Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f34302d3430203d3e20323637353630.roa
File:                     323830343a343334383a3a2f34302d3430203d3e20323637353630.roa (raw, json)
Hash identifier:          RCOLt1VB33sZ18nFeiBGQ6sl/3TW1hSYMjp8wbdHUkk=
Subject key identifier:   9B:32:83:4B:10:59:EF:ED:0E:02:21:B8:AF:DA:DD:31:77:6A:AF:38
Certificate issuer:       /CN=A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2
Certificate serial:       075F21688FAA41FA125CA991B364290455178304
Authority key identifier: A2:65:B2:5A:F2:70:4F:A3:E9:5F:4E:D3:C6:6D:1D:F7:E3:12:DE:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f34302d3430203d3e20323637353630.roa
Signing time:             Mon 14 Feb 2022 14:00:00 +0000
ROA not before:           Mon 14 Feb 2022 13:55:00 +0000
ROA not after:            Mon 13 Feb 2023 14:00:00 +0000
asID:                     267560
IP address blocks:        2804:4348::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5f:21:68:8f:aa:41:fa:12:5c:a9:91:b3:64:29:04:55:17:83:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2
        Validity
            Not Before: Feb 14 13:55:00 2022 GMT
            Not After : Feb 13 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:12:4c:06:23:1f:65:e2:10:f6:3a:9e:4a:
                    cf:9f:c5:ef:43:7f:b7:4d:8d:6f:a8:9d:31:f8:e4:
                    cf:c6:0d:2e:77:0d:10:25:8a:fd:54:ea:33:63:66:
                    ad:3b:8a:49:65:10:e6:e2:03:b4:8b:72:4f:91:f6:
                    e1:84:27:61:51:fd:e4:8b:7e:64:3f:2f:71:47:bf:
                    00:2a:97:d3:84:e2:c9:c3:be:f7:11:ed:5c:b8:89:
                    27:1f:23:15:af:91:08:cc:ba:e6:7d:a7:cf:9e:d9:
                    9b:1b:0f:6d:b5:d8:a6:ec:51:99:f5:d0:86:08:0f:
                    be:e8:61:80:13:86:8e:61:43:d9:9a:40:ca:7e:fc:
                    c4:f0:cf:50:0f:ae:14:b8:7e:3a:ab:aa:0e:f8:36:
                    d3:41:bb:c0:a6:2c:b9:1e:0e:ea:01:27:93:02:80:
                    5f:e7:4a:1e:67:73:d3:c2:bd:4a:58:e1:16:ae:7e:
                    38:b7:31:4d:f0:80:27:ba:33:59:41:cc:c9:3e:9b:
                    72:f6:02:ca:31:b6:ed:b4:a0:67:e3:92:1b:5c:1b:
                    d9:46:78:30:82:83:29:7a:6c:22:d0:91:50:e2:8d:
                    ea:21:ed:21:53:d9:68:61:86:81:f4:7e:a1:1b:de:
                    1d:c3:d5:db:75:9c:4c:26:e0:ee:9e:5c:87:09:f3:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:83:4B:10:59:EF:ED:0E:02:21:B8:AF:DA:DD:31:77:6A:AF:38
            X509v3 Authority Key Identifier:
                keyid:A2:65:B2:5A:F2:70:4F:A3:E9:5F:4E:D3:C6:6D:1D:F7:E3:12:DE:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f34302d3430203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:26:16:85:f1:62:a4:4d:05:1c:11:c6:bc:29:f6:a6:e6:7b:
         d2:73:3a:31:e8:4a:7c:95:a8:47:09:85:0d:7e:b9:a8:ec:1f:
         77:54:01:d9:3d:54:6c:96:aa:03:44:e1:e9:8e:c0:43:a5:74:
         e0:0d:53:05:1a:85:e8:36:c3:91:7e:0a:10:45:19:d5:1f:f0:
         29:b1:36:b4:f6:4e:de:f3:ab:62:95:28:2f:09:07:2f:6b:89:
         9f:86:5a:2e:ec:9e:74:5d:08:c3:1a:ab:10:e1:84:ea:df:85:
         25:86:80:1d:a0:d1:ee:c2:27:ee:e1:c6:cf:65:c9:6b:cf:bc:
         7a:d4:ed:f5:07:e5:e2:d1:c4:5c:bf:60:7d:56:7e:d0:b2:44:
         19:46:34:56:91:2e:94:9c:af:56:d9:99:92:49:62:d7:9b:87:
         26:59:3d:ce:51:3a:4e:f3:99:36:cd:66:04:a2:c0:c0:0f:48:
         1f:ee:cc:a9:ef:a3:c0:b1:ca:5a:c9:34:03:f7:f8:da:db:ea:
         ce:6c:d5:b2:70:ae:3e:75:b6:c0:08:84:2a:4a:47:27:7b:92:
         77:38:06:bd:c1:e6:93:c5:4d:2d:b1:7c:f0:6b:1e:de:60:5e:
         c7:c3:3e:7a:0e:86:e2:37:d4:83:f8:48:3b:17:50:fc:81:21:
         19:c8:55:e8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUB18haI+qQfoSXKmRs2QpBFUXgwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI2NUIyNUFGMjcwNEZBM0U5NUY0RUQzQzY2RDFERjdF
MzEyREVFMjAeFw0yMjAyMTQxMzU1MDBaFw0yMzAyMTMxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkMxQzEyNEMwNjIzMUY2NUUy
MTBGNjNBOUU0QUNGOUZDNUVGNDM3RkI3NEQ4RDZGQTg5RDMxRjhFNENGQzYwRDJF
NzcwRDEwMjU4QUZENTRFQTMzNjM2NkFEM0I4QTQ5NjUxMEU2RTIwM0I0OEI3MjRG
OTFGNkUxODQyNzYxNTFGREU0OEI3RTY0M0YyRjcxNDdCRjAwMkE5N0QzODRFMkM5
QzNCRUY3MTFFRDVDQjg4OTI3MUYyMzE1QUY5MTA4Q0NCQUU2N0RBN0NGOUVEOTlC
MUIwRjZEQjVEOEE2RUM1MTk5RjVEMDg2MDgwRkJFRTg2MTgwMTM4NjhFNjE0M0Q5
OUE0MENBN0VGQ0M0RjBDRjUwMEZBRTE0Qjg3RTNBQUJBQTBFRjgzNkQzNDFCQkMw
QTYyQ0I5MUUwRUVBMDEyNzkzMDI4MDVGRTc0QTFFNjc3M0QzQzJCRDRBNThFMTE2
QUU3RTM4QjczMTRERjA4MDI3QkEzMzU5NDFDQ0M5M0U5QjcyRjYwMkNBMzFCNkVE
QjRBMDY3RTM5MjFCNUMxQkQ5NDY3ODMwODI4MzI5N0E2QzIyRDA5MTUwRTI4REVB
MjFFRDIxNTNEOTY4NjE4NjgxRjQ3RUExMUJERTFEQzNENURCNzU5QzRDMjZFMEVF
OUU1Qzg3MDlGMzFCQTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvBwSTAYjH2XiEPY6nkrPn8XvQ3+3TY1vqJ0x+OTPxg0udw0QJYr9
VOozY2atO4pJZRDm4gO0i3JPkfbhhCdhUf3ki35kPy9xR78AKpfThOLJw773Ee1c
uIknHyMVr5EIzLrmfafPntmbGw9ttdim7FGZ9dCGCA++6GGAE4aOYUPZmkDKfvzE
8M9QD64UuH46q6oO+DbTQbvApiy5Hg7qASeTAoBf50oeZ3PTwr1KWOEWrn44tzFN
8IAnujNZQczJPpty9gLKMbbttKBn45IbXBvZRngwgoMpemwi0JFQ4o3qIe0hU9lo
YYaB9H6hG94dw9XbdZxMJuDunlyHCfMbowIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJsyg0sQWe/tDgIhuK/a3TF3aq84MB8GA1UdIwQYMBaAFKJlslrycE+j6V9O08Zt
HffjEt7iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dlVG9DcUdFVkdEeXR4
a25pRkxyaWpyZGtKUG9kbUw5Z2NCWGZTRW13MnUyLzAvQTI2NUIyNUFGMjcwNEZB
M0U5NUY0RUQzQzY2RDFERjdFMzEyREVFMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BMjY1QjI1QUYyNzA0RkEzRTk1RjRFRDNDNjZEMURGN0UzMTJE
RUUyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZVRvQ3FHRVZHRHl0eGtuaUZM
cmlqcmRrSlBvZG1MOWdjQlhmU0VtdzJ1Mi8wLzMyMzgzMDM0M2EzNDMzMzQzODNh
M2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzYzNzM1MzYzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgE
Q0gAMA0GCSqGSIb3DQEBCwUAA4IBAQCTJhaF8WKkTQUcEca8Kfam5nvSczox6Ep8
lahHCYUNfrmo7B93VAHZPVRslqoDROHpjsBDpXTgDVMFGoXoNsORfgoQRRnVH/Ap
sTa09k7e86tilSgvCQcva4mfhlou7J50XQjDGqsQ4YTq34UlhoAdoNHuwifu4cbP
Zclrz7x61O31B+Xi0cRcv2B9Vn7QskQZRjRWkS6UnK9W2ZmSSWLXm4cmWT3OUTpO
85k2zWYEosDAD0gf7syp76PAscpayTQD9/ja2+rObNWycK4+dbbACIQqSkcne5J3
OAa9weaTxU0tsXzwax7eYF7Hwz56DobiN9SD+Eg7F1D8gSEZyFXo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org