7zUPAJSbBRevnH0eJpJQ+ELgzivQOgOhFHV9nF2+XfyF
W0R07l/nMIEb543FOZxRATtEK5oIV1OmENomDx3tD15t21DyWbxfeJGRJYh/YGtS
IDWKUvr4wtEFjAko5X0fUW8hkFL1iTS/jqoghnbtu+R3gyykJ+YvAo6Fd2Rcml1L
PpDb8hPZF7oSxGJJ4+6pCFCMIjefSA+Q5ppFAr7OC0Tvq9DS6pQ/LhaDNgsDTzeN
Bt9URRyiXkhsMzSPyhjhWASGC4s5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org