Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/323830343a333130343a3a2f33322d3438203d3e20323634393837.roa
File:                     323830343a333130343a3a2f33322d3438203d3e20323634393837.roa (raw, json)
Hash identifier:          RZHCoAAwZQfiIMTBS2K4yKjPvsjV8iAfK08SZ1Wbz64=
Subject key identifier:   23:5C:5A:6F:54:03:00:86:B7:BA:18:6E:C1:1B:CB:42:AA:16:4A:AF
Certificate issuer:       /CN=F64647585902DB4CB85203EC78078539AF5F0858
Certificate serial:       2F7B33CFF4CF2C4033C2C8E16D0A6FC7CC0B413B
Authority key identifier: F6:46:47:58:59:02:DB:4C:B8:52:03:EC:78:07:85:39:AF:5F:08:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F64647585902DB4CB85203EC78078539AF5F0858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/323830343a333130343a3a2f33322d3438203d3e20323634393837.roa
Signing time:             Thu 19 Oct 2023 00:23:29 +0000
ROA not before:           Thu 19 Oct 2023 00:18:29 +0000
ROA not after:            Thu 17 Oct 2024 00:23:29 +0000
asID:                     264987
IP address blocks:        2804:3104::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7b:33:cf:f4:cf:2c:40:33:c2:c8:e1:6d:0a:6f:c7:cc:0b:41:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F64647585902DB4CB85203EC78078539AF5F0858
        Validity
            Not Before: Oct 19 00:18:29 2023 GMT
            Not After : Oct 17 00:23:29 2024 GMT
        Subject: CN=235C5A6F54030086B7BA186EC11BCB42AA164AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:de:9c:33:f2:ce:c7:f4:f8:d7:76:7e:01:
                    a7:2e:2c:ba:fc:dc:64:cc:0e:d4:f2:c7:d3:50:4e:
                    bc:5a:3a:e3:40:c0:a0:fe:d9:b8:e6:30:cb:b8:b3:
                    e1:75:f3:6d:e5:eb:1a:7a:a4:4a:d2:83:8d:72:da:
                    7b:80:e4:10:11:00:b6:57:31:92:84:92:a5:63:7b:
                    8e:fb:6b:70:67:ad:25:8b:29:30:ef:0a:e9:74:79:
                    4d:a5:12:2b:ce:bb:a7:f5:a6:75:cf:1b:24:37:c6:
                    c7:7b:79:b1:af:56:3f:11:29:99:9e:bf:d8:6a:be:
                    58:cf:f8:c2:e1:1d:b0:7c:01:64:1c:4a:48:65:b3:
                    f1:df:41:c8:11:27:ad:16:0d:c9:a5:f7:54:5e:b3:
                    d6:8e:de:92:3d:26:82:9e:90:70:a7:1c:4f:18:40:
                    11:84:66:82:25:d0:d0:6a:85:19:3a:8f:71:4e:00:
                    d3:41:e0:84:e7:15:d9:a5:87:37:0c:a8:c8:5d:05:
                    c4:32:9a:3a:0a:dc:82:93:84:5c:1b:87:7d:f8:aa:
                    72:88:ed:5d:a0:e5:5a:8e:29:09:ff:4f:c2:1d:6b:
                    bb:5c:bc:df:d3:69:0f:1f:cf:31:b4:11:91:ef:c3:
                    cf:b4:dd:f2:ca:49:a0:47:e2:86:e2:b7:3f:88:e9:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5C:5A:6F:54:03:00:86:B7:BA:18:6E:C1:1B:CB:42:AA:16:4A:AF
            X509v3 Authority Key Identifier:
                keyid:F6:46:47:58:59:02:DB:4C:B8:52:03:EC:78:07:85:39:AF:5F:08:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/F64647585902DB4CB85203EC78078539AF5F0858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F64647585902DB4CB85203EC78078539AF5F0858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/323830343a333130343a3a2f33322d3438203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3104::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:5e:e9:c8:43:64:b8:97:f7:53:54:7e:ad:e9:77:38:2b:
         15:d8:6c:f4:a2:0f:98:a4:9e:6a:96:9c:51:39:76:c6:56:06:
         89:90:20:8b:7c:1b:19:3e:14:18:38:ee:d0:b6:4e:c9:e3:68:
         64:c2:63:25:95:fc:dd:d3:78:16:84:21:b1:03:51:45:68:94:
         c5:6e:a7:d7:84:9f:e9:d3:e7:f0:16:1f:e4:88:a5:fc:b9:f9:
         d1:08:06:3f:92:ce:7a:79:f9:96:d9:3c:bc:cd:0d:c7:46:e6:
         61:49:57:ef:dd:71:2b:6b:fb:d5:71:90:87:f8:29:80:58:ee:
         ae:c7:8e:18:de:58:cc:5c:7f:70:19:7a:1b:5c:95:35:47:e8:
         03:27:fc:77:d1:fe:13:42:44:90:1f:01:b9:d8:2c:d5:16:96:
         9c:f0:3c:91:43:28:14:82:6f:4c:29:42:da:29:ba:5e:0b:7b:
         44:1c:f7:c1:b3:9e:77:1d:12:da:65:31:93:bf:60:67:15:26:
         db:63:57:63:4a:d3:4d:a1:60:49:66:92:1a:46:6f:9c:b8:46:
         02:64:a8:24:a0:78:9d:8f:10:3f:48:cb:41:d0:ac:a6:04:23:
         20:01:ff:9f:73:90:51:12:50:50:df:da:8f:f0:9e:14:4a:c2:
         aa:45:84:5c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL3szz/TPLEAzwsjhbQpvx8wLQTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0NjQ3NTg1OTAyREI0Q0I4NTIwM0VDNzgwNzg1MzlB
RjVGMDg1ODAeFw0yMzEwMTkwMDE4MjlaFw0yNDEwMTcwMDIzMjlaMDMxMTAvBgNV
BAMTKDIzNUM1QTZGNTQwMzAwODZCN0JBMTg2RUMxMUJDQjQyQUExNjRBQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnB96cM/LOx/T413Z+AacuLLr8
3GTMDtTyx9NQTrxaOuNAwKD+2bjmMMu4s+F1823l6xp6pErSg41y2nuA5BARALZX
MZKEkqVje477a3BnrSWLKTDvCul0eU2lEivOu6f1pnXPGyQ3xsd7ebGvVj8RKZme
v9hqvljP+MLhHbB8AWQcSkhls/HfQcgRJ60WDcml91Res9aO3pI9JoKekHCnHE8Y
QBGEZoIl0NBqhRk6j3FOANNB4ITnFdmlhzcMqMhdBcQymjoK3IKThFwbh334qnKI
7V2g5VqOKQn/T8Ida7tcvN/TaQ8fzzG0EZHvw8+03fLKSaBH4obitz+I6ZmHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUI1xab1QDAIa3uhhuwRvLQqoWSq8wHwYDVR0j
BBgwFoAU9kZHWFkC20y4UgPseAeFOa9fCFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dpRlpYSmFiVzY0dGZmWm1QcXFQSnpvVXR3RXd6TWVyTFo4WnNIdWJL
THQvMC9GNjQ2NDc1ODU5MDJEQjRDQjg1MjAzRUM3ODA3ODUzOUFGNUYwODU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y2NDY0NzU4NTkwMkRCNENC
ODUyMDNFQzc4MDc4NTM5QUY1RjA4NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHaUZaWEphYlc2NHRmZlptUHFxUEp6b1V0d0V3ek1lckxaOFpzSHViS0x0LzAv
MzIzODMwMzQzYTMzMzEzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxBDANBgkqhkiG9w0BAQsFAAOCAQEAWO9e6chD
ZLiX91NUfq3pdzgrFdhs9KIPmKSeapacUTl2xlYGiZAgi3wbGT4UGDju0LZOyeNo
ZMJjJZX83dN4FoQhsQNRRWiUxW6n14Sf6dPn8BYf5Iil/Ln50QgGP5LOenn5ltk8
vM0Nx0bmYUlX791xK2v71XGQh/gpgFjurseOGN5YzFx/cBl6G1yVNUfoAyf8d9H+
E0JEkB8Budgs1RaWnPA8kUMoFIJvTClC2im6Xgt7RBz3wbOedx0S2mUxk79gZxUm
22NXY0rTTaFgSWaSGkZvnLhGAmSoJKB4nY8QP0jLQdCspgQjIAH/n3OQURJQUN/a
j/CeFErCqkWEXA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org