Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3336203d3e20323637323736.roa
File:                     323830343a346166633a3a2f33322d3336203d3e20323637323736.roa (raw, json)
Hash identifier:          bGIYLSul1RnfbF8msReIv1hB3efGPVE/n0+PUX589mU=
Subject key identifier:   56:D5:43:F0:96:56:B2:E8:EF:3E:BF:A0:5A:70:36:63:22:8A:F9:FD
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       04B7008961B765D4AAA257369DAEFC9845838343
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3336203d3e20323637323736.roa
Signing time:             Wed 05 Oct 2022 21:00:00 +0000
ROA not before:           Wed 05 Oct 2022 20:55:00 +0000
ROA not after:            Wed 04 Oct 2023 21:00:00 +0000
asID:                     267276
IP address blocks:        2804:4afc::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:00:89:61:b7:65:d4:aa:a2:57:36:9d:ae:fc:98:45:83:83:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Oct  5 20:55:00 2022 GMT
            Not After : Oct  4 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:02:9a:65:49:0c:66:21:87:00:32:1e:3f:
                    c8:8f:ee:fc:dc:a8:4a:89:35:2a:94:a5:e0:1d:ae:
                    47:32:65:15:52:be:40:77:df:ab:e9:ea:fc:bb:16:
                    7b:bb:3f:78:13:ef:b8:3c:aa:93:b9:2e:55:4f:31:
                    40:a6:84:f8:d1:2a:f1:1a:84:94:71:b5:a2:c1:a0:
                    10:6f:c5:6b:55:55:ed:42:c7:21:43:17:23:4c:d1:
                    b3:69:8d:76:e8:04:d4:34:b6:43:4c:ca:a5:ef:13:
                    18:d8:bb:db:1b:ba:30:94:3c:cc:c4:37:20:ec:27:
                    71:b5:51:74:78:30:86:d0:ec:e9:f0:6e:0e:1b:29:
                    e3:a5:5f:9d:fa:9b:e9:db:b6:29:a8:6b:09:54:57:
                    3c:f6:80:07:e1:ff:6f:43:4d:3a:7f:39:7b:0c:da:
                    af:1e:01:64:f2:e3:7c:04:a1:35:c0:dd:c6:cc:a9:
                    ea:89:7a:0d:f8:27:c0:15:f7:a8:cf:41:02:50:01:
                    51:2b:01:63:c0:c0:e4:47:2e:b6:cf:bb:b8:c0:43:
                    2c:88:1b:68:d9:8b:71:88:70:a2:8d:45:dc:df:2b:
                    60:60:79:70:c2:00:74:00:b6:d2:da:58:e6:70:ff:
                    bd:97:39:f4:a2:3b:a6:dd:b8:f4:f2:47:ce:ad:8a:
                    89:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D5:43:F0:96:56:B2:E8:EF:3E:BF:A0:5A:70:36:63:22:8A:F9:FD
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3336203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:1b:bb:78:4c:ac:04:7d:1f:c5:e1:8b:ac:f4:fa:66:eb:fa:
         39:10:04:18:31:1d:ea:19:10:62:c2:17:28:c1:15:43:bf:7b:
         68:da:46:4a:9e:7b:49:91:f4:10:3e:15:cf:4f:42:a6:52:cb:
         4f:79:59:64:ce:f3:ee:a5:de:08:24:9f:e6:23:52:f7:f3:ab:
         bf:3e:48:ac:09:05:bd:ba:b8:d0:96:0b:a2:0c:c8:4c:aa:e5:
         1d:ab:cf:cd:55:ac:ba:cd:d6:6a:f0:e6:6c:00:b0:a3:8d:a1:
         fc:1a:17:8f:e5:18:76:ce:75:d0:d6:35:21:5f:c8:d8:7a:92:
         f1:a5:a7:7b:24:35:be:75:13:59:a8:c4:6c:06:55:8e:9e:3f:
         0a:94:45:fa:a6:c0:28:0f:c7:24:36:3c:27:fd:9e:81:54:a7:
         e6:be:71:a1:fd:db:77:d7:ac:af:37:62:ab:07:bc:a5:d5:15:
         e4:ab:71:b3:fb:11:25:57:4b:d0:47:04:51:bb:38:50:19:e7:
         2e:01:8e:0d:5b:bf:66:c0:f3:5c:9f:e2:9e:0e:7f:a3:65:ac:
         0e:11:99:e6:9f:b6:5a:3c:22:9a:76:e0:a5:da:5c:13:8c:f5:
         09:de:51:64:cb:69:f1:91:fd:31:f4:b9:bb:cd:75:48:78:36:
         dc:b8:63:cd
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUBLcAiWG3ZdSqolc2na78mEWDg0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY2N0U1REM3NEU3NkQyQzZDNUUxQTAyRTkxQTQ5QzMx
NDlGNzYzNzAeFw0yMjEwMDUyMDU1MDBaFw0yMzEwMDQyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0ExODAyOUE2NTQ5MEM2NjIx
ODcwMDMyMUUzRkM4OEZFRUZDRENBODRBODkzNTJBOTRBNUUwMURBRTQ3MzI2NTE1
NTJCRTQwNzdERkFCRTlFQUZDQkIxNjdCQkIzRjc4MTNFRkI4M0NBQTkzQjkyRTU1
NEYzMTQwQTY4NEY4RDEyQUYxMUE4NDk0NzFCNUEyQzFBMDEwNkZDNTZCNTU1NUVE
NDJDNzIxNDMxNzIzNENEMUIzNjk4RDc2RTgwNEQ0MzRCNjQzNENDQUE1RUYxMzE4
RDhCQkRCMUJCQTMwOTQzQ0NDQzQzNzIwRUMyNzcxQjU1MTc0NzgzMDg2RDBFQ0U5
RjA2RTBFMUIyOUUzQTU1RjlERkE5QkU5REJCNjI5QTg2QjA5NTQ1NzNDRjY4MDA3
RTFGRjZGNDM0RDNBN0YzOTdCMENEQUFGMUUwMTY0RjJFMzdDMDRBMTM1QzBEREM2
Q0NBOUVBODk3QTBERjgyN0MwMTVGN0E4Q0Y0MTAyNTAwMTUxMkIwMTYzQzBDMEU0
NDcyRUI2Q0ZCQkI4QzA0MzJDODgxQjY4RDk4QjcxODg3MEEyOEQ0NURDREYyQjYw
NjA3OTcwQzIwMDc0MDBCNkQyREE1OEU2NzBGRkJEOTczOUY0QTIzQkE2RERCOEY0
RjI0N0NFQUQ4QTg5Q0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyhgCmmVJDGYhhwAyHj/Ij+783KhKiTUqlKXgHa5HMmUVUr5Ad9+r
6er8uxZ7uz94E++4PKqTuS5VTzFApoT40SrxGoSUcbWiwaAQb8VrVVXtQschQxcj
TNGzaY126ATUNLZDTMql7xMY2LvbG7owlDzMxDcg7CdxtVF0eDCG0Ozp8G4OGynj
pV+d+pvp27YpqGsJVFc89oAH4f9vQ006fzl7DNqvHgFk8uN8BKE1wN3GzKnqiXoN
+CfAFfeoz0ECUAFRKwFjwMDkRy62z7u4wEMsiBto2YtxiHCijUXc3ytgYHlwwgB0
ALbS2ljmcP+9lzn0ojum3bj08kfOrYqJywIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FFbVQ/CWVrLo7z6/oFpwNmMiivn9MB8GA1UdIwQYMBaAFL9n5dx0520sbF4aAuka
ScMUn3Y3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuaDlhZDJjNnZTamFQ
NWpUd1RIUXpDRXZLdm9XY3gxSnozaWtIU1NnYXlGLzAvQkY2N0U1REM3NEU3NkQy
QzZDNUUxQTAyRTkxQTQ5QzMxNDlGNzYzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CRjY3RTVEQzc0RTc2RDJDNkM1RTFBMDJFOTFBNDlDMzE0OUY3
NjM3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybmg5YWQyYzZ2U2phUDVqVHdU
SFF6Q0V2S3ZvV2N4MUp6M2lrSFNTZ2F5Ri8wLzMyMzgzMDM0M2EzNDYxNjY2MzNh
M2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzNzMyMzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
SvwwDQYJKoZIhvcNAQELBQADggEBAIQbu3hMrAR9H8Xhi6z0+mbr+jkQBBgxHeoZ
EGLCFyjBFUO/e2jaRkqee0mR9BA+Fc9PQqZSy095WWTO8+6l3ggkn+YjUvfzq78+
SKwJBb26uNCWC6IMyEyq5R2rz81VrLrN1mrw5mwAsKONofwaF4/lGHbOddDWNSFf
yNh6kvGlp3skNb51E1moxGwGVY6ePwqURfqmwCgPxyQ2PCf9noFUp+a+caH923fX
rK83YqsHvKXVFeSrcbP7ESVXS9BHBFG7OFAZ5y4Bjg1bv2bA81yf4p4Of6NlrA4R
meaftlo8Ipp24KXaXBOM9QneUWTLafGR/TH0ubvNdUh4Nty4Y80=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org