Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3630303a3a2f34302d3430203d3e20323638363732.roa
File:                     323830343a353464343a3630303a3a2f34302d3430203d3e20323638363732.roa (raw, json)
Hash identifier:          KO+2bPHmfKUWU16aW0+XnGae242yQ2yfMrqZPcYuaLM=
Subject key identifier:   E1:2E:CD:F3:73:25:D5:3E:80:D9:05:E5:0F:00:63:DF:7F:D0:16:11
Certificate issuer:       /CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
Certificate serial:       62A5B05D07C7C142C687DE7ECFF50EB72D7E2660
Authority key identifier: 75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3630303a3a2f34302d3430203d3e20323638363732.roa
Signing time:             Tue 26 Mar 2024 13:00:00 +0000
ROA not before:           Tue 26 Mar 2024 12:55:00 +0000
ROA not after:            Tue 25 Mar 2025 13:00:00 +0000
asID:                     268672
IP address blocks:        2804:54d4:600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a5:b0:5d:07:c7:c1:42:c6:87:de:7e:cf:f5:0e:b7:2d:7e:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
        Validity
            Not Before: Mar 26 12:55:00 2024 GMT
            Not After : Mar 25 13:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:e1:e7:32:ca:92:39:a8:bc:bb:1c:e9:e8:
                    31:28:77:31:78:f1:ca:6e:af:9b:f8:2b:b7:9c:13:
                    02:30:c7:47:75:cb:c1:7e:a5:ef:51:71:42:ed:7f:
                    81:ea:94:36:8c:b0:de:8a:1e:f6:37:a0:cb:7e:29:
                    8e:14:4f:ad:85:59:19:39:31:57:1d:08:3f:f1:03:
                    26:33:b7:b3:66:3f:9a:7a:5f:38:c2:2a:d1:53:1e:
                    ad:f7:f5:7f:ed:1d:ed:4b:d5:ab:b2:a0:58:6d:a1:
                    08:cd:ef:16:27:7d:40:65:70:c4:15:93:cb:9f:37:
                    92:1d:c1:39:18:17:12:c1:c7:e0:f9:ac:64:c0:2b:
                    77:bf:6b:10:ab:8d:58:be:32:3d:3d:02:d0:22:d4:
                    57:c1:69:d4:1c:b9:dc:90:16:f7:9a:70:0a:c1:71:
                    0c:e1:09:cf:5d:43:2e:00:f2:40:30:f8:0d:33:cd:
                    98:06:94:ba:f9:d5:53:48:29:c0:1a:dc:23:bd:f2:
                    f0:78:28:97:fa:4d:b6:04:de:1d:6b:54:d6:b4:79:
                    c7:b2:c6:61:0b:35:05:01:61:8e:93:31:ba:20:07:
                    65:a1:20:9f:17:22:6b:a4:ea:a5:d9:20:33:e3:f0:
                    7f:d0:51:ed:0e:9d:d3:0e:05:e3:8c:2d:7a:21:e1:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2E:CD:F3:73:25:D5:3E:80:D9:05:E5:0F:00:63:DF:7F:D0:16:11
            X509v3 Authority Key Identifier:
                keyid:75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/323830343a353464343a3630303a3a2f34302d3430203d3e20323638363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54d4:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:07:24:49:48:2e:e0:a7:dd:eb:0c:c1:c5:57:66:97:a9:b9:
         7b:a5:c6:09:16:ff:22:0c:7a:8f:33:a6:bd:c4:3e:9f:31:20:
         57:b5:13:c2:86:08:ff:9b:39:16:04:dd:c3:1f:94:e1:28:99:
         c2:28:69:10:76:11:d6:e7:4c:fd:87:f9:f9:0d:3c:4d:bb:6e:
         42:d4:e6:d1:c4:0f:34:21:07:eb:ad:f0:10:a5:56:f3:22:73:
         f3:7b:c8:6a:55:6f:89:8b:79:6c:a8:bc:2e:3b:16:33:ff:fb:
         e6:a4:50:5e:45:6e:6e:72:14:0b:d1:e2:96:56:c8:c1:ba:39:
         db:6d:58:87:d5:26:63:94:57:e6:e3:1b:a4:5d:ed:5d:f5:ca:
         96:e1:39:86:0f:d9:ac:c9:32:d1:d5:ed:8c:a1:a0:ba:75:ee:
         da:8d:33:84:0f:c6:0c:ab:49:74:62:81:80:cc:d2:e0:89:20:
         18:cd:d7:96:55:97:fd:f7:3b:3a:89:46:ef:57:fb:2c:65:b5:
         41:c9:30:4c:4f:f7:2c:da:0b:d8:eb:0a:5a:50:c2:9b:4f:29:
         66:f7:76:f3:0d:cc:b0:fd:a3:cf:4d:85:03:ce:81:a3:87:cb:
         c4:28:5f:7f:88:c4:3e:b0:2c:34:27:3a:f7:fc:32:11:4d:07:
         f4:72:4f:31
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUYqWwXQfHwULGh95+z/UOty1+JmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU2OEU2QTI3QjRDRThCNEVCRDVBMzMwNTkyQjcwQTIw
RkJGNkJCODAeFw0yNDAzMjYxMjU1MDBaFw0yNTAzMjUxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREUwMUUxRTczMkNBOTIzOUE4
QkNCQjFDRTlFODMxMjg3NzMxNzhGMUNBNkVBRjlCRjgyQkI3OUMxMzAyMzBDNzQ3
NzVDQkMxN0VBNUVGNTE3MTQyRUQ3RjgxRUE5NDM2OENCMERFOEExRUY2MzdBMENC
N0UyOThFMTQ0RkFEODU1OTE5MzkzMTU3MUQwODNGRjEwMzI2MzNCN0IzNjYzRjlB
N0E1RjM4QzIyQUQxNTMxRUFERjdGNTdGRUQxREVENEJENUFCQjJBMDU4NkRBMTA4
Q0RFRjE2Mjc3RDQwNjU3MEM0MTU5M0NCOUYzNzkyMURDMTM5MTgxNzEyQzFDN0Uw
RjlBQzY0QzAyQjc3QkY2QjEwQUI4RDU4QkUzMjNEM0QwMkQwMjJENDU3QzE2OUQ0
MUNCOURDOTAxNkY3OUE3MDBBQzE3MTBDRTEwOUNGNUQ0MzJFMDBGMjQwMzBGODBE
MzNDRDk4MDY5NEJBRjlENTUzNDgyOUMwMUFEQzIzQkRGMkYwNzgyODk3RkE0REI2
MDRERTFENkI1NEQ2QjQ3OUM3QjJDNjYxMEIzNTA1MDE2MThFOTMzMUJBMjAwNzY1
QTEyMDlGMTcyMjZCQTRFQUE1RDkyMDMzRTNGMDdGRDA1MUVEMEU5REQzMEUwNUUz
OEMyRDdBMjFFMTUzMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3gHh5zLKkjmovLsc6egxKHcxePHKbq+b+Cu3nBMCMMdHdcvBfqXv
UXFC7X+B6pQ2jLDeih72N6DLfimOFE+thVkZOTFXHQg/8QMmM7ezZj+ael84wirR
Ux6t9/V/7R3tS9WrsqBYbaEIze8WJ31AZXDEFZPLnzeSHcE5GBcSwcfg+axkwCt3
v2sQq41YvjI9PQLQItRXwWnUHLnckBb3mnAKwXEM4QnPXUMuAPJAMPgNM82YBpS6
+dVTSCnAGtwjvfLweCiX+k22BN4da1TWtHnHssZhCzUFAWGOkzG6IAdloSCfFyJr
pOql2SAz4/B/0FHtDp3TDgXjjC16IeFTIQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FOEuzfNzJdU+gNkF5Q8AY99/0BYRMB8GA1UdIwQYMBaAFHVo5qJ7TOi069WjMFkr
cKIPv2u4MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RGSlFvem8xQlpFbkp3
N2VzdDNlYXFmNnFtOFBwaWc4RmlVYjNhRndpS1dyLzAvNzU2OEU2QTI3QjRDRThC
NEVCRDVBMzMwNTkyQjcwQTIwRkJGNkJCOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NTY4RTZBMjdCNENFOEI0RUJENUEzMzA1OTJCNzBBMjBGQkY2
QkI4LmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERkpRb3pvMUJaRW5Kdzdlc3Qz
ZWFxZjZxbThQcGlnOEZpVWIzYUZ3aUtXci8wLzMyMzgzMDM0M2EzNTM0NjQzNDNh
MzYzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM4MzYzNzMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKARU1AYwDQYJKoZIhvcNAQELBQADggEBABMHJElILuCn3esMwcVXZpep
uXulxgkW/yIMeo8zpr3EPp8xIFe1E8KGCP+bORYE3cMflOEomcIoaRB2EdbnTP2H
+fkNPE27bkLU5tHEDzQhB+ut8BClVvMic/N7yGpVb4mLeWyovC47FjP/++akUF5F
bm5yFAvR4pZWyMG6OdttWIfVJmOUV+bjG6Rd7V31ypbhOYYP2azJMtHV7YyhoLp1
7tqNM4QPxgyrSXRigYDM0uCJIBjN15ZVl/33OzqJRu9X+yxltUHJMExP9yzaC9jr
ClpQwptPKWb3dvMNzLD9o89NhQPOgaOHy8QoX3+IxD6wLDQnOvf8MhFNB/RyTzE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org