Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/323830343a3536383a3a2f33322d313238203d3e20323632353134.roa
File:                     323830343a3536383a3a2f33322d313238203d3e20323632353134.roa (raw, json)
Hash identifier:          mHs6QjH4Ec8mTaoWecC6VYZoE8nVZP6qUA/k92df7Vo=
Subject key identifier:   ED:AE:09:CD:CC:96:36:1C:7A:FB:13:B7:BE:E6:89:AE:BC:0E:04:FF
Certificate issuer:       /CN=CF966D995E0E059570D4B57016072AFC8B494ED0
Certificate serial:       2C4B6BC11A3967201092DBF8CB6C996750E816DF
Authority key identifier: CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/323830343a3536383a3a2f33322d313238203d3e20323632353134.roa
Signing time:             Tue 07 Mar 2023 21:42:06 +0000
ROA not before:           Tue 07 Mar 2023 21:37:06 +0000
ROA not after:            Tue 05 Mar 2024 21:42:06 +0000
asID:                     262514
IP address blocks:        2804:568::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4b:6b:c1:1a:39:67:20:10:92:db:f8:cb:6c:99:67:50:e8:16:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF966D995E0E059570D4B57016072AFC8B494ED0
        Validity
            Not Before: Mar  7 21:37:06 2023 GMT
            Not After : Mar  5 21:42:06 2024 GMT
        Subject: CN=EDAE09CDCC96361C7AFB13B7BEE689AEBC0E04FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:11:01:16:1b:db:a8:9d:87:4b:a2:32:1b:
                    9d:73:5f:3a:5a:55:d6:ad:7b:73:cb:87:59:61:8b:
                    99:0c:89:5b:2b:40:b8:4e:d8:c1:23:43:dd:f9:da:
                    7c:a6:cc:e9:e5:17:cd:92:71:3f:71:74:43:41:dd:
                    49:07:d6:86:eb:88:5c:b2:f9:3a:41:24:c7:2e:0e:
                    bd:4c:06:39:6b:71:df:be:ab:96:cc:f1:7d:c6:b1:
                    29:52:81:a3:66:0d:70:a8:27:08:76:ef:43:6a:e7:
                    03:44:9a:e9:6c:1c:2f:45:99:fa:0b:64:02:fd:05:
                    65:12:de:c3:e3:e0:1c:ce:12:f5:72:70:8c:15:0f:
                    e0:1d:f7:90:ac:49:ab:32:ae:45:f2:9e:26:51:43:
                    bf:6a:03:4a:46:6b:c8:ab:9d:fb:c0:0d:8b:d5:d9:
                    99:d4:b2:42:61:92:a1:72:91:41:0d:51:b5:c3:53:
                    44:14:18:26:d9:a1:9b:9b:9f:f6:7e:c0:82:03:50:
                    12:0b:24:9d:e4:c8:a7:81:d8:36:81:d1:4f:b5:82:
                    e8:28:93:57:e0:0b:04:c8:60:c8:49:55:b9:63:c0:
                    8c:bc:3a:12:53:18:38:8a:e1:2c:7d:5e:c5:18:c3:
                    65:79:f6:d3:b1:bd:0f:39:b2:cf:c8:ff:0f:9c:98:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AE:09:CD:CC:96:36:1C:7A:FB:13:B7:BE:E6:89:AE:BC:0E:04:FF
            X509v3 Authority Key Identifier:
                keyid:CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/CF966D995E0E059570D4B57016072AFC8B494ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/323830343a3536383a3a2f33322d313238203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:568::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:56:98:fd:22:a6:82:a5:0c:6e:c4:da:03:11:82:80:bd:b4:
         f3:2a:ef:9b:7f:53:07:6d:87:a8:02:d6:b7:2d:39:72:5e:0e:
         78:c6:86:5e:58:b4:1f:f5:4e:a9:2e:99:02:27:27:bc:d0:33:
         6f:75:da:f6:5e:e4:83:b1:02:9a:c3:80:de:aa:ae:b3:c8:d5:
         01:b9:35:94:6a:55:f5:79:e7:65:b8:21:5d:f7:96:13:ab:22:
         5b:81:09:fb:72:d2:a6:68:2b:52:3e:cc:7c:9e:f5:6b:ba:38:
         44:59:6c:dd:f2:c2:31:97:27:64:7d:51:e7:e1:17:5f:f1:03:
         3a:ce:72:12:a8:dd:2f:8c:19:75:fe:41:80:32:f5:93:35:83:
         58:dd:31:96:05:38:21:4c:ff:bd:1a:b2:46:e6:88:2c:74:cf:
         03:a7:1b:d2:15:10:dd:97:12:41:a0:a8:c9:8f:64:c1:39:23:
         3e:77:4d:98:76:d0:2a:3f:26:43:00:48:e6:82:24:cf:c0:7f:
         ba:3f:0c:e5:55:b2:b4:17:86:07:de:8d:8c:80:d0:cc:dd:c2:
         19:06:d7:98:b7:c3:d3:43:dc:23:de:63:64:b0:7d:4d:ed:d8:
         ac:0a:47:14:27:b9:2a:48:81:4c:07:47:fa:53:b0:fa:34:cf:
         ef:cb:f6:62
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULEtrwRo5ZyAQktv4y2yZZ1DoFt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y5NjZEOTk1RTBFMDU5NTcwRDRCNTcwMTYwNzJBRkM4
QjQ5NEVEMDAeFw0yMzAzMDcyMTM3MDZaFw0yNDAzMDUyMTQyMDZaMDMxMTAvBgNV
BAMTKEVEQUUwOUNEQ0M5NjM2MUM3QUZCMTNCN0JFRTY4OUFFQkMwRTA0RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uREBFhvbqJ2HS6IyG51zXzpa
Vdate3PLh1lhi5kMiVsrQLhO2MEjQ9352nymzOnlF82ScT9xdENB3UkH1obriFyy
+TpBJMcuDr1MBjlrcd++q5bM8X3GsSlSgaNmDXCoJwh270Nq5wNEmulsHC9FmfoL
ZAL9BWUS3sPj4BzOEvVycIwVD+Ad95CsSasyrkXyniZRQ79qA0pGa8irnfvADYvV
2ZnUskJhkqFykUENUbXDU0QUGCbZoZubn/Z+wIIDUBILJJ3kyKeB2DaB0U+1gugo
k1fgCwTIYMhJVbljwIy8OhJTGDiK4Sx9XsUYw2V59tOxvQ85ss/I/w+cmCx9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7a4JzcyWNhx6+xO3vuaJrrwOBP8wHwYDVR0j
BBgwFoAUz5ZtmV4OBZVw1LVwFgcq/ItJTtAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR01UUmpGZlpIR2F2VXpLWHVyWlU3TnFuUXBjSEhkSG9YVkNDNm43U0RU
aUIvMC9DRjk2NkQ5OTVFMEUwNTk1NzBENEI1NzAxNjA3MkFGQzhCNDk0RUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGOTY2RDk5NUUwRTA1OTU3
MEQ0QjU3MDE2MDcyQUZDOEI0OTRFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dNVFJqRmZaSEdhdlV6S1h1clpVN05xblFwY0hIZEhvWFZDQzZuN1NEVGlCLzAv
MzIzODMwMzQzYTM1MzYzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQFaDANBgkqhkiG9w0BAQsFAAOCAQEAM1aY/SKm
gqUMbsTaAxGCgL208yrvm39TB22HqALWty05cl4OeMaGXli0H/VOqS6ZAicnvNAz
b3Xa9l7kg7ECmsOA3qqus8jVAbk1lGpV9XnnZbghXfeWE6siW4EJ+3LSpmgrUj7M
fJ71a7o4RFls3fLCMZcnZH1R5+EXX/EDOs5yEqjdL4wZdf5BgDL1kzWDWN0xlgU4
IUz/vRqyRuaILHTPA6cb0hUQ3ZcSQaCoyY9kwTkjPndNmHbQKj8mQwBI5oIkz8B/
uj8M5VWytBeGB96NjIDQzN3CGQbXmLfD00PcI95jZLB9Te3YrApHFCe5KkiBTAdH
+lOw+jTP78v2Yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org