Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/323830313a61343a3a2f33322d3432203d3e20323632373432.roa
File:                     323830313a61343a3a2f33322d3432203d3e20323632373432.roa (raw, json)
Hash identifier:          rg73Vaaqf16KHdyo1Oj2HyxiRNfFz0aMnjYFMdXGVD4=
Subject key identifier:   62:DC:56:A3:92:7E:91:A5:4B:6C:14:E7:10:17:62:1A:51:FF:30:F9
Certificate issuer:       /CN=DE2490482D58BA1938718BC52A6EF59DA097815A
Certificate serial:       7E6009121222AA3CBA6E2BF7AF7F52C8BB3E12E3
Authority key identifier: DE:24:90:48:2D:58:BA:19:38:71:8B:C5:2A:6E:F5:9D:A0:97:81:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE2490482D58BA1938718BC52A6EF59DA097815A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/323830313a61343a3a2f33322d3432203d3e20323632373432.roa
Signing time:             Tue 31 Jan 2023 13:13:32 +0000
ROA not before:           Tue 31 Jan 2023 13:08:32 +0000
ROA not after:            Tue 30 Jan 2024 13:13:32 +0000
asID:                     262742
IP address blocks:        2801:a4::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:60:09:12:12:22:aa:3c:ba:6e:2b:f7:af:7f:52:c8:bb:3e:12:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE2490482D58BA1938718BC52A6EF59DA097815A
        Validity
            Not Before: Jan 31 13:08:32 2023 GMT
            Not After : Jan 30 13:13:32 2024 GMT
        Subject: CN=62DC56A3927E91A54B6C14E71017621A51FF30F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:fa:c6:6c:d8:97:b1:36:99:54:4a:67:a4:
                    7d:3b:cf:08:d7:a9:3f:bf:64:fd:bf:bc:ff:c7:61:
                    6a:f7:c0:5c:25:31:43:e5:66:a1:48:43:23:f9:4b:
                    14:a5:7e:e6:d9:df:37:85:1b:e8:95:27:c0:1e:37:
                    2b:81:78:cb:9f:8e:0e:e6:76:18:e3:86:e5:ae:92:
                    d4:f7:d4:22:95:96:43:84:c7:ea:5f:14:17:47:82:
                    df:02:1a:a9:c1:3c:b3:bc:b7:c4:88:7c:73:bd:ce:
                    bc:9b:3b:fe:0e:a4:e6:1c:c1:74:f4:56:c4:ed:08:
                    bf:ad:1e:02:73:9c:fb:37:7f:81:16:d2:46:38:11:
                    51:89:bb:67:2d:f4:71:49:c0:35:19:73:87:ff:a6:
                    8d:2c:42:77:70:43:61:d9:06:13:5c:83:8f:3b:1e:
                    d1:04:e1:b3:af:48:5d:9b:2e:ee:d0:b4:b3:60:6a:
                    e1:8c:a7:af:76:ef:3b:7d:de:df:08:3b:75:e2:a8:
                    24:2a:9b:33:c2:3a:78:4a:dc:4b:7d:27:bd:70:90:
                    d2:af:99:e9:12:98:e7:40:c8:c7:82:d5:64:fa:bb:
                    b0:a2:2d:e3:ef:46:a5:4d:bb:a8:5f:b5:94:14:4f:
                    c4:14:1d:92:55:a3:a5:4e:45:e8:2b:4b:2a:ce:45:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DC:56:A3:92:7E:91:A5:4B:6C:14:E7:10:17:62:1A:51:FF:30:F9
            X509v3 Authority Key Identifier:
                keyid:DE:24:90:48:2D:58:BA:19:38:71:8B:C5:2A:6E:F5:9D:A0:97:81:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/DE2490482D58BA1938718BC52A6EF59DA097815A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE2490482D58BA1938718BC52A6EF59DA097815A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/323830313a61343a3a2f33322d3432203d3e20323632373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:68:95:ed:cd:11:4e:3f:8a:3a:37:56:f6:5e:18:e0:56:
         ec:91:a5:a1:69:89:70:9d:eb:d3:3f:00:42:f7:31:fc:3c:22:
         83:47:cb:02:f5:11:bf:70:b4:26:7d:92:61:99:c7:e5:86:cd:
         12:79:ef:e2:c1:aa:54:56:3e:66:70:fa:3e:27:7c:71:2e:b1:
         6f:aa:7f:01:46:a7:44:31:eb:97:06:10:27:93:68:6c:e7:4a:
         54:fa:af:9f:0b:a9:2f:6f:1b:c0:6f:ef:9e:2a:58:a6:e2:47:
         26:8e:88:bb:7e:d3:2e:b0:68:52:fa:5f:f6:35:ea:88:01:3c:
         30:a8:2a:fc:1e:ae:a2:4e:78:a6:df:48:c7:5c:cb:c8:16:0b:
         a5:57:c9:51:9a:3f:38:fb:b8:9d:49:6d:6e:8b:b9:7d:b3:81:
         6a:2a:0f:f6:90:19:6d:f1:97:3e:b6:75:c4:9e:e1:ec:9b:71:
         e4:91:0e:0f:71:07:ec:3a:52:01:7e:d2:63:e3:a9:8c:d9:2c:
         a3:5e:ed:21:d7:89:c1:5a:f9:3c:39:97:61:b7:eb:6f:13:01:
         4a:fc:e9:3d:85:eb:98:2b:60:ff:08:02:e1:74:9c:31:a8:e9:
         b2:7f:9b:5e:69:ff:48:43:fe:cb:b8:29:7b:ee:c2:e4:23:a5:
         0c:b4:4b:91
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUfmAJEhIiqjy6biv3r39SyLs+EuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUyNDkwNDgyRDU4QkExOTM4NzE4QkM1MkE2RUY1OURB
MDk3ODE1QTAeFw0yMzAxMzExMzA4MzJaFw0yNDAxMzAxMzEzMzJaMDMxMTAvBgNV
BAMTKDYyREM1NkEzOTI3RTkxQTU0QjZDMTRFNzEwMTc2MjFBNTFGRjMwRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5F/rGbNiXsTaZVEpnpH07zwjX
qT+/ZP2/vP/HYWr3wFwlMUPlZqFIQyP5SxSlfubZ3zeFG+iVJ8AeNyuBeMufjg7m
dhjjhuWuktT31CKVlkOEx+pfFBdHgt8CGqnBPLO8t8SIfHO9zrybO/4OpOYcwXT0
VsTtCL+tHgJznPs3f4EW0kY4EVGJu2ct9HFJwDUZc4f/po0sQndwQ2HZBhNcg487
HtEE4bOvSF2bLu7QtLNgauGMp6927zt93t8IO3XiqCQqmzPCOnhK3Et9J71wkNKv
mekSmOdAyMeC1WT6u7CiLePvRqVNu6hftZQUT8QUHZJVo6VORegrSyrORerLAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUYtxWo5J+kaVLbBTnEBdiGlH/MPkwHwYDVR0j
BBgwFoAU3iSQSC1Yuhk4cYvFKm71naCXgVowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdVSGRLYnpHVnM2Zm5Fcm5UMzVSOTcyWHRDNjNiaVhNSlEycmg2cUI5
RGgvMC9ERTI0OTA0ODJENThCQTE5Mzg3MThCQzUyQTZFRjU5REEwOTc4MTVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RFMjQ5MDQ4MkQ1OEJBMTkz
ODcxOEJDNTJBNkVGNTlEQTA5NzgxNUEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJHVUhkS2J6R1ZzNmZuRXJuVDM1Ujk3Mlh0QzYzYmlYTUpRMnJoNnFCOURoLzAv
MzIzODMwMzEzYTYxMzQzYTNhMmYzMzMyMmQzNDMyMjAzZDNlMjAzMjM2MzIzNzM0
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoAQCkMA0GCSqGSIb3DQEBCwUAA4IBAQBLmGiV7c0RTj+K
OjdW9l4Y4FbskaWhaYlwnevTPwBC9zH8PCKDR8sC9RG/cLQmfZJhmcflhs0See/i
wapUVj5mcPo+J3xxLrFvqn8BRqdEMeuXBhAnk2hs50pU+q+fC6kvbxvAb++eKlim
4kcmjoi7ftMusGhS+l/2NeqIATwwqCr8Hq6iTnim30jHXMvIFgulV8lRmj84+7id
SW1ui7l9s4FqKg/2kBlt8Zc+tnXEnuHsm3HkkQ4PcQfsOlIBftJj46mM2SyjXu0h
14nBWvk8OZdht+tvEwFK/Ok9heuYK2D/CALhdJwxqOmyf5teaf9IQ/7LuCl77sLk
I6UMtEuR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org