Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa
File:                     323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier:          H2/IKLzz7595trvZAyGrI/FmHbEDYmGaP0jQhuvwn58=
Subject key identifier:   B6:58:0C:54:18:43:B9:DC:F7:08:D0:DA:A8:79:71:0E:5D:CF:7F:A1
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       3367C8DED7EAF5F4261C05F46FD07B2940DCE1ED
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:29 +0000
ROA not before:           Tue 05 Mar 2024 20:05:29 +0000
ROA not after:            Tue 04 Mar 2025 20:10:29 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:67:c8:de:d7:ea:f5:f4:26:1c:05:f4:6f:d0:7b:29:40:dc:e1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:29 2024 GMT
            Not After : Mar  4 20:10:29 2025 GMT
        Subject: CN=B6580C541843B9DCF708D0DAA879710E5DCF7FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:9d:33:4e:ef:c1:ab:0d:41:25:cb:68:31:
                    aa:2d:6e:13:ce:9b:30:a1:07:bf:45:19:de:76:ed:
                    14:6a:15:54:d6:88:a0:34:f8:c1:fb:ba:a5:8f:ff:
                    e1:62:fd:99:ba:c4:79:b9:b9:68:15:56:bb:eb:af:
                    26:cd:55:3b:87:5b:dc:1d:3d:5c:dd:e0:34:f3:87:
                    8f:87:f1:45:1b:68:6f:af:75:bc:ec:27:74:b5:15:
                    f4:85:69:c8:19:e7:dd:35:5b:ba:81:ac:f1:03:db:
                    2e:f0:d7:bd:12:24:4f:c8:dc:ee:4b:9b:8a:a6:28:
                    9a:20:07:34:69:27:03:72:73:01:54:09:0e:c0:fd:
                    23:62:9f:de:26:50:64:dd:ae:00:a3:60:87:85:0f:
                    1d:c8:a4:8f:a8:14:f3:0d:22:21:0b:5c:e3:bb:e5:
                    e1:cc:02:94:d3:aa:1c:6b:b5:b7:0d:47:56:66:d8:
                    dd:ee:c3:39:82:dd:ae:3e:b9:e8:0f:d0:cb:9b:e2:
                    d1:7e:3d:4c:52:76:bc:a3:23:e3:36:68:93:12:6e:
                    21:c0:e0:82:0f:b1:5c:35:c5:96:2d:9e:cb:7a:0e:
                    cb:31:eb:7f:a2:2c:9f:10:65:53:ee:cc:7b:f1:cf:
                    99:ec:b8:e0:02:d0:70:3e:a8:0f:49:0e:2b:73:0f:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:0C:54:18:43:B9:DC:F7:08:D0:DA:A8:79:71:0E:5D:CF:7F:A1
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343330303a3a2f34302d3430203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:46:73:5c:5a:c7:9e:da:f6:77:b5:20:82:32:af:36:8a:c4:
         c2:67:88:ba:39:d7:e4:e8:5f:88:08:59:13:96:50:fa:6d:64:
         c0:e3:79:4c:ee:52:98:38:9e:36:13:1f:c0:5a:f4:bd:d3:f4:
         21:1b:2c:dc:81:76:7d:ae:a0:a8:ab:69:fd:d5:24:1b:eb:6c:
         ea:b3:99:90:18:cd:77:a4:24:6b:82:ea:af:00:70:61:7d:d4:
         4d:4f:ee:c4:f3:1e:62:b7:8b:30:9a:a3:a4:b5:11:09:11:27:
         f5:e6:b3:b9:b1:19:60:19:e9:ce:44:78:05:d3:d3:b2:77:81:
         e3:11:e2:54:7e:db:66:82:b9:41:4f:52:ba:2c:90:03:bc:4c:
         b2:0b:fd:0b:eb:ab:50:ca:5e:14:89:7b:d4:1f:8a:81:5e:5d:
         23:5c:8d:cf:57:6f:d4:a0:df:e4:cf:ca:ae:95:42:1f:47:ae:
         2b:f6:36:b3:3e:5c:8e:b7:0e:c8:b7:89:02:3f:01:fe:6e:e3:
         fc:a8:6f:ab:03:e1:1d:d4:d0:77:7e:76:d1:d2:05:2e:96:d0:
         10:56:ed:48:29:f6:68:55:7b:f8:f5:b9:2a:98:62:4d:98:c5:
         7b:de:0d:f8:1e:d5:89:28:68:17:99:34:ba:5e:f3:2e:8a:cd:
         6d:d2:76:d0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUM2fI3tfq9fQmHAX0b9B7KUDc4e0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxNEQwOEVCNjY4QUQ2RDU2OUI1MkYzNjNERkZCMEQ2
RDVCQjIxMjAeFw0yNDAzMDUyMDA1MjlaFw0yNTAzMDQyMDEwMjlaMDMxMTAvBgNV
BAMTKEI2NTgwQzU0MTg0M0I5RENGNzA4RDBEQUE4Nzk3MTBFNURDRjdGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3p0zTu/Bqw1BJctoMaotbhPO
mzChB79FGd527RRqFVTWiKA0+MH7uqWP/+Fi/Zm6xHm5uWgVVrvrrybNVTuHW9wd
PVzd4DTzh4+H8UUbaG+vdbzsJ3S1FfSFacgZ5901W7qBrPED2y7w170SJE/I3O5L
m4qmKJogBzRpJwNycwFUCQ7A/SNin94mUGTdrgCjYIeFDx3IpI+oFPMNIiELXOO7
5eHMApTTqhxrtbcNR1Zm2N3uwzmC3a4+uegP0Mub4tF+PUxSdryjI+M2aJMSbiHA
4IIPsVw1xZYtnst6Dssx63+iLJ8QZVPuzHvxz5nsuOAC0HA+qA9JDitzD6A1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUtlgMVBhDudz3CNDaqHlxDl3Pf6EwHwYDVR0j
BBgwFoAUxRTQjrZorW1Wm1LzY9/7DW1bshIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMC9DNTE0RDA4RUI2NjhBRDZENTY5QjUyRjM2M0RGRkIwRDZENUJCMjEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MTREMDhFQjY2OEFENkQ1
NjlCNTJGMzYzREZGQjBENkQ1QkIyMTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzAv
MzIzODMwMzQzYTM1NjIzOTYzM2EzNDMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM4MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEW5xDMA0GCSqGSIb3DQEBCwUA
A4IBAQCMRnNcWsee2vZ3tSCCMq82isTCZ4i6Odfk6F+ICFkTllD6bWTA43lM7lKY
OJ42Ex/AWvS90/QhGyzcgXZ9rqCoq2n91SQb62zqs5mQGM13pCRrguqvAHBhfdRN
T+7E8x5it4swmqOktREJESf15rO5sRlgGenORHgF09Oyd4HjEeJUfttmgrlBT1K6
LJADvEyyC/0L66tQyl4UiXvUH4qBXl0jXI3PV2/UoN/kz8qulUIfR64r9jazPlyO
tw7It4kCPwH+buP8qG+rA+Ed1NB3fnbR0gUultAQVu1IKfZoVXv49bkqmGJNmMV7
3g34HtWJKGgXmTS6XvMuis1t0nbQ
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:55 2025 by rpki-client