Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a623a3a2f34382d3438203d3e20323638353736.roa
File:                     323830343a353335303a623a3a2f34382d3438203d3e20323638353736.roa (raw, json)
Hash identifier:          VAk0UHrI673Je/kc18ZekV+iNf6JRiGaT/BWJITFccM=
Subject key identifier:   E8:16:AE:9A:02:73:2E:DE:6A:45:04:9A:CC:39:9D:A3:EB:87:45:CE
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       3DEAAF812300B94A004BF486862BCCD6CA5D447C
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a623a3a2f34382d3438203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 15:00:02 +0000
ROA not before:           Fri 28 Apr 2023 14:55:02 +0000
ROA not after:            Fri 26 Apr 2024 15:00:02 +0000
asID:                     268576
IP address blocks:        2804:5350:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ea:af:81:23:00:b9:4a:00:4b:f4:86:86:2b:cc:d6:ca:5d:44:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 14:55:02 2023 GMT
            Not After : Apr 26 15:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:ef:0f:38:51:79:6f:7f:35:87:e0:d8:8a:
                    34:ed:bd:f7:88:12:2e:61:72:61:9e:71:5c:fa:5c:
                    00:59:86:a8:61:1d:2e:c4:5d:ac:35:8f:c4:7c:9b:
                    62:2d:7c:66:8a:ce:e6:2f:3b:55:99:49:32:60:98:
                    fc:da:bb:88:23:94:a5:b9:07:f9:ab:6f:23:c4:f1:
                    ca:c6:b5:08:87:c1:46:48:61:b0:07:d0:69:71:67:
                    1e:ca:fe:fc:99:87:fb:d7:57:c8:39:b2:70:65:34:
                    27:4d:47:c9:e3:02:ff:9c:74:fa:cc:50:ba:90:8d:
                    f1:6e:d3:76:f6:18:a7:56:00:16:0c:d4:5b:70:cb:
                    36:ed:95:79:2f:0e:45:28:76:f5:3b:ab:98:5d:60:
                    82:20:88:40:09:2a:30:ad:40:3e:ac:82:ec:c1:f8:
                    8d:aa:ea:f2:0f:b1:e3:b5:d2:ca:fd:54:f4:3e:49:
                    31:41:3e:af:3c:0d:60:29:bc:28:76:e5:4c:a2:1e:
                    11:36:9e:ec:e0:ff:ec:74:ff:be:8c:1c:78:e5:8a:
                    d1:24:5d:24:96:a0:ba:b6:84:5c:ec:84:d5:8e:30:
                    f1:a4:bf:c4:57:5c:fd:31:70:49:65:31:a4:91:d2:
                    c0:2e:d6:1c:76:2b:ff:64:32:82:e7:91:b1:c9:7a:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:16:AE:9A:02:73:2E:DE:6A:45:04:9A:CC:39:9D:A3:EB:87:45:CE
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a623a3a2f34382d3438203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:8f:9f:43:43:d3:da:da:5d:2b:98:f2:79:99:2a:ef:7a:73:
         86:0b:13:ed:28:f7:1d:03:74:8e:e0:21:41:ef:88:e9:3d:cb:
         14:77:aa:34:0e:b9:ec:c8:30:68:83:22:0c:8c:f8:73:b4:b4:
         dd:0b:a6:51:bf:ad:80:f6:e6:41:b3:5b:25:f6:fe:cd:65:1f:
         b7:35:9e:77:dd:3c:39:b6:f5:47:5b:18:5c:06:c4:fc:a5:c3:
         2b:67:48:6b:9c:40:58:bd:72:7e:76:92:8d:98:25:fb:6e:f0:
         6c:c7:fb:a1:3a:84:76:46:ee:32:c8:9d:61:db:31:b1:92:6e:
         e6:ed:ea:6c:d3:5e:27:6b:3c:93:b9:ee:51:43:f9:75:09:4a:
         ae:78:08:08:b9:2f:94:c6:e9:4d:85:2e:90:94:3e:6e:dd:25:
         72:0b:72:e2:81:89:81:8b:86:98:12:59:c3:e5:74:49:fb:4e:
         ce:41:3e:e5:27:f9:33:42:da:25:0a:7e:27:03:dd:f0:3e:3b:
         dd:bc:7b:37:47:97:04:0c:34:c0:30:7c:fe:70:bd:a7:95:68:
         22:e8:67:f0:8d:59:d7:22:29:5e:79:82:e6:ea:00:fa:10:ca:
         c0:4e:ff:3d:4b:e7:54:a4:e8:f2:33:eb:81:19:88:e2:5d:43:
         d0:d5:01:66
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUPeqvgSMAuUoAS/SGhivM1spdRHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJENTI1NkUwNjM3M0NGRTAzRDg5RUI3ODY1RkZDRDcw
ODZGNkVCNjAeFw0yMzA0MjgxNDU1MDJaFw0yNDA0MjYxNTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0UwREVGMEYzODUxNzk2RjdG
MzU4N0UwRDg4QTM0RURCREY3ODgxMjJFNjE3MjYxOUU3MTVDRkE1QzAwNTk4NkE4
NjExRDJFQzQ1REFDMzU4RkM0N0M5QjYyMkQ3QzY2OEFDRUU2MkYzQjU1OTk0OTMy
NjA5OEZDREFCQjg4MjM5NEE1QjkwN0Y5QUI2RjIzQzRGMUNBQzZCNTA4ODdDMTQ2
NDg2MUIwMDdEMDY5NzE2NzFFQ0FGRUZDOTk4N0ZCRDc1N0M4MzlCMjcwNjUzNDI3
NEQ0N0M5RTMwMkZGOUM3NEZBQ0M1MEJBOTA4REYxNkVEMzc2RjYxOEE3NTYwMDE2
MENENDVCNzBDQjM2RUQ5NTc5MkYwRTQ1Mjg3NkY1M0JBQjk4NUQ2MDgyMjA4ODQw
MDkyQTMwQUQ0MDNFQUM4MkVDQzFGODhEQUFFQUYyMEZCMUUzQjVEMkNBRkQ1NEY0
M0U0OTMxNDEzRUFGM0MwRDYwMjlCQzI4NzZFNTRDQTIxRTExMzY5RUVDRTBGRkVD
NzRGRkJFOEMxQzc4RTU4QUQxMjQ1RDI0OTZBMEJBQjY4NDVDRUM4NEQ1OEUzMEYx
QTRCRkM0NTc1Q0ZEMzE3MDQ5NjUzMUE0OTFEMkMwMkVENjFDNzYyQkZGNjQzMjgy
RTc5MUIxQzk3QUE0MkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzg3vDzhReW9/NYfg2Io07b33iBIuYXJhnnFc+lwAWYaoYR0uxF2s
NY/EfJtiLXxmis7mLztVmUkyYJj82ruII5SluQf5q28jxPHKxrUIh8FGSGGwB9Bp
cWceyv78mYf711fIObJwZTQnTUfJ4wL/nHT6zFC6kI3xbtN29hinVgAWDNRbcMs2
7ZV5Lw5FKHb1O6uYXWCCIIhACSowrUA+rILswfiNquryD7HjtdLK/VT0PkkxQT6v
PA1gKbwoduVMoh4RNp7s4P/sdP++jBx45YrRJF0klqC6toRc7ITVjjDxpL/EV1z9
MXBJZTGkkdLALtYcdiv/ZDKC55GxyXqkLQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FOgWrpoCcy7eakUEmsw5naPrh0XOMB8GA1UdIwQYMBaAFGvVJW4GNzz+A9iet4Zf
/NcIb262MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlHSDdMb2duWHd5ZzZn
dkg1QnlHVmNEQjRkRDd4N1h6UlJQaDJQblhFdkVkLzAvNkJENTI1NkUwNjM3M0NG
RTAzRDg5RUI3ODY1RkZDRDcwODZGNkVCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82QkQ1MjU2RTA2MzczQ0ZFMDNEODlFQjc4NjVGRkNENzA4NkY2
RUI2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85R0g3TG9nblh3eWc2Z3ZINUJ5
R1ZjREI0ZEQ3eDdYelJSUGgyUG5YRXZFZC8wLzMyMzgzMDM0M2EzNTMzMzUzMDNh
NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzgzNTM3MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBFNQAAswDQYJKoZIhvcNAQELBQADggEBAKePn0ND09raXSuY8nmZKu96c4YL
E+0o9x0DdI7gIUHviOk9yxR3qjQOuezIMGiDIgyM+HO0tN0LplG/rYD25kGzWyX2
/s1lH7c1nnfdPDm29UdbGFwGxPylwytnSGucQFi9cn52ko2YJftu8GzH+6E6hHZG
7jLInWHbMbGSbubt6mzTXidrPJO57lFD+XUJSq54CAi5L5TG6U2FLpCUPm7dJXIL
cuKBiYGLhpgSWcPldEn7Ts5BPuUn+TNC2iUKficD3fA+O928ezdHlwQMNMAwfP5w
vaeVaCLoZ/CNWdciKV55gubqAPoQysBO/z1L51Sk6PIz64EZiOJdQ9DVAWY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org