Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/323830343a343538303a3a2f33322d3634203d3e20323636393331.roa
File:                     323830343a343538303a3a2f33322d3634203d3e20323636393331.roa (raw, json)
Hash identifier:          D1JOWmbA3NXIUhVFPAXbvKTyElmuj8PjA7AFruHyPgQ=
Subject key identifier:   F2:3A:FC:BE:F2:12:CF:FC:55:4C:0C:41:54:B8:12:7B:55:AE:E9:A1
Certificate issuer:       /CN=C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E
Certificate serial:       49FFBEE62056370B05C9F28DFD8362216CC1C19B
Authority key identifier: C6:51:5F:0A:A1:B8:05:AF:93:CE:49:3D:07:9C:E2:D3:C8:7E:BA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/323830343a343538303a3a2f33322d3634203d3e20323636393331.roa
Signing time:             Fri 26 May 2023 22:00:00 +0000
ROA not before:           Fri 26 May 2023 21:55:00 +0000
ROA not after:            Fri 24 May 2024 22:00:00 +0000
asID:                     266931
IP address blocks:        2804:4580::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ff:be:e6:20:56:37:0b:05:c9:f2:8d:fd:83:62:21:6c:c1:c1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E
        Validity
            Not Before: May 26 21:55:00 2023 GMT
            Not After : May 24 22:00:00 2024 GMT
        Subject: CN=3082010A0282010100E859DF3A7E254A691447180B8DF7B4E2D8385901AC6D21032CAA0EF6F113B07E5AA9DB4F9B1B3FFF5890234C066823A2A950DBE76B48F8C54186A5DF9FD221E20E7713336FD21B6A016A79091D8A43276307BA46695AD1D1C2BABACC4892F644FC3443D3557C819A27E734B7576F7CA660A1F66A85C87D81D47A34A11A07158B6D048425CB74ABE580A1A0B8A3CE1FDC1791035183C25A623BCCEEB76F3F71086A8AF55AF4FF554E4787DD9F06125BCF7D6C1172CA443E4363B35E78EAD2D1C30F826004C6FF87D33A3167527E636A731339F8C4E65B2989693D202D873F281CFDEC9DF9B2861EFC5ED6862791ECB98721D5325E854520416DBC726CCE22A5030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:df:3a:7e:25:4a:69:14:47:18:0b:8d:f7:
                    b4:e2:d8:38:59:01:ac:6d:21:03:2c:aa:0e:f6:f1:
                    13:b0:7e:5a:a9:db:4f:9b:1b:3f:ff:58:90:23:4c:
                    06:68:23:a2:a9:50:db:e7:6b:48:f8:c5:41:86:a5:
                    df:9f:d2:21:e2:0e:77:13:33:6f:d2:1b:6a:01:6a:
                    79:09:1d:8a:43:27:63:07:ba:46:69:5a:d1:d1:c2:
                    ba:ba:cc:48:92:f6:44:fc:34:43:d3:55:7c:81:9a:
                    27:e7:34:b7:57:6f:7c:a6:60:a1:f6:6a:85:c8:7d:
                    81:d4:7a:34:a1:1a:07:15:8b:6d:04:84:25:cb:74:
                    ab:e5:80:a1:a0:b8:a3:ce:1f:dc:17:91:03:51:83:
                    c2:5a:62:3b:cc:ee:b7:6f:3f:71:08:6a:8a:f5:5a:
                    f4:ff:55:4e:47:87:dd:9f:06:12:5b:cf:7d:6c:11:
                    72:ca:44:3e:43:63:b3:5e:78:ea:d2:d1:c3:0f:82:
                    60:04:c6:ff:87:d3:3a:31:67:52:7e:63:6a:73:13:
                    39:f8:c4:e6:5b:29:89:69:3d:20:2d:87:3f:28:1c:
                    fd:ec:9d:f9:b2:86:1e:fc:5e:d6:86:27:91:ec:b9:
                    87:21:d5:32:5e:85:45:20:41:6d:bc:72:6c:ce:22:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3A:FC:BE:F2:12:CF:FC:55:4C:0C:41:54:B8:12:7B:55:AE:E9:A1
            X509v3 Authority Key Identifier:
                keyid:C6:51:5F:0A:A1:B8:05:AF:93:CE:49:3D:07:9C:E2:D3:C8:7E:BA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/323830343a343538303a3a2f33322d3634203d3e20323636393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4580::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:e9:38:13:47:ff:ee:cf:06:71:82:37:18:bf:fd:b9:a0:
         87:4b:31:a9:4b:eb:85:b5:69:a3:5f:18:6a:4d:f1:8e:bc:5e:
         e1:ec:d4:30:f4:e9:10:26:cd:ed:eb:be:eb:fc:af:81:bf:d5:
         f8:46:6b:16:20:97:a2:7f:51:5d:c3:16:94:ed:63:2d:d4:92:
         0f:9b:85:60:0f:c4:56:e9:b4:72:28:cd:87:9d:ca:6c:f8:15:
         d3:f5:3c:c9:5d:f3:67:4b:b4:0e:3d:38:ce:28:99:a0:2c:99:
         d1:a8:94:f4:5b:4f:2e:da:69:82:69:78:39:2b:ce:9a:39:b5:
         df:a5:b2:9e:32:e0:68:02:52:19:e2:ab:5b:d9:de:16:dd:d2:
         62:af:86:b6:3b:46:05:d1:a6:b5:e6:fb:09:44:7b:56:cb:17:
         28:64:1a:6a:05:cf:7f:3e:b4:50:60:3b:01:b0:2d:15:fe:84:
         58:5d:a7:d9:cc:14:84:37:12:0d:76:a1:fb:3d:9d:8f:69:cb:
         f3:de:89:8d:35:4e:ba:6a:e6:1c:0b:20:4f:66:6f:1f:88:4c:
         cc:5c:67:45:ba:99:a3:42:63:be:99:f1:e3:92:3c:cf:b2:ee:
         17:d6:32:9c:73:90:d8:40:63:71:61:7d:72:64:db:7b:07:5a:
         c5:9c:80:8e
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUSf++5iBWNwsFyfKN/YNiIWzBwZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY1MTVGMEFBMUI4MDVBRjkzQ0U0OTNEMDc5Q0UyRDND
ODdFQkExRTAeFw0yMzA1MjYyMTU1MDBaFw0yNDA1MjQyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTg1OURGM0E3RTI1NEE2OTE0
NDcxODBCOERGN0I0RTJEODM4NTkwMUFDNkQyMTAzMkNBQTBFRjZGMTEzQjA3RTVB
QTlEQjRGOUIxQjNGRkY1ODkwMjM0QzA2NjgyM0EyQTk1MERCRTc2QjQ4RjhDNTQx
ODZBNURGOUZEMjIxRTIwRTc3MTMzMzZGRDIxQjZBMDE2QTc5MDkxRDhBNDMyNzYz
MDdCQTQ2Njk1QUQxRDFDMkJBQkFDQzQ4OTJGNjQ0RkMzNDQzRDM1NTdDODE5QTI3
RTczNEI3NTc2RjdDQTY2MEExRjY2QTg1Qzg3RDgxRDQ3QTM0QTExQTA3MTU4QjZE
MDQ4NDI1Q0I3NEFCRTU4MEExQTBCOEEzQ0UxRkRDMTc5MTAzNTE4M0MyNUE2MjNC
Q0NFRUI3NkYzRjcxMDg2QThBRjU1QUY0RkY1NTRFNDc4N0REOUYwNjEyNUJDRjdE
NkMxMTcyQ0E0NDNFNDM2M0IzNUU3OEVBRDJEMUMzMEY4MjYwMDRDNkZGODdEMzNB
MzE2NzUyN0U2MzZBNzMxMzM5RjhDNEU2NUIyOTg5NjkzRDIwMkQ4NzNGMjgxQ0ZE
RUM5REY5QjI4NjFFRkM1RUQ2ODYyNzkxRUNCOTg3MjFENTMyNUU4NTQ1MjA0MTZE
QkM3MjZDQ0UyMkE1MDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6FnfOn4lSmkURxgLjfe04tg4WQGsbSEDLKoO9vETsH5aqdtPmxs/
/1iQI0wGaCOiqVDb52tI+MVBhqXfn9Ih4g53EzNv0htqAWp5CR2KQydjB7pGaVrR
0cK6usxIkvZE/DRD01V8gZon5zS3V298pmCh9mqFyH2B1Ho0oRoHFYttBIQly3Sr
5YChoLijzh/cF5EDUYPCWmI7zO63bz9xCGqK9Vr0/1VOR4fdnwYSW899bBFyykQ+
Q2OzXnjq0tHDD4JgBMb/h9M6MWdSfmNqcxM5+MTmWymJaT0gLYc/KBz97J35soYe
/F7WhieR7LmHIdUyXoVFIEFtvHJsziKlAwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FPI6/L7yEs/8VUwMQVS4EntVrumhMB8GA1UdIwQYMBaAFMZRXwqhuAWvk85JPQec
4tPIfroeMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RBdExlR0VqTUczaUFR
YVBDWHJTNlRtdW9Ed0RFazVNQTEzR2M5bnVzbUs1LzAvQzY1MTVGMEFBMUI4MDVB
RjkzQ0U0OTNEMDc5Q0UyRDNDODdFQkExRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DNjUxNUYwQUExQjgwNUFGOTNDRTQ5M0QwNzlDRTJEM0M4N0VC
QTFFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EQXRMZUdFak1HM2lBUWFQQ1hy
UzZUbXVvRHdERWs1TUExM0djOW51c21LNS8wLzMyMzgzMDM0M2EzNDM1MzgzMDNh
M2EyZjMzMzIyZDM2MzQyMDNkM2UyMDMyMzYzNjM5MzMzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
RYAwDQYJKoZIhvcNAQELBQADggEBAJ7U6TgTR//uzwZxgjcYv/25oIdLMalL64W1
aaNfGGpN8Y68XuHs1DD06RAmze3rvuv8r4G/1fhGaxYgl6J/UV3DFpTtYy3Ukg+b
hWAPxFbptHIozYedymz4FdP1PMld82dLtA49OM4omaAsmdGolPRbTy7aaYJpeDkr
zpo5td+lsp4y4GgCUhniq1vZ3hbd0mKvhrY7RgXRprXm+wlEe1bLFyhkGmoFz38+
tFBgOwGwLRX+hFhdp9nMFIQ3Eg12ofs9nY9py/PeiY01Trpq5hwLIE9mbx+ITMxc
Z0W6maNCY76Z8eOSPM+y7hfWMpxzkNhAY3FhfXJk23sHWsWcgI4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org