Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a313830303a3a2f34302d3430203d3e20323637313839.roa
File:                     323830343a343938383a313830303a3a2f34302d3430203d3e20323637313839.roa (raw, json)
Hash identifier:          1d68TkcXgnOB2KioK33QTKKOBOjLg+gr2yZV1p01Ck8=
Subject key identifier:   18:C1:B1:29:B1:15:F3:53:EB:8E:5B:3E:54:CC:73:B4:D9:54:DD:32
Certificate issuer:       /CN=6B8F2D7352FA1E714663C1285A46D4C8FD4E7430
Certificate serial:       715785E2C31184F52F5EDE36F3270B53858BC4AC
Authority key identifier: 6B:8F:2D:73:52:FA:1E:71:46:63:C1:28:5A:46:D4:C8:FD:4E:74:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a313830303a3a2f34302d3430203d3e20323637313839.roa
Signing time:             Thu 07 Mar 2024 18:39:39 +0000
ROA not before:           Thu 07 Mar 2024 18:34:39 +0000
ROA not after:            Thu 06 Mar 2025 18:39:39 +0000
asID:                     267189
IP address blocks:        2804:4988:1800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:57:85:e2:c3:11:84:f5:2f:5e:de:36:f3:27:0b:53:85:8b:c4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B8F2D7352FA1E714663C1285A46D4C8FD4E7430
        Validity
            Not Before: Mar  7 18:34:39 2024 GMT
            Not After : Mar  6 18:39:39 2025 GMT
        Subject: CN=18C1B129B115F353EB8E5B3E54CC73B4D954DD32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:53:d3:87:5f:59:f1:d0:2f:05:09:0a:1b:
                    8a:21:00:0e:5a:1a:13:b7:74:99:ee:61:3f:45:dc:
                    2a:3e:90:89:e6:ef:8e:91:6e:90:37:af:84:dd:40:
                    a0:45:af:82:14:45:99:5c:50:e6:e7:f6:dc:7c:22:
                    9e:c2:fa:ed:bb:0c:73:13:be:fd:b2:a9:d3:41:12:
                    40:9e:27:d8:4d:4e:f9:7b:6d:e1:e6:fe:6b:06:2d:
                    eb:a8:c0:88:e7:4e:6d:41:e4:9c:49:19:e8:58:1f:
                    c8:52:b6:c7:bc:78:c1:e8:d8:41:f4:65:a4:71:45:
                    a8:97:c3:e0:6e:2b:d9:1c:77:44:c6:84:bf:9b:b5:
                    a6:75:53:6b:88:85:12:61:5e:1e:62:41:95:27:6a:
                    39:d3:c4:17:4e:82:0a:6a:80:5d:0f:1a:fa:30:d8:
                    7b:83:1c:df:2e:43:a6:1c:95:5d:b9:77:8a:f9:1f:
                    1c:0a:6c:4e:dc:68:9b:b3:43:7a:f3:42:76:2a:e3:
                    1a:17:07:36:5e:06:d9:31:5a:ba:27:40:d9:fa:3b:
                    f8:ad:5a:bc:8e:7e:cd:db:00:06:f2:d8:34:17:20:
                    fe:55:6b:51:15:e5:8e:40:36:8b:d6:2b:3c:dc:21:
                    3e:27:98:70:a7:7d:e4:22:fa:48:43:02:c2:c4:68:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:B1:29:B1:15:F3:53:EB:8E:5B:3E:54:CC:73:B4:D9:54:DD:32
            X509v3 Authority Key Identifier:
                keyid:6B:8F:2D:73:52:FA:1E:71:46:63:C1:28:5A:46:D4:C8:FD:4E:74:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/323830343a343938383a313830303a3a2f34302d3430203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4988:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:88:12:5f:9d:c9:a4:29:13:cd:46:22:14:c0:8b:80:60:99:
         a9:b7:03:db:c2:e4:4a:b0:39:ff:5b:24:6e:f8:c8:4d:dd:a1:
         cc:e6:33:17:0b:e3:c3:95:bf:32:6e:36:f4:5b:c4:07:9b:d6:
         05:8f:6e:18:32:f0:ba:fd:14:53:b1:e2:0d:b3:79:4d:ef:35:
         a8:06:c5:26:a6:d3:47:a0:ca:1e:6e:d0:9c:60:2d:95:6d:b3:
         93:a6:cd:90:85:01:9b:da:22:d0:f2:b4:52:ef:e9:d2:93:7e:
         f1:0e:17:a5:bb:fa:52:30:86:13:0f:27:99:44:6a:41:13:8b:
         ca:73:9c:15:e1:6d:6a:2c:c7:ad:a0:d0:c9:f1:40:6d:dd:f8:
         74:c1:7f:71:94:bd:58:f2:de:9b:c4:c3:df:96:30:98:cc:91:
         4a:45:87:b9:c3:f8:d5:13:eb:45:02:d0:1c:01:8a:d5:44:6a:
         91:62:6b:61:97:13:17:3e:c2:ff:1c:70:44:92:92:03:9a:87:
         fd:f2:1d:a1:79:63:69:cd:49:f3:81:b2:90:25:9d:5a:17:20:
         a6:3f:94:13:db:a9:10:0f:db:31:81:19:f1:f0:21:3c:45:27:
         fa:45:5d:2b:50:7a:37:34:90:5f:c3:b3:e0:86:8c:ca:05:3f:
         f5:5e:a7:da
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcVeF4sMRhPUvXt428ycLU4WLxKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI4RjJENzM1MkZBMUU3MTQ2NjNDMTI4NUE0NkQ0QzhG
RDRFNzQzMDAeFw0yNDAzMDcxODM0MzlaFw0yNTAzMDYxODM5MzlaMDMxMTAvBgNV
BAMTKDE4QzFCMTI5QjExNUYzNTNFQjhFNUIzRTU0Q0M3M0I0RDk1NEREMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIl1PTh19Z8dAvBQkKG4ohAA5a
GhO3dJnuYT9F3Co+kInm746RbpA3r4TdQKBFr4IURZlcUObn9tx8Ip7C+u27DHMT
vv2yqdNBEkCeJ9hNTvl7beHm/msGLeuowIjnTm1B5JxJGehYH8hStse8eMHo2EH0
ZaRxRaiXw+BuK9kcd0TGhL+btaZ1U2uIhRJhXh5iQZUnajnTxBdOggpqgF0PGvow
2HuDHN8uQ6YclV25d4r5HxwKbE7caJuzQ3rzQnYq4xoXBzZeBtkxWronQNn6O/it
WryOfs3bAAby2DQXIP5Va1EV5Y5ANovWKzzcIT4nmHCnfeQi+khDAsLEaFYrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUGMGxKbEV81Prjls+VMxztNlU3TIwHwYDVR0j
BBgwFoAUa48tc1L6HnFGY8EoWkbUyP1OdDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVQS3hCWVNZU2hOd1F4TkpXNlY1cEtIMWtXM0pQb0FhR3dyc2FLNUN5
eEovMC82QjhGMkQ3MzUyRkExRTcxNDY2M0MxMjg1QTQ2RDRDOEZENEU3NDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZCOEYyRDczNTJGQTFFNzE0
NjYzQzEyODVBNDZENEM4RkQ0RTc0MzAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FFUEt4QllTWVNoTndReE5KVzZWNXBLSDFrVzNKUG9BYUd3cnNhSzVDeXhKLzAv
MzIzODMwMzQzYTM0MzkzODM4M2EzMTM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzMxMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgESYgYMA0GCSqGSIb3DQEBCwUA
A4IBAQAGiBJfncmkKRPNRiIUwIuAYJmptwPbwuRKsDn/WyRu+MhN3aHM5jMXC+PD
lb8ybjb0W8QHm9YFj24YMvC6/RRTseINs3lN7zWoBsUmptNHoMoebtCcYC2VbbOT
ps2QhQGb2iLQ8rRS7+nSk37xDhelu/pSMIYTDyeZRGpBE4vKc5wV4W1qLMetoNDJ
8UBt3fh0wX9xlL1Y8t6bxMPfljCYzJFKRYe5w/jVE+tFAtAcAYrVRGqRYmthlxMX
PsL/HHBEkpIDmof98h2heWNpzUnzgbKQJZ1aFyCmP5QT26kQD9sxgRnx8CE8RSf6
RV0rUHo3NJBfw7PghozKBT/1Xqfa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org