Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETY7XxRYE3rEsib5EMwpcotqnLFn2GfDx8Rjto4fnBQU/0/323830343a363162633a3a2f33322d3334203d3e20323639323533.roa
File:                     323830343a363162633a3a2f33322d3334203d3e20323639323533.roa (raw, json)
Hash identifier:          eBtHBPfpK60It6q3v1fxs0MMUq73QZqpUiYgw61ktFw=
Subject key identifier:   87:7A:22:A0:26:06:17:9E:E4:24:31:4A:67:3E:73:2F:BA:D6:88:CC
Certificate issuer:       /CN=5ED670EBE4193BCCA670C5C5663BED62670EB3F5
Certificate serial:       6BF80ACF11D463FAF78C0CC06792079D2B4F5F21
Authority key identifier: 5E:D6:70:EB:E4:19:3B:CC:A6:70:C5:C5:66:3B:ED:62:67:0E:B3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ED670EBE4193BCCA670C5C5663BED62670EB3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETY7XxRYE3rEsib5EMwpcotqnLFn2GfDx8Rjto4fnBQU/0/323830343a363162633a3a2f33322d3334203d3e20323639323533.roa
Signing time:             Wed 12 Oct 2022 02:00:00 +0000
ROA not before:           Wed 12 Oct 2022 01:55:00 +0000
ROA not after:            Wed 11 Oct 2023 02:00:00 +0000
asID:                     269253
IP address blocks:        2804:61bc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f8:0a:cf:11:d4:63:fa:f7:8c:0c:c0:67:92:07:9d:2b:4f:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ED670EBE4193BCCA670C5C5663BED62670EB3F5
        Validity
            Not Before: Oct 12 01:55:00 2022 GMT
            Not After : Oct 11 02:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:02:da:44:54:cf:48:48:38:4a:08:0c:2b:
                    6d:d3:73:ed:f8:8d:b7:b8:41:d7:93:6e:fb:24:d6:
                    ad:ec:54:ff:ec:00:28:9b:de:a7:4c:27:3c:8a:10:
                    dd:83:7d:be:52:15:86:f7:47:ec:99:41:59:19:1d:
                    16:0b:9d:af:9b:05:06:06:eb:40:b5:1c:8d:81:60:
                    97:b8:1e:89:0d:cf:16:6c:94:eb:9e:7c:eb:ff:fd:
                    0d:e0:f8:f2:d1:72:73:85:7b:f8:3e:a4:57:44:7e:
                    25:e7:a5:2b:bc:b7:af:79:71:fd:64:dc:29:06:39:
                    c5:1a:98:8c:c9:8c:b2:c7:d8:51:c9:2b:f9:41:e3:
                    f0:34:a0:2f:a4:ae:94:f7:54:5b:94:ee:b2:c9:40:
                    98:6f:f9:05:fb:d8:38:d5:e5:d5:14:86:bd:2d:30:
                    7a:fe:c3:52:4a:99:62:a4:df:6c:95:9f:35:46:ad:
                    f1:bc:69:01:ba:0e:6d:1f:eb:89:ea:e4:b3:b7:8e:
                    1b:a4:94:f2:bb:23:2f:f0:5e:29:36:75:15:2f:e6:
                    95:b9:a1:4a:cb:39:6c:fb:55:63:9a:9d:49:70:c9:
                    1a:12:df:6c:d1:df:09:0b:4d:df:5e:6f:a4:5e:ee:
                    83:2b:8d:45:08:4a:63:0a:63:8c:27:54:3b:e9:ac:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:22:A0:26:06:17:9E:E4:24:31:4A:67:3E:73:2F:BA:D6:88:CC
            X509v3 Authority Key Identifier:
                keyid:5E:D6:70:EB:E4:19:3B:CC:A6:70:C5:C5:66:3B:ED:62:67:0E:B3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETY7XxRYE3rEsib5EMwpcotqnLFn2GfDx8Rjto4fnBQU/0/5ED670EBE4193BCCA670C5C5663BED62670EB3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ED670EBE4193BCCA670C5C5663BED62670EB3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETY7XxRYE3rEsib5EMwpcotqnLFn2GfDx8Rjto4fnBQU/0/323830343a363162633a3a2f33322d3334203d3e20323639323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:11:d4:f8:4c:d3:82:e3:44:ea:7e:9b:75:a5:5f:7f:e5:
         67:a4:be:48:7d:77:93:a8:67:01:bf:35:73:52:39:14:bf:77:
         15:cd:40:b3:86:ab:28:18:0f:cb:a4:5b:fa:eb:66:47:84:1a:
         24:e9:26:a6:b0:5a:3f:97:6c:fa:8c:56:75:8c:d2:c2:be:8a:
         fa:46:ef:89:3d:b0:b2:47:22:4c:68:0c:a2:ae:0a:b9:cc:00:
         49:c6:04:59:4b:c5:c2:2f:bd:2e:64:fb:75:1b:10:a4:f5:ce:
         51:4a:76:84:b9:f8:80:e7:d9:74:bd:6f:45:a2:6f:80:9a:b3:
         5c:49:e3:5c:a0:25:78:5e:e1:39:dd:48:6e:a8:74:55:d7:8f:
         b9:9d:70:fc:10:2e:e7:5c:96:e7:39:fb:41:95:6b:e1:51:37:
         2e:e7:95:6c:dc:a8:8d:81:fd:93:3d:47:7a:cc:8b:4a:e5:c3:
         f9:43:63:66:15:33:d7:5a:fc:93:a4:d5:24:a7:57:0c:eb:75:
         45:67:34:fe:a1:2a:ba:41:bb:bf:af:05:47:04:9d:e5:0e:06:
         8f:5a:c6:53:8c:13:ca:fd:8c:b5:02:62:56:e3:91:3f:b7:f1:
         b8:f9:55:01:b3:fe:af:94:b4:2a:6e:4e:d5:42:e7:a1:6a:92:
         07:c8:d6:1d
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUa/gKzxHUY/r3jAzAZ5IHnStPXyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVENjcwRUJFNDE5M0JDQ0E2NzBDNUM1NjYzQkVENjI2
NzBFQjNGNTAeFw0yMjEwMTIwMTU1MDBaFw0yMzEwMTEwMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU3NTAyREE0NDU0Q0Y0ODQ4
Mzg0QTA4MEMyQjZERDM3M0VERjg4REI3Qjg0MUQ3OTM2RUZCMjRENkFERUM1NEZG
RUMwMDI4OUJERUE3NEMyNzNDOEExMEREODM3REJFNTIxNTg2Rjc0N0VDOTk0MTU5
MTkxRDE2MEI5REFGOUIwNTA2MDZFQjQwQjUxQzhEODE2MDk3QjgxRTg5MERDRjE2
NkM5NEVCOUU3Q0VCRkZGRDBERTBGOEYyRDE3MjczODU3QkY4M0VBNDU3NDQ3RTI1
RTdBNTJCQkNCN0FGNzk3MUZENjREQzI5MDYzOUM1MUE5ODhDQzk4Q0IyQzdEODUx
QzkyQkY5NDFFM0YwMzRBMDJGQTRBRTk0Rjc1NDVCOTRFRUIyQzk0MDk4NkZGOTA1
RkJEODM4RDVFNUQ1MTQ4NkJEMkQzMDdBRkVDMzUyNEE5OTYyQTRERjZDOTU5RjM1
NDZBREYxQkM2OTAxQkEwRTZEMUZFQjg5RUFFNEIzQjc4RTFCQTQ5NEYyQkIyMzJG
RjA1RTI5MzY3NTE1MkZFNjk1QjlBMTRBQ0IzOTZDRkI1NTYzOUE5RDQ5NzBDOTFB
MTJERjZDRDFERjA5MEI0RERGNUU2RkE0NUVFRTgzMkI4RDQ1MDg0QTYzMEE2MzhD
Mjc1NDNCRTlBQ0IwOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvnUC2kRUz0hIOEoIDCtt03Pt+I23uEHXk277JNat7FT/7AAom96n
TCc8ihDdg32+UhWG90fsmUFZGR0WC52vmwUGButAtRyNgWCXuB6JDc8WbJTrnnzr
//0N4Pjy0XJzhXv4PqRXRH4l56UrvLeveXH9ZNwpBjnFGpiMyYyyx9hRySv5QePw
NKAvpK6U91RblO6yyUCYb/kF+9g41eXVFIa9LTB6/sNSSplipN9slZ81Rq3xvGkB
ug5tH+uJ6uSzt44bpJTyuyMv8F4pNnUVL+aVuaFKyzls+1Vjmp1JcMkaEt9s0d8J
C03fXm+kXu6DK41FCEpjCmOMJ1Q76aywnwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FId6IqAmBhee5CQxSmc+cy+61ojMMB8GA1UdIwQYMBaAFF7WcOvkGTvMpnDFxWY7
7WJnDrP1MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VUWTdYeFJZRTNyRXNp
YjVFTXdwY290cW5MRm4yR2ZEeDhSanRvNGZuQlFVLzAvNUVENjcwRUJFNDE5M0JD
Q0E2NzBDNUM1NjYzQkVENjI2NzBFQjNGNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81RUQ2NzBFQkU0MTkzQkNDQTY3MEM1QzU2NjNCRUQ2MjY3MEVC
M0Y1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FVFk3WHhSWUUzckVzaWI1RU13
cGNvdHFuTEZuMkdmRHg4Ump0bzRmbkJRVS8wLzMyMzgzMDM0M2EzNjMxNjI2MzNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzOTMyMzUzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
YbwwDQYJKoZIhvcNAQELBQADggEBAGHJEdT4TNOC40Tqfpt1pV9/5Wekvkh9d5Oo
ZwG/NXNSORS/dxXNQLOGqygYD8ukW/rrZkeEGiTpJqawWj+XbPqMVnWM0sK+ivpG
74k9sLJHIkxoDKKuCrnMAEnGBFlLxcIvvS5k+3UbEKT1zlFKdoS5+IDn2XS9b0Wi
b4Cas1xJ41ygJXhe4TndSG6odFXXj7mdcPwQLudcluc5+0GVa+FRNy7nlWzcqI2B
/ZM9R3rMi0rlw/lDY2YVM9da/JOk1SSnVwzrdUVnNP6hKrpBu7+vBUcEneUOBo9a
xlOME8r9jLUCYlbjkT+38bj5VQGz/q+UtCpuTtVC56FqkgfI1h0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org