Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a353030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a353030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          eVOAj+JX/0hhjR6iMljYtMKewK8ohnHhhi+/npDHWvM=
Subject key identifier:   E6:97:CB:9A:06:0D:9A:25:84:9D:2D:C1:3B:87:0B:0D:1E:71:96:EC
Certificate issuer:       /CN=B3FF99116A544117F00133530DA29FB28967FFBD
Certificate serial:       7454E2D1A086C075918282D4ACD0D95DF5C2B633
Authority key identifier: B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a353030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Fri 02 Sep 2022 12:04:45 +0000
ROA not before:           Fri 02 Sep 2022 11:59:45 +0000
ROA not after:            Fri 01 Sep 2023 12:04:45 +0000
asID:                     264425
IP address blocks:        2804:1e60:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:54:e2:d1:a0:86:c0:75:91:82:82:d4:ac:d0:d9:5d:f5:c2:b6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3FF99116A544117F00133530DA29FB28967FFBD
        Validity
            Not Before: Sep  2 11:59:45 2022 GMT
            Not After : Sep  1 12:04:45 2023 GMT
        Subject: CN=E697CB9A060D9A25849D2DC13B870B0D1E7196EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:06:74:a6:a6:3e:1b:fb:1d:fd:c0:91:f6:
                    45:19:0d:2e:48:db:86:5b:8e:ab:27:09:f2:d7:7c:
                    89:18:de:42:7d:fc:06:db:e7:17:71:25:93:dc:68:
                    21:e8:b1:a6:8a:a3:5a:77:65:ec:81:31:11:ac:bc:
                    3a:8a:81:9d:11:06:28:dc:01:97:69:4b:88:0e:6c:
                    d6:a8:a1:e6:ad:a8:ed:ad:92:29:66:f9:b4:7e:d7:
                    89:00:19:68:c6:5d:b3:27:2c:24:07:29:23:a0:cb:
                    be:ec:2a:8f:f5:1d:87:e7:b3:dc:25:5b:cf:6b:81:
                    47:e9:c9:af:4d:30:79:de:df:62:a9:3c:dd:b1:04:
                    8a:c3:49:36:8f:39:4b:f2:3a:45:d2:02:74:d8:af:
                    09:0f:41:d9:c9:5c:e6:95:32:f8:1e:40:79:2b:4f:
                    46:d2:89:51:77:d6:98:c4:eb:8b:ef:1e:63:5c:89:
                    cf:1f:be:52:9b:77:b7:ea:28:1f:56:1b:8c:33:fc:
                    e6:f7:a6:08:b1:38:3d:e3:3d:61:1c:4e:1c:03:b2:
                    14:13:20:d5:6d:f7:f3:82:85:5d:2d:db:59:8e:fc:
                    30:3e:26:c0:55:8a:cf:67:af:4f:36:7b:f7:f3:04:
                    59:99:7f:d7:12:92:03:e9:1b:21:79:27:6c:fe:ea:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:CB:9A:06:0D:9A:25:84:9D:2D:C1:3B:87:0B:0D:1E:71:96:EC
            X509v3 Authority Key Identifier:
                keyid:B3:FF:99:11:6A:54:41:17:F0:01:33:53:0D:A2:9F:B2:89:67:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/B3FF99116A544117F00133530DA29FB28967FFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3FF99116A544117F00133530DA29FB28967FFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a353030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         99:3e:17:9b:80:8c:94:c1:b4:46:f9:2d:dd:6a:7d:bd:b6:ec:
         7d:b0:28:b4:9a:9d:d6:15:83:0d:51:8e:62:d7:91:67:c9:3e:
         52:10:6c:b2:f3:a7:72:44:19:b1:30:19:89:9b:be:9f:77:68:
         2f:ee:42:ce:3a:62:8a:8e:15:79:67:2b:25:80:97:b2:40:67:
         0d:67:e7:62:9e:68:c5:1c:25:3d:a2:14:b3:e0:31:5c:27:a7:
         9a:e4:cc:c3:1a:49:c1:24:f0:c1:5c:66:db:ea:4d:82:45:69:
         bb:8a:3a:cd:d1:e9:b6:c9:fd:bf:eb:31:99:e0:70:f9:35:89:
         42:e9:9d:4c:f8:1c:7d:8c:44:3d:c2:20:c1:92:83:13:db:2d:
         a2:36:c6:ad:51:42:c4:56:d8:14:ea:ee:b6:0a:3e:88:a6:d4:
         26:da:a4:af:83:66:2f:15:68:39:84:4e:ba:9b:5e:5d:53:a1:
         66:be:c3:bd:77:86:4e:88:b7:7a:a4:e2:02:2e:b8:bc:fe:44:
         e0:be:88:36:9d:12:4a:87:6c:56:9a:e3:c4:6e:6f:9b:35:d6:
         91:1f:1d:d8:c8:b1:3b:6f:f5:95:e0:56:02:25:4c:f0:e7:7f:
         b3:22:f7:7c:c4:82:1d:99:74:0c:18:95:28:e7:0b:20:c2:a4:
         e1:ec:c9:0a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdFTi0aCGwHWRgoLUrNDZXfXCtjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNGRjk5MTE2QTU0NDExN0YwMDEzMzUzMERBMjlGQjI4
OTY3RkZCRDAeFw0yMjA5MDIxMTU5NDVaFw0yMzA5MDExMjA0NDVaMDMxMTAvBgNV
BAMTKEU2OTdDQjlBMDYwRDlBMjU4NDlEMkRDMTNCODcwQjBEMUU3MTk2RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73wZ0pqY+G/sd/cCR9kUZDS5I
24ZbjqsnCfLXfIkY3kJ9/Abb5xdxJZPcaCHosaaKo1p3ZeyBMRGsvDqKgZ0RBijc
AZdpS4gObNaooeatqO2tkilm+bR+14kAGWjGXbMnLCQHKSOgy77sKo/1HYfns9wl
W89rgUfpya9NMHne32KpPN2xBIrDSTaPOUvyOkXSAnTYrwkPQdnJXOaVMvgeQHkr
T0bSiVF31pjE64vvHmNcic8fvlKbd7fqKB9WG4wz/Ob3pgixOD3jPWEcThwDshQT
INVt9/OChV0t21mO/DA+JsBVis9nr082e/fzBFmZf9cSkgPpGyF5J2z+6gmLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5pfLmgYNmiWEnS3BO4cLDR5xluwwHwYDVR0j
BBgwFoAUs/+ZEWpUQRfwATNTDaKfsoln/70wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL
NGQvMC9CM0ZGOTkxMTZBNTQ0MTE3RjAwMTMzNTMwREEyOUZCMjg5NjdGRkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IzRkY5OTExNkE1NDQxMTdG
MDAxMzM1MzBEQTI5RkIyODk2N0ZGQkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv
MzIzODMwMzQzYTMxNjUzNjMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHmBQMA0GCSqGSIb3DQEBCwUA
A4IBAQCZPhebgIyUwbRG+S3dan29tux9sCi0mp3WFYMNUY5i15FnyT5SEGyy86dy
RBmxMBmJm76fd2gv7kLOOmKKjhV5ZyslgJeyQGcNZ+dinmjFHCU9ohSz4DFcJ6ea
5MzDGknBJPDBXGbb6k2CRWm7ijrN0em2yf2/6zGZ4HD5NYlC6Z1M+Bx9jEQ9wiDB
koMT2y2iNsatUULEVtgU6u62Cj6IptQm2qSvg2YvFWg5hE66m15dU6FmvsO9d4ZO
iLd6pOICLri8/kTgvog2nRJKh2xWmuPEbm+bNdaRHx3YyLE7b/WV4FYCJUzw53+z
Ivd8xIIdmXQMGJUo5wsgwqTh7MkK
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org