Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a356166653a3a2f34382d3438203d3e203238323632.roa
File:                     323030313a313263343a356166653a3a2f34382d3438203d3e203238323632.roa (raw, json)
Hash identifier:          8urOJ3PBLlNlVgZffeV9NHAN3Jb10ZEAXpdgB18mPmM=
Subject key identifier:   95:84:31:99:CB:3F:A2:EC:19:B7:BD:DF:BF:01:0B:08:BC:30:A0:DE
Certificate issuer:       /CN=A1C9646671EAA2886E18B798876F4FDB5FBB0DD0
Certificate serial:       2A8BBA0336C1526B23056C7ADF734FB7C910C83C
Authority key identifier: A1:C9:64:66:71:EA:A2:88:6E:18:B7:98:87:6F:4F:DB:5F:BB:0D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a356166653a3a2f34382d3438203d3e203238323632.roa
Signing time:             Fri 16 Dec 2022 22:23:55 +0000
ROA not before:           Fri 16 Dec 2022 22:18:55 +0000
ROA not after:            Fri 15 Dec 2023 22:23:55 +0000
asID:                     28262
IP address blocks:        2001:12c4:5afe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8b:ba:03:36:c1:52:6b:23:05:6c:7a:df:73:4f:b7:c9:10:c8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C9646671EAA2886E18B798876F4FDB5FBB0DD0
        Validity
            Not Before: Dec 16 22:18:55 2022 GMT
            Not After : Dec 15 22:23:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:38:45:3f:56:a5:2f:5d:2d:ba:f0:78:8c:
                    17:71:6f:e5:93:02:3f:91:11:13:db:40:8e:00:36:
                    e2:2e:35:b7:85:5c:6a:a2:33:eb:28:fb:ff:1f:69:
                    19:a4:06:7d:03:05:27:9c:3b:65:a5:89:34:97:af:
                    19:30:27:c1:c2:ca:0d:af:bc:2f:de:5a:54:05:35:
                    dc:8c:61:c3:c1:05:0f:d7:94:99:f0:c7:e2:de:1f:
                    5d:38:4b:06:f6:23:be:9e:cd:39:2a:72:5b:d1:62:
                    2a:ca:40:a2:64:43:08:37:d7:86:63:79:e7:4d:2e:
                    60:5f:46:8e:d1:66:70:e2:2d:fd:2d:5b:e4:db:1b:
                    bd:92:99:a2:88:f6:85:df:fc:2a:9a:a6:71:99:6e:
                    51:62:9e:20:38:96:16:f8:14:a6:6d:70:63:e0:46:
                    0b:da:87:cc:d1:d0:04:7e:e1:bf:e1:be:d5:89:5c:
                    6c:02:07:59:54:b7:89:b9:c1:24:fe:7d:c0:9d:73:
                    75:e6:ff:26:6d:c1:58:e0:a4:d8:08:7f:29:ac:e9:
                    6f:d8:cc:71:8a:7e:21:ea:a2:79:53:5a:14:93:43:
                    93:25:f4:d7:9a:a8:13:ea:2c:93:e7:8f:99:35:8b:
                    4c:e9:54:8b:e1:b9:3e:a5:30:30:57:83:50:ba:71:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:84:31:99:CB:3F:A2:EC:19:B7:BD:DF:BF:01:0B:08:BC:30:A0:DE
            X509v3 Authority Key Identifier:
                keyid:A1:C9:64:66:71:EA:A2:88:6E:18:B7:98:87:6F:4F:DB:5F:BB:0D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a356166653a3a2f34382d3438203d3e203238323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12c4:5afe::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:fe:6b:ab:7b:e4:f9:d2:4d:3d:59:8e:4e:d2:9e:b8:6a:1b:
         c7:8f:5f:f7:f9:ef:7f:09:96:0c:a4:2f:ec:a5:9b:9b:86:47:
         c7:d5:62:ac:f2:3a:54:e4:89:a7:9c:3c:31:9d:4f:3d:d9:5b:
         09:1a:d4:fa:6f:ce:fc:48:a1:75:27:de:42:99:08:aa:db:53:
         9a:a1:19:0f:05:3b:3c:56:01:89:8f:30:79:0b:01:13:12:37:
         f6:54:78:da:9d:83:d6:f8:d3:f7:e3:6c:d1:8a:37:0a:f1:85:
         0a:2b:d6:63:09:6e:a7:1c:71:48:f4:71:6a:3b:40:36:8e:10:
         70:eb:a6:17:da:37:ad:22:ce:f5:56:5d:a7:9d:48:d6:e4:1e:
         9f:0e:8c:1e:d7:88:e6:46:02:b6:d7:07:de:f3:a9:96:a2:89:
         c3:c0:73:e9:51:89:39:3e:37:a7:39:3c:93:b6:72:24:ef:8b:
         2d:d3:f3:d2:f9:30:c9:99:2c:66:51:43:4b:64:9e:60:aa:1c:
         c3:13:06:9b:f8:a2:56:aa:c8:97:04:d4:fd:c2:01:34:d5:5a:
         86:a5:62:95:6c:7b:75:d3:89:95:ca:4e:b1:12:6d:78:ea:ae:
         87:87:6a:ec:99:d3:66:41:bd:c3:69:1e:3a:09:24:d4:78:6f:
         96:4d:d0:23
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUKou6AzbBUmsjBWx633NPt8kQyDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFDOTY0NjY3MUVBQTI4ODZFMThCNzk4ODc2RjRGREI1
RkJCMEREMDAeFw0yMjEyMTYyMjE4NTVaFw0yMzEyMTUyMjIzNTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk0QjM4NDUzRjU2QTUyRjVE
MkRCQUYwNzg4QzE3NzE2RkU1OTMwMjNGOTExMTEzREI0MDhFMDAzNkUyMkUzNUI3
ODU1QzZBQTIzM0VCMjhGQkZGMUY2OTE5QTQwNjdEMDMwNTI3OUMzQjY1QTU4OTM0
OTdBRjE5MzAyN0MxQzJDQTBEQUZCQzJGREU1QTU0MDUzNURDOEM2MUMzQzEwNTBG
RDc5NDk5RjBDN0UyREUxRjVEMzg0QjA2RjYyM0JFOUVDRDM5MkE3MjVCRDE2MjJB
Q0E0MEEyNjQ0MzA4MzdENzg2NjM3OUU3NEQyRTYwNUY0NjhFRDE2NjcwRTIyREZE
MkQ1QkU0REIxQkJEOTI5OUEyODhGNjg1REZGQzJBOUFBNjcxOTk2RTUxNjI5RTIw
Mzg5NjE2RjgxNEE2NkQ3MDYzRTA0NjBCREE4N0NDRDFEMDA0N0VFMUJGRTFCRUQ1
ODk1QzZDMDIwNzU5NTRCNzg5QjlDMTI0RkU3REMwOUQ3Mzc1RTZGRjI2NkRDMTU4
RTBBNEQ4MDg3RjI5QUNFOTZGRDhDQzcxOEE3RTIxRUFBMjc5NTM1QTE0OTM0Mzkz
MjVGNEQ3OUFBODEzRUEyQzkzRTc4Rjk5MzU4QjRDRTk1NDhCRTFCOTNFQTUzMDMw
NTc4MzUwQkE3MTk4QzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyUs4RT9WpS9dLbrweIwXcW/lkwI/kRET20COADbiLjW3hVxqojPr
KPv/H2kZpAZ9AwUnnDtlpYk0l68ZMCfBwsoNr7wv3lpUBTXcjGHDwQUP15SZ8Mfi
3h9dOEsG9iO+ns05KnJb0WIqykCiZEMIN9eGY3nnTS5gX0aO0WZw4i39LVvk2xu9
kpmiiPaF3/wqmqZxmW5RYp4gOJYW+BSmbXBj4EYL2ofM0dAEfuG/4b7ViVxsAgdZ
VLeJucEk/n3AnXN15v8mbcFY4KTYCH8prOlv2Mxxin4h6qJ5U1oUk0OTJfTXmqgT
6iyT54+ZNYtM6VSL4bk+pTAwV4NQunGYyQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FJWEMZnLP6LsGbe9378BCwi8MKDeMB8GA1UdIwQYMBaAFKHJZGZx6qKIbhi3mIdv
T9tfuw3QMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJSdWhuVUZQTHk4SFNu
RnY5bmJHMUI3QkxBcHVLc2hydkV6amhrdGpid0VrLzAvQTFDOTY0NjY3MUVBQTI4
ODZFMThCNzk4ODc2RjRGREI1RkJCMEREMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BMUM5NjQ2NjcxRUFBMjg4NkUxOEI3OTg4NzZGNEZEQjVGQkIw
REQwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yUnVoblVGUEx5OEhTbkZ2OW5i
RzFCN0JMQXB1S3NocnZFempoa3RqYndFay8wLzMyMzAzMDMxM2EzMTMyNjMzNDNh
MzU2MTY2NjUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4MzIzNjMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAIAESxFr+MA0GCSqGSIb3DQEBCwUAA4IBAQCw/mure+T50k09WY5O0p64
ahvHj1/3+e9/CZYMpC/spZubhkfH1WKs8jpU5ImnnDwxnU892VsJGtT6b878SKF1
J95CmQiq21OaoRkPBTs8VgGJjzB5CwETEjf2VHjanYPW+NP342zRijcK8YUKK9Zj
CW6nHHFI9HFqO0A2jhBw66YX2jetIs71Vl2nnUjW5B6fDowe14jmRgK21wfe86mW
oonDwHPpUYk5PjenOTyTtnIk74st0/PS+TDJmSxmUUNLZJ5gqhzDEwab+KJWqsiX
BNT9wgE01VqGpWKVbHt104mVyk6xEm146q6Hh2rsmdNmQb3DaR46CSTUeG+WTdAj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org