Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313032303a3a2f34362d3436203d3e203533303539.roa
File:                     323830343a323134303a313032303a3a2f34362d3436203d3e203533303539.roa (raw, json)
Hash identifier:          23DlXONRwIShJVtp+j+7qZCdBJ9jawR3PCjpwJaUOTo=
Subject key identifier:   9F:94:2A:58:F3:0A:37:45:4F:85:27:42:00:B2:B5:99:4C:9B:D5:D9
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       51B586D849DD0DDE249CBD484117136728A82490
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313032303a3a2f34362d3436203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:17:49 +0000
ROA not before:           Fri 03 Mar 2023 12:12:49 +0000
ROA not after:            Fri 01 Mar 2024 12:17:49 +0000
asID:                     53059
IP address blocks:        2804:2140:1020::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b5:86:d8:49:dd:0d:de:24:9c:bd:48:41:17:13:67:28:a8:24:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:12:49 2023 GMT
            Not After : Mar  1 12:17:49 2024 GMT
        Subject: CN=9F942A58F30A37454F85274200B2B5994C9BD5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b3:b5:64:68:9c:cc:3d:91:13:7a:31:86:43:
                    84:a0:db:0b:76:d3:5f:b2:2d:f4:08:7f:b4:f9:f1:
                    33:45:64:ce:79:ea:75:17:9f:00:58:03:a8:83:2e:
                    c0:27:e8:14:cc:0b:6f:5a:8f:2c:35:a7:dc:9a:42:
                    df:30:8f:ed:33:91:6c:40:a2:f7:53:4c:70:04:e9:
                    ba:d0:ec:81:bb:18:92:c0:09:5c:99:63:8e:cc:db:
                    a1:c2:67:0c:64:ab:a8:ac:00:17:16:c7:78:f8:12:
                    5f:b0:45:ab:3c:7c:f7:26:e0:f1:94:ee:19:bf:30:
                    f3:9e:b7:87:97:e9:c2:ca:75:61:97:05:c6:07:50:
                    a5:3e:ed:bc:d6:db:39:ee:c7:39:40:04:91:ef:98:
                    82:8a:2e:54:ff:be:5c:ee:fe:72:38:35:b3:6e:5c:
                    6b:04:f2:ed:63:46:53:35:a1:b3:d4:3b:0c:64:3d:
                    7b:28:82:84:40:63:5d:cf:11:10:86:e7:a7:cf:bb:
                    38:65:62:19:69:03:d4:0e:05:d9:4e:c3:c8:35:26:
                    85:ff:6d:6d:dd:67:c6:90:48:e0:10:5e:54:45:6c:
                    2d:55:f4:97:a8:74:8e:4f:1a:58:b4:78:a7:30:c8:
                    3a:6a:e5:d0:d5:f5:12:53:00:9b:73:36:a8:a7:da:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:94:2A:58:F3:0A:37:45:4F:85:27:42:00:B2:B5:99:4C:9B:D5:D9
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313032303a3a2f34362d3436203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2140:1020::/46

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:30:4c:18:e2:9f:c3:85:92:a2:83:5f:05:2f:bc:52:ac:
         b1:52:e1:34:07:f2:8e:fd:12:a6:d4:48:bd:55:e4:8a:83:ac:
         ce:45:21:98:d1:62:c2:39:fa:f3:42:56:87:23:a8:0b:6d:ae:
         ea:28:a0:64:70:e0:c0:a5:c3:e6:0d:0a:65:5f:76:c7:bc:be:
         26:a9:16:78:3a:d4:b3:f3:2d:b0:ce:7c:49:62:6d:f0:e0:db:
         9c:bf:d1:ba:f2:37:22:ed:12:02:a6:9a:fc:5f:30:0f:35:00:
         1c:73:28:f2:35:b1:61:21:23:20:43:b2:be:f6:88:a0:b2:53:
         3a:fc:dc:d9:78:62:8d:8d:b5:c7:9d:23:6e:b9:1b:4f:2b:3d:
         62:62:fc:10:1f:a1:b4:36:03:ba:61:04:bc:36:ea:11:b5:d7:
         d1:f3:48:d4:cb:e0:92:ef:85:bc:05:a3:91:de:a1:a2:78:b5:
         09:bc:9b:9b:70:98:b4:5b:e6:50:71:2c:30:0f:e7:00:f2:8b:
         c5:41:5a:30:54:a1:bd:8d:10:12:c5:ea:c7:0c:9d:0e:4e:0b:
         26:c3:97:cd:17:27:d4:75:4b:41:3d:dc:ca:e1:09:4f:ea:a9:
         c0:9b:86:95:a7:66:ae:7a:f9:d9:48:70:72:e1:3f:a4:e3:16:
         20:e8:46:e1
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUUbWG2EndDd4knL1IQRcTZyioJJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDMxMjEyNDlaFw0yNDAzMDExMjE3NDlaMDMxMTAvBgNV
BAMTKDlGOTQyQTU4RjMwQTM3NDU0Rjg1Mjc0MjAwQjJCNTk5NEM5QkQ1RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4s7VkaJzMPZETejGGQ4Sg2wt2
01+yLfQIf7T58TNFZM556nUXnwBYA6iDLsAn6BTMC29ajyw1p9yaQt8wj+0zkWxA
ovdTTHAE6brQ7IG7GJLACVyZY47M26HCZwxkq6isABcWx3j4El+wRas8fPcm4PGU
7hm/MPOet4eX6cLKdWGXBcYHUKU+7bzW2znuxzlABJHvmIKKLlT/vlzu/nI4NbNu
XGsE8u1jRlM1obPUOwxkPXsogoRAY13PERCG56fPuzhlYhlpA9QOBdlOw8g1JoX/
bW3dZ8aQSOAQXlRFbC1V9JeodI5PGli0eKcwyDpq5dDV9RJTAJtzNqin2hkDAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUn5QqWPMKN0VPhSdCALK1mUyb1dkwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzIzODMwMzQzYTMyMzEzNDMwM2EzMTMwMzIzMDNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDM1MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIoBCFAECAwDQYJKoZIhvcNAQELBQAD
ggEBAFedMEwY4p/DhZKig18FL7xSrLFS4TQH8o79EqbUSL1V5IqDrM5FIZjRYsI5
+vNCVocjqAttruoooGRw4MClw+YNCmVfdse8viapFng61LPzLbDOfElibfDg25y/
0bryNyLtEgKmmvxfMA81ABxzKPI1sWEhIyBDsr72iKCyUzr83Nl4Yo2NtcedI265
G08rPWJi/BAfobQ2A7phBLw26hG119HzSNTL4JLvhbwFo5HeoaJ4tQm8m5twmLRb
5lBxLDAP5wDyi8VBWjBUob2NEBLF6scMnQ5OCybDl80XJ9R1S0E93MrhCU/qqcCb
hpWnZq56+dlIcHLhP6TjFiDoRuE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org