Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d313238203d3e20323733333334.roa
File:                     323830343a386431383a3a2f33322d313238203d3e20323733333334.roa (raw, json)
Hash identifier:          8H8l3YKy5m30YKlDVJ29QW5oXW7BuoqzA0CcgZsdPoo=
Subject key identifier:   CF:E7:11:FA:25:3B:18:45:17:53:BB:EB:5C:2A:7E:BA:C2:7A:52:F3
Certificate issuer:       /CN=75F6A112E4F78C2B1B9A3B792AD9AE251B23CEC7
Certificate serial:       2F0285CAB3746B6E3B7EA8C2CF92FC08F50F777E
Authority key identifier: 75:F6:A1:12:E4:F7:8C:2B:1B:9A:3B:79:2A:D9:AE:25:1B:23:CE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75F6A112E4F78C2B1B9A3B792AD9AE251B23CEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d313238203d3e20323733333334.roa
Signing time:             Thu 25 Jan 2024 13:49:02 +0000
ROA not before:           Thu 25 Jan 2024 13:44:02 +0000
ROA not after:            Thu 23 Jan 2025 13:49:02 +0000
asID:                     273334
IP address blocks:        2804:8d18::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:02:85:ca:b3:74:6b:6e:3b:7e:a8:c2:cf:92:fc:08:f5:0f:77:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75F6A112E4F78C2B1B9A3B792AD9AE251B23CEC7
        Validity
            Not Before: Jan 25 13:44:02 2024 GMT
            Not After : Jan 23 13:49:02 2025 GMT
        Subject: CN=CFE711FA253B18451753BBEB5C2A7EBAC27A52F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:40:b4:9c:18:0b:dd:f4:07:cb:a8:ee:88:
                    1c:e7:d2:2c:37:b0:a6:8c:81:d2:40:56:96:42:08:
                    cc:b6:3d:02:42:15:9b:11:39:3c:66:48:15:84:f0:
                    ee:16:de:43:7a:dc:26:8b:ee:c6:9d:7a:22:a7:2e:
                    85:b8:58:5c:90:38:5a:6d:2c:0c:7d:2b:73:06:50:
                    eb:05:fc:48:bf:92:5f:d7:db:84:43:8b:79:2c:9b:
                    7a:c9:17:11:10:f2:aa:70:d1:58:96:15:7a:0d:60:
                    73:93:99:1a:c0:86:dc:0a:75:db:45:56:5a:84:79:
                    fb:ce:95:d3:79:46:c2:7e:3e:1f:ce:d5:49:37:34:
                    9b:fb:93:f5:de:25:14:55:5c:65:90:4b:3e:e4:70:
                    1c:5b:0b:8e:1f:83:1e:bb:b9:f8:92:e1:6e:fe:d3:
                    84:fa:96:5f:cf:00:33:f7:6d:62:99:57:56:1c:d7:
                    0c:ac:08:e1:a5:a0:e6:39:46:31:87:c9:4b:35:21:
                    9b:25:96:ad:72:96:58:cc:b3:22:c0:80:c9:3a:76:
                    43:05:05:6d:ff:93:60:f5:6f:8b:3c:a3:7a:87:13:
                    ce:4b:17:76:fb:dd:28:bb:14:2a:5e:5a:dc:10:84:
                    e9:61:1d:bd:fc:74:59:c3:6c:0c:00:42:8b:8d:b7:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E7:11:FA:25:3B:18:45:17:53:BB:EB:5C:2A:7E:BA:C2:7A:52:F3
            X509v3 Authority Key Identifier:
                keyid:75:F6:A1:12:E4:F7:8C:2B:1B:9A:3B:79:2A:D9:AE:25:1B:23:CE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/75F6A112E4F78C2B1B9A3B792AD9AE251B23CEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75F6A112E4F78C2B1B9A3B792AD9AE251B23CEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfYKQoQG7SAvUD9KcPQKRz93jBmbQ6H1guW7rhFkRtwh/0/323830343a386431383a3a2f33322d313238203d3e20323733333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:07:8a:8c:86:1e:9f:b4:04:c8:e3:f9:de:a8:83:b9:28:09:
         a5:5a:49:17:ce:b6:2b:77:32:0b:d6:cc:d1:ac:8e:ec:e7:32:
         84:db:05:b7:ff:27:67:56:d7:26:62:8a:b2:56:d4:ae:70:d3:
         6f:d0:48:f4:65:a3:bd:e9:ca:54:e9:1c:e1:5e:b0:81:cc:06:
         7a:9d:61:38:3f:03:92:3a:a2:99:78:74:3e:88:49:35:1c:30:
         68:67:ef:4c:5b:f1:85:bf:ed:6c:e5:32:43:21:bd:d3:ad:3b:
         3a:42:15:9c:ee:d5:9b:e2:b7:af:ca:f3:7d:29:37:12:c7:f3:
         db:ed:47:7d:24:52:0e:ed:bd:ff:f6:c7:3c:52:d8:c9:6c:52:
         1d:da:a8:66:6c:0e:37:df:a8:41:f8:67:59:d8:44:d2:6c:2c:
         d8:0b:a7:9f:94:e9:ef:83:93:4c:be:54:5d:cb:90:f9:fe:c4:
         cf:b8:c4:af:28:8d:3c:4c:9a:e6:b2:ea:6e:a6:09:08:1b:20:
         52:a9:5a:a9:b9:d0:65:0e:82:2c:98:4a:56:99:a9:68:c7:7a:
         25:1e:c3:37:56:8f:19:13:7e:ef:80:4e:ff:8d:b1:c1:a0:8d:
         7d:80:89:f1:f8:7a:cf:f2:60:83:e5:87:02:f6:3e:f5:cf:16:
         be:0a:29:06
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULwKFyrN0a247fqjCz5L8CPUPd34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVGNkExMTJFNEY3OEMyQjFCOUEzQjc5MkFEOUFFMjUx
QjIzQ0VDNzAeFw0yNDAxMjUxMzQ0MDJaFw0yNTAxMjMxMzQ5MDJaMDMxMTAvBgNV
BAMTKENGRTcxMUZBMjUzQjE4NDUxNzUzQkJFQjVDMkE3RUJBQzI3QTUyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaj0C0nBgL3fQHy6juiBzn0iw3
sKaMgdJAVpZCCMy2PQJCFZsROTxmSBWE8O4W3kN63CaL7sadeiKnLoW4WFyQOFpt
LAx9K3MGUOsF/Ei/kl/X24RDi3ksm3rJFxEQ8qpw0ViWFXoNYHOTmRrAhtwKddtF
VlqEefvOldN5RsJ+Ph/O1Uk3NJv7k/XeJRRVXGWQSz7kcBxbC44fgx67ufiS4W7+
04T6ll/PADP3bWKZV1Yc1wysCOGloOY5RjGHyUs1IZsllq1ylljMsyLAgMk6dkMF
BW3/k2D1b4s8o3qHE85LF3b73Si7FCpeWtwQhOlhHb38dFnDbAwAQouNt8VZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUz+cR+iU7GEUXU7vrXCp+usJ6UvMwHwYDVR0j
BBgwFoAUdfahEuT3jCsbmjt5KtmuJRsjzscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2ZZS1FvUUc3U0F2VUQ5S2NQUUtSejkzakJtYlE2SDFndVc3cmhGa1J0
d2gvMC83NUY2QTExMkU0Rjc4QzJCMUI5QTNCNzkyQUQ5QUUyNTFCMjNDRUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1RjZBMTEyRTRGNzhDMkIx
QjlBM0I3OTJBRDlBRTI1MUIyM0NFQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmWUtRb1FHN1NBdlVEOUtjUFFLUno5M2pCbWJRNkgxZ3VXN3JoRmtSdHdoLzAv
MzIzODMwMzQzYTM4NjQzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzMzMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI0YMA0GCSqGSIb3DQEBCwUAA4IBAQABB4qM
hh6ftATI4/neqIO5KAmlWkkXzrYrdzIL1szRrI7s5zKE2wW3/ydnVtcmYoqyVtSu
cNNv0Ej0ZaO96cpU6RzhXrCBzAZ6nWE4PwOSOqKZeHQ+iEk1HDBoZ+9MW/GFv+1s
5TJDIb3TrTs6QhWc7tWb4revyvN9KTcSx/Pb7Ud9JFIO7b3/9sc8UtjJbFId2qhm
bA4336hB+GdZ2ETSbCzYC6eflOnvg5NMvlRdy5D5/sTPuMSvKI08TJrmsupupgkI
GyBSqVqpudBlDoIsmEpWmalox3olHsM3Vo8ZE37vgE7/jbHBoI19gInx+HrP8mCD
5YcC9j71zxa+CikG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org