Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33342d3334203d3e20323639313139.roa
File:                     323830343a356662383a3a2f33342d3334203d3e20323639313139.roa (raw, json)
Hash identifier:          GisrLgctAKgnO07kcHYVs9OnnDgfLJB7QTbu3UMIGa8=
Subject key identifier:   04:23:87:23:55:85:B9:64:60:0E:85:A9:6C:60:35:62:B8:E7:77:46
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       5F472E33335A98DEA40BC5DBFF5F396A926D1694
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33342d3334203d3e20323639313139.roa
Signing time:             Sun 21 May 2023 20:59:06 +0000
ROA not before:           Sun 21 May 2023 20:54:06 +0000
ROA not after:            Tue 21 May 2024 20:59:06 +0000
asID:                     269119
IP address blocks:        2804:5fb8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:47:2e:33:33:5a:98:de:a4:0b:c5:db:ff:5f:39:6a:92:6d:16:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: May 21 20:54:06 2023 GMT
            Not After : May 21 20:59:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:68:6e:51:db:c7:46:63:a9:34:a8:7f:90:
                    d7:a6:e5:7d:90:fd:74:07:87:ab:36:c7:26:5d:4b:
                    d9:24:e3:1c:7b:38:f8:cc:c8:07:b2:0d:7a:d8:c6:
                    c1:ad:aa:15:7c:de:d3:6d:52:00:12:e4:ea:bc:2e:
                    75:eb:75:b7:c8:86:df:e1:0b:f8:1f:b1:81:84:3a:
                    cf:0c:ed:45:75:ea:06:9d:fa:62:af:be:5f:8c:84:
                    4d:02:ee:c7:11:70:9f:af:9e:bd:4e:02:a7:5b:54:
                    2d:df:5b:c7:11:82:12:8c:ed:33:5b:8d:28:88:d8:
                    03:7c:bd:1b:6f:79:df:e9:ef:e9:99:de:d3:b9:12:
                    93:88:d9:4a:1e:44:4b:92:19:f7:a0:69:17:25:06:
                    a3:47:e2:1e:3c:04:95:1e:b8:df:8d:f7:55:0f:56:
                    4d:2b:d0:b9:53:42:92:17:fc:77:2d:12:bf:37:18:
                    0a:62:b4:32:7d:21:fb:3c:f1:24:ea:7d:2a:02:c7:
                    d0:bf:03:dc:b5:49:b1:86:0f:ad:c7:a9:56:28:31:
                    8e:c1:64:22:d5:42:b9:b6:a7:f2:d1:e4:0b:86:31:
                    46:55:37:17:bd:2d:8d:08:be:9b:7e:31:bf:56:f1:
                    6a:db:89:63:dc:20:4b:47:37:cd:99:12:7a:8f:b5:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:23:87:23:55:85:B9:64:60:0E:85:A9:6C:60:35:62:B8:E7:77:46
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33342d3334203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fb8::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:97:3e:05:7d:e6:8d:e0:5b:de:a1:25:b6:27:99:69:e1:69:
         df:30:7f:17:c1:3d:cd:74:18:5b:f1:dd:95:c7:d7:55:7e:2b:
         8b:7e:46:bd:f9:b8:e1:22:ad:9f:95:aa:70:67:95:6f:ec:c5:
         ee:21:2a:19:22:6c:35:16:24:03:19:b1:e6:60:57:f3:a5:7b:
         39:fe:75:3c:8e:78:c1:85:85:18:7e:aa:5f:77:c7:98:2a:c4:
         99:85:ac:73:7b:e3:9f:0a:75:fe:9b:a5:da:1d:a9:bb:5b:70:
         1d:22:11:37:67:e8:2f:50:05:23:b7:0d:48:c8:d9:92:0c:16:
         90:8d:e7:a0:db:20:95:1b:49:ec:b6:6c:16:25:39:41:95:62:
         a9:52:35:c0:81:e9:c5:51:2b:5b:52:0c:a6:0c:38:bf:9a:4d:
         4a:e7:c7:90:c0:d7:c3:5b:25:9b:4e:8a:93:87:5b:27:b7:a0:
         df:46:3c:1e:e9:37:df:21:19:62:85:73:a6:05:6e:ea:41:da:
         58:14:46:0e:33:31:48:2b:ee:1c:2b:55:88:e6:0f:ed:49:2c:
         e2:e6:86:d0:00:de:c5:9d:6b:09:7b:34:73:5d:a5:c7:c5:88:
         36:61:e1:3a:03:9b:e7:37:74:6d:fe:a0:93:3d:48:70:31:df:
         3f:35:85:20
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUX0cuMzNamN6kC8Xb/185apJtFpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNFQjU4QzExREE0REEyNEQxQ0UzNThGQ0Y3REM5RTVG
Rjg5MUNFODAeFw0yMzA1MjEyMDU0MDZaFw0yNDA1MjEyMDU5MDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJBNDY4NkU1MURCQzc0NjYz
QTkzNEE4N0Y5MEQ3QTZFNTdEOTBGRDc0MDc4N0FCMzZDNzI2NUQ0QkQ5MjRFMzFD
N0IzOEY4Q0NDODA3QjIwRDdBRDhDNkMxQURBQTE1N0NERUQzNkQ1MjAwMTJFNEVB
QkMyRTc1RUI3NUI3Qzg4NkRGRTEwQkY4MUZCMTgxODQzQUNGMENFRDQ1NzVFQTA2
OURGQTYyQUZCRTVGOEM4NDREMDJFRUM3MTE3MDlGQUY5RUJENEUwMkE3NUI1NDJE
REY1QkM3MTE4MjEyOENFRDMzNUI4RDI4ODhEODAzN0NCRDFCNkY3OURGRTlFRkU5
OTlERUQzQjkxMjkzODhEOTRBMUU0NDRCOTIxOUY3QTA2OTE3MjUwNkEzNDdFMjFF
M0MwNDk1MUVCOERGOERGNzU1MEY1NjREMkJEMEI5NTM0MjkyMTdGQzc3MkQxMkJG
MzcxODBBNjJCNDMyN0QyMUZCM0NGMTI0RUE3RDJBMDJDN0QwQkYwM0RDQjU0OUIx
ODYwRkFEQzdBOTU2MjgzMThFQzE2NDIyRDU0MkI5QjZBN0YyRDFFNDBCODYzMTQ2
NTUzNzE3QkQyRDhEMDhCRTlCN0UzMUJGNTZGMTZBREI4OTYzREMyMDRCNDczN0NE
OTkxMjdBOEZCNTFCRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0qRoblHbx0ZjqTSof5DXpuV9kP10B4erNscmXUvZJOMcezj4zMgH
sg162MbBraoVfN7TbVIAEuTqvC5163W3yIbf4Qv4H7GBhDrPDO1FdeoGnfpir75f
jIRNAu7HEXCfr569TgKnW1Qt31vHEYISjO0zW40oiNgDfL0bb3nf6e/pmd7TuRKT
iNlKHkRLkhn3oGkXJQajR+IePASVHrjfjfdVD1ZNK9C5U0KSF/x3LRK/NxgKYrQy
fSH7PPEk6n0qAsfQvwPctUmxhg+tx6lWKDGOwWQi1UK5tqfy0eQLhjFGVTcXvS2N
CL6bfjG/VvFq24lj3CBLRzfNmRJ6j7Ub+QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAQjhyNVhblkYA6FqWxgNWK453dGMB8GA1UdIwQYMBaAFJPrWMEdpNok0c41j899
yeX/iRzoMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhrZ3RpZWZ5YUI3bzNk
RUZVbVJTdjNMaTdYTEhoamtxUjRiV1JmTVVyeEFFLzAvOTNFQjU4QzExREE0REEy
NEQxQ0UzNThGQ0Y3REM5RTVGRjg5MUNFOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85M0VCNThDMTFEQTREQTI0RDFDRTM1OEZDRjdEQzlFNUZGODkx
Q0U4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84a2d0aWVmeWFCN28zZEVGVW1S
U3YzTGk3WExIaGprcVI0YldSZk1VcnhBRS8wLzMyMzgzMDM0M2EzNTY2NjIzODNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzOTMxMzEzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
X7gAMA0GCSqGSIb3DQEBCwUAA4IBAQBElz4FfeaN4FveoSW2J5lp4WnfMH8XwT3N
dBhb8d2Vx9dVfiuLfka9+bjhIq2flapwZ5Vv7MXuISoZImw1FiQDGbHmYFfzpXs5
/nU8jnjBhYUYfqpfd8eYKsSZhaxze+OfCnX+m6XaHam7W3AdIhE3Z+gvUAUjtw1I
yNmSDBaQjeeg2yCVG0nstmwWJTlBlWKpUjXAgenFUStbUgymDDi/mk1K58eQwNfD
WyWbToqTh1snt6DfRjwe6TffIRlihXOmBW7qQdpYFEYOMzFIK+4cK1WI5g/tSSzi
5obQAN7FnWsJezRzXaXHxYg2YeE6A5vnN3Rt/qCTPUhwMd8/NYUg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org