Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3430303a3a2f34302d3430203d3e20323637353630.roa
File:                     323830343a343334383a3430303a3a2f34302d3430203d3e20323637353630.roa (raw, json)
Hash identifier:          zVzIzEFYVOPfP5e2wkxqgyTF7ZsflakYLQziGXF2PoY=
Subject key identifier:   CF:57:68:68:34:86:85:94:16:9F:F5:C3:11:40:DA:1C:2D:6A:CD:06
Certificate issuer:       /CN=A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2
Certificate serial:       7F5E5F091F20B471575AD5A4F5EB7B396BE5DBF2
Authority key identifier: A2:65:B2:5A:F2:70:4F:A3:E9:5F:4E:D3:C6:6D:1D:F7:E3:12:DE:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3430303a3a2f34302d3430203d3e20323637353630.roa
Signing time:             Mon 14 Feb 2022 14:00:01 +0000
ROA not before:           Mon 14 Feb 2022 13:55:01 +0000
ROA not after:            Mon 13 Feb 2023 14:00:01 +0000
asID:                     267560
IP address blocks:        2804:4348:400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5e:5f:09:1f:20:b4:71:57:5a:d5:a4:f5:eb:7b:39:6b:e5:db:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2
        Validity
            Not Before: Feb 14 13:55:01 2022 GMT
            Not After : Feb 13 14:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:13:a8:df:c8:ea:86:fa:07:ae:4d:ec:27:
                    67:f1:d7:0d:1e:c9:f2:e7:0e:ea:6b:b3:8b:19:a7:
                    d5:4b:5c:54:a4:78:31:6a:d3:61:9e:44:e8:df:af:
                    d3:f1:31:69:b7:e8:e4:7e:13:9a:da:b8:57:ed:09:
                    95:70:3e:c6:c0:d0:b1:f1:89:bc:37:47:43:7b:9c:
                    8a:89:fa:17:7e:34:3a:c1:ca:d2:3c:d8:a1:9d:19:
                    cb:eb:e6:f2:77:44:97:5b:34:3e:c0:c8:e1:29:76:
                    f1:38:3f:72:7d:83:7f:19:1a:69:24:70:08:de:de:
                    01:ce:e5:d8:58:5d:04:2b:cb:3c:02:b0:1e:07:fb:
                    74:43:e3:4e:70:c8:b8:b0:58:24:8a:f0:3d:27:34:
                    5d:20:f6:16:66:5f:f8:98:dd:e8:c1:e5:dc:61:15:
                    79:74:6e:48:2c:08:f5:45:7c:12:7d:08:f2:e4:ae:
                    e2:75:85:44:da:d2:3b:5f:e3:83:dc:fe:4e:96:e9:
                    9f:5a:a8:0f:41:c9:57:69:6d:a4:d0:5c:19:7a:6f:
                    c3:3e:cd:7b:79:75:dd:87:ec:45:3a:81:be:ec:1d:
                    f4:43:26:f9:93:97:76:9b:56:18:0e:3b:b0:0d:2c:
                    3f:a0:85:b8:d5:9f:17:c1:86:13:67:2d:3e:b4:e1:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:57:68:68:34:86:85:94:16:9F:F5:C3:11:40:DA:1C:2D:6A:CD:06
            X509v3 Authority Key Identifier:
                keyid:A2:65:B2:5A:F2:70:4F:A3:E9:5F:4E:D3:C6:6D:1D:F7:E3:12:DE:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3430303a3a2f34302d3430203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:93:c3:52:c2:a2:49:0a:42:06:b2:e0:64:a2:e8:1f:2f:40:
         76:de:ea:f6:13:13:d1:6c:2b:a9:87:64:66:3c:7b:a7:a2:c3:
         00:88:ac:41:02:f2:68:c0:7a:2b:0a:4c:4a:9b:9c:92:2b:63:
         75:1a:99:34:24:bc:01:fb:be:9c:36:16:c8:3f:e2:47:0a:a7:
         20:2a:6d:87:99:06:b2:ab:fb:2f:e4:06:0d:f2:ec:9e:fd:d4:
         3d:b8:fb:fb:2f:ab:62:6f:88:9e:10:be:e1:ca:48:53:d0:ce:
         5e:b5:b9:e6:b4:09:0d:15:a2:6a:a7:b4:ee:d8:45:94:cc:20:
         fd:16:c5:77:4c:2c:cb:26:b5:96:60:72:92:4a:46:6a:73:24:
         5d:d8:35:6b:27:b9:a8:a7:b7:99:36:21:75:31:35:8e:37:d5:
         8f:0c:f4:ec:cf:cf:54:cc:8f:cc:cc:64:79:e1:cd:44:02:46:
         67:23:19:4b:f9:ee:f6:6f:10:5f:8b:39:5e:c3:7b:af:34:02:
         0c:3a:5b:8f:6b:84:47:39:44:3c:7d:c9:d1:23:8e:3e:63:5c:
         ce:14:2d:d4:0f:d1:5a:cb:ad:aa:16:35:c6:22:ad:38:a3:86:
         d5:e1:90:72:c2:d1:8c:4e:ae:de:2c:a9:dc:ae:73:4d:35:5d:
         be:84:53:64
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUf15fCR8gtHFXWtWk9et7OWvl2/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI2NUIyNUFGMjcwNEZBM0U5NUY0RUQzQzY2RDFERjdF
MzEyREVFMjAeFw0yMjAyMTQxMzU1MDFaFw0yMzAyMTMxNDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY3MDEzQThERkM4RUE4NkZB
MDdBRTRERUMyNzY3RjFENzBEMUVDOUYyRTcwRUVBNkJCMzhCMTlBN0Q1NEI1QzU0
QTQ3ODMxNkFEMzYxOUU0NEU4REZBRkQzRjEzMTY5QjdFOEU0N0UxMzlBREFCODU3
RUQwOTk1NzAzRUM2QzBEMEIxRjE4OUJDMzc0NzQzN0I5QzhBODlGQTE3N0UzNDNB
QzFDQUQyM0NEOEExOUQxOUNCRUJFNkYyNzc0NDk3NUIzNDNFQzBDOEUxMjk3NkYx
MzgzRjcyN0Q4MzdGMTkxQTY5MjQ3MDA4REVERTAxQ0VFNUQ4NTg1RDA0MkJDQjND
MDJCMDFFMDdGQjc0NDNFMzRFNzBDOEI4QjA1ODI0OEFGMDNEMjczNDVEMjBGNjE2
NjY1RkY4OThEREU4QzFFNURDNjExNTc5NzQ2RTQ4MkMwOEY1NDU3QzEyN0QwOEYy
RTRBRUUyNzU4NTQ0REFEMjNCNUZFMzgzRENGRTRFOTZFOTlGNUFBODBGNDFDOTU3
Njk2REE0RDA1QzE5N0E2RkMzM0VDRDdCNzk3NUREODdFQzQ1M0E4MUJFRUMxREY0
NDMyNkY5OTM5Nzc2OUI1NjE4MEUzQkIwMEQyQzNGQTA4NUI4RDU5RjE3QzE4NjEz
NjcyRDNFQjRFMTVDQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA33ATqN/I6ob6B65N7Cdn8dcNHsny5w7qa7OLGafVS1xUpHgxatNh
nkTo36/T8TFpt+jkfhOa2rhX7QmVcD7GwNCx8Ym8N0dDe5yKifoXfjQ6wcrSPNih
nRnL6+byd0SXWzQ+wMjhKXbxOD9yfYN/GRppJHAI3t4BzuXYWF0EK8s8ArAeB/t0
Q+NOcMi4sFgkivA9JzRdIPYWZl/4mN3oweXcYRV5dG5ILAj1RXwSfQjy5K7idYVE
2tI7X+OD3P5OlumfWqgPQclXaW2k0FwZem/DPs17eXXdh+xFOoG+7B30Qyb5k5d2
m1YYDjuwDSw/oIW41Z8XwYYTZy0+tOFcyQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FM9XaGg0hoWUFp/1wxFA2hwtas0GMB8GA1UdIwQYMBaAFKJlslrycE+j6V9O08Zt
HffjEt7iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dlVG9DcUdFVkdEeXR4
a25pRkxyaWpyZGtKUG9kbUw5Z2NCWGZTRW13MnUyLzAvQTI2NUIyNUFGMjcwNEZB
M0U5NUY0RUQzQzY2RDFERjdFMzEyREVFMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BMjY1QjI1QUYyNzA0RkEzRTk1RjRFRDNDNjZEMURGN0UzMTJE
RUUyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZVRvQ3FHRVZHRHl0eGtuaUZM
cmlqcmRrSlBvZG1MOWdjQlhmU0VtdzJ1Mi8wLzMyMzgzMDM0M2EzNDMzMzQzODNh
MzQzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM3MzUzNjMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKARDSAQwDQYJKoZIhvcNAQELBQADggEBAKWTw1LCokkKQgay4GSi6B8v
QHbe6vYTE9FsK6mHZGY8e6eiwwCIrEEC8mjAeisKTEqbnJIrY3UamTQkvAH7vpw2
Fsg/4kcKpyAqbYeZBrKr+y/kBg3y7J791D24+/svq2JviJ4QvuHKSFPQzl61uea0
CQ0VomqntO7YRZTMIP0WxXdMLMsmtZZgcpJKRmpzJF3YNWsnuaint5k2IXUxNY43
1Y8M9OzPz1TMj8zMZHnhzUQCRmcjGUv57vZvEF+LOV7De680Agw6W49rhEc5RDx9
ydEjjj5jXM4ULdQP0VrLraoWNcYirTijhtXhkHLC0YxOrt4sqdyuc001Xb6EU2Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org