Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f34302d3430203d3e20323639323334.roa
File:                     323830343a363137303a3a2f34302d3430203d3e20323639323334.roa (raw, json)
Hash identifier:          8IHyJA17sncfiUoHxlNPpcMrTycbkgZqEAXJS8A/+DQ=
Subject key identifier:   0F:94:FD:DB:6F:51:7E:E6:A8:37:79:26:DB:3A:D7:7D:2D:1A:25:FE
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       37DEA758D14CD94769F9C83E92285425AAB1A5B1
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f34302d3430203d3e20323639323334.roa
Signing time:             Fri 10 Jun 2022 17:00:00 +0000
ROA not before:           Fri 10 Jun 2022 16:55:00 +0000
ROA not after:            Fri 09 Jun 2023 17:00:00 +0000
asID:                     269234
IP address blocks:        2804:6170::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:de:a7:58:d1:4c:d9:47:69:f9:c8:3e:92:28:54:25:aa:b1:a5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jun 10 16:55:00 2022 GMT
            Not After : Jun  9 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:19:36:d9:3a:2c:5a:af:c2:b4:a9:a2:ee:
                    33:1d:ab:9c:06:f7:fe:c0:d9:46:b9:9f:48:81:aa:
                    84:6c:de:fd:7b:7e:d2:1c:a8:af:6e:60:5c:5f:fb:
                    bf:d0:9e:44:11:c9:14:e8:a1:e0:53:a3:1b:e7:c8:
                    25:a4:73:0d:03:95:74:18:48:56:7c:38:c9:2a:09:
                    88:0e:ae:f7:b3:03:5b:00:a7:c8:45:2c:16:96:40:
                    fa:81:48:bd:e0:ea:da:b2:e2:2a:0b:2c:5e:73:2a:
                    eb:59:f9:df:af:04:78:34:44:81:dc:fe:27:b0:39:
                    9d:bc:62:b9:f8:ec:c3:01:77:97:58:6a:b3:68:d1:
                    2e:c8:ab:48:14:0b:10:2f:3f:1b:f4:8d:93:31:9f:
                    58:95:58:57:77:87:86:13:07:d8:d3:0a:5e:23:5e:
                    81:0c:e5:44:bd:1b:fc:5d:8d:21:7d:fd:b9:29:bf:
                    cc:2f:50:20:09:2e:72:fa:99:cc:19:7a:1d:48:43:
                    54:0f:de:b3:53:5a:2d:3b:e5:ef:34:91:cc:54:1c:
                    ba:08:c3:44:c5:ee:a0:7e:53:a4:7d:51:68:fd:17:
                    ee:d9:a9:e5:12:d6:d2:bc:39:7a:2a:f2:f6:1d:77:
                    dc:24:50:0f:37:39:c9:c5:a6:99:f3:73:fc:21:f7:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:94:FD:DB:6F:51:7E:E6:A8:37:79:26:DB:3A:D7:7D:2D:1A:25:FE
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f34302d3430203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6170::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:b5:d6:e6:29:d2:59:5d:87:0c:2b:b2:be:63:c5:0a:48:c0:
         86:69:bb:0b:32:d3:d2:87:33:75:f2:72:89:03:f4:a5:30:0c:
         1b:63:fa:d8:9b:44:3f:43:98:a7:99:f6:d5:07:c8:df:4a:81:
         1c:76:62:d7:68:4a:06:f2:c9:ea:74:13:8f:a8:9f:c6:05:37:
         d7:9d:f0:6e:61:a7:d1:0a:f2:70:f1:fc:b0:72:25:46:18:84:
         6c:ad:28:ba:e6:48:ca:e8:e1:f8:6b:97:5d:0e:9b:0f:91:26:
         95:3c:dc:7b:e8:8d:be:f8:03:f5:c5:79:e6:df:2c:61:cb:f5:
         82:95:66:28:fd:af:5c:84:50:f9:be:23:90:fe:ae:fc:bc:52:
         67:c9:57:4a:b5:4d:50:af:87:6e:1f:86:1c:37:8f:24:64:ec:
         76:db:ef:e0:0c:44:34:d4:5d:0d:1d:31:75:51:8d:76:3c:b5:
         19:ab:f1:66:ea:fb:68:fc:d8:d3:7d:1d:98:f5:ff:4d:27:ab:
         c5:93:46:bf:30:a8:83:e0:6c:c6:bf:0e:a9:0c:4d:61:16:6b:
         15:fe:d9:5b:1f:38:5d:c1:fa:17:04:c1:99:1d:7a:f5:4e:c1:
         34:d6:bb:89:51:9b:68:b3:e3:43:c0:1b:02:d1:2e:84:b6:00:
         9b:2e:e7:4b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUN96nWNFM2Udp+cg+kihUJaqxpbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFEMTYzRTMzMzRBMkFGNTE1QTczOTE0MEVENDNEODUw
MDYxMkQ1NDAeFw0yMjA2MTAxNjU1MDBaFw0yMzA2MDkxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU3ODE5MzZEOTNBMkM1QUFG
QzJCNEE5QTJFRTMzMURBQjlDMDZGN0ZFQzBEOTQ2Qjk5RjQ4ODFBQTg0NkNERUZE
N0I3RUQyMUNBOEFGNkU2MDVDNUZGQkJGRDA5RTQ0MTFDOTE0RThBMUUwNTNBMzFC
RTdDODI1QTQ3MzBEMDM5NTc0MTg0ODU2N0MzOEM5MkEwOTg4MEVBRUY3QjMwMzVC
MDBBN0M4NDUyQzE2OTY0MEZBODE0OEJERTBFQURBQjJFMjJBMEIyQzVFNzMyQUVC
NTlGOURGQUYwNDc4MzQ0NDgxRENGRTI3QjAzOTlEQkM2MkI5RjhFQ0MzMDE3Nzk3
NTg2QUIzNjhEMTJFQzhBQjQ4MTQwQjEwMkYzRjFCRjQ4RDkzMzE5RjU4OTU1ODU3
Nzc4Nzg2MTMwN0Q4RDMwQTVFMjM1RTgxMENFNTQ0QkQxQkZDNUQ4RDIxN0RGREI5
MjlCRkNDMkY1MDIwMDkyRTcyRkE5OUNDMTk3QTFENDg0MzU0MEZERUIzNTM1QTJE
M0JFNUVGMzQ5MUNDNTQxQ0JBMDhDMzQ0QzVFRUEwN0U1M0E0N0Q1MTY4RkQxN0VF
RDlBOUU1MTJENkQyQkMzOTdBMkFGMkY2MUQ3N0RDMjQ1MDBGMzczOUM5QzVBNjk5
RjM3M0ZDMjFGNzM0QTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvngZNtk6LFqvwrSpou4zHaucBvf+wNlGuZ9IgaqEbN79e37SHKiv
bmBcX/u/0J5EEckU6KHgU6Mb58glpHMNA5V0GEhWfDjJKgmIDq73swNbAKfIRSwW
lkD6gUi94OrasuIqCyxecyrrWfnfrwR4NESB3P4nsDmdvGK5+OzDAXeXWGqzaNEu
yKtIFAsQLz8b9I2TMZ9YlVhXd4eGEwfY0wpeI16BDOVEvRv8XY0hff25Kb/ML1Ag
CS5y+pnMGXodSENUD96zU1otO+XvNJHMVBy6CMNExe6gflOkfVFo/Rfu2anlEtbS
vDl6KvL2HXfcJFAPNznJxaaZ83P8Ifc0pwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FA+U/dtvUX7mqDd5Jts6130tGiX+MB8GA1UdIwQYMBaAFFrRY+MzSir1Fac5FA7U
PYUAYS1UMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJEaUp0TTMycTJTaVNI
bjNoRmJNM1dXejY0dmFNQUc2VGFrRFVWb21pUVFWLzAvNUFEMTYzRTMzMzRBMkFG
NTE1QTczOTE0MEVENDNEODUwMDYxMkQ1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81QUQxNjNFMzMzNEEyQUY1MTVBNzM5MTQwRUQ0M0Q4NTAwNjEy
RDU0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yRGlKdE0zMnEyU2lTSG4zaEZi
TTNXV3o2NHZhTUFHNlRha0RVVm9taVFRVi8wLzMyMzgzMDM0M2EzNjMxMzczMDNh
M2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzYzOTMyMzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgE
YXAAMA0GCSqGSIb3DQEBCwUAA4IBAQCRtdbmKdJZXYcMK7K+Y8UKSMCGabsLMtPS
hzN18nKJA/SlMAwbY/rYm0Q/Q5inmfbVB8jfSoEcdmLXaEoG8snqdBOPqJ/GBTfX
nfBuYafRCvJw8fywciVGGIRsrSi65kjK6OH4a5ddDpsPkSaVPNx76I2++AP1xXnm
3yxhy/WClWYo/a9chFD5viOQ/q78vFJnyVdKtU1Qr4duH4YcN48kZOx22+/gDEQ0
1F0NHTF1UY12PLUZq/Fm6vto/NjTfR2Y9f9NJ6vFk0a/MKiD4GzGvw6pDE1hFmsV
/tlbHzhdwfoXBMGZHXr1TsE01ruJUZtos+NDwBsC0S6EtgCbLudL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org