Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a373030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a373030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          u39bpvXyPEO083yhDf0EsULSkEGJNeU5Ogr++9TdjGc=
Subject key identifier:   FE:F1:67:47:98:B6:41:F0:A1:68:1C:BA:80:8A:47:9F:AA:B1:FE:D8
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       6A598561729BAB38DB378F0650D08D3931F2B54F
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a373030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:07:18 +0000
ROA not before:           Thu 25 Jul 2024 14:02:18 +0000
ROA not after:            Fri 25 Jul 2025 14:07:18 +0000
asID:                     268235
IP address blocks:        2804:4e08:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:59:85:61:72:9b:ab:38:db:37:8f:06:50:d0:8d:39:31:f2:b5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 14:02:18 2024 GMT
            Not After : Jul 25 14:07:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:9d:50:0c:36:32:3d:f1:9c:52:2b:b0:c7:
                    31:58:c2:0e:82:c4:7c:9a:78:09:12:0e:8f:84:62:
                    58:23:29:55:e7:c2:84:d2:5e:f4:51:f0:97:91:72:
                    60:48:61:31:85:65:57:72:07:31:a8:f5:14:fe:bf:
                    3d:0f:f8:d9:f8:26:31:fd:eb:9d:65:a0:0c:ce:f8:
                    4b:c7:9e:40:9b:8d:20:9c:4d:ff:b6:d3:d3:04:01:
                    90:eb:98:2a:5f:69:50:75:c6:69:52:13:d3:50:69:
                    5c:43:3c:b4:b7:3d:48:cb:1e:3b:76:98:43:e4:2a:
                    f3:ca:1a:82:90:4e:c9:2a:b2:04:0a:d9:53:00:e1:
                    57:d5:2b:59:b9:9c:cf:d0:5b:b4:c3:be:27:87:75:
                    8f:19:9b:c5:4b:69:5d:48:aa:01:d9:1d:b5:bd:f9:
                    d4:97:cd:1c:b8:ab:49:cc:71:fd:0d:d2:aa:1f:89:
                    16:66:a5:da:f7:97:0c:d5:e2:7c:42:81:73:54:9e:
                    39:f9:9f:a5:98:5e:56:96:28:ad:2e:3a:5b:0e:36:
                    67:4f:0b:15:46:22:34:37:9b:d9:7d:93:61:cc:df:
                    21:0c:b2:ed:ec:87:25:cb:2b:de:6b:6d:cc:6d:34:
                    7d:52:35:02:ef:e4:d3:8b:b5:ae:49:66:a7:c7:67:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F1:67:47:98:B6:41:F0:A1:68:1C:BA:80:8A:47:9F:AA:B1:FE:D8
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a373030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:37:2b:c9:02:37:1a:27:65:63:b6:b5:72:cf:21:a0:12:e6:
         d8:b5:f3:10:81:2c:b7:91:f3:ad:d4:b9:25:dc:2d:24:35:25:
         62:ab:0b:0b:f8:12:f4:fd:43:15:a2:86:4c:6a:15:e9:3d:20:
         32:a2:1f:c8:6f:9a:ed:7c:ab:6d:32:af:77:2f:a2:f2:b1:36:
         42:4e:15:5a:14:41:ce:64:66:cc:e6:a2:db:0d:c9:e6:98:46:
         d5:63:b0:b8:b1:e8:3c:e6:ac:56:f5:b6:7a:31:7c:ef:a9:14:
         29:56:bd:f3:26:5f:8a:a6:ea:3d:90:f9:6f:a8:0b:b2:74:b2:
         ae:76:31:52:18:eb:b8:1c:bf:28:79:f2:2f:7a:8d:68:53:e0:
         c0:3c:31:5f:c4:13:38:77:d5:20:8a:35:4a:89:b1:24:47:87:
         c9:6d:1c:dc:48:b4:7c:e4:b6:ad:85:8a:38:8c:16:ec:5c:ee:
         7d:12:d4:7f:fb:56:b2:b0:c0:40:7b:62:97:dd:20:6f:4a:f1:
         87:0c:cd:36:67:f0:de:7c:fc:4b:76:6a:66:ad:c7:22:9e:aa:
         1f:2e:5f:b8:85:15:25:40:8a:2c:8b:88:7b:48:30:0f:61:6e:
         a4:c9:ac:3b:0d:47:a4:ec:a8:5c:8f:d5:84:8d:9e:88:65:0e:
         e0:dc:ce:ba
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUalmFYXKbqzjbN48GUNCNOTHytU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCOUNEQkUyMjZDQjY2NkQ4MjcyQjNDMTY2NzEzQjFG
MTBBNTZDNTAeFw0yNDA3MjUxNDAyMThaFw0yNTA3MjUxNDA3MThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM0ODlENTAwQzM2MzIzREYx
OUM1MjJCQjBDNzMxNThDMjBFODJDNDdDOUE3ODA5MTIwRThGODQ2MjU4MjMyOTU1
RTdDMjg0RDI1RUY0NTFGMDk3OTE3MjYwNDg2MTMxODU2NTU3NzIwNzMxQThGNTE0
RkVCRjNEMEZGOEQ5RjgyNjMxRkRFQjlENjVBMDBDQ0VGODRCQzc5RTQwOUI4RDIw
OUM0REZGQjZEM0QzMDQwMTkwRUI5ODJBNUY2OTUwNzVDNjY5NTIxM0QzNTA2OTVD
NDMzQ0I0QjczRDQ4Q0IxRTNCNzY5ODQzRTQyQUYzQ0ExQTgyOTA0RUM5MkFCMjA0
MEFEOTUzMDBFMTU3RDUyQjU5Qjk5Q0NGRDA1QkI0QzNCRTI3ODc3NThGMTk5QkM1
NEI2OTVENDhBQTAxRDkxREI1QkRGOUQ0OTdDRDFDQjhBQjQ5Q0M3MUZEMEREMkFB
MUY4OTE2NjZBNURBRjc5NzBDRDVFMjdDNDI4MTczNTQ5RTM5Rjk5RkE1OTg1RTU2
OTYyOEFEMkUzQTVCMEUzNjY3NEYwQjE1NDYyMjM0Mzc5QkQ5N0Q5MzYxQ0NERjIx
MENCMkVERUM4NzI1Q0IyQkRFNkI2RENDNkQzNDdENTIzNTAyRUZFNEQzOEJCNUFF
NDk2NkE3Qzc2N0ExRTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArEidUAw2Mj3xnFIrsMcxWMIOgsR8mngJEg6PhGJYIylV58KE0l70
UfCXkXJgSGExhWVXcgcxqPUU/r89D/jZ+CYx/eudZaAMzvhLx55Am40gnE3/ttPT
BAGQ65gqX2lQdcZpUhPTUGlcQzy0tz1Iyx47dphD5CrzyhqCkE7JKrIECtlTAOFX
1StZuZzP0Fu0w74nh3WPGZvFS2ldSKoB2R21vfnUl80cuKtJzHH9DdKqH4kWZqXa
95cM1eJ8QoFzVJ45+Z+lmF5WliitLjpbDjZnTwsVRiI0N5vZfZNhzN8hDLLt7Icl
yyvea23MbTR9UjUC7+TTi7WuSWanx2eh5wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FP7xZ0eYtkHwoWgcuoCKR5+qsf7YMB8GA1UdIwQYMBaAFFq5zb4ibLZm2CcrPBZn
E7HxClbFMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0czbmtKTGc2c0Nva3FZ
cUZWSzYzYTE5eHNFaWhyRzFMTW9OWDhHNUtNNktyLzEvNUFCOUNEQkUyMjZDQjY2
NkQ4MjcyQjNDMTY2NzEzQjFGMTBBNTZDNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81QUI5Q0RCRTIyNkNCNjY2RDgyNzJCM0MxNjY3MTNCMUYxMEE1
NkM1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HM25rSkxnNnNDb2txWXFGVks2
M2ExOXhzRWlockcxTE1vTlg4RzVLTTZLci8xLzMyMzgzMDM0M2EzNDY1MzAzODNh
MzczMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzgzMjMzMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBE4IcDANBgkqhkiG9w0BAQsFAAOCAQEAqDcryQI3GidlY7a1cs8h
oBLm2LXzEIEst5HzrdS5JdwtJDUlYqsLC/gS9P1DFaKGTGoV6T0gMqIfyG+a7Xyr
bTKvdy+i8rE2Qk4VWhRBzmRmzOai2w3J5phG1WOwuLHoPOasVvW2ejF876kUKVa9
8yZfiqbqPZD5b6gLsnSyrnYxUhjruBy/KHnyL3qNaFPgwDwxX8QTOHfVIIo1Somx
JEeHyW0c3Ei0fOS2rYWKOIwW7FzufRLUf/tWsrDAQHtil90gb0rxhwzNNmfw3nz8
S3ZqZq3HIp6qHy5fuIUVJUCKLIuIe0gwD2FupMmsOw1HpOyoXI/VhI2eiGUO4NzO
ug==
-----END CERTIFICATE-----
Generated at Wed Oct 9 06:17:45 2024 by rpki-client on console-ams.rpki-client.org