Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3332203d3e20323639373133.roa
File:                     323830343a363863303a3a2f33322d3332203d3e20323639373133.roa (raw, json)
Hash identifier:          ALEBE1f2lNOajkY2HQPvNQbL+lMzIRI1yK3Y2Pp53v0=
Subject key identifier:   16:61:D7:81:35:A3:4D:D1:07:C3:81:56:44:F1:2B:68:ED:28:DE:34
Certificate issuer:       /CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
Certificate serial:       1CC831D2C34EB165D6B640B86D259365446FC8FE
Authority key identifier: 6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3332203d3e20323639373133.roa
Signing time:             Fri 10 Nov 2023 16:07:09 +0000
ROA not before:           Fri 10 Nov 2023 16:02:09 +0000
ROA not after:            Fri 08 Nov 2024 16:07:09 +0000
asID:                     269713
IP address blocks:        2804:68c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c8:31:d2:c3:4e:b1:65:d6:b6:40:b8:6d:25:93:65:44:6f:c8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
        Validity
            Not Before: Nov 10 16:02:09 2023 GMT
            Not After : Nov  8 16:07:09 2024 GMT
        Subject: CN=1661D78135A34DD107C3815644F12B68ED28DE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:06:31:99:80:e1:c7:86:c4:54:5a:30:0f:52:
                    ae:66:5d:81:97:ba:c6:aa:9c:c1:64:4e:67:1b:d5:
                    67:93:cd:38:31:ab:69:1e:2e:61:ab:f2:a4:ae:2e:
                    0f:2f:60:0e:8c:cc:dc:48:f9:8b:5c:8d:21:84:f7:
                    a9:34:13:88:33:05:57:86:56:74:52:a2:e5:b8:b0:
                    3f:69:e1:2e:05:b6:1f:6c:3a:c8:68:71:fb:d4:a3:
                    1b:da:c1:2e:55:26:01:3a:8d:45:35:68:03:91:2b:
                    37:ff:13:80:bc:e9:34:4d:2b:ed:52:b5:60:fa:32:
                    cb:dd:69:7b:bb:61:09:51:e2:63:fc:18:07:d9:cd:
                    e7:a6:5f:8c:4c:20:7c:9d:45:fb:39:01:3b:3a:fe:
                    3e:4b:57:89:58:bd:b7:fd:a0:1b:7d:4c:0b:0e:95:
                    18:d6:56:55:a7:f2:08:12:05:c5:83:5e:72:12:0a:
                    48:58:fb:eb:3b:b3:93:94:ca:c9:61:14:12:c9:49:
                    b0:0c:c1:76:a3:e4:56:2c:78:70:7b:88:ae:0d:a0:
                    22:45:d7:a9:a9:ea:0d:32:5a:d0:6b:19:ff:ea:40:
                    40:7f:b8:66:e8:14:a2:f9:d4:76:f5:81:f0:9b:39:
                    e5:30:e9:c7:8d:dd:a9:33:0a:d4:7b:56:97:a3:58:
                    e3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:61:D7:81:35:A3:4D:D1:07:C3:81:56:44:F1:2B:68:ED:28:DE:34
            X509v3 Authority Key Identifier:
                keyid:6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3332203d3e20323639373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:08:2f:02:de:8d:de:4b:38:b0:e2:58:70:bd:a1:92:0f:90:
         c9:90:05:be:45:e3:c0:6a:a2:d1:97:eb:20:ca:3b:a6:9d:7f:
         3a:d0:95:06:52:19:b7:0d:c2:36:f6:6b:71:c5:e4:1f:0d:db:
         f9:ef:f7:eb:39:2f:0d:d9:bc:ca:3f:2d:57:08:00:bb:7c:7e:
         8b:3f:87:69:2b:a5:af:78:0a:79:48:b7:e9:56:59:d2:a6:e9:
         43:5e:9a:a2:ee:7f:e0:92:e2:65:de:50:fd:52:0b:39:a7:82:
         1d:6c:fd:b9:57:ed:9a:7c:de:12:e4:d0:0b:81:c5:7a:a1:46:
         ee:18:fa:48:af:3b:37:34:24:f4:a5:af:f8:32:e5:47:5e:50:
         9e:ab:ef:4d:1b:2c:e9:10:5c:3b:13:d3:97:84:b0:ea:57:af:
         bf:c3:77:7d:4a:fd:ff:2b:68:fa:fc:22:5b:37:ca:26:d0:e2:
         50:1d:01:1c:f2:5e:09:3c:5e:be:85:e1:65:d8:bd:99:22:9a:
         c7:4f:e5:59:cb:72:6b:fe:a9:fe:72:0c:48:20:73:f4:43:7d:
         1b:e9:ef:63:fd:9b:da:79:c7:0b:75:c2:a6:90:07:30:0f:ae:
         49:c7:ab:84:e5:23:4b:85:e8:21:75:62:ce:89:3b:8c:0b:53:
         c3:be:3b:e4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHMgx0sNOsWXWtkC4bSWTZURvyP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMxQkNGRTIxN0VFOERFQTk5MkQ5QTI5Njc1QjlCMDRF
Q0MxQUMyQTAeFw0yMzExMTAxNjAyMDlaFw0yNDExMDgxNjA3MDlaMDMxMTAvBgNV
BAMTKDE2NjFENzgxMzVBMzRERDEwN0MzODE1NjQ0RjEyQjY4RUQyOERFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBjGZgOHHhsRUWjAPUq5mXYGX
usaqnMFkTmcb1WeTzTgxq2keLmGr8qSuLg8vYA6MzNxI+YtcjSGE96k0E4gzBVeG
VnRSouW4sD9p4S4Fth9sOshocfvUoxvawS5VJgE6jUU1aAORKzf/E4C86TRNK+1S
tWD6MsvdaXu7YQlR4mP8GAfZzeemX4xMIHydRfs5ATs6/j5LV4lYvbf9oBt9TAsO
lRjWVlWn8ggSBcWDXnISCkhY++s7s5OUyslhFBLJSbAMwXaj5FYseHB7iK4NoCJF
16mp6g0yWtBrGf/qQEB/uGboFKL51Hb1gfCbOeUw6ceN3akzCtR7VpejWONJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFmHXgTWjTdEHw4FWRPEraO0o3jQwHwYDVR0j
BBgwFoAUbBvP4hfujeqZLZopZ1ubBOzBrCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEtwU2FzZnlLRERaNExNbmJka2lhVWFmcUZxNUphelVSY1hyVWh3NDVR
Q1AvMC82QzFCQ0ZFMjE3RUU4REVBOTkyRDlBMjk2NzVCOUIwNEVDQzFBQzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZDMUJDRkUyMTdFRThERUE5
OTJEOUEyOTY3NUI5QjA0RUNDMUFDMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hLcFNhc2Z5S0REWjRMTW5iZGtpYVVhZnFGcTVKYXpVUmNYclVodzQ1UUNQLzAv
MzIzODMwMzQzYTM2Mzg2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzczMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARowDANBgkqhkiG9w0BAQsFAAOCAQEAmQgvAt6N
3ks4sOJYcL2hkg+QyZAFvkXjwGqi0ZfrIMo7pp1/OtCVBlIZtw3CNvZrccXkHw3b
+e/36zkvDdm8yj8tVwgAu3x+iz+HaSulr3gKeUi36VZZ0qbpQ16aou5/4JLiZd5Q
/VILOaeCHWz9uVftmnzeEuTQC4HFeqFG7hj6SK87NzQk9KWv+DLlR15QnqvvTRss
6RBcOxPTl4Sw6levv8N3fUr9/yto+vwiWzfKJtDiUB0BHPJeCTxevoXhZdi9mSKa
x0/lWctya/6p/nIMSCBz9EN9G+nvY/2b2nnHC3XCppAHMA+uScerhOUjS4XoIXVi
zok7jAtTw7475A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org