Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/323830343a376535633a3a2f33322d313238203d3e20323731363139.roa
File:                     323830343a376535633a3a2f33322d313238203d3e20323731363139.roa (raw, json)
Hash identifier:          iDW/DYgtVa+MTUhrGqBzWhkQBCJ2FT09jy21R+4cZbQ=
Subject key identifier:   46:EF:5E:61:09:4E:EE:E8:68:BD:34:28:AA:E4:EB:9E:65:9B:5A:F3
Certificate issuer:       /CN=208D0421EE18E194080CD17BAF3EEC7342EA20C1
Certificate serial:       2D42B254AEB1D3591DAE22AB639804C9ED420F65
Authority key identifier: 20:8D:04:21:EE:18:E1:94:08:0C:D1:7B:AF:3E:EC:73:42:EA:20:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/323830343a376535633a3a2f33322d313238203d3e20323731363139.roa
Signing time:             Fri 14 Apr 2023 17:56:50 +0000
ROA not before:           Fri 14 Apr 2023 17:51:50 +0000
ROA not after:            Fri 12 Apr 2024 17:56:50 +0000
asID:                     271619
IP address blocks:        2804:7e5c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:42:b2:54:ae:b1:d3:59:1d:ae:22:ab:63:98:04:c9:ed:42:0f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208D0421EE18E194080CD17BAF3EEC7342EA20C1
        Validity
            Not Before: Apr 14 17:51:50 2023 GMT
            Not After : Apr 12 17:56:50 2024 GMT
        Subject: CN=46EF5E61094EEEE868BD3428AAE4EB9E659B5AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:46:55:25:da:45:8e:4a:ee:db:21:f6:52:
                    95:13:de:a5:bd:af:06:52:c8:4b:e5:31:e5:7b:aa:
                    fb:12:83:73:aa:01:f4:a8:81:b2:0c:8e:ad:ac:99:
                    84:85:74:3b:a0:a9:da:74:23:3c:3c:08:76:19:fa:
                    e3:79:4e:73:a5:23:89:21:7c:17:0b:cd:93:61:ba:
                    c9:34:86:2d:c1:4e:40:ff:08:e9:88:cc:4b:a1:9e:
                    1e:f3:b9:d2:82:f9:f7:ef:2e:a6:a4:bd:32:5d:b0:
                    c8:75:b2:ba:43:9c:3e:a2:a9:cc:51:81:ca:45:b0:
                    83:df:21:54:47:0d:a8:c2:25:49:3e:58:f9:36:4c:
                    30:c7:48:9e:7c:1e:8e:3b:f1:f1:c9:96:7d:77:f2:
                    5a:ed:19:40:da:d4:38:68:71:02:4b:17:1e:c1:6d:
                    3a:4c:37:93:93:22:8c:b9:c8:cd:01:1d:40:3e:8e:
                    5b:f8:1f:5b:77:cd:67:4b:86:2d:89:ce:f4:8d:1b:
                    7d:cd:6b:84:53:cb:1c:d7:40:ee:91:56:74:50:e5:
                    3e:d5:75:86:ea:74:63:14:a2:03:14:ea:15:d4:98:
                    87:b7:53:6e:f4:cb:26:d4:9a:88:5f:fb:2a:4d:1c:
                    75:a1:0f:a4:3e:09:b3:5b:6e:94:26:e0:2b:e0:6a:
                    2f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EF:5E:61:09:4E:EE:E8:68:BD:34:28:AA:E4:EB:9E:65:9B:5A:F3
            X509v3 Authority Key Identifier:
                keyid:20:8D:04:21:EE:18:E1:94:08:0C:D1:7B:AF:3E:EC:73:42:EA:20:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/323830343a376535633a3a2f33322d313238203d3e20323731363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:41:75:5e:7a:93:90:a7:a1:93:e4:cc:70:5f:85:cb:00:
         35:2a:32:c0:03:16:d4:b3:32:20:ef:6a:78:c1:17:80:ff:75:
         29:26:91:a0:67:48:c5:7c:6b:a3:82:5a:61:13:a6:59:98:ff:
         d9:09:e5:6a:19:54:d1:28:b3:4c:a0:05:43:62:f0:b3:6e:ab:
         ca:90:12:b2:54:97:8d:71:b0:bf:fe:e5:9b:96:4d:f4:63:49:
         84:63:c4:18:38:60:c8:e8:44:4b:74:bc:29:3b:8c:6a:a5:6f:
         2d:8c:d6:11:87:b0:df:41:74:7c:c8:a1:f7:46:e3:53:13:48:
         cb:bb:0a:aa:b7:a0:ac:0f:15:ca:68:16:0c:7d:20:03:12:66:
         73:73:df:b1:ae:1c:68:a4:93:05:52:b8:d3:2d:86:58:64:0f:
         cc:34:9c:00:b3:17:ad:b8:c1:8f:7f:fc:68:d1:2d:a0:87:7b:
         c1:15:4d:93:0e:a5:14:c3:50:69:04:b5:77:6d:f0:66:ea:c9:
         40:1a:5d:fb:dc:ba:6f:9f:f3:be:cf:26:12:2a:d8:cc:5b:a8:
         bc:04:db:f7:b6:f8:2d:cc:5f:32:18:eb:8c:b2:75:5c:4c:89:
         74:a3:6d:7b:28:6d:ec:26:2e:29:3c:2f:eb:ba:4a:eb:4b:39:
         69:28:8c:ad
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULUKyVK6x01kdriKrY5gEye1CD2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA4RDA0MjFFRTE4RTE5NDA4MENEMTdCQUYzRUVDNzM0
MkVBMjBDMTAeFw0yMzA0MTQxNzUxNTBaFw0yNDA0MTIxNzU2NTBaMDMxMTAvBgNV
BAMTKDQ2RUY1RTYxMDk0RUVFRTg2OEJEMzQyOEFBRTRFQjlFNjU5QjVBRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzY0ZVJdpFjkru2yH2UpUT3qW9
rwZSyEvlMeV7qvsSg3OqAfSogbIMjq2smYSFdDugqdp0Izw8CHYZ+uN5TnOlI4kh
fBcLzZNhusk0hi3BTkD/COmIzEuhnh7zudKC+ffvLqakvTJdsMh1srpDnD6iqcxR
gcpFsIPfIVRHDajCJUk+WPk2TDDHSJ58Ho478fHJln138lrtGUDa1DhocQJLFx7B
bTpMN5OTIoy5yM0BHUA+jlv4H1t3zWdLhi2JzvSNG33Na4RTyxzXQO6RVnRQ5T7V
dYbqdGMUogMU6hXUmIe3U270yybUmohf+ypNHHWhD6Q+CbNbbpQm4Cvgai//AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQURu9eYQlO7uhovTQoquTrnmWbWvMwHwYDVR0j
BBgwFoAUII0EIe4Y4ZQIDNF7rz7sc0LqIMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3M4M0pSZkJyRTJUa21YNVVrWWhmR2JZaTlNZUhLaHJrcXBFN0U4eVJY
RUwvMC8yMDhEMDQyMUVFMThFMTk0MDgwQ0QxN0JBRjNFRUM3MzQyRUEyMEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwOEQwNDIxRUUxOEUxOTQw
ODBDRDE3QkFGM0VFQzczNDJFQTIwQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzODNKUmZCckUyVGttWDVVa1loZkdiWWk5TWVIS2hya3FwRTdFOHlSWEVMLzAv
MzIzODMwMzQzYTM3NjUzNTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNjMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBH5cMA0GCSqGSIb3DQEBCwUAA4IBAQBX1EF1
XnqTkKehk+TMcF+FywA1KjLAAxbUszIg72p4wReA/3UpJpGgZ0jFfGujglphE6ZZ
mP/ZCeVqGVTRKLNMoAVDYvCzbqvKkBKyVJeNcbC//uWblk30Y0mEY8QYOGDI6ERL
dLwpO4xqpW8tjNYRh7DfQXR8yKH3RuNTE0jLuwqqt6CsDxXKaBYMfSADEmZzc9+x
rhxopJMFUrjTLYZYZA/MNJwAsxetuMGPf/xo0S2gh3vBFU2TDqUUw1BpBLV3bfBm
6slAGl373Lpvn/O+zyYSKtjMW6i8BNv3tvgtzF8yGOuMsnVcTIl0o217KG3sJi4p
PC/rukrrSzlpKIyt
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org