Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a3a2f33322d3332203d3e203238323632.roa
File:                     323030313a313263343a3a2f33322d3332203d3e203238323632.roa (raw, json)
Hash identifier:          wqQsKlOH7ZtZf0W/4R625lG51mVfDbTmWJ0YL0b5Hok=
Subject key identifier:   D0:11:F8:F1:76:2B:87:53:9D:23:FA:6C:52:89:89:44:3B:7C:A7:F3
Certificate issuer:       /CN=A1C9646671EAA2886E18B798876F4FDB5FBB0DD0
Certificate serial:       48431E1A7F12A18CC3EC9AC6C76147DB24E9C4B8
Authority key identifier: A1:C9:64:66:71:EA:A2:88:6E:18:B7:98:87:6F:4F:DB:5F:BB:0D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a3a2f33322d3332203d3e203238323632.roa
Signing time:             Fri 16 Dec 2022 22:18:36 +0000
ROA not before:           Fri 16 Dec 2022 22:13:36 +0000
ROA not after:            Fri 15 Dec 2023 22:18:36 +0000
asID:                     28262
IP address blocks:        2001:12c4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:43:1e:1a:7f:12:a1:8c:c3:ec:9a:c6:c7:61:47:db:24:e9:c4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C9646671EAA2886E18B798876F4FDB5FBB0DD0
        Validity
            Not Before: Dec 16 22:13:36 2022 GMT
            Not After : Dec 15 22:18:36 2023 GMT
        Subject: CN=3082010A0282010100AD648939333B0983C2185E13DD8F43243C88EB14E291EE2C46FEC60E8996E5A2DB78895A681698AE7337F07F533E7004B221DB3ACE523F6E638A3913F65DE454C3E548FA24B934A0D0591EBAB479D80261B9425E76AAC294359BD3ED59D49F1670AB838B17282F63C0D709F20CAC03696E9568643A33650B430AAF647C00FDECE3F35B7214ED75D6C2876800D83BEE23257AE72FE26C5C84396433E48600026AE2B4FD8BA25F2B7FD7333819BAD4B87E519234C3A9AD2292AC6AA7DD1961850A60F0F785A1FBDDA2DD02E84B670D41D8786B3986DC723E2DD36417EE2D11293ADAC3A13655B7DDBFBBE0DDA4D1A1C32282A518CE12552F396CC9FE2623772F450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:89:39:33:3b:09:83:c2:18:5e:13:dd:8f:
                    43:24:3c:88:eb:14:e2:91:ee:2c:46:fe:c6:0e:89:
                    96:e5:a2:db:78:89:5a:68:16:98:ae:73:37:f0:7f:
                    53:3e:70:04:b2:21:db:3a:ce:52:3f:6e:63:8a:39:
                    13:f6:5d:e4:54:c3:e5:48:fa:24:b9:34:a0:d0:59:
                    1e:ba:b4:79:d8:02:61:b9:42:5e:76:aa:c2:94:35:
                    9b:d3:ed:59:d4:9f:16:70:ab:83:8b:17:28:2f:63:
                    c0:d7:09:f2:0c:ac:03:69:6e:95:68:64:3a:33:65:
                    0b:43:0a:af:64:7c:00:fd:ec:e3:f3:5b:72:14:ed:
                    75:d6:c2:87:68:00:d8:3b:ee:23:25:7a:e7:2f:e2:
                    6c:5c:84:39:64:33:e4:86:00:02:6a:e2:b4:fd:8b:
                    a2:5f:2b:7f:d7:33:38:19:ba:d4:b8:7e:51:92:34:
                    c3:a9:ad:22:92:ac:6a:a7:dd:19:61:85:0a:60:f0:
                    f7:85:a1:fb:dd:a2:dd:02:e8:4b:67:0d:41:d8:78:
                    6b:39:86:dc:72:3e:2d:d3:64:17:ee:2d:11:29:3a:
                    da:c3:a1:36:55:b7:dd:bf:bb:e0:dd:a4:d1:a1:c3:
                    22:82:a5:18:ce:12:55:2f:39:6c:c9:fe:26:23:77:
                    2f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:11:F8:F1:76:2B:87:53:9D:23:FA:6C:52:89:89:44:3B:7C:A7:F3
            X509v3 Authority Key Identifier:
                keyid:A1:C9:64:66:71:EA:A2:88:6E:18:B7:98:87:6F:4F:DB:5F:BB:0D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/323030313a313263343a3a2f33322d3332203d3e203238323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:69:1f:47:fa:83:ff:ac:03:a6:ec:b7:fd:88:50:c0:7b:
         93:b8:f4:87:f1:15:e5:55:f3:d1:ff:13:2b:b0:da:11:2c:10:
         57:64:84:99:a5:57:2b:b2:20:c4:cf:de:7b:42:29:5a:91:9c:
         71:04:25:ca:24:35:e3:ea:10:4c:d6:c7:77:4b:14:8a:20:bc:
         23:76:a0:c8:c2:4c:9c:0f:0c:3a:e2:7c:95:c0:c1:62:a1:15:
         41:01:fb:59:2f:69:c4:a9:2f:e7:87:69:fb:5f:46:62:cd:0c:
         58:c7:38:2f:33:29:fc:fc:7a:b5:aa:86:c8:92:70:6f:a4:4d:
         8a:bc:5d:b0:43:84:6f:4b:35:b8:f6:d2:67:92:b5:e6:a8:cb:
         6e:1b:c6:4b:e5:3c:aa:77:d9:eb:e2:33:de:a9:98:5a:ea:94:
         2d:a8:22:ea:ee:0d:b0:64:ab:9b:95:78:8b:ef:86:b5:10:ec:
         27:b0:a7:bb:36:8a:ce:82:f8:b5:bb:2a:08:9f:6e:29:6b:5b:
         42:d9:dd:59:dd:f8:2a:ba:4d:03:40:1d:fd:80:05:b0:32:ef:
         d2:f7:ea:7d:87:0f:e6:78:9b:62:29:2f:84:1b:d4:01:c8:f2:
         5d:a7:70:c6:be:5f:29:4f:09:34:6c:c1:3e:d9:25:fd:25:f7:
         6c:3e:6f:f9
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUSEMeGn8SoYzD7JrGx2FH2yTpxLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFDOTY0NjY3MUVBQTI4ODZFMThCNzk4ODc2RjRGREI1
RkJCMEREMDAeFw0yMjEyMTYyMjEzMzZaFw0yMzEyMTUyMjE4MzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ2NDg5MzkzMzNCMDk4M0My
MTg1RTEzREQ4RjQzMjQzQzg4RUIxNEUyOTFFRTJDNDZGRUM2MEU4OTk2RTVBMkRC
Nzg4OTVBNjgxNjk4QUU3MzM3RjA3RjUzM0U3MDA0QjIyMURCM0FDRTUyM0Y2RTYz
OEEzOTEzRjY1REU0NTRDM0U1NDhGQTI0QjkzNEEwRDA1OTFFQkFCNDc5RDgwMjYx
Qjk0MjVFNzZBQUMyOTQzNTlCRDNFRDU5RDQ5RjE2NzBBQjgzOEIxNzI4MkY2M0Mw
RDcwOUYyMENBQzAzNjk2RTk1Njg2NDNBMzM2NTBCNDMwQUFGNjQ3QzAwRkRFQ0Uz
RjM1QjcyMTRFRDc1RDZDMjg3NjgwMEQ4M0JFRTIzMjU3QUU3MkZFMjZDNUM4NDM5
NjQzM0U0ODYwMDAyNkFFMkI0RkQ4QkEyNUYyQjdGRDczMzM4MTlCQUQ0Qjg3RTUx
OTIzNEMzQTlBRDIyOTJBQzZBQTdERDE5NjE4NTBBNjBGMEY3ODVBMUZCRERBMkRE
MDJFODRCNjcwRDQxRDg3ODZCMzk4NkRDNzIzRTJERDM2NDE3RUUyRDExMjkzQURB
QzNBMTM2NTVCN0REQkZCQkUwRERBNEQxQTFDMzIyODJBNTE4Q0UxMjU1MkYzOTZD
QzlGRTI2MjM3NzJGNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArWSJOTM7CYPCGF4T3Y9DJDyI6xTike4sRv7GDomW5aLbeIlaaBaY
rnM38H9TPnAEsiHbOs5SP25jijkT9l3kVMPlSPokuTSg0FkeurR52AJhuUJedqrC
lDWb0+1Z1J8WcKuDixcoL2PA1wnyDKwDaW6VaGQ6M2ULQwqvZHwA/ezj81tyFO11
1sKHaADYO+4jJXrnL+JsXIQ5ZDPkhgACauK0/YuiXyt/1zM4GbrUuH5RkjTDqa0i
kqxqp90ZYYUKYPD3haH73aLdAuhLZw1B2HhrOYbccj4t02QX7i0RKTraw6E2Vbfd
v7vg3aTRocMigqUYzhJVLzlsyf4mI3cvRQIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FNAR+PF2K4dTnSP6bFKJiUQ7fKfzMB8GA1UdIwQYMBaAFKHJZGZx6qKIbhi3mIdv
T9tfuw3QMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJSdWhuVUZQTHk4SFNu
RnY5bmJHMUI3QkxBcHVLc2hydkV6amhrdGpid0VrLzAvQTFDOTY0NjY3MUVBQTI4
ODZFMThCNzk4ODc2RjRGREI1RkJCMEREMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BMUM5NjQ2NjcxRUFBMjg4NkUxOEI3OTg4NzZGNEZEQjVGQkIw
REQwLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yUnVoblVGUEx5OEhTbkZ2OW5i
RzFCN0JMQXB1S3NocnZFempoa3RqYndFay8wLzMyMzAzMDMxM2EzMTMyNjMzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMjM2MzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgARLE
MA0GCSqGSIb3DQEBCwUAA4IBAQALtmkfR/qD/6wDpuy3/YhQwHuTuPSH8RXlVfPR
/xMrsNoRLBBXZISZpVcrsiDEz957QilakZxxBCXKJDXj6hBM1sd3SxSKILwjdqDI
wkycDww64nyVwMFioRVBAftZL2nEqS/nh2n7X0ZizQxYxzgvMyn8/Hq1qobIknBv
pE2KvF2wQ4RvSzW49tJnkrXmqMtuG8ZL5Tyqd9nr4jPeqZha6pQtqCLq7g2wZKub
lXiL74a1EOwnsKe7NorOgvi1uyoIn24pa1tC2d1Z3fgquk0DQB39gAWwMu/S9+p9
hw/meJtiKS+EG9QByPJdp3DGvl8pTwk0bME+2SX9JfdsPm/5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org