Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33332d3333203d3e20323637323736.roa
File:                     323830343a346166633a383030303a3a2f33332d3333203d3e20323637323736.roa (raw, json)
Hash identifier:          qJT8jC1fqPwRUHJtgICQg8Nn6Yx3qDcjmtj41ylECIQ=
Subject key identifier:   7C:68:1C:C8:9B:A1:50:3B:A4:BF:7F:60:3C:40:35:D5:21:A0:0E:9F
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       46A8C272F6B865E590F94E8E4053B033E2345EF8
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33332d3333203d3e20323637323736.roa
Signing time:             Wed 07 Jun 2023 17:36:53 +0000
ROA not before:           Wed 07 Jun 2023 17:31:53 +0000
ROA not after:            Wed 05 Jun 2024 17:36:53 +0000
asID:                     267276
IP address blocks:        2804:4afc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a8:c2:72:f6:b8:65:e5:90:f9:4e:8e:40:53:b0:33:e2:34:5e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun  7 17:31:53 2023 GMT
            Not After : Jun  5 17:36:53 2024 GMT
        Subject: CN=3082010A0282010100FB268D8FD96CFF101A296BB76A460E8615C6DF0F45DEA9E454E1DAF6D3D2BCB5EF7A4FF43A43A9C312E941B5023AA5BC7AEEA3E306AA69D199486A47A229780EBD4456E02949FF12A9D649E345BE13D2E1D8B24ABE005FE3A6F57663BF6C581E51B8EEC0784A58196ECFD1197572C6278339C41F673935C0C73F0A6371E65746DD767CF8171FF79ACCC0E19871C3AB05388C5F885534F731C0F0CE14BA0ECFD6EE574D7A75EEBD63CBF377B486B17F2BEA6F5203834C58DC1AFD960055CC346F36201F4FC9E1F542C375ABB004911B8B1E997A72931CFE376032F16C629A5FFCAA3B06D5EF4A79D3CBB9A017ABA72C3A4D56C31047080329BF4CDCB05381E4410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:26:8d:8f:d9:6c:ff:10:1a:29:6b:b7:6a:46:
                    0e:86:15:c6:df:0f:45:de:a9:e4:54:e1:da:f6:d3:
                    d2:bc:b5:ef:7a:4f:f4:3a:43:a9:c3:12:e9:41:b5:
                    02:3a:a5:bc:7a:ee:a3:e3:06:aa:69:d1:99:48:6a:
                    47:a2:29:78:0e:bd:44:56:e0:29:49:ff:12:a9:d6:
                    49:e3:45:be:13:d2:e1:d8:b2:4a:be:00:5f:e3:a6:
                    f5:76:63:bf:6c:58:1e:51:b8:ee:c0:78:4a:58:19:
                    6e:cf:d1:19:75:72:c6:27:83:39:c4:1f:67:39:35:
                    c0:c7:3f:0a:63:71:e6:57:46:dd:76:7c:f8:17:1f:
                    f7:9a:cc:c0:e1:98:71:c3:ab:05:38:8c:5f:88:55:
                    34:f7:31:c0:f0:ce:14:ba:0e:cf:d6:ee:57:4d:7a:
                    75:ee:bd:63:cb:f3:77:b4:86:b1:7f:2b:ea:6f:52:
                    03:83:4c:58:dc:1a:fd:96:00:55:cc:34:6f:36:20:
                    1f:4f:c9:e1:f5:42:c3:75:ab:b0:04:91:1b:8b:1e:
                    99:7a:72:93:1c:fe:37:60:32:f1:6c:62:9a:5f:fc:
                    aa:3b:06:d5:ef:4a:79:d3:cb:b9:a0:17:ab:a7:2c:
                    3a:4d:56:c3:10:47:08:03:29:bf:4c:dc:b0:53:81:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:68:1C:C8:9B:A1:50:3B:A4:BF:7F:60:3C:40:35:D5:21:A0:0E:9F
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a383030303a3a2f33332d3333203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:f0:9f:69:51:b4:e6:50:80:cf:20:34:eb:aa:a0:0c:c1:7e:
         ae:0f:5f:a4:f8:94:f2:36:9a:eb:7d:7c:48:96:f7:e9:c1:86:
         b7:c8:62:73:19:4e:57:4f:a5:d3:8f:3b:bb:de:a6:58:4d:7c:
         85:8e:d4:ff:c1:c4:ed:12:80:5f:db:19:9b:f7:d0:8f:b0:5b:
         24:5f:fd:51:1d:4d:05:e1:fa:14:6f:ec:7d:4e:04:1f:51:b0:
         b1:91:53:ec:03:04:41:6c:65:9b:32:24:ee:6b:ee:31:ec:34:
         fa:f8:b9:c8:44:39:a6:b0:4b:0d:aa:d0:48:91:82:e8:1b:86:
         eb:bb:db:0d:e5:c7:26:76:ef:4e:2f:96:a9:10:f9:55:39:36:
         b8:3a:04:0e:42:65:da:d5:dd:3a:02:6d:e3:1e:65:2b:d2:9b:
         19:7d:8b:c1:76:85:d2:ee:58:cb:f3:33:3d:c8:4d:60:08:55:
         6d:7f:72:ef:14:a7:90:42:f7:ab:1e:aa:c0:9e:0d:16:36:4b:
         56:ce:b1:85:43:da:c1:f8:bf:8d:55:17:49:56:3d:17:96:69:
         b9:79:c1:05:25:84:a1:93:71:c6:b6:95:91:e0:1e:3d:bc:cf:
         e6:7b:b9:7d:77:8d:72:98:83:82:42:b7:4e:95:6e:77:71:d0:
         df:d4:ce:75
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIURqjCcva4ZeWQ+U6OQFOwM+I0XvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY2N0U1REM3NEU3NkQyQzZDNUUxQTAyRTkxQTQ5QzMx
NDlGNzYzNzAeFw0yMzA2MDcxNzMxNTNaFw0yNDA2MDUxNzM2NTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkIyNjhEOEZEOTZDRkYxMDFB
Mjk2QkI3NkE0NjBFODYxNUM2REYwRjQ1REVBOUU0NTRFMURBRjZEM0QyQkNCNUVG
N0E0RkY0M0E0M0E5QzMxMkU5NDFCNTAyM0FBNUJDN0FFRUEzRTMwNkFBNjlEMTk5
NDg2QTQ3QTIyOTc4MEVCRDQ0NTZFMDI5NDlGRjEyQTlENjQ5RTM0NUJFMTNEMkUx
RDhCMjRBQkUwMDVGRTNBNkY1NzY2M0JGNkM1ODFFNTFCOEVFQzA3ODRBNTgxOTZF
Q0ZEMTE5NzU3MkM2Mjc4MzM5QzQxRjY3MzkzNUMwQzczRjBBNjM3MUU2NTc0NkRE
NzY3Q0Y4MTcxRkY3OUFDQ0MwRTE5ODcxQzNBQjA1Mzg4QzVGODg1NTM0RjczMUMw
RjBDRTE0QkEwRUNGRDZFRTU3NEQ3QTc1RUVCRDYzQ0JGMzc3QjQ4NkIxN0YyQkVB
NkY1MjAzODM0QzU4REMxQUZEOTYwMDU1Q0MzNDZGMzYyMDFGNEZDOUUxRjU0MkMz
NzVBQkIwMDQ5MTFCOEIxRTk5N0E3MjkzMUNGRTM3NjAzMkYxNkM2MjlBNUZGQ0FB
M0IwNkQ1RUY0QTc5RDNDQkI5QTAxN0FCQTcyQzNBNEQ1NkMzMTA0NzA4MDMyOUJG
NENEQ0IwNTM4MUU0NDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA+yaNj9ls/xAaKWu3akYOhhXG3w9F3qnkVOHa9tPSvLXvek/0OkOp
wxLpQbUCOqW8eu6j4waqadGZSGpHoil4Dr1EVuApSf8SqdZJ40W+E9Lh2LJKvgBf
46b1dmO/bFgeUbjuwHhKWBluz9EZdXLGJ4M5xB9nOTXAxz8KY3HmV0bddnz4Fx/3
mszA4Zhxw6sFOIxfiFU09zHA8M4Uug7P1u5XTXp17r1jy/N3tIaxfyvqb1IDg0xY
3Br9lgBVzDRvNiAfT8nh9ULDdauwBJEbix6ZenKTHP43YDLxbGKaX/yqOwbV70p5
08u5oBerpyw6TVbDEEcIAym/TNywU4HkQQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FHxoHMiboVA7pL9/YDxANdUhoA6fMB8GA1UdIwQYMBaAFL9n5dx0520sbF4aAuka
ScMUn3Y3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuaDlhZDJjNnZTamFQ
NWpUd1RIUXpDRXZLdm9XY3gxSnozaWtIU1NnYXlGLzAvQkY2N0U1REM3NEU3NkQy
QzZDNUUxQTAyRTkxQTQ5QzMxNDlGNzYzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CRjY3RTVEQzc0RTc2RDJDNkM1RTFBMDJFOTFBNDlDMzE0OUY3
NjM3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybmg5YWQyYzZ2U2phUDVqVHdU
SFF6Q0V2S3ZvV2N4MUp6M2lrSFNTZ2F5Ri8wLzMyMzgzMDM0M2EzNDYxNjY2MzNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM2MzczMjM3MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBEr8gDANBgkqhkiG9w0BAQsFAAOCAQEAivCfaVG05lCAzyA066qg
DMF+rg9fpPiU8jaa6318SJb36cGGt8hicxlOV0+l0487u96mWE18hY7U/8HE7RKA
X9sZm/fQj7BbJF/9UR1NBeH6FG/sfU4EH1GwsZFT7AMEQWxlmzIk7mvuMew0+vi5
yEQ5prBLDarQSJGC6BuG67vbDeXHJnbvTi+WqRD5VTk2uDoEDkJl2tXdOgJt4x5l
K9KbGX2LwXaF0u5Yy/MzPchNYAhVbX9y7xSnkEL3qx6qwJ4NFjZLVs6xhUPawfi/
jVUXSVY9F5ZpuXnBBSWEoZNxxraVkeAePbzP5nu5fXeNcpiDgkK3TpVud3HQ39TO
dQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org