Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a613030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a613030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          jW3lt0rQO10+hBZ5UZ9+798/VloWHV7+hx+9XS7eRCM=
Subject key identifier:   03:62:52:18:53:37:8E:9C:41:DA:1C:8F:38:0D:3C:AB:84:8A:C7:99
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       31CFAD44C794003551348DCDA949033F847A74E9
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a613030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:07:52 +0000
ROA not before:           Thu 25 Jul 2024 14:02:52 +0000
ROA not after:            Fri 25 Jul 2025 14:07:52 +0000
asID:                     268235
IP address blocks:        2804:4e08:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cf:ad:44:c7:94:00:35:51:34:8d:cd:a9:49:03:3f:84:7a:74:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 14:02:52 2024 GMT
            Not After : Jul 25 14:07:52 2025 GMT
        Subject: CN=3082010A0282010100D389F640A1889701B0B1739F1065DC086863A761D288D26C021D36718F1439FB5C73DE0D4F71648B6A7D1A56CCA133C9CE747EEACF74DEEBB308688EA7B6F2F7A55E2FDF80365B61681490FF3AD29ACD66CE2DB8D7B77A26172325038857E43C01ECBF2FCB444BDBC4EC022ED80BCEDA99D1352B8EFFB109E4080B06ACFB3A291766EE0ED5EF46BEE0EB2FD593C40EB26B1B33C93D39F4360567EE4EAABF9DA074B8675AD24FEDDC9FEE3E69ECFC871F5583EE5F45015F9657F2D31CD7F3554F96F0B3DB581AC1B6A0422F6193CF0DFC7FCFB7CC38B4AC05AAF7E1EE9C604E59AE059F726793933B9EE3F95609392625ADFDB40D1D80B2F46CF4BF6200827CA90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:f6:40:a1:88:97:01:b0:b1:73:9f:10:65:
                    dc:08:68:63:a7:61:d2:88:d2:6c:02:1d:36:71:8f:
                    14:39:fb:5c:73:de:0d:4f:71:64:8b:6a:7d:1a:56:
                    cc:a1:33:c9:ce:74:7e:ea:cf:74:de:eb:b3:08:68:
                    8e:a7:b6:f2:f7:a5:5e:2f:df:80:36:5b:61:68:14:
                    90:ff:3a:d2:9a:cd:66:ce:2d:b8:d7:b7:7a:26:17:
                    23:25:03:88:57:e4:3c:01:ec:bf:2f:cb:44:4b:db:
                    c4:ec:02:2e:d8:0b:ce:da:99:d1:35:2b:8e:ff:b1:
                    09:e4:08:0b:06:ac:fb:3a:29:17:66:ee:0e:d5:ef:
                    46:be:e0:eb:2f:d5:93:c4:0e:b2:6b:1b:33:c9:3d:
                    39:f4:36:05:67:ee:4e:aa:bf:9d:a0:74:b8:67:5a:
                    d2:4f:ed:dc:9f:ee:3e:69:ec:fc:87:1f:55:83:ee:
                    5f:45:01:5f:96:57:f2:d3:1c:d7:f3:55:4f:96:f0:
                    b3:db:58:1a:c1:b6:a0:42:2f:61:93:cf:0d:fc:7f:
                    cf:b7:cc:38:b4:ac:05:aa:f7:e1:ee:9c:60:4e:59:
                    ae:05:9f:72:67:93:93:3b:9e:e3:f9:56:09:39:26:
                    25:ad:fd:b4:0d:1d:80:b2:f4:6c:f4:bf:62:00:82:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:62:52:18:53:37:8E:9C:41:DA:1C:8F:38:0D:3C:AB:84:8A:C7:99
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a613030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cc:3e:3d:6a:33:1b:31:4a:e1:62:9a:10:e8:26:ac:67:ef:38:
         c6:ef:ef:78:7b:7f:80:0b:00:64:5b:29:1e:02:46:51:cd:b6:
         f2:59:56:a5:57:a6:2a:79:d6:41:ce:1b:7c:db:09:f9:38:7f:
         91:d9:ed:29:8e:5e:da:f1:f0:5d:da:7d:ae:b7:67:7d:ab:17:
         d2:24:64:c2:30:6f:9b:57:27:bd:50:1d:69:3a:cf:9c:8a:da:
         41:e0:38:13:99:5d:36:27:c7:8d:32:fa:46:02:8b:58:1c:95:
         c0:83:6f:22:4b:18:fd:d8:d4:05:d2:3d:49:cb:69:15:39:47:
         48:ab:53:aa:09:5a:70:03:b0:88:53:45:10:a4:d0:4c:c5:28:
         08:06:b6:e4:92:d7:62:2a:84:33:d9:d0:73:a5:cd:e1:e6:fc:
         f9:9f:58:29:04:59:ca:07:df:64:dc:aa:98:f3:a9:0c:11:f3:
         79:ec:d2:10:fd:3e:32:61:54:0c:ee:29:99:de:8b:0f:f4:99:
         14:4d:55:dc:b4:c8:3b:aa:31:96:a1:53:f0:00:3b:b8:11:83:
         dd:21:8f:da:25:33:87:5f:71:a6:38:ac:de:12:6d:1e:42:ce:
         97:d4:1d:89:b1:a2:d7:f1:1f:d8:30:6b:a3:24:bc:91:38:a9:
         91:de:74:ea
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUMc+tRMeUADVRNI3NqUkDP4R6dOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCOUNEQkUyMjZDQjY2NkQ4MjcyQjNDMTY2NzEzQjFG
MTBBNTZDNTAeFw0yNDA3MjUxNDAyNTJaFw0yNTA3MjUxNDA3NTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDM4OUY2NDBBMTg4OTcwMUIw
QjE3MzlGMTA2NURDMDg2ODYzQTc2MUQyODhEMjZDMDIxRDM2NzE4RjE0MzlGQjVD
NzNERTBENEY3MTY0OEI2QTdEMUE1NkNDQTEzM0M5Q0U3NDdFRUFDRjc0REVFQkIz
MDg2ODhFQTdCNkYyRjdBNTVFMkZERjgwMzY1QjYxNjgxNDkwRkYzQUQyOUFDRDY2
Q0UyREI4RDdCNzdBMjYxNzIzMjUwMzg4NTdFNDNDMDFFQ0JGMkZDQjQ0NEJEQkM0
RUMwMjJFRDgwQkNFREE5OUQxMzUyQjhFRkZCMTA5RTQwODBCMDZBQ0ZCM0EyOTE3
NjZFRTBFRDVFRjQ2QkVFMEVCMkZENTkzQzQwRUIyNkIxQjMzQzkzRDM5RjQzNjA1
NjdFRTRFQUFCRjlEQTA3NEI4Njc1QUQyNEZFRERDOUZFRTNFNjlFQ0ZDODcxRjU1
ODNFRTVGNDUwMTVGOTY1N0YyRDMxQ0Q3RjM1NTRGOTZGMEIzREI1ODFBQzFCNkEw
NDIyRjYxOTNDRjBERkM3RkNGQjdDQzM4QjRBQzA1QUFGN0UxRUU5QzYwNEU1OUFF
MDU5RjcyNjc5MzkzM0I5RUUzRjk1NjA5MzkyNjI1QURGREI0MEQxRDgwQjJGNDZD
RjRCRjYyMDA4MjdDQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA04n2QKGIlwGwsXOfEGXcCGhjp2HSiNJsAh02cY8UOftcc94NT3Fk
i2p9GlbMoTPJznR+6s903uuzCGiOp7by96VeL9+ANlthaBSQ/zrSms1mzi2417d6
JhcjJQOIV+Q8Aey/L8tES9vE7AIu2AvO2pnRNSuO/7EJ5AgLBqz7OikXZu4O1e9G
vuDrL9WTxA6yaxszyT059DYFZ+5Oqr+doHS4Z1rST+3cn+4+aez8hx9Vg+5fRQFf
llfy0xzX81VPlvCz21gawbagQi9hk88N/H/Pt8w4tKwFqvfh7pxgTlmuBZ9yZ5OT
O57j+VYJOSYlrf20DR2AsvRs9L9iAIJ8qQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FANiUhhTN46cQdocjzgNPKuEiseZMB8GA1UdIwQYMBaAFFq5zb4ibLZm2CcrPBZn
E7HxClbFMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0czbmtKTGc2c0Nva3FZ
cUZWSzYzYTE5eHNFaWhyRzFMTW9OWDhHNUtNNktyLzEvNUFCOUNEQkUyMjZDQjY2
NkQ4MjcyQjNDMTY2NzEzQjFGMTBBNTZDNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81QUI5Q0RCRTIyNkNCNjY2RDgyNzJCM0MxNjY3MTNCMUYxMEE1
NkM1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HM25rSkxnNnNDb2txWXFGVks2
M2ExOXhzRWlockcxTE1vTlg4RzVLTTZLci8xLzMyMzgzMDM0M2EzNDY1MzAzODNh
NjEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzgzMjMzMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBE4IoDANBgkqhkiG9w0BAQsFAAOCAQEAzD49ajMbMUrhYpoQ6Cas
Z+84xu/veHt/gAsAZFspHgJGUc228llWpVemKnnWQc4bfNsJ+Th/kdntKY5e2vHw
Xdp9rrdnfasX0iRkwjBvm1cnvVAdaTrPnIraQeA4E5ldNifHjTL6RgKLWByVwINv
IksY/djUBdI9SctpFTlHSKtTqglacAOwiFNFEKTQTMUoCAa25JLXYiqEM9nQc6XN
4eb8+Z9YKQRZygffZNyqmPOpDBHzeezSEP0+MmFUDO4pmd6LD/SZFE1V3LTIO6ox
lqFT8AA7uBGD3SGP2iUzh19xpjis3hJtHkLOl9QdibGi1/Ef2DBroyS8kTipkd50
6g==
-----END CERTIFICATE-----
Generated at Wed Oct 9 06:32:57 2024 by rpki-client on console-fra.rpki-client.org