Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a313030303a3a2f33362d3336203d3e20323637343531.roa
File:                     323830343a343162343a313030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier:          MK0ifDjWbh0DoHh+C7kjB41ysTYZXD+W+Bmk8VCDYrk=
Subject key identifier:   ED:B7:25:82:C2:0A:2A:85:DE:B0:27:D2:4B:42:BB:08:3C:B2:ED:36
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       3043539CB661F605FD54CA2802F551EC079C40F1
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a313030303a3a2f33362d3336203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:24:23 +0000
ROA not before:           Tue 13 Jun 2023 17:19:23 +0000
ROA not after:            Tue 11 Jun 2024 17:24:23 +0000
asID:                     267451
IP address blocks:        2804:41b4:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:43:53:9c:b6:61:f6:05:fd:54:ca:28:02:f5:51:ec:07:9c:40:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:19:23 2023 GMT
            Not After : Jun 11 17:24:23 2024 GMT
        Subject: CN=EDB72582C20A2A85DEB027D24B42BB083CB2ED36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:12:c1:24:56:cf:e4:b5:4a:60:43:d8:ba:
                    88:c9:fc:a7:81:06:1e:52:53:c2:fd:06:d0:99:da:
                    36:9a:63:7c:28:40:66:71:51:5d:62:28:89:4d:6d:
                    10:35:3a:41:12:f0:41:29:69:fd:2d:2d:35:24:16:
                    65:38:61:1d:2f:65:e7:d1:5d:33:2a:50:0d:c6:44:
                    e6:95:ae:52:c7:ba:4b:6b:8c:0f:d8:87:d1:44:18:
                    73:24:8d:59:1d:2e:9f:34:b2:a5:68:b8:af:cb:08:
                    68:ab:d5:13:69:de:da:50:e4:6a:ed:12:67:fd:5f:
                    f7:c7:23:a4:7d:b0:8c:ea:67:c3:60:ee:f0:89:ae:
                    a4:8f:0e:b7:e8:a4:79:d2:ec:5a:d4:bf:2d:f3:8f:
                    25:48:13:53:6b:a4:bf:52:a5:33:6c:4e:cb:25:3f:
                    ac:36:2a:60:c6:a1:f2:48:fc:33:e3:22:76:f1:49:
                    35:64:c4:d8:d2:a3:d2:94:39:0c:49:b8:fd:40:6e:
                    69:c1:8e:c6:67:dc:af:3d:26:0e:53:53:53:a7:31:
                    17:d8:cd:8f:95:83:50:e0:fd:54:48:c6:2f:bb:50:
                    8a:c1:86:ce:1d:79:df:86:8d:11:d7:e5:52:10:12:
                    e0:fe:ab:3e:c5:7d:63:26:d7:fe:39:2a:92:ac:fc:
                    67:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B7:25:82:C2:0A:2A:85:DE:B0:27:D2:4B:42:BB:08:3C:B2:ED:36
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/323830343a343162343a313030303a3a2f33362d3336203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:b7:ca:f5:7a:6b:d4:5b:de:21:ad:8a:3a:0b:f9:10:1a:1a:
         f0:e1:2c:a9:14:fd:95:6c:26:2a:b6:a9:fd:b3:56:fd:d1:20:
         f1:93:63:11:6e:8b:0d:b2:48:f1:aa:e3:fd:a8:db:64:e4:f3:
         08:21:e6:96:2b:27:19:e9:e9:a5:5b:ef:82:d0:67:ee:f2:60:
         1d:3e:83:a4:5a:1e:b6:da:a0:18:1e:1b:0d:b6:48:8f:66:d9:
         d6:14:9e:4c:46:2d:fd:de:47:d2:13:89:dc:fc:dc:e7:d8:79:
         c2:2b:a0:77:47:aa:49:3d:e7:ba:18:8b:43:fa:e0:29:0b:7a:
         f1:6a:f1:7f:8c:c1:21:cb:42:8d:2f:5a:de:d0:c1:dd:f8:0b:
         3a:e4:2b:94:7b:fa:a8:5d:7f:25:79:1e:74:87:c8:2f:e3:42:
         2f:1c:82:6e:46:1d:2a:6f:f5:a4:8f:ee:24:3f:09:8f:fa:66:
         91:2c:44:d8:0d:ce:1a:c1:9b:ab:71:fc:2d:16:64:0f:8b:e8:
         25:ec:e8:ba:4a:51:b1:a8:1d:72:97:78:ae:de:d0:ea:10:6e:
         e8:eb:78:88:30:0c:cc:4a:54:14:6b:c6:fc:67:69:52:4c:a9:
         48:6e:53:b9:9a:8f:03:26:63:e7:f6:93:29:db:fb:37:2d:a4:
         17:52:5e:da
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMENTnLZh9gX9VMooAvVR7AecQPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVDRTk0OTc3NjVDQkZGNUFERjE4OEQ5RUFFRDMzNDQ1
ODQ0NDk1RDAeFw0yMzA2MTMxNzE5MjNaFw0yNDA2MTExNzI0MjNaMDMxMTAvBgNV
BAMTKEVEQjcyNTgyQzIwQTJBODVERUIwMjdEMjRCNDJCQjA4M0NCMkVEMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcSxLBJFbP5LVKYEPYuojJ/KeB
Bh5SU8L9BtCZ2jaaY3woQGZxUV1iKIlNbRA1OkES8EEpaf0tLTUkFmU4YR0vZefR
XTMqUA3GROaVrlLHuktrjA/Yh9FEGHMkjVkdLp80sqVouK/LCGir1RNp3tpQ5Grt
Emf9X/fHI6R9sIzqZ8Ng7vCJrqSPDrfopHnS7FrUvy3zjyVIE1NrpL9SpTNsTssl
P6w2KmDGofJI/DPjInbxSTVkxNjSo9KUOQxJuP1AbmnBjsZn3K89Jg5TU1OnMRfY
zY+Vg1Dg/VRIxi+7UIrBhs4ded+GjRHX5VIQEuD+qz7FfWMm1/45KpKs/GfDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU7bclgsIKKoXesCfSS0K7CDyy7TYwHwYDVR0j
BBgwFoAUns6Ul3Zcv/Wt8YjZ6u0zRFhESV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hFSnVBN21vbkI1RkRnRjJSRVBtMzlWSGFpTlJhbTFRazNFaFZtNFNU
M3MvMC85RUNFOTQ5Nzc2NUNCRkY1QURGMTg4RDlFQUVEMzM0NDU4NDQ0OTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlFQ0U5NDk3NzY1Q0JGRjVB
REYxODhEOUVBRUQzMzQ0NTg0NDQ5NUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIRUp1QTdtb25CNUZEZ0YyUkVQbTM5VkhhaU5SYW0xUWszRWhWbTRTVDNzLzAv
MzIzODMwMzQzYTM0MzE2MjM0M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEQbQQMA0GCSqGSIb3DQEBCwUA
A4IBAQAGt8r1emvUW94hrYo6C/kQGhrw4SypFP2VbCYqtqn9s1b90SDxk2MRbosN
skjxquP9qNtk5PMIIeaWKycZ6emlW++C0Gfu8mAdPoOkWh622qAYHhsNtkiPZtnW
FJ5MRi393kfSE4nc/Nzn2HnCK6B3R6pJPee6GItD+uApC3rxavF/jMEhy0KNL1re
0MHd+As65CuUe/qoXX8leR50h8gv40IvHIJuRh0qb/Wkj+4kPwmP+maRLETYDc4a
wZurcfwtFmQPi+gl7Oi6SlGxqB1yl3iu3tDqEG7o63iIMAzMSlQUa8b8Z2lSTKlI
blO5mo8DJmPn9pMp2/s3LaQXUl7a
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org