Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33332d3339203d3e20323633303533.roa
File:                     323830343a3932303a383030303a3a2f33332d3339203d3e20323633303533.roa (raw, json)
Hash identifier:          aFKoLHvUa6UnCYHRks4/DmSdjoEpQQJlaDAgLp6UAkg=
Subject key identifier:   04:36:3C:B5:5D:29:39:04:E7:5F:4B:DE:EB:EB:F8:EA:B0:05:3B:FD
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       7E83457E371E97A0AA0959FFA520B555F7C8103A
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33332d3339203d3e20323633303533.roa
Signing time:             Mon 02 Oct 2023 07:56:59 +0000
ROA not before:           Mon 02 Oct 2023 07:51:59 +0000
ROA not after:            Mon 30 Sep 2024 07:56:59 +0000
asID:                     263053
IP address blocks:        2804:920:8000::/33 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:83:45:7e:37:1e:97:a0:aa:09:59:ff:a5:20:b5:55:f7:c8:10:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Oct  2 07:51:59 2023 GMT
            Not After : Sep 30 07:56:59 2024 GMT
        Subject: CN=04363CB55D293904E75F4BDEEBEBF8EAB0053BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:ff:ef:48:94:9d:9d:79:f3:30:d6:54:97:
                    74:61:56:19:ea:53:69:d2:2c:8d:a2:f6:ec:47:90:
                    20:5f:0a:ba:a5:cc:82:0b:a6:03:38:85:eb:5a:c0:
                    e0:75:a3:d3:f4:02:2c:8c:84:6f:aa:a1:22:8e:66:
                    37:da:86:ff:4f:7b:e4:1e:3d:9a:8f:15:ee:0d:1a:
                    5e:e5:4e:93:cc:0f:34:58:8b:26:28:f9:d1:19:20:
                    a4:d8:a4:91:be:b0:a5:07:95:2e:df:5a:c3:b6:86:
                    66:02:73:85:9b:77:ed:67:6c:f1:fc:c0:32:cc:1e:
                    cb:19:5e:0a:4f:c5:e7:5e:a7:73:e2:65:01:1c:fa:
                    80:0e:7e:9e:a8:62:91:2d:38:68:41:7b:cd:95:86:
                    30:4e:68:35:f9:0e:64:85:ae:7f:92:5b:ad:91:a1:
                    ae:61:0c:74:fb:5f:bf:9c:6e:aa:5b:8c:45:ba:36:
                    c6:97:e4:07:2f:b0:e5:bf:8b:86:93:99:4a:97:57:
                    5a:2c:98:67:1c:ba:69:38:6d:6d:d7:44:69:d6:d5:
                    d8:46:26:54:c1:99:0c:1a:c3:f1:a3:bc:68:db:ba:
                    53:19:df:ac:31:25:bc:8d:ba:24:05:59:be:b5:42:
                    f7:c3:04:3b:83:f3:4d:15:ab:a1:df:eb:f6:d9:e2:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:36:3C:B5:5D:29:39:04:E7:5F:4B:DE:EB:EB:F8:EA:B0:05:3B:FD
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33332d3339203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:df:35:a6:49:cb:e9:b8:69:ed:7c:18:94:1d:37:6f:31:3b:
         7b:38:d9:dd:ee:50:d7:dc:0f:b0:00:8d:05:30:a7:f3:8a:c6:
         9a:ad:ca:6d:ad:ac:21:9e:98:97:d0:f7:f2:bb:0c:04:dd:ae:
         a5:cd:ca:db:33:a2:3c:a1:d0:11:42:d4:f9:39:b7:9a:24:b3:
         67:a8:01:b6:e0:18:75:6f:00:84:b1:13:c3:fc:de:58:e5:28:
         6d:e6:d9:1e:a3:24:6d:4e:59:11:46:ab:e9:98:e7:b6:0c:93:
         e8:0d:31:7e:73:3a:d2:0b:28:a5:e0:d7:c7:bf:55:b2:ef:eb:
         7a:44:dd:cb:16:c7:45:98:6f:cf:01:96:6f:13:5a:18:9c:3a:
         2f:d4:27:6a:87:dd:5f:99:4f:e2:ff:06:34:73:d0:d5:f6:61:
         48:8f:90:d0:6b:d7:52:6e:0f:fd:f7:7d:82:be:b6:e1:83:05:
         ba:d5:92:19:9c:4c:54:27:d2:c6:37:94:07:07:c8:6f:a0:d0:
         43:bf:7e:d1:ac:fa:c6:9f:24:6a:20:dd:d8:5d:ac:22:94:5a:
         c8:45:b9:5d:3c:66:c5:bd:e9:ed:2a:13:83:f2:96:c7:c4:7b:
         a0:83:6c:7e:03:3f:0e:b5:e6:39:67:9d:6b:19:2b:e0:0c:28:
         b6:ee:13:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfoNFfjcel6CqCVn/pSC1VffIEDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDQzkxNTc4ODExRkUyOTc5MEM3RjBGMDEwNEVDQUIx
RDA5NzVBMzAeFw0yMzEwMDIwNzUxNTlaFw0yNDA5MzAwNzU2NTlaMDMxMTAvBgNV
BAMTKDA0MzYzQ0I1NUQyOTM5MDRFNzVGNEJERUVCRUJGOEVBQjAwNTNCRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgt//vSJSdnXnzMNZUl3RhVhnq
U2nSLI2i9uxHkCBfCrqlzIILpgM4hetawOB1o9P0AiyMhG+qoSKOZjfahv9Pe+Qe
PZqPFe4NGl7lTpPMDzRYiyYo+dEZIKTYpJG+sKUHlS7fWsO2hmYCc4Wbd+1nbPH8
wDLMHssZXgpPxedep3PiZQEc+oAOfp6oYpEtOGhBe82VhjBOaDX5DmSFrn+SW62R
oa5hDHT7X7+cbqpbjEW6NsaX5AcvsOW/i4aTmUqXV1osmGccumk4bW3XRGnW1dhG
JlTBmQwaw/GjvGjbulMZ36wxJbyNuiQFWb61QvfDBDuD800Vq6Hf6/bZ4sxDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBDY8tV0pOQTnX0ve6+v46rAFO/0wHwYDVR0j
BBgwFoAU9cyRV4gR/il5DH8PAQTsqx0JdaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMC9GNUNDOTE1Nzg4MTFGRTI5NzkwQzdGMEYwMTA0RUNBQjFEMDk3NUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1Q0M5MTU3ODgxMUZFMjk3
OTBDN0YwRjAxMDRFQ0FCMUQwOTc1QTMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzAv
MzIzODMwMzQzYTM5MzIzMDNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzM5MjAzZDNl
MjAzMjM2MzMzMDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBAkggDANBgkqhkiG9w0BAQsFAAOC
AQEAY981pknL6bhp7XwYlB03bzE7ezjZ3e5Q19wPsACNBTCn84rGmq3Kba2sIZ6Y
l9D38rsMBN2upc3K2zOiPKHQEULU+Tm3miSzZ6gBtuAYdW8AhLETw/zeWOUobebZ
HqMkbU5ZEUar6ZjntgyT6A0xfnM60gsopeDXx79Vsu/rekTdyxbHRZhvzwGWbxNa
GJw6L9QnaofdX5lP4v8GNHPQ1fZhSI+Q0GvXUm4P/fd9gr624YMFutWSGZxMVCfS
xjeUBwfIb6DQQ79+0az6xp8kaiDd2F2sIpRayEW5XTxmxb3p7SoTg/KWx8R7oINs
fgM/DrXmOWedaxkr4Awotu4T+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org