Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a353030303a3a2f33362d3336203d3e20323633303533.roa
File:                     323830343a3932303a353030303a3a2f33362d3336203d3e20323633303533.roa (raw, json)
Hash identifier:          JhknSBeHE8+2KGyi9pMyNJ+3vJTt6U3pMZRF0ZdHv2Y=
Subject key identifier:   36:0D:C7:EE:75:75:1A:11:8E:C4:F6:1A:C2:3E:78:1D:E3:1F:A3:A0
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       0B85FA9172D9DAF55DBFE07822AB4ACE33766F0D
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a353030303a3a2f33362d3336203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:03 +0000
ROA not before:           Fri 06 Jan 2023 21:55:03 +0000
ROA not after:            Fri 05 Jan 2024 22:00:03 +0000
asID:                     263053
IP address blocks:        2804:920:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:85:fa:91:72:d9:da:f5:5d:bf:e0:78:22:ab:4a:ce:33:76:6f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:03 2023 GMT
            Not After : Jan  5 22:00:03 2024 GMT
        Subject: CN=360DC7EE75751A118EC4F61AC23E781DE31FA3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:1d:6c:9e:2b:93:9e:5a:ab:a2:fd:f9:cb:
                    ad:62:53:65:c2:a4:97:4e:6b:2a:27:64:ff:10:43:
                    9d:d7:0e:77:9c:1e:3d:97:e4:49:77:ac:0b:6f:ed:
                    94:c7:a1:1c:60:6a:8b:80:cc:a0:d4:b3:47:68:27:
                    96:bb:d6:f4:fa:7e:3f:27:bf:88:d6:00:2b:c2:82:
                    c1:91:4d:01:fd:3f:6e:ec:90:56:aa:98:67:95:f2:
                    84:3b:c6:10:02:fe:f5:9e:92:91:4d:b7:bb:34:87:
                    cd:e7:50:c7:3d:ac:15:4d:49:7a:ed:bc:77:fd:cc:
                    18:a4:d5:79:c6:b9:21:e0:2d:f3:fe:ed:99:8d:e3:
                    95:03:e0:52:0c:35:b4:db:02:d5:8c:90:ea:50:41:
                    08:dc:3e:c1:ed:7f:e4:49:97:fc:38:3f:54:58:24:
                    19:f4:35:1e:27:9e:5f:82:e2:5c:a3:c3:8a:74:4e:
                    6b:91:18:4b:f5:15:96:8d:bd:60:ef:fa:8e:db:50:
                    6e:dc:e8:85:23:5e:19:49:4f:e5:5d:3a:7a:29:0d:
                    8c:c5:07:f6:26:2b:5b:db:c8:ab:06:f9:3d:a7:13:
                    3f:cc:f4:32:7e:08:a5:16:9e:b7:77:cb:f5:c0:d6:
                    ca:34:3a:0d:87:c9:36:e8:cb:ba:a2:a8:5d:8a:59:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0D:C7:EE:75:75:1A:11:8E:C4:F6:1A:C2:3E:78:1D:E3:1F:A3:A0
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a353030303a3a2f33362d3336203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:54:20:63:4b:69:b8:5d:4c:fe:dd:d7:95:3c:a1:ee:6a:d8:
         25:17:d0:11:d0:79:f1:79:ad:21:9c:fb:b9:29:93:ec:57:e1:
         7a:67:50:c4:2f:b9:f3:bc:db:c2:b2:c8:1d:9d:84:3c:d8:bb:
         44:20:b0:f5:7f:73:da:83:2a:b8:6f:4e:13:25:c4:2e:2e:3f:
         e1:f0:2c:b6:59:33:3e:9b:fd:dc:5e:6e:5c:33:9a:dd:bc:48:
         fa:52:08:d2:30:2c:97:63:3d:74:00:2e:9d:39:a6:fa:7f:41:
         69:50:3c:1a:42:b8:47:7e:0d:86:a9:0e:15:02:2e:9b:a5:bd:
         cd:12:e1:ff:47:0c:db:14:fb:7e:32:cc:72:4e:59:28:38:82:
         14:3f:ba:28:46:28:3d:16:34:f3:0f:c8:f8:0f:62:07:73:68:
         04:6b:d6:c1:da:67:e9:7a:21:e3:17:76:9b:79:43:0c:6a:2c:
         ba:38:de:7f:63:78:45:9c:c4:01:51:5c:12:93:9b:1d:09:2c:
         d8:86:32:ab:1d:4e:14:8b:99:1a:ac:02:6b:55:63:4d:6b:d0:
         6d:ee:f6:5f:71:f3:e9:2c:5f:54:96:2a:d7:70:a4:72:7e:d7:
         36:86:53:26:b7:a1:12:7b:2e:98:1b:50:9e:33:9e:53:b0:f1:
         ce:fd:ac:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUC4X6kXLZ2vVdv+B4IqtKzjN2bw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDQzkxNTc4ODExRkUyOTc5MEM3RjBGMDEwNEVDQUIx
RDA5NzVBMzAeFw0yMzAxMDYyMTU1MDNaFw0yNDAxMDUyMjAwMDNaMDMxMTAvBgNV
BAMTKDM2MERDN0VFNzU3NTFBMTE4RUM0RjYxQUMyM0U3ODFERTMxRkEzQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifh1sniuTnlqrov35y61iU2XC
pJdOayonZP8QQ53XDnecHj2X5El3rAtv7ZTHoRxgaouAzKDUs0doJ5a71vT6fj8n
v4jWACvCgsGRTQH9P27skFaqmGeV8oQ7xhAC/vWekpFNt7s0h83nUMc9rBVNSXrt
vHf9zBik1XnGuSHgLfP+7ZmN45UD4FIMNbTbAtWMkOpQQQjcPsHtf+RJl/w4P1RY
JBn0NR4nnl+C4lyjw4p0TmuRGEv1FZaNvWDv+o7bUG7c6IUjXhlJT+VdOnopDYzF
B/YmK1vbyKsG+T2nEz/M9DJ+CKUWnrd3y/XA1so0Og2HyTboy7qiqF2KWX2tAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNg3H7nV1GhGOxPYawj54HeMfo6AwHwYDVR0j
BBgwFoAU9cyRV4gR/il5DH8PAQTsqx0JdaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMC9GNUNDOTE1Nzg4MTFGRTI5NzkwQzdGMEYwMTA0RUNBQjFEMDk3NUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1Q0M5MTU3ODgxMUZFMjk3
OTBDN0YwRjAxMDRFQ0FCMUQwOTc1QTMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzAv
MzIzODMwMzQzYTM5MzIzMDNhMzUzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzMDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAkgUDANBgkqhkiG9w0BAQsFAAOC
AQEAllQgY0tpuF1M/t3XlTyh7mrYJRfQEdB58XmtIZz7uSmT7FfhemdQxC+587zb
wrLIHZ2EPNi7RCCw9X9z2oMquG9OEyXELi4/4fAstlkzPpv93F5uXDOa3bxI+lII
0jAsl2M9dAAunTmm+n9BaVA8GkK4R34NhqkOFQIum6W9zRLh/0cM2xT7fjLMck5Z
KDiCFD+6KEYoPRY08w/I+A9iB3NoBGvWwdpn6Xoh4xd2m3lDDGosujjef2N4RZzE
AVFcEpObHQks2IYyqx1OFIuZGqwCa1VjTWvQbe72X3Hz6SxfVJYq13Ckcn7XNoZT
JrehEnsumBtQnjOeU7Dxzv2sag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org