Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/323830343a3736303a3a2f33362d3336203d3e20323632363338.roa
File:                     323830343a3736303a3a2f33362d3336203d3e20323632363338.roa (raw, json)
Hash identifier:          ryvGp/qsdUL//JHYgN3XrjBeEaWQ3fGMFNiARok/2Vo=
Subject key identifier:   33:54:1E:EC:4E:07:32:2C:91:24:E3:78:2A:08:8B:BF:44:5B:5E:09
Certificate issuer:       /CN=16EEF2CD6AC6817D041ABFC8372B616BC31878AE
Certificate serial:       676AFCC72D7F769203BDFF5FABCFAE16925E0C94
Authority key identifier: 16:EE:F2:CD:6A:C6:81:7D:04:1A:BF:C8:37:2B:61:6B:C3:18:78:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/323830343a3736303a3a2f33362d3336203d3e20323632363338.roa
Signing time:             Tue 25 Oct 2022 15:00:00 +0000
ROA not before:           Tue 25 Oct 2022 14:55:00 +0000
ROA not after:            Tue 24 Oct 2023 15:00:00 +0000
asID:                     262638
IP address blocks:        2804:760::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6a:fc:c7:2d:7f:76:92:03:bd:ff:5f:ab:cf:ae:16:92:5e:0c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16EEF2CD6AC6817D041ABFC8372B616BC31878AE
        Validity
            Not Before: Oct 25 14:55:00 2022 GMT
            Not After : Oct 24 15:00:00 2023 GMT
        Subject: CN=3082010A0282010100C3106CCBD51A04FAC02BA8FBB3C6ADB8E437445F1ADD31974604AA509D247BA4A7503D42D88B8271066B5D5574894D46078B8E623143DC3DCF0BF5CDD43B4494DB8B481B89AF27D9AC434C7A42DEE166BD68DF253F89F65E3A0820DA6F60DD76E84CA0492DE1FB09700F3679E68A156FC1275F1035D3B0BA2A10134738D7C423A8489F4A0EE13BCC20498C86FFD83178AC9FB561575215163CB92A5A2AF2A4C693E89A065723AE28D4BC9AC58C1A132065A35D984C97E03F6BCB76736F52E70029A692B5862DD30CF921CBD6545B7A494D4810FEFA8B69C50EB76BAA14CE8A4AA216D175D0E6F563E195BCCE6FD008B542A7329E53E348AA7184413A16B2CB1B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:6c:cb:d5:1a:04:fa:c0:2b:a8:fb:b3:c6:
                    ad:b8:e4:37:44:5f:1a:dd:31:97:46:04:aa:50:9d:
                    24:7b:a4:a7:50:3d:42:d8:8b:82:71:06:6b:5d:55:
                    74:89:4d:46:07:8b:8e:62:31:43:dc:3d:cf:0b:f5:
                    cd:d4:3b:44:94:db:8b:48:1b:89:af:27:d9:ac:43:
                    4c:7a:42:de:e1:66:bd:68:df:25:3f:89:f6:5e:3a:
                    08:20:da:6f:60:dd:76:e8:4c:a0:49:2d:e1:fb:09:
                    70:0f:36:79:e6:8a:15:6f:c1:27:5f:10:35:d3:b0:
                    ba:2a:10:13:47:38:d7:c4:23:a8:48:9f:4a:0e:e1:
                    3b:cc:20:49:8c:86:ff:d8:31:78:ac:9f:b5:61:57:
                    52:15:16:3c:b9:2a:5a:2a:f2:a4:c6:93:e8:9a:06:
                    57:23:ae:28:d4:bc:9a:c5:8c:1a:13:20:65:a3:5d:
                    98:4c:97:e0:3f:6b:cb:76:73:6f:52:e7:00:29:a6:
                    92:b5:86:2d:d3:0c:f9:21:cb:d6:54:5b:7a:49:4d:
                    48:10:fe:fa:8b:69:c5:0e:b7:6b:aa:14:ce:8a:4a:
                    a2:16:d1:75:d0:e6:f5:63:e1:95:bc:ce:6f:d0:08:
                    b5:42:a7:32:9e:53:e3:48:aa:71:84:41:3a:16:b2:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:1E:EC:4E:07:32:2C:91:24:E3:78:2A:08:8B:BF:44:5B:5E:09
            X509v3 Authority Key Identifier:
                keyid:16:EE:F2:CD:6A:C6:81:7D:04:1A:BF:C8:37:2B:61:6B:C3:18:78:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/323830343a3736303a3a2f33362d3336203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:760::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:96:d4:72:0a:d8:36:ce:9e:bc:b9:19:fc:6d:84:d8:c6:72:
         4b:43:6a:05:bb:43:0a:fc:d3:09:3e:9f:87:d7:a9:ae:35:72:
         28:93:e7:aa:14:ef:62:ca:06:42:fe:f9:91:41:ad:e1:94:67:
         f3:f3:55:70:9d:5f:4f:33:47:d3:b6:c6:c0:44:cd:a7:54:21:
         84:91:b0:9c:87:36:81:fb:4e:de:41:3c:a8:f2:a1:d7:97:6e:
         af:7c:24:d7:03:95:69:ff:92:e6:37:18:9e:29:f4:ea:e1:cf:
         4f:69:1d:42:a7:7a:72:ca:04:fe:a8:67:f3:dc:5c:bd:9f:8a:
         c4:99:35:7c:55:a7:34:d0:26:ab:04:69:59:e0:52:1c:21:b5:
         ea:50:38:1e:2c:45:56:a5:55:7c:40:e5:d5:4f:0e:88:63:12:
         b8:aa:98:50:f1:85:e4:92:3d:2f:ed:b3:84:dc:af:50:bf:73:
         d9:c8:18:49:b3:b9:42:d6:ec:7d:f5:e0:bf:5f:b3:56:8d:7b:
         ee:e7:38:a9:62:83:ff:a6:f3:55:4a:ab:5f:e8:b8:89:7c:02:
         35:0f:f0:10:07:e7:25:35:ea:ae:38:a2:cd:7e:96:ee:d7:4e:
         db:44:a3:26:67:8e:ed:a5:4a:3c:72:56:d4:4f:01:e8:ae:ad:
         66:fa:fc:a8
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZ2r8xy1/dpIDvf9fq8+uFpJeDJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFRUYyQ0Q2QUM2ODE3RDA0MUFCRkM4MzcyQjYxNkJD
MzE4NzhBRTAeFw0yMjEwMjUxNDU1MDBaFw0yMzEwMjQxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzMxMDZDQ0JENTFBMDRGQUMw
MkJBOEZCQjNDNkFEQjhFNDM3NDQ1RjFBREQzMTk3NDYwNEFBNTA5RDI0N0JBNEE3
NTAzRDQyRDg4QjgyNzEwNjZCNUQ1NTc0ODk0RDQ2MDc4QjhFNjIzMTQzREMzRENG
MEJGNUNERDQzQjQ0OTREQjhCNDgxQjg5QUYyN0Q5QUM0MzRDN0E0MkRFRTE2NkJE
NjhERjI1M0Y4OUY2NUUzQTA4MjBEQTZGNjBERDc2RTg0Q0EwNDkyREUxRkIwOTcw
MEYzNjc5RTY4QTE1NkZDMTI3NUYxMDM1RDNCMEJBMkExMDEzNDczOEQ3QzQyM0E4
NDg5RjRBMEVFMTNCQ0MyMDQ5OEM4NkZGRDgzMTc4QUM5RkI1NjE1NzUyMTUxNjND
QjkyQTVBMkFGMkE0QzY5M0U4OUEwNjU3MjNBRTI4RDRCQzlBQzU4QzFBMTMyMDY1
QTM1RDk4NEM5N0UwM0Y2QkNCNzY3MzZGNTJFNzAwMjlBNjkyQjU4NjJERDMwQ0Y5
MjFDQkQ2NTQ1QjdBNDk0RDQ4MTBGRUZBOEI2OUM1MEVCNzZCQUExNENFOEE0QUEy
MTZEMTc1RDBFNkY1NjNFMTk1QkNDRTZGRDAwOEI1NDJBNzMyOUU1M0UzNDhBQTcx
ODQ0MTNBMTZCMkNCMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwxBsy9UaBPrAK6j7s8atuOQ3RF8a3TGXRgSqUJ0ke6SnUD1C2IuC
cQZrXVV0iU1GB4uOYjFD3D3PC/XN1DtElNuLSBuJryfZrENMekLe4Wa9aN8lP4n2
XjoIINpvYN126EygSS3h+wlwDzZ55ooVb8EnXxA107C6KhATRzjXxCOoSJ9KDuE7
zCBJjIb/2DF4rJ+1YVdSFRY8uSpaKvKkxpPomgZXI64o1LyaxYwaEyBlo12YTJfg
P2vLdnNvUucAKaaStYYt0wz5IcvWVFt6SU1IEP76i2nFDrdrqhTOikqiFtF10Ob1
Y+GVvM5v0Ai1QqcynlPjSKpxhEE6FrLLGwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FDNUHuxOBzIskSTjeCoIi79EW14JMB8GA1UdIwQYMBaAFBbu8s1qxoF9BBq/yDcr
YWvDGHiuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dWTmRqUHBVTjlzelVl
YmhyVDdmV0g3eUROOUJ4WTl3QWF4amVqeTZnVHg0LzAvMTZFRUYyQ0Q2QUM2ODE3
RDA0MUFCRkM4MzcyQjYxNkJDMzE4NzhBRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNkVFRjJDRDZBQzY4MTdEMDQxQUJGQzgzNzJCNjE2QkMzMTg3
OEFFLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVk5kalBwVU45c3pVZWJoclQ3
ZldIN3lETjlCeFk5d0FheGplank2Z1R4NC8wLzMyMzgzMDM0M2EzNzM2MzAzYTNh
MmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzIzNjMzMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAdg
ADANBgkqhkiG9w0BAQsFAAOCAQEAhpbUcgrYNs6evLkZ/G2E2MZyS0NqBbtDCvzT
CT6fh9eprjVyKJPnqhTvYsoGQv75kUGt4ZRn8/NVcJ1fTzNH07bGwETNp1QhhJGw
nIc2gftO3kE8qPKh15dur3wk1wOVaf+S5jcYnin06uHPT2kdQqd6csoE/qhn89xc
vZ+KxJk1fFWnNNAmqwRpWeBSHCG16lA4HixFVqVVfEDl1U8OiGMSuKqYUPGF5JI9
L+2zhNyvUL9z2cgYSbO5QtbsffXgv1+zVo177uc4qWKD/6bzVUqrX+i4iXwCNQ/w
EAfnJTXqrjiizX6W7tdO20SjJmeO7aVKPHJW1E8B6K6tZvr8qA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org