Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa
File:                     323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa (raw, json)
Hash identifier:          ywsXW2Ch3DTUbXj69OFAris0RU1Imp9kmOqHY0a2HCA=
Subject key identifier:   72:96:6E:A9:C2:6B:9F:2F:BC:86:6C:3B:A1:2B:C6:EB:E2:0C:39:9B
Certificate issuer:       /CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
Certificate serial:       14F336C3BC39B50F7221529523B9C22EE2176EE5
Authority key identifier: AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa
Signing time:             Tue 26 Dec 2023 14:54:26 +0000
ROA not before:           Tue 26 Dec 2023 14:49:26 +0000
ROA not after:            Tue 24 Dec 2024 14:54:26 +0000
asID:                     267995
IP address blocks:        2804:5664:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f3:36:c3:bc:39:b5:0f:72:21:52:95:23:b9:c2:2e:e2:17:6e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
        Validity
            Not Before: Dec 26 14:49:26 2023 GMT
            Not After : Dec 24 14:54:26 2024 GMT
        Subject: CN=72966EA9C26B9F2FBC866C3BA12BC6EBE20C399B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:90:83:53:49:54:07:fd:ec:b4:78:c5:92:
                    1a:42:a7:eb:fa:b0:a9:58:7d:e5:70:17:03:a9:1e:
                    48:19:c6:52:06:72:9d:47:64:53:09:5d:7a:33:8e:
                    9c:1a:d9:b4:4a:b4:6a:e8:79:b6:e7:c0:b4:83:52:
                    5a:76:13:65:2a:fd:e7:3c:31:cf:49:2a:5a:04:86:
                    c7:55:6a:77:6e:d6:71:04:6e:2b:1c:43:22:d2:35:
                    d4:11:82:53:a6:37:7d:2b:fb:40:1b:4e:d6:05:bf:
                    cd:1d:1a:23:31:84:f6:1c:da:39:a5:83:d9:a5:6d:
                    94:d8:d4:3f:7a:ca:a2:53:0e:4e:73:92:bd:f8:91:
                    4d:cc:4c:63:50:b6:98:77:9e:c0:32:e1:97:d1:96:
                    6c:14:d3:2e:bc:b3:e3:4d:a1:18:e3:ed:52:61:27:
                    f6:cd:0d:8f:26:7b:16:ac:e0:9f:2c:e2:16:a5:d5:
                    36:1c:cc:f6:41:5d:b4:da:7c:4b:3b:58:29:42:8b:
                    49:96:3a:61:63:86:ad:da:36:72:b4:7e:91:09:8b:
                    2e:4c:fc:48:4b:d9:2a:1c:ff:e3:93:fc:0c:73:d5:
                    b2:b5:58:6e:65:2f:8a:1d:1f:ca:ac:c3:ba:9b:64:
                    76:21:f8:6e:1e:94:fd:52:d3:c2:c0:8f:e5:b1:0e:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:96:6E:A9:C2:6B:9F:2F:BC:86:6C:3B:A1:2B:C6:EB:E2:0C:39:9B
            X509v3 Authority Key Identifier:
                keyid:AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5664:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:a5:b3:67:e4:26:a2:a9:66:89:39:78:52:c3:46:c2:42:fd:
         ac:70:42:4f:8b:11:ec:c0:5f:dc:02:ef:43:ed:5a:38:ef:23:
         8d:3e:90:66:87:39:21:21:99:d4:0d:bb:12:c5:c2:03:71:c5:
         1b:98:b4:6c:e2:06:0b:c4:cd:82:43:93:9a:ae:b4:d0:ba:73:
         2a:42:5a:0c:07:9d:fd:ad:08:9d:af:0f:8d:74:3f:dd:b3:44:
         eb:b9:1c:e2:f4:7b:f0:f5:a8:46:ca:87:c2:ad:1d:67:c6:b1:
         66:ea:17:53:f0:3a:b9:57:e5:2c:40:72:8b:57:dd:5a:42:32:
         ab:7e:ff:07:85:ec:2f:c8:29:9e:61:fe:5a:a7:4c:c8:21:13:
         dd:ea:99:a8:ac:f6:3b:c9:fd:a1:6f:b0:c0:9c:de:a5:2e:55:
         ed:f5:74:b4:53:bb:d3:06:39:81:b3:db:ac:6c:aa:f9:e5:cf:
         9c:4b:66:52:0a:fb:8a:06:a0:24:51:e8:b0:e8:cb:30:06:c8:
         14:b8:7e:b0:d8:40:11:13:3c:49:85:b6:96:66:4d:11:47:d8:
         27:b5:ab:ca:34:1c:8b:d0:14:28:99:36:60:72:81:36:66:67:
         e5:45:05:28:12:b3:17:13:c1:ba:7c:92:19:01:34:69:33:88:
         98:93:72:f7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFPM2w7w5tQ9yIVKVI7nCLuIXbuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzQzFEQjQyN0Y5Q0UzN0UzRjUwODNGNDQxODQxOUI2
OTYxMzc3RjAeFw0yMzEyMjYxNDQ5MjZaFw0yNDEyMjQxNDU0MjZaMDMxMTAvBgNV
BAMTKDcyOTY2RUE5QzI2QjlGMkZCQzg2NkMzQkExMkJDNkVCRTIwQzM5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrgpCDU0lUB/3stHjFkhpCp+v6
sKlYfeVwFwOpHkgZxlIGcp1HZFMJXXozjpwa2bRKtGroebbnwLSDUlp2E2Uq/ec8
Mc9JKloEhsdVandu1nEEbiscQyLSNdQRglOmN30r+0AbTtYFv80dGiMxhPYc2jml
g9mlbZTY1D96yqJTDk5zkr34kU3MTGNQtph3nsAy4ZfRlmwU0y68s+NNoRjj7VJh
J/bNDY8mexas4J8s4hal1TYczPZBXbTafEs7WClCi0mWOmFjhq3aNnK0fpEJiy5M
/EhL2Soc/+OT/Axz1bK1WG5lL4odH8qsw7qbZHYh+G4elP1S08LAj+WxDuWfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcpZuqcJrny+8hmw7oSvG6+IMOZswHwYDVR0j
BBgwFoAUrzwdtCf5zjfj9Qg/RBhBm2lhN38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1B4b1hhQ2JVZzR6djJKdlI3QW1HU3B2R2ZCOTExRW15NVFqbUJQcWRM
ZUgvMC9BRjNDMURCNDI3RjlDRTM3RTNGNTA4M0Y0NDE4NDE5QjY5NjEzNzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGM0MxREI0MjdGOUNFMzdF
M0Y1MDgzRjQ0MTg0MTlCNjk2MTM3N0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dQeG9YYUNiVWc0enYySnZSN0FtR1NwdkdmQjkxMUVteTVRam1CUHFkTGVILzAv
MzIzODMwMzQzYTM1MzYzNjM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVmTAMA0GCSqGSIb3DQEBCwUA
A4IBAQAUpbNn5CaiqWaJOXhSw0bCQv2scEJPixHswF/cAu9D7Vo47yONPpBmhzkh
IZnUDbsSxcIDccUbmLRs4gYLxM2CQ5OarrTQunMqQloMB539rQidrw+NdD/ds0Tr
uRzi9Hvw9ahGyofCrR1nxrFm6hdT8Dq5V+UsQHKLV91aQjKrfv8HhewvyCmeYf5a
p0zIIRPd6pmorPY7yf2hb7DAnN6lLlXt9XS0U7vTBjmBs9usbKr55c+cS2ZSCvuK
BqAkUeiw6MswBsgUuH6w2EAREzxJhbaWZk0RR9gntavKNByL0BQomTZgcoE2Zmfl
RQUoErMXE8G6fJIZATRpM4iYk3L3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org