Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa
File:                     323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa (raw, json)
Hash identifier:          ZmnSbqU4Mbk2uQ1hZtAT0vFxKZsTiRsKNPcpjCWddOA=
Subject key identifier:   87:6F:74:07:89:C2:9D:6E:7F:C0:D3:28:F6:B1:B2:6D:14:25:04:5B
Certificate issuer:       /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial:       0AC7E9F110835FF5B71238CCBC7C3EAEF4FA7407
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa
Signing time:             Thu 25 Jan 2024 00:59:09 +0000
ROA not before:           Thu 25 Jan 2024 00:54:09 +0000
ROA not after:            Thu 23 Jan 2025 00:59:09 +0000
asID:                     266611
IP address blocks:        2804:3ea4:f400::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c7:e9:f1:10:83:5f:f5:b7:12:38:cc:bc:7c:3e:ae:f4:fa:74:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
        Validity
            Not Before: Jan 25 00:54:09 2024 GMT
            Not After : Jan 23 00:59:09 2025 GMT
        Subject: CN=876F740789C29D6E7FC0D328F6B1B26D1425045B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:56:f6:4c:dc:b0:1a:ef:cc:c9:a2:e0:3a:
                    6f:1b:20:57:c5:e9:f9:dc:8c:f2:df:e6:e3:49:99:
                    32:e1:55:9e:bd:1a:c7:ac:84:a3:00:a9:56:2e:43:
                    b0:71:e6:f2:51:3d:93:fb:aa:09:ce:f9:28:c9:92:
                    e2:c3:d8:95:42:86:84:5f:55:2b:75:11:08:a9:b7:
                    0b:6e:b8:a3:be:19:99:54:a1:7e:2c:1b:3c:1f:93:
                    d7:79:9c:d7:18:77:d4:ba:99:32:8b:50:c3:c4:c7:
                    05:26:ef:e6:f4:f4:cc:bd:0f:47:8c:82:ab:00:33:
                    bb:9b:44:47:85:11:c3:8c:09:02:0e:49:3b:c5:79:
                    c6:d4:e3:03:71:10:eb:e5:15:3e:0a:f2:93:7b:eb:
                    3d:0c:cb:e1:50:93:69:2e:ea:ee:67:33:bd:35:0e:
                    79:67:70:5b:1a:6f:39:d2:4c:bd:87:7a:a6:ff:dc:
                    07:1f:4c:0d:99:8e:26:c3:69:a5:c4:39:cf:59:22:
                    09:e6:37:54:e2:77:c7:19:49:74:b3:8b:af:d1:4b:
                    10:1a:b8:e6:3a:20:47:ab:42:8f:30:d9:48:e2:66:
                    e8:fb:08:96:e2:78:0b:c6:61:50:c6:c9:12:21:5e:
                    c8:f3:b9:45:fe:5a:fa:2d:5c:c3:b8:e1:3c:1c:22:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6F:74:07:89:C2:9D:6E:7F:C0:D3:28:F6:B1:B2:6D:14:25:04:5B
            X509v3 Authority Key Identifier:
                keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4:f400::/42

    Signature Algorithm: sha256WithRSAEncryption
         50:db:1a:a8:d2:a1:2c:61:ac:fb:f6:1b:3c:38:76:fe:28:5a:
         47:09:57:75:f9:0c:22:bb:86:19:f1:67:72:a1:91:d6:2c:a5:
         98:d7:38:d1:f9:98:06:99:1a:ff:5a:0e:86:29:4f:e2:54:96:
         53:32:c0:56:f9:9f:7c:49:46:dc:3e:b9:66:84:ac:91:68:48:
         5a:04:93:b2:ef:df:ad:17:df:c7:9c:96:e9:bf:0a:de:7d:87:
         86:30:4c:7a:29:35:24:3d:d3:9b:c6:a3:48:5f:b5:b9:66:6e:
         8f:4f:a7:95:ce:0b:ad:24:a6:4b:a9:43:b7:87:6b:43:90:0e:
         a5:dc:36:e6:8d:c2:2f:5d:d7:ed:f0:0d:87:07:4d:79:93:6b:
         c0:5c:1c:d6:e1:77:5e:b5:77:56:d1:f3:78:58:ae:06:48:9e:
         a0:0c:65:da:21:ad:3b:30:76:b0:61:1e:ec:14:20:55:91:a1:
         f7:11:58:c3:b0:97:d8:b7:a1:f0:ce:7b:75:d7:31:c2:9e:26:
         b5:a5:33:74:39:0c:0e:38:06:9b:3b:7e:aa:e3:31:d6:4a:58:
         2a:a0:49:6c:77:b8:d9:d2:66:a8:06:16:ce:a2:6a:3a:ee:41:
         3c:a0:eb:e6:f5:ae:d3:04:eb:73:c7:40:3e:d5:ae:b6:99:e7:
         73:33:ce:ab
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUCsfp8RCDX/W3EjjMvHw+rvT6dAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4RTNERjlEOTY3MDMyQTU2MkU4MDREMkU3ODFEQjFE
QzQ1NEE3OTAeFw0yNDAxMjUwMDU0MDlaFw0yNTAxMjMwMDU5MDlaMDMxMTAvBgNV
BAMTKDg3NkY3NDA3ODlDMjlENkU3RkMwRDMyOEY2QjFCMjZEMTQyNTA0NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT91b2TNywGu/MyaLgOm8bIFfF
6fncjPLf5uNJmTLhVZ69GseshKMAqVYuQ7Bx5vJRPZP7qgnO+SjJkuLD2JVChoRf
VSt1EQiptwtuuKO+GZlUoX4sGzwfk9d5nNcYd9S6mTKLUMPExwUm7+b09My9D0eM
gqsAM7ubREeFEcOMCQIOSTvFecbU4wNxEOvlFT4K8pN76z0My+FQk2ku6u5nM701
DnlncFsabznSTL2Heqb/3AcfTA2ZjibDaaXEOc9ZIgnmN1Tid8cZSXSzi6/RSxAa
uOY6IEerQo8w2UjiZuj7CJbieAvGYVDGyRIhXsjzuUX+WvotXMO44TwcIkqVAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUh290B4nCnW5/wNMo9rGybRQlBFswHwYDVR0j
BBgwFoAUEo49+dlnAypWLoBNLngdsdxFSnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NKZWJjQm5LVlY3TEpXckVYZ015ZDU0NEp2b2ZKcEVxUDQ1OEZvU1dZ
SmUvMC8xMjhFM0RGOUQ5NjcwMzJBNTYyRTgwNEQyRTc4MURCMURDNDU0QTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyOEUzREY5RDk2NzAzMkE1
NjJFODA0RDJFNzgxREIxREM0NTRBNzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzSmViY0JuS1ZWN0xKV3JFWGdNeWQ1NDRKdm9mSnBFcVA0NThGb1NXWUplLzAv
MzIzODMwMzQzYTMzNjU2MTM0M2E2NjM0MzAzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzYzNjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigEPqT0ADANBgkqhkiG9w0BAQsF
AAOCAQEAUNsaqNKhLGGs+/YbPDh2/ihaRwlXdfkMIruGGfFncqGR1iylmNc40fmY
Bpka/1oOhilP4lSWUzLAVvmffElG3D65ZoSskWhIWgSTsu/frRffx5yW6b8K3n2H
hjBMeik1JD3Tm8ajSF+1uWZuj0+nlc4LrSSmS6lDt4drQ5AOpdw25o3CL13X7fAN
hwdNeZNrwFwc1uF3XrV3VtHzeFiuBkieoAxl2iGtOzB2sGEe7BQgVZGh9xFYw7CX
2Leh8M57ddcxwp4mtaUzdDkMDjgGmzt+quMx1kpYKqBJbHe42dJmqAYWzqJqOu5B
PKDr5vWu0wTrc8dAPtWutpnnczPOqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org