Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          zO4ORuYCtrDMEXtpWesC8ph5FIjeleZM7hFukIzeDHo=
Subject key identifier:   9C:B0:7B:B5:18:BA:B9:1D:5D:12:10:84:8C:71:2A:B5:E2:47:B3:CC
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       458E4D56E6CCB56004732FD0C00418396A20F97A
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        2804:8c8:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8e:4d:56:e6:cc:b5:60:04:73:2f:d0:c0:04:18:39:6a:20:f9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:a5:c5:de:8e:c9:87:25:51:4e:9d:77:25:
                    eb:f2:06:99:4d:13:17:ad:ab:c4:09:0d:9f:0e:c1:
                    05:82:1b:f3:21:e5:bf:d5:0c:86:78:09:3b:aa:eb:
                    84:97:48:49:27:01:82:f0:d4:1f:ef:e3:e4:ce:6c:
                    d0:21:d2:37:bb:cb:8e:34:01:a1:db:8c:33:a1:70:
                    64:f4:4d:a7:70:43:52:7e:28:71:3a:29:75:f5:ad:
                    cd:88:a8:15:44:d4:e9:cf:a7:0b:4a:a3:27:29:f7:
                    28:38:d7:c8:af:ef:02:92:16:64:1a:3b:07:90:01:
                    fb:bb:d5:36:4d:37:c3:10:d1:57:13:a4:b0:9a:01:
                    b8:db:80:36:74:67:49:12:91:ad:a5:7b:09:1d:10:
                    76:76:7a:00:51:b3:5b:df:c6:53:dc:7e:84:a0:6f:
                    9e:4b:b4:a0:96:8f:43:6f:1b:1c:98:12:ef:c6:92:
                    e9:bb:4a:1c:68:cc:fa:03:d4:85:6f:17:e0:bd:2a:
                    4e:73:1e:15:f9:f6:3e:6e:c0:11:8e:c0:8f:52:44:
                    65:70:29:eb:1a:a6:b9:1f:85:21:9b:39:79:b8:ef:
                    6b:6a:9b:86:9d:bc:7e:b3:61:27:52:e5:1b:04:bb:
                    6e:c5:5d:9a:d1:74:ca:8d:ee:00:fb:c3:b6:73:ce:
                    bd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B0:7B:B5:18:BA:B9:1D:5D:12:10:84:8C:71:2A:B5:E2:47:B3:CC
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         42:07:eb:d4:b8:91:81:ba:a6:4f:4c:62:08:aa:42:53:c9:f1:
         91:d1:ec:be:4d:e2:3e:93:43:69:de:e9:2a:26:63:91:67:0c:
         3b:e1:61:6d:79:d5:5d:23:aa:0e:8c:f3:06:bd:e9:c8:88:65:
         04:29:eb:86:bb:1e:01:59:c8:0e:d5:01:2f:41:bb:b1:d6:ff:
         f7:b6:7a:dc:1e:a9:6d:f7:87:f6:2f:9f:01:35:fb:bc:ca:e5:
         de:8f:5f:a4:55:ba:0e:d6:e0:b2:ce:4e:bc:9f:97:d4:16:36:
         df:65:07:89:c2:f7:1e:89:d3:2d:98:bb:73:30:6e:df:a1:72:
         61:4c:20:13:f6:6a:64:11:4d:e8:a1:70:fb:62:3f:82:19:90:
         05:48:7b:d3:6e:49:81:35:73:39:5e:f7:a3:48:2f:23:6f:4a:
         1c:3c:a2:c5:35:63:27:e0:5a:7d:9f:fb:46:17:b5:f6:28:f3:
         74:95:6e:4b:82:c0:fa:8f:81:d6:71:b3:e2:58:14:e8:9f:d0:
         13:fc:2a:9e:f3:15:5d:68:56:4b:c9:c9:0a:e5:c6:3a:75:10:
         b3:6e:e5:42:ce:2c:57:cd:86:2d:54:af:38:5a:d1:62:0c:56:
         f6:cb:27:43:29:be:26:43:6f:5f:23:67:d3:ee:9b:22:29:f4:
         28:3c:19:1b
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIURY5NVubMtWAEcy/QwAQYOWog+XowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJBNDU2NjhGRTNCQjkzMjI2OEJDOTlGQjY3MTUzMUE5
MDQ3RDYxMDAeFw0yMjAzMDMxODQ3MDVaFw0yMzAzMDIxODUyMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNFM0E1QzVERThFQzk4NzI1
NTE0RTlENzcyNUVCRjIwNjk5NEQxMzE3QURBQkM0MDkwRDlGMEVDMTA1ODIxQkYz
MjFFNUJGRDUwQzg2NzgwOTNCQUFFQjg0OTc0ODQ5MjcwMTgyRjBENDFGRUZFM0U0
Q0U2Q0QwMjFEMjM3QkJDQjhFMzQwMUExREI4QzMzQTE3MDY0RjQ0REE3NzA0MzUy
N0UyODcxM0EyOTc1RjVBRENEODhBODE1NDRENEU5Q0ZBNzBCNEFBMzI3MjlGNzI4
MzhEN0M4QUZFRjAyOTIxNjY0MUEzQjA3OTAwMUZCQkJENTM2NEQzN0MzMTBEMTU3
MTNBNEIwOUEwMUI4REI4MDM2NzQ2NzQ5MTI5MUFEQTU3QjA5MUQxMDc2NzY3QTAw
NTFCMzVCREZDNjUzREM3RTg0QTA2RjlFNEJCNEEwOTY4RjQzNkYxQjFDOTgxMkVG
QzY5MkU5QkI0QTFDNjhDQ0ZBMDNENDg1NkYxN0UwQkQyQTRFNzMxRTE1RjlGNjNF
NkVDMDExOEVDMDhGNTI0NDY1NzAyOUVCMUFBNkI5MUY4NTIxOUIzOTc5QjhFRjZC
NkE5Qjg2OURCQzdFQjM2MTI3NTJFNTFCMDRCQjZFQzU1RDlBRDE3NENBOERFRTAw
RkJDM0I2NzNDRUJENjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw+Olxd6OyYclUU6ddyXr8gaZTRMXravECQ2fDsEFghvzIeW/1QyG
eAk7quuEl0hJJwGC8NQf7+PkzmzQIdI3u8uONAGh24wzoXBk9E2ncENSfihxOil1
9a3NiKgVRNTpz6cLSqMnKfcoONfIr+8CkhZkGjsHkAH7u9U2TTfDENFXE6SwmgG4
24A2dGdJEpGtpXsJHRB2dnoAUbNb38ZT3H6EoG+eS7Sglo9DbxscmBLvxpLpu0oc
aMz6A9SFbxfgvSpOcx4V+fY+bsARjsCPUkRlcCnrGqa5H4Uhmzl5uO9rapuGnbx+
s2EnUuUbBLtuxV2a0XTKje4A+8O2c869ZwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FJywe7UYurkdXRIQhIxxKrXiR7PMMB8GA1UdIwQYMBaAFOKkVmj+O7kyJovJn7Zx
UxqQR9YQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJNVHU4eWhGTHJvR05H
Q3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzAvRTJBNDU2NjhGRTNCQjkz
MjI2OEJDOTlGQjY3MTUzMUE5MDQ3RDYxMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkE0NTY2OEZFM0JCOTMyMjY4QkM5OUZCNjcxNTMxQTkwNDdE
NjEwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yTVR1OHloRkxyb0dOR0NxVmtT
MmlUOWE4aE40cVN5OVlkczQ1cmFmQUtVNi8wLzMyMzgzMDM0M2EzODYzMzgzYTM2
MzAzMDMwM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjMyMzMzOTMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYFKAQIyGAwDQYJKoZIhvcNAQELBQADggEBAEIH69S4kYG6pk9MYgiqQlPJ
8ZHR7L5N4j6TQ2ne6SomY5FnDDvhYW151V0jqg6M8wa96ciIZQQp64a7HgFZyA7V
AS9Bu7HW//e2etweqW33h/YvnwE1+7zK5d6PX6RVug7W4LLOTryfl9QWNt9lB4nC
9x6J0y2Yu3Mwbt+hcmFMIBP2amQRTeihcPtiP4IZkAVIe9NuSYE1czle96NILyNv
Shw8osU1YyfgWn2f+0YXtfYo83SVbkuCwPqPgdZxs+JYFOif0BP8Kp7zFV1oVkvJ
yQrlxjp1ELNu5ULOLFfNhi1Urzha0WIMVvbLJ0MpviZDb18jZ9PumyIp9Cg8GRs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org