Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/323830343a313136383a3a2f33322d3438203d3e203532393034.roa
File:                     323830343a313136383a3a2f33322d3438203d3e203532393034.roa (raw, json)
Hash identifier:          1YnuQT7kqr/4nd/YLGTV9PbjGawGji24COsZJEDAfQQ=
Subject key identifier:   47:9B:12:C5:8A:B3:06:89:C8:17:AC:A5:0F:D3:D4:A8:F9:A7:54:38
Certificate issuer:       /CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
Certificate serial:       64C9F902F38FC466D581CE33107D3EB26394FE04
Authority key identifier: 8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/323830343a313136383a3a2f33322d3438203d3e203532393034.roa
Signing time:             Wed 28 Jun 2023 19:00:00 +0000
ROA not before:           Wed 28 Jun 2023 18:55:00 +0000
ROA not after:            Fri 28 Jun 2024 19:00:00 +0000
asID:                     52904
IP address blocks:        2804:1168::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c9:f9:02:f3:8f:c4:66:d5:81:ce:33:10:7d:3e:b2:63:94:fe:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB
        Validity
            Not Before: Jun 28 18:55:00 2023 GMT
            Not After : Jun 28 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:20:c9:2d:f7:b7:17:92:25:56:d2:63:d2:
                    63:3a:40:53:4f:6a:0e:6c:d9:35:74:d0:b7:2d:a2:
                    9c:bb:f2:2f:d8:4f:09:1b:b7:7a:ee:07:b1:4f:93:
                    d7:92:09:18:26:46:0e:ae:4e:3e:0c:d9:59:6f:69:
                    a7:e5:19:6b:9f:b9:67:7f:4e:49:fa:c5:1e:17:e4:
                    c9:be:b0:3e:a3:31:a5:a1:17:4f:cf:17:67:62:eb:
                    dd:c7:fc:1a:b9:fb:12:ba:a8:4b:34:2d:17:f3:93:
                    7c:6e:17:f3:7d:7d:2e:53:3a:ae:2e:af:ba:f5:5c:
                    f4:b5:bb:23:11:7c:7e:36:cb:af:61:23:f7:63:24:
                    7b:21:30:c3:26:dc:32:19:a6:d4:cc:27:35:9e:69:
                    f1:b9:13:58:e9:f9:f8:87:c1:a9:c9:c0:47:24:cc:
                    78:0f:05:8b:57:5e:f3:fa:be:f9:fa:0a:e0:a0:fd:
                    27:62:3b:4f:85:d0:be:2b:6c:01:ed:97:bc:9c:fa:
                    a0:2e:55:49:dc:0f:b8:8c:a4:53:23:d2:d7:bd:b7:
                    42:58:4d:9a:e7:d9:91:39:65:59:15:53:86:a3:7a:
                    3b:b3:51:70:cc:84:8b:c3:b5:27:14:1d:7d:b9:0a:
                    71:7d:d3:c8:ea:bc:28:c0:c7:8b:57:5b:fc:aa:97:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9B:12:C5:8A:B3:06:89:C8:17:AC:A5:0F:D3:D4:A8:F9:A7:54:38
            X509v3 Authority Key Identifier:
                keyid:8C:6E:A6:74:D5:B6:AA:95:8B:C9:F7:C3:4A:F1:B6:9F:8E:9D:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C6EA674D5B6AA958BC9F7C34AF1B69F8E9D79EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/0/323830343a313136383a3a2f33322d3438203d3e203532393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1168::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:1e:38:72:c8:96:d9:3e:4f:08:70:10:2c:d1:e3:dd:0a:
         b8:05:46:18:5c:4c:4d:5f:1d:ef:87:e1:7e:ac:a6:5f:33:f9:
         4c:9d:ae:73:e6:f3:de:ef:05:14:82:41:29:68:9f:35:7d:41:
         44:f8:6d:50:81:af:d5:03:f2:04:e6:f9:2a:56:69:5d:ed:9a:
         2d:cf:bb:ae:c7:88:f9:41:ea:87:38:be:aa:21:e5:36:ff:ba:
         cf:45:68:94:d8:b9:f2:85:3b:b4:59:9f:79:50:d1:98:4b:44:
         e6:89:0f:db:c2:b1:65:c1:f7:62:67:5b:fa:b6:f7:1c:e2:ee:
         e1:f3:cb:d9:39:33:ff:8d:ac:67:44:75:cd:87:16:b5:e1:61:
         82:c6:f8:02:fe:11:c2:83:8c:f1:9b:c9:e8:7e:e7:39:df:15:
         d8:ef:ec:00:ea:0c:09:7d:75:c9:86:cf:67:d1:60:5e:1d:6d:
         cd:f3:a9:40:d1:0d:2f:55:e7:d6:67:70:1e:cb:4e:60:f1:28:
         78:88:06:06:9e:ed:d3:68:e8:c6:b3:b7:be:58:48:0c:21:de:
         2f:6f:04:2a:01:ea:cc:85:02:fe:20:a8:8a:b1:b4:3e:82:90:
         8f:f7:11:39:a7:de:52:7e:46:00:a2:8b:72:01:77:c7:0e:6f:
         62:37:f6:cb
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUZMn5AvOPxGbVgc4zEH0+smOU/gQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM2RUE2NzRENUI2QUE5NThCQzlGN0MzNEFGMUI2OUY4
RTlENzlFQjAeFw0yMzA2MjgxODU1MDBaFw0yNDA2MjgxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDgzMTIwQzkyREY3QjcxNzky
MjU1NkQyNjNEMjYzM0E0MDUzNEY2QTBFNkNEOTM1NzREMEI3MkRBMjlDQkJGMjJG
RDg0RjA5MUJCNzdBRUUwN0IxNEY5M0Q3OTIwOTE4MjY0NjBFQUU0RTNFMENEOTU5
NkY2OUE3RTUxOTZCOUZCOTY3N0Y0RTQ5RkFDNTFFMTdFNEM5QkVCMDNFQTMzMUE1
QTExNzRGQ0YxNzY3NjJFQkREQzdGQzFBQjlGQjEyQkFBODRCMzQyRDE3RjM5MzdD
NkUxN0YzN0Q3RDJFNTMzQUFFMkVBRkJBRjU1Q0Y0QjVCQjIzMTE3QzdFMzZDQkFG
NjEyM0Y3NjMyNDdCMjEzMEMzMjZEQzMyMTlBNkQ0Q0MyNzM1OUU2OUYxQjkxMzU4
RTlGOUY4ODdDMUE5QzlDMDQ3MjRDQzc4MEYwNThCNTc1RUYzRkFCRUY5RkEwQUUw
QTBGRDI3NjIzQjRGODVEMEJFMkI2QzAxRUQ5N0JDOUNGQUEwMkU1NTQ5REMwRkI4
OENBNDUzMjNEMkQ3QkRCNzQyNTg0RDlBRTdEOTkxMzk2NTU5MTU1Mzg2QTM3QTNC
QjM1MTcwQ0M4NDhCQzNCNTI3MTQxRDdEQjkwQTcxN0REM0M4RUFCQzI4QzBDNzhC
NTc1QkZDQUE5NzNCRkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2DEgyS33txeSJVbSY9JjOkBTT2oObNk1dNC3LaKcu/Iv2E8JG7d6
7gexT5PXkgkYJkYOrk4+DNlZb2mn5Rlrn7lnf05J+sUeF+TJvrA+ozGloRdPzxdn
Yuvdx/waufsSuqhLNC0X85N8bhfzfX0uUzquLq+69Vz0tbsjEXx+NsuvYSP3YyR7
ITDDJtwyGabUzCc1nmnxuRNY6fn4h8GpycBHJMx4DwWLV17z+r75+grgoP0nYjtP
hdC+K2wB7Ze8nPqgLlVJ3A+4jKRTI9LXvbdCWE2a59mROWVZFVOGo3o7s1FwzISL
w7UnFB19uQpxfdPI6rwowMeLV1v8qpc7/QIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FEebEsWKswaJyBespQ/T1Kj5p1Q4MB8GA1UdIwQYMBaAFIxupnTVtqqVi8n3w0rx
tp+OnXnrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d2Y01rM1d3NkpjMkxx
aGJOZm5qblYxWndaYkR5bWczRnl4VW9KTlFSSEF0LzAvOEM2RUE2NzRENUI2QUE5
NThCQzlGN0MzNEFGMUI2OUY4RTlENzlFQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QzZFQTY3NEQ1QjZBQTk1OEJDOUY3QzM0QUYxQjY5RjhFOUQ3
OUVCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HdmNNazNXdzZKYzJMcWhiTmZu
am5WMVp3WmJEeW1nM0Z5eFVvSk5RUkhBdC8wLzMyMzgzMDM0M2EzMTMxMzYzODNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzOTMwMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBBFo
MA0GCSqGSIb3DQEBCwUAA4IBAQBSrh44csiW2T5PCHAQLNHj3Qq4BUYYXExNXx3v
h+F+rKZfM/lMna5z5vPe7wUUgkEpaJ81fUFE+G1Qga/VA/IE5vkqVmld7Zotz7uu
x4j5QeqHOL6qIeU2/7rPRWiU2LnyhTu0WZ95UNGYS0TmiQ/bwrFlwfdiZ1v6tvcc
4u7h88vZOTP/jaxnRHXNhxa14WGCxvgC/hHCg4zxm8nofuc53xXY7+wA6gwJfXXJ
hs9n0WBeHW3N86lA0Q0vVefWZ3Aey05g8Sh4iAYGnu3TaOjGs7e+WEgMId4vbwQq
AerMhQL+IKiKsbQ+gpCP9xE5p95SfkYAootyAXfHDm9iN/bL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org