Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a343a3a2f34382d3438203d3e20323731303432.roa
File:                     323830343a373536303a343a3a2f34382d3438203d3e20323731303432.roa (raw, json)
Hash identifier:          xg4wzHA+M0ddHJv1o0qBhKGePqLhZpmC1Lk5t6D0xjc=
Subject key identifier:   11:AE:CC:A1:9F:D8:79:99:03:B2:EF:13:16:2F:70:50:ED:C6:D4:4D
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       2503633238886808D856080CB6BD648D493F215B
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a343a3a2f34382d3438203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:19 +0000
ROA not before:           Tue 07 Nov 2023 16:14:19 +0000
ROA not after:            Tue 05 Nov 2024 16:19:19 +0000
asID:                     271042
IP address blocks:        2804:7560:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:03:63:32:38:88:68:08:d8:56:08:0c:b6:bd:64:8d:49:3f:21:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:19 2023 GMT
            Not After : Nov  5 16:19:19 2024 GMT
        Subject: CN=11AECCA19FD8799903B2EF13162F7050EDC6D44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:83:32:2e:1c:6d:d1:89:d0:52:a1:eb:aa:
                    c1:e6:ba:21:08:7e:a8:d9:dc:61:23:20:b0:d9:8a:
                    21:66:e1:be:22:63:df:7b:7e:0a:15:49:c8:5c:01:
                    70:ce:06:c5:dd:a2:93:9f:36:eb:d8:21:30:99:5c:
                    02:d2:c9:c6:5b:13:93:73:2c:51:9a:d2:69:1f:85:
                    89:5f:bb:7e:1b:0b:3a:69:11:03:73:43:62:09:82:
                    b1:7c:8d:da:44:4f:0f:fe:84:fb:8c:de:74:0b:e3:
                    c1:72:a7:62:2b:27:69:13:a6:d7:64:27:ac:e0:82:
                    4a:69:4d:74:42:53:3a:71:ff:46:2b:a5:f2:b4:dc:
                    cf:c8:5c:ca:fa:31:8f:6e:cb:70:42:dd:18:85:0d:
                    c5:3f:80:bb:d4:e7:da:83:68:94:07:3c:ad:c6:6b:
                    a7:35:c3:99:68:7e:19:a8:0f:1f:3c:4c:c9:a0:ab:
                    be:0b:91:cb:96:2a:cb:59:20:f8:30:86:3e:5b:1a:
                    fd:d4:a1:af:2f:26:61:5a:b1:8f:fe:61:89:0a:f9:
                    30:8d:64:6d:2d:47:0a:04:df:28:05:65:59:d2:0a:
                    f0:6c:0c:15:c3:11:e5:00:9a:bf:26:38:8f:2c:5c:
                    9c:06:94:1f:4e:9d:33:16:d6:60:70:08:23:62:73:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AE:CC:A1:9F:D8:79:99:03:B2:EF:13:16:2F:70:50:ED:C6:D4:4D
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a343a3a2f34382d3438203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:b1:94:92:2e:51:aa:7b:5b:a7:cb:1e:e6:c5:80:1c:08:
         a0:25:17:e0:c0:69:ea:a3:69:82:32:02:a7:a3:20:86:34:0c:
         e3:7e:5a:2a:3c:16:6f:b7:24:9d:59:bd:93:49:1b:5a:49:f8:
         c5:dd:e8:38:da:38:e9:32:e5:c3:ed:4e:a6:b4:60:51:14:86:
         59:96:f9:13:d2:28:97:44:85:b0:32:fd:4e:91:e8:d8:1a:4a:
         c4:c1:12:1e:03:e1:5c:71:ad:b6:09:20:72:7f:c2:fa:eb:ed:
         e7:aa:4d:fe:d6:9c:c5:19:a3:c2:7e:1b:25:fc:23:90:d0:86:
         35:4a:8c:d4:48:39:9c:4b:dc:3d:d9:8b:db:96:65:86:a8:cf:
         02:9c:24:d3:09:fb:05:a7:7f:e0:03:82:6a:f2:5d:bb:fd:10:
         42:f8:df:6f:21:20:82:96:d1:ab:05:60:98:8a:e6:4b:31:36:
         e4:3b:3d:b6:d3:d5:f8:98:77:03:a7:53:5f:70:3d:cf:b1:a7:
         03:94:ee:b3:40:fa:b5:95:4b:b2:0d:ba:e0:66:da:96:74:cd:
         18:6e:85:57:6c:27:60:a4:34:7a:45:e8:ff:19:81:67:71:bf:
         54:98:f1:b0:08:b1:bf:fc:55:4b:04:31:c6:0a:cd:ac:c2:54:
         09:31:bc:d1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUJQNjMjiIaAjYVggMtr1kjUk/IVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1RkFFQTRDQ0RDN0Y3MDJENEY1RkE0QzEyNTgzOTU2
MTc5MDczQTAeFw0yMzExMDcxNjE0MTlaFw0yNDExMDUxNjE5MTlaMDMxMTAvBgNV
BAMTKDExQUVDQ0ExOUZEODc5OTkwM0IyRUYxMzE2MkY3MDUwRURDNkQ0NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAIMyLhxt0YnQUqHrqsHmuiEI
fqjZ3GEjILDZiiFm4b4iY997fgoVSchcAXDOBsXdopOfNuvYITCZXALSycZbE5Nz
LFGa0mkfhYlfu34bCzppEQNzQ2IJgrF8jdpETw/+hPuM3nQL48Fyp2IrJ2kTptdk
J6zggkppTXRCUzpx/0YrpfK03M/IXMr6MY9uy3BC3RiFDcU/gLvU59qDaJQHPK3G
a6c1w5lofhmoDx88TMmgq74LkcuWKstZIPgwhj5bGv3Uoa8vJmFasY/+YYkK+TCN
ZG0tRwoE3ygFZVnSCvBsDBXDEeUAmr8mOI8sXJwGlB9OnTMW1mBwCCNiczgtAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUEa7MoZ/YeZkDsu8TFi9wUO3G1E0wHwYDVR0j
BBgwFoAUYV+upMzcf3AtT1+kwSWDlWF5BzowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2YyWUFRQTRlaWtOcER0OFc2c1VERDJVeHhoVXpuWDlqQmRxdktyYjJm
ZDgvMC82MTVGQUVBNENDREM3RjcwMkQ0RjVGQTRDMTI1ODM5NTYxNzkwNzNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxNUZBRUE0Q0NEQzdGNzAy
RDRGNUZBNEMxMjU4Mzk1NjE3OTA3M0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmMllBUUE0ZWlrTnBEdDhXNnNVREQyVXh4aFV6blg5akJkcXZLcmIyZmQ4LzAv
MzIzODMwMzQzYTM3MzUzNjMwM2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzczMTMwMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEdWAABDANBgkqhkiG9w0BAQsFAAOCAQEA
QqqxlJIuUap7W6fLHubFgBwIoCUX4MBp6qNpgjICp6MghjQM435aKjwWb7cknVm9
k0kbWkn4xd3oONo46TLlw+1OprRgURSGWZb5E9Iol0SFsDL9TpHo2BpKxMESHgPh
XHGttgkgcn/C+uvt56pN/tacxRmjwn4bJfwjkNCGNUqM1Eg5nEvcPdmL25ZlhqjP
Apwk0wn7Bad/4AOCavJdu/0QQvjfbyEggpbRqwVgmIrmSzE25Ds9ttPV+Jh3A6dT
X3A9z7GnA5Tus0D6tZVLsg264GbalnTNGG6FV2wnYKQ0ekXo/xmBZ3G/VJjxsAix
v/xVSwQxxgrNrMJUCTG80Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org