Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          a7cczqIiWVcn+ueHvhZ1s7BZgg2YFyUaBgmwaMM8LzM=
Subject key identifier:   1E:52:49:C5:C5:B2:D2:2B:00:1B:96:44:FB:95:D4:04:D4:54:C4:03
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       64BD24095E2739895F56DEF060F19BAE7640C372
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:10:03 +0000
ROA not before:           Thu 28 Dec 2023 17:05:03 +0000
ROA not after:            Thu 26 Dec 2024 17:10:03 +0000
asID:                     263522
IP address blocks:        2804:1338:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bd:24:09:5e:27:39:89:5f:56:de:f0:60:f1:9b:ae:76:40:c3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:05:03 2023 GMT
            Not After : Dec 26 17:10:03 2024 GMT
        Subject: CN=1E5249C5C5B2D22B001B9644FB95D404D454C403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:71:94:7c:d7:29:a5:62:f7:50:56:5f:1f:
                    96:dd:00:a2:51:5d:a8:13:02:64:ed:66:24:97:74:
                    f5:88:72:4d:5b:e6:3e:5f:e7:17:17:90:04:2a:29:
                    8d:0a:4c:9f:00:a4:d6:a3:b9:30:ac:88:72:6c:c7:
                    32:e0:85:56:d9:c8:c2:cd:9d:3b:fd:ff:c4:44:24:
                    2a:bd:a9:07:7e:a1:47:cf:01:70:7f:04:a5:12:43:
                    f0:bd:a0:d1:17:57:a2:bf:80:d2:a1:88:a0:93:11:
                    d0:ba:83:ea:c0:f6:a7:16:09:b2:6b:e2:db:e3:6f:
                    64:0c:33:a1:90:1d:98:4d:e0:fa:45:e9:4e:a9:f5:
                    82:df:01:d6:cf:f1:b6:9e:44:c2:87:dc:06:6f:cb:
                    bc:bb:f9:57:8c:36:f5:78:64:91:81:0b:c8:dd:69:
                    81:69:09:94:cd:4f:55:36:66:6d:2e:d7:67:c8:b5:
                    75:03:1d:7a:d0:cf:ec:42:01:a1:c3:09:0d:27:f4:
                    8c:61:41:06:d0:10:d3:a9:61:02:f5:2a:41:aa:6b:
                    ae:c2:0a:47:34:ea:69:c3:a2:bb:8d:2b:59:c5:6c:
                    f3:c7:ef:2e:8e:5a:e1:df:a0:87:88:7d:df:45:60:
                    84:50:0a:d2:e6:3a:6d:38:67:84:39:d8:c6:cf:fe:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:49:C5:C5:B2:D2:2B:00:1B:96:44:FB:95:D4:04:D4:54:C4:03
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:72:08:dc:69:e4:df:3b:f5:34:aa:be:5a:8a:09:6b:cd:98:
         fb:e1:0c:d3:cd:51:d6:cf:e7:6b:42:68:61:da:22:3b:fa:2d:
         77:52:68:63:b3:19:d5:ab:ac:59:d8:03:b2:a8:4d:11:8e:2f:
         a6:aa:28:3c:ce:26:da:3a:46:b3:cf:96:64:5c:e5:d2:a8:b8:
         35:2f:ba:72:9f:f4:6a:b2:9c:53:eb:a1:c8:d0:08:88:5a:43:
         2b:c5:d7:95:6e:10:d7:06:d2:bf:e5:1f:d4:f1:34:c6:99:d0:
         2e:5f:c3:56:aa:01:00:aa:fa:f8:79:76:1e:38:58:ea:d0:8e:
         8b:21:a8:78:6c:e1:c1:53:e9:96:cf:53:aa:b8:6b:77:a2:f1:
         17:01:70:49:87:0e:9b:48:17:de:d6:47:f1:f4:a6:47:32:2a:
         76:2c:09:44:1a:57:c2:04:e0:5c:7d:d9:51:28:1c:4d:cd:b6:
         df:07:9c:fa:90:20:2a:c3:bf:26:a2:3f:5a:27:e6:bb:1a:53:
         3f:f7:36:d7:46:a7:97:c8:3a:9c:93:b1:cd:db:e7:34:f1:b8:
         17:52:54:48:e8:00:66:fe:d1:42:4e:0e:e7:82:4e:cc:0b:a5:
         49:e6:92:b5:6f:5e:ee:87:47:b6:fe:85:e5:a2:10:89:93:95:
         e0:a8:92:e9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUZL0kCV4nOYlfVt7wYPGbrnZAw3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0MkUwMzZEQjNCRUYxQjUwN0NCREI2QTFBQjhBMzZC
OENGNzZFQzAeFw0yMzEyMjgxNzA1MDNaFw0yNDEyMjYxNzEwMDNaMDMxMTAvBgNV
BAMTKDFFNTI0OUM1QzVCMkQyMkIwMDFCOTY0NEZCOTVENDA0RDQ1NEM0MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfXGUfNcppWL3UFZfH5bdAKJR
XagTAmTtZiSXdPWIck1b5j5f5xcXkAQqKY0KTJ8ApNajuTCsiHJsxzLghVbZyMLN
nTv9/8REJCq9qQd+oUfPAXB/BKUSQ/C9oNEXV6K/gNKhiKCTEdC6g+rA9qcWCbJr
4tvjb2QMM6GQHZhN4PpF6U6p9YLfAdbP8baeRMKH3AZvy7y7+VeMNvV4ZJGBC8jd
aYFpCZTNT1U2Zm0u12fItXUDHXrQz+xCAaHDCQ0n9IxhQQbQENOpYQL1KkGqa67C
Ckc06mnDoruNK1nFbPPH7y6OWuHfoIeIfd9FYIRQCtLmOm04Z4Q52MbP/rlPAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUHlJJxcWy0isAG5ZE+5XUBNRUxAMwHwYDVR0j
BBgwFoAUbULgNts77xtQfL22oauKNrjPduwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMC82RDQyRTAzNkRCM0JFRjFCNTA3Q0JEQjZBMUFCOEEzNkI4Q0Y3NkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZENDJFMDM2REIzQkVGMUI1
MDdDQkRCNkExQUI4QTM2QjhDRjc2RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzAv
MzIzODMwMzQzYTMxMzMzMzM4M2EzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEEzgABjANBgkqhkiG9w0BAQsFAAOCAQEA
TnII3Gnk3zv1NKq+WooJa82Y++EM081R1s/na0JoYdoiO/otd1JoY7MZ1ausWdgD
sqhNEY4vpqooPM4m2jpGs8+WZFzl0qi4NS+6cp/0arKcU+uhyNAIiFpDK8XXlW4Q
1wbSv+Uf1PE0xpnQLl/DVqoBAKr6+Hl2HjhY6tCOiyGoeGzhwVPpls9Tqrhrd6Lx
FwFwSYcOm0gX3tZH8fSmRzIqdiwJRBpXwgTgXH3ZUSgcTc223wec+pAgKsO/JqI/
WifmuxpTP/c210anl8g6nJOxzdvnNPG4F1JUSOgAZv7RQk4O54JOzAulSeaStW9e
7odHtv6F5aIQiZOV4KiS6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org