Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/323830343a363763303a3a2f33322d3332203d3e20323639363438.roa
File:                     323830343a363763303a3a2f33322d3332203d3e20323639363438.roa (raw, json)
Hash identifier:          ZTdraauJJ8LhKTGiSYM37U65oef4UfUo+xkW1GQ7gls=
Subject key identifier:   0C:F9:88:42:88:2D:65:84:66:3C:14:CC:0A:3F:A7:D1:2B:85:70:A2
Certificate issuer:       /CN=AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8
Certificate serial:       1AE91D89FFE8FC61444278B041863852CE0F46CE
Authority key identifier: AF:10:E4:D4:64:E5:DA:C2:B5:C2:45:AB:F5:75:49:4E:3D:39:A6:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/323830343a363763303a3a2f33322d3332203d3e20323639363438.roa
Signing time:             Tue 19 Jul 2022 18:34:48 +0000
ROA not before:           Tue 19 Jul 2022 18:29:48 +0000
ROA not after:            Tue 18 Jul 2023 18:34:48 +0000
asID:                     269648
IP address blocks:        2804:67c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:1d:89:ff:e8:fc:61:44:42:78:b0:41:86:38:52:ce:0f:46:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8
        Validity
            Not Before: Jul 19 18:29:48 2022 GMT
            Not After : Jul 18 18:34:48 2023 GMT
        Subject: CN=0CF98842882D6584663C14CC0A3FA7D12B8570A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:17:9b:a8:ca:8c:4d:6e:c2:12:8a:ee:e4:ee:
                    65:60:3f:d2:ea:9e:d7:bd:ee:1a:3a:d7:a3:bf:d3:
                    41:91:af:ba:af:e9:67:07:da:4c:a5:df:5f:9b:c2:
                    98:45:28:51:6b:9d:ab:0d:81:df:ab:89:1b:60:6b:
                    89:74:eb:42:6c:95:b8:42:00:8c:ae:13:1b:f7:76:
                    da:3a:82:10:3a:82:4e:68:b8:f4:76:06:bd:b1:2c:
                    43:69:7b:8f:4c:7a:d5:fd:bb:a7:df:2e:5d:6a:e8:
                    a4:98:ac:7d:89:80:ab:c0:e5:64:3f:ac:d8:7e:1b:
                    88:c1:c0:07:61:84:33:f3:f6:fd:d1:19:d0:47:f3:
                    0d:04:30:e9:69:34:5c:46:c0:17:2b:d7:28:e8:a6:
                    5f:fe:73:94:f3:28:b6:b4:14:32:e3:3c:7d:69:97:
                    61:9d:20:ff:34:f0:51:69:13:21:36:ee:c4:d8:58:
                    3e:0e:fb:d7:b9:fb:ca:4e:31:bb:ca:00:94:4d:17:
                    29:a2:0e:85:a6:f0:22:5b:35:d2:65:c7:a3:97:3f:
                    c6:cf:ee:1b:92:34:39:13:8a:ab:52:83:57:94:3c:
                    10:b0:20:1b:60:e2:b0:96:fc:e3:2a:0b:e5:15:39:
                    ec:43:ab:4f:89:17:ef:b3:47:b5:31:f4:f0:b5:49:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:88:42:88:2D:65:84:66:3C:14:CC:0A:3F:A7:D1:2B:85:70:A2
            X509v3 Authority Key Identifier:
                keyid:AF:10:E4:D4:64:E5:DA:C2:B5:C2:45:AB:F5:75:49:4E:3D:39:A6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF10E4D464E5DAC2B5C245ABF575494E3D39A6B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/323830343a363763303a3a2f33322d3332203d3e20323639363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:80:0b:ba:e4:9c:9a:74:0a:5a:7a:45:ef:11:79:cc:67:7e:
         e5:de:8d:32:71:77:c7:e4:2d:da:10:b0:01:ff:ea:e9:e7:c8:
         01:3a:a2:c8:61:49:a4:0a:78:14:6e:d5:dd:70:c7:48:10:8a:
         e2:b0:3c:5c:b8:cb:f7:d8:2a:4d:f5:28:97:da:95:d8:2d:33:
         86:d8:b2:4f:61:89:4c:86:75:72:b6:60:8d:8f:78:3f:80:43:
         3d:97:4c:6d:e4:d6:03:69:7a:13:54:c0:1d:07:72:54:a0:bb:
         e8:f6:45:7e:25:1b:07:3b:fc:68:ca:f1:41:d6:07:3e:b6:8d:
         5d:08:33:c8:3b:2b:7d:77:39:4e:2f:e1:90:51:37:a5:ad:72:
         9d:91:90:57:71:03:67:bd:71:a9:bd:f6:0e:50:8f:4b:1e:40:
         fb:83:16:17:cd:fa:aa:f6:f4:ef:ad:59:b3:7a:c3:ca:a8:89:
         c9:0d:ac:9e:0c:4d:09:bd:fe:a6:ed:09:31:a5:9c:e2:be:9b:
         c2:84:c0:e6:ef:82:73:e7:72:1c:ed:cc:59:22:02:c9:2b:44:
         e6:ca:45:89:df:3e:07:2b:d6:f6:41:e5:fa:05:49:25:06:21:
         ea:0f:11:bb:1a:0d:66:39:06:9d:c8:a0:86:ff:54:7f:33:5a:
         4a:eb:61:c6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGukdif/o/GFEQniwQYY4Us4PRs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYxMEU0RDQ2NEU1REFDMkI1QzI0NUFCRjU3NTQ5NEUz
RDM5QTZCODAeFw0yMjA3MTkxODI5NDhaFw0yMzA3MTgxODM0NDhaMDMxMTAvBgNV
BAMTKDBDRjk4ODQyODgyRDY1ODQ2NjNDMTRDQzBBM0ZBN0QxMkI4NTcwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWF5uoyoxNbsISiu7k7mVgP9Lq
nte97ho616O/00GRr7qv6WcH2kyl31+bwphFKFFrnasNgd+riRtga4l060JslbhC
AIyuExv3dto6ghA6gk5ouPR2Br2xLENpe49MetX9u6ffLl1q6KSYrH2JgKvA5WQ/
rNh+G4jBwAdhhDPz9v3RGdBH8w0EMOlpNFxGwBcr1yjopl/+c5TzKLa0FDLjPH1p
l2GdIP808FFpEyE27sTYWD4O+9e5+8pOMbvKAJRNFymiDoWm8CJbNdJlx6OXP8bP
7huSNDkTiqtSg1eUPBCwIBtg4rCW/OMqC+UVOexDq0+JF++zR7Ux9PC1SemBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDPmIQogtZYRmPBTMCj+n0SuFcKIwHwYDVR0j
BBgwFoAUrxDk1GTl2sK1wkWr9XVJTj05prgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR05uNWI3V1lZQm1Kd1lhMnBEbU5iQXhxR2hzWjVoQjRaU1d0MjVkbzIz
RGcvMC9BRjEwRTRENDY0RTVEQUMyQjVDMjQ1QUJGNTc1NDk0RTNEMzlBNkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGMTBFNEQ0NjRFNURBQzJC
NUMyNDVBQkY1NzU0OTRFM0QzOUE2QjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dObjViN1dZWUJtSndZYTJwRG1OYkF4cUdoc1o1aEI0WlNXdDI1ZG8yM0RnLzAv
MzIzODMwMzQzYTM2Mzc2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzYzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARnwDANBgkqhkiG9w0BAQsFAAOCAQEANoALuuSc
mnQKWnpF7xF5zGd+5d6NMnF3x+Qt2hCwAf/q6efIATqiyGFJpAp4FG7V3XDHSBCK
4rA8XLjL99gqTfUol9qV2C0zhtiyT2GJTIZ1crZgjY94P4BDPZdMbeTWA2l6E1TA
HQdyVKC76PZFfiUbBzv8aMrxQdYHPraNXQgzyDsrfXc5Ti/hkFE3pa1ynZGQV3ED
Z71xqb32DlCPSx5A+4MWF836qvb0761Zs3rDyqiJyQ2sngxNCb3+pu0JMaWc4r6b
woTA5u+Cc+dyHO3MWSICyStE5spFid8+ByvW9kHl+gVJJQYh6g8RuxoNZjkGncig
hv9UfzNaSuthxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org