Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343130303a3a2f34302d3430203d3e20323638383538.roa
File:                     323830343a356239633a343130303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier:          7vhGFFB4NxV3/wZl2LsGfEqSxFAXX83sWTTtVMsnpbI=
Subject key identifier:   3C:0D:6B:40:FC:7E:41:A3:D9:27:F2:E6:41:B6:C9:1E:91:D8:AF:FB
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       2B967E2368C8E7DF1E5122E4FA4135FF2CD5714E
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343130303a3a2f34302d3430203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:30 +0000
ROA not before:           Tue 05 Mar 2024 20:05:30 +0000
ROA not after:            Tue 04 Mar 2025 20:10:30 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:96:7e:23:68:c8:e7:df:1e:51:22:e4:fa:41:35:ff:2c:d5:71:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:30 2024 GMT
            Not After : Mar  4 20:10:30 2025 GMT
        Subject: CN=3C0D6B40FC7E41A3D927F2E641B6C91E91D8AFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:72:43:68:1a:19:dc:af:6e:76:03:49:cf:
                    87:69:1a:57:07:f8:68:4b:26:88:a6:26:b2:5b:c6:
                    71:c0:21:0f:2a:7b:99:31:ca:51:23:9a:5b:38:cb:
                    17:48:09:ec:d0:80:03:f8:65:25:f1:7e:5b:34:fd:
                    ae:d7:41:f1:f4:56:95:1c:cb:3c:e3:b3:c0:21:e1:
                    e8:ac:28:fe:22:3a:68:d5:2b:41:d6:1a:db:39:98:
                    78:e7:c1:ee:1f:bc:90:c1:38:37:de:90:61:c5:ff:
                    08:76:d0:05:15:c6:1c:19:d1:e3:4b:65:2a:98:f5:
                    4a:b0:90:8b:de:71:1b:c9:3e:4d:cb:4b:46:47:b2:
                    cb:83:2e:01:83:55:40:f8:89:1b:27:b7:43:aa:06:
                    16:3e:a3:92:c7:84:b6:d1:53:33:8a:92:9d:24:4f:
                    f5:b1:ff:11:d0:f7:1d:98:a6:ec:e2:6a:ae:42:14:
                    f4:0e:41:f1:16:d9:38:fa:d2:be:85:21:12:ab:97:
                    c0:0f:a0:1e:1a:a8:52:c9:8c:8e:08:ad:16:0a:09:
                    e4:86:e3:73:ef:89:95:2e:7f:c6:d3:e1:3f:0e:08:
                    3f:dd:f6:58:85:01:01:6a:a2:77:ce:a1:d3:c3:c3:
                    7e:c9:f6:2a:a1:fb:04:9b:9a:57:e4:ea:95:92:41:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0D:6B:40:FC:7E:41:A3:D9:27:F2:E6:41:B6:C9:1E:91:D8:AF:FB
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343130303a3a2f34302d3430203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:d8:c3:b8:26:34:5f:6b:69:76:4d:d4:f8:21:1c:ee:3c:6c:
         10:51:01:8b:3f:62:11:11:eb:8f:3e:30:05:c1:1e:3d:b2:a3:
         0e:a2:ac:5b:4d:88:91:4f:80:1a:b2:80:84:de:2e:40:62:39:
         f7:f9:22:ef:9c:ae:01:e1:77:3f:82:97:fd:ca:ca:01:b8:0b:
         6d:a7:2c:cb:d9:82:4f:6e:bf:c8:d5:a0:22:a8:21:36:eb:47:
         26:39:5d:0a:75:92:90:3e:4a:cf:a4:4a:c8:c1:e3:72:37:c0:
         6d:f3:68:65:a6:e8:3d:d7:18:38:cb:78:e8:a8:d3:d9:6b:96:
         13:b3:be:23:8e:18:20:f6:77:7f:57:80:e1:32:52:8c:de:aa:
         57:f5:7e:3a:18:18:ee:0b:aa:d5:11:af:37:b6:8d:b0:39:9f:
         2b:4f:a4:d5:d3:19:f4:53:bb:7e:a2:53:49:8a:7d:92:21:91:
         71:96:4e:9c:7e:5e:22:0d:4c:fc:a6:18:9d:ee:43:a8:08:be:
         b7:0d:0f:68:f2:bb:41:dc:bc:1c:15:80:19:a0:41:7b:68:e2:
         3a:d5:2e:58:c2:af:97:96:fe:7b:ba:5d:51:67:44:69:da:d1:
         b6:e9:0a:d4:e3:78:2d:d4:92:0b:47:98:13:77:a5:3f:c7:dd:
         23:44:9e:9f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUK5Z+I2jI598eUSLk+kE1/yzVcU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxNEQwOEVCNjY4QUQ2RDU2OUI1MkYzNjNERkZCMEQ2
RDVCQjIxMjAeFw0yNDAzMDUyMDA1MzBaFw0yNTAzMDQyMDEwMzBaMDMxMTAvBgNV
BAMTKDNDMEQ2QjQwRkM3RTQxQTNEOTI3RjJFNjQxQjZDOTFFOTFEOEFGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChT3JDaBoZ3K9udgNJz4dpGlcH
+GhLJoimJrJbxnHAIQ8qe5kxylEjmls4yxdICezQgAP4ZSXxfls0/a7XQfH0VpUc
yzzjs8Ah4eisKP4iOmjVK0HWGts5mHjnwe4fvJDBODfekGHF/wh20AUVxhwZ0eNL
ZSqY9UqwkIvecRvJPk3LS0ZHssuDLgGDVUD4iRsnt0OqBhY+o5LHhLbRUzOKkp0k
T/Wx/xHQ9x2Ypuziaq5CFPQOQfEW2Tj60r6FIRKrl8APoB4aqFLJjI4IrRYKCeSG
43PviZUuf8bT4T8OCD/d9liFAQFqonfOodPDw37J9iqh+wSbmlfk6pWSQS0bAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUPA1rQPx+QaPZJ/LmQbbJHpHYr/swHwYDVR0j
BBgwFoAUxRTQjrZorW1Wm1LzY9/7DW1bshIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMC9DNTE0RDA4RUI2NjhBRDZENTY5QjUyRjM2M0RGRkIwRDZENUJCMjEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MTREMDhFQjY2OEFENkQ1
NjlCNTJGMzYzREZGQjBENkQ1QkIyMTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzAv
MzIzODMwMzQzYTM1NjIzOTYzM2EzNDMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM4MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEW5xBMA0GCSqGSIb3DQEBCwUA
A4IBAQDD2MO4JjRfa2l2TdT4IRzuPGwQUQGLP2IREeuPPjAFwR49sqMOoqxbTYiR
T4AasoCE3i5AYjn3+SLvnK4B4Xc/gpf9ysoBuAttpyzL2YJPbr/I1aAiqCE260cm
OV0KdZKQPkrPpErIweNyN8Bt82hlpug91xg4y3joqNPZa5YTs74jjhgg9nd/V4Dh
MlKM3qpX9X46GBjuC6rVEa83to2wOZ8rT6TV0xn0U7t+olNJin2SIZFxlk6cfl4i
DUz8phid7kOoCL63DQ9o8rtB3LwcFYAZoEF7aOI61S5Ywq+Xlv57ul1RZ0Rp2tG2
6QrU43gt1JILR5gTd6U/x90jRJ6f
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org