Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a61303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a61303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          sQkTdj1C+wUcyEG+lYfKobyUBBtP3lPCz++/0fxSKbs=
Subject key identifier:   5D:0F:3E:E0:61:56:E1:E8:FC:A4:1D:46:4C:1E:94:41:27:DE:15:E2
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       3EC61BFE50EABA1B750C90903C72B726D8C185FB
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a61303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:43 +0000
ROA not before:           Tue 20 Dec 2022 15:04:43 +0000
ROA not after:            Tue 19 Dec 2023 15:09:43 +0000
asID:                     262468
IP address blocks:        2804:e94:a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c6:1b:fe:50:ea:ba:1b:75:0c:90:90:3c:72:b7:26:d8:c1:85:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:43 2022 GMT
            Not After : Dec 19 15:09:43 2023 GMT
        Subject: CN=5D0F3EE06156E1E8FCA41D464C1E944127DE15E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f0:5c:5e:fc:f1:be:56:52:24:9f:97:a9:1f:
                    44:10:7a:a0:7e:10:aa:e9:25:6e:5e:fc:ff:09:42:
                    44:96:4c:8e:02:36:10:d8:9a:a4:fb:d4:c3:6c:f2:
                    af:29:a8:25:85:c5:90:61:4b:51:43:9d:5d:32:95:
                    ad:41:1d:a7:1b:76:05:23:ff:4a:45:c8:3a:c6:f9:
                    60:ea:bf:72:9a:09:8d:b2:72:26:a9:37:fd:80:98:
                    57:83:6e:c2:8f:ab:bf:14:2f:87:d9:74:46:09:12:
                    73:af:97:f0:9a:77:1b:c7:6a:31:3c:76:df:1e:4c:
                    8c:1b:79:60:a6:93:78:c7:1b:38:28:1a:94:49:80:
                    6c:12:76:4e:4e:27:54:74:7b:55:e9:88:25:35:eb:
                    05:2c:d0:90:3b:28:1f:10:ff:21:a0:b0:bf:26:e8:
                    ac:19:c8:00:3d:a4:d9:8c:8d:13:ad:7f:39:30:c6:
                    8d:d9:c6:73:e7:4b:0a:9d:6f:87:7a:2f:24:9b:b6:
                    b7:3e:6a:54:0d:0a:31:9b:b2:b1:38:84:17:46:19:
                    ea:eb:05:0e:17:79:8b:13:a0:70:3e:46:99:59:1a:
                    f9:cd:0f:c1:e1:5f:de:87:2e:ff:ca:01:0f:e9:8b:
                    62:b6:5a:ac:99:9e:e0:fb:e2:c4:ed:73:98:a7:61:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:3E:E0:61:56:E1:E8:FC:A4:1D:46:4C:1E:94:41:27:DE:15:E2
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a61303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:13:72:05:df:1f:52:ed:ae:99:90:62:10:04:fa:1f:da:22:
         a9:45:e5:11:4f:3b:9c:d7:8d:c9:05:66:f1:71:05:5f:c7:16:
         3a:6e:da:50:c5:c1:b7:53:f4:dd:2c:20:4a:93:6c:b9:64:fc:
         b3:79:7d:4c:7a:73:f4:9b:f0:97:c1:5b:c6:00:73:b6:eb:9e:
         e2:e5:52:31:e6:8e:1c:5a:fe:ad:e1:1e:07:5f:84:e6:a0:6b:
         98:84:cd:fc:55:79:5a:ea:c9:97:85:ef:d7:1a:fb:f2:e7:ee:
         35:ef:2b:ad:14:78:2e:3f:f5:a6:65:c5:ab:b2:f2:25:28:4d:
         ae:67:88:30:34:45:6b:c9:44:47:41:d5:89:24:4b:87:20:b2:
         6f:2a:f9:cf:a4:7d:41:fe:87:e5:a1:23:a2:19:d5:6e:0c:48:
         32:d2:5b:91:1e:31:94:ae:0c:f4:02:ef:54:4e:49:aa:dd:50:
         e0:66:71:e2:57:d8:0e:68:49:c8:bb:05:06:91:57:56:9c:84:
         0f:be:95:66:52:8b:18:38:f8:70:ce:4c:0b:fc:2c:eb:d3:28:
         b8:89:58:46:21:f6:cf:cc:a2:ee:0f:a5:36:c6:aa:4d:83:fa:
         ad:4b:03:dd:de:10:17:20:3f:ed:62:51:d4:ea:84:41:e8:20:
         8e:88:3a:ae
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUPsYb/lDquht1DJCQPHK3JtjBhfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NDNaFw0yMzEyMTkxNTA5NDNaMDMxMTAvBgNV
BAMTKDVEMEYzRUUwNjE1NkUxRThGQ0E0MUQ0NjRDMUU5NDQxMjdERTE1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD18Fxe/PG+VlIkn5epH0QQeqB+
EKrpJW5e/P8JQkSWTI4CNhDYmqT71MNs8q8pqCWFxZBhS1FDnV0yla1BHacbdgUj
/0pFyDrG+WDqv3KaCY2yciapN/2AmFeDbsKPq78UL4fZdEYJEnOvl/CadxvHajE8
dt8eTIwbeWCmk3jHGzgoGpRJgGwSdk5OJ1R0e1XpiCU16wUs0JA7KB8Q/yGgsL8m
6KwZyAA9pNmMjROtfzkwxo3ZxnPnSwqdb4d6LySbtrc+alQNCjGbsrE4hBdGGerr
BQ4XeYsToHA+RplZGvnND8HhX96HLv/KAQ/pi2K2WqyZnuD74sTtc5inYYlvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUXQ8+4GFW4ej8pB1GTB6UQSfeFeIwHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzIzODMwMzQzYTY1MzkzNDNhNjEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMy
MzYzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEDpQAoDANBgkqhkiG9w0BAQsFAAOCAQEA
qxNyBd8fUu2umZBiEAT6H9oiqUXlEU87nNeNyQVm8XEFX8cWOm7aUMXBt1P03Swg
SpNsuWT8s3l9THpz9Jvwl8FbxgBztuue4uVSMeaOHFr+reEeB1+E5qBrmITN/FV5
WurJl4Xv1xr78ufuNe8rrRR4Lj/1pmXFq7LyJShNrmeIMDRFa8lER0HViSRLhyCy
byr5z6R9Qf6H5aEjohnVbgxIMtJbkR4xlK4M9ALvVE5Jqt1Q4GZx4lfYDmhJyLsF
BpFXVpyED76VZlKLGDj4cM5MC/ws69MouIlYRiH2z8yi7g+lNsaqTYP6rUsD3d4Q
FyA/7WJR1OqEQeggjog6rg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org