Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a663030303a3a2f34342d3434203d3e20323637323736.roa
File:                     323830343a346166633a663030303a3a2f34342d3434203d3e20323637323736.roa (raw, json)
Hash identifier:          cs32w1Kcc7NAbw80ysQqgOyQDUpu2V4jHKhHq8dQ9BI=
Subject key identifier:   E8:13:E4:78:DD:A2:90:20:9C:59:00:E7:2B:2F:97:70:DA:9C:16:EE
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       28E13CBB9343FADF3570DAFA554D13936CEDB931
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a663030303a3a2f34342d3434203d3e20323637323736.roa
Signing time:             Wed 05 Oct 2022 21:00:00 +0000
ROA not before:           Wed 05 Oct 2022 20:55:00 +0000
ROA not after:            Wed 04 Oct 2023 21:00:00 +0000
asID:                     267276
IP address blocks:        2804:4afc:f000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e1:3c:bb:93:43:fa:df:35:70:da:fa:55:4d:13:93:6c:ed:b9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Oct  5 20:55:00 2022 GMT
            Not After : Oct  4 21:00:00 2023 GMT
        Subject: CN=3082010A0282010100E11DFC376CDA47DDE8725DE11F17562D62DEAAE7652E50D9F6454B84F14FF87F0A5C4B06055BDF25E399EADEF57B39B4F8514579FE87A2AD032FB983E92AD5B71543AC533BFECFAF4C294E7EE24D0E2CBDFBF92FBF08FF2A3689BEE9652A8BAAE0661795EDA87564A318C44070CD88A19FFDEC7A2879E873A9F66C491A3FE6B792BB9896EC5908EEA4A2E1D4740849EB04F1D6E622BC6A318D930B4ED13F23C5DB8B51323FA14B6BFCDB3D26B52B743755468DE0321F8792B8790B66532D8981F0F401BEDC1BA850F6B50CFEA039D9CC8DC099248704D4C125CA2A3BCC208AECE07802B06C5E108E4EF039642D478C9DB75121D670F31938A8355A81F4D14B9F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1d:fc:37:6c:da:47:dd:e8:72:5d:e1:1f:17:
                    56:2d:62:de:aa:e7:65:2e:50:d9:f6:45:4b:84:f1:
                    4f:f8:7f:0a:5c:4b:06:05:5b:df:25:e3:99:ea:de:
                    f5:7b:39:b4:f8:51:45:79:fe:87:a2:ad:03:2f:b9:
                    83:e9:2a:d5:b7:15:43:ac:53:3b:fe:cf:af:4c:29:
                    4e:7e:e2:4d:0e:2c:bd:fb:f9:2f:bf:08:ff:2a:36:
                    89:be:e9:65:2a:8b:aa:e0:66:17:95:ed:a8:75:64:
                    a3:18:c4:40:70:cd:88:a1:9f:fd:ec:7a:28:79:e8:
                    73:a9:f6:6c:49:1a:3f:e6:b7:92:bb:98:96:ec:59:
                    08:ee:a4:a2:e1:d4:74:08:49:eb:04:f1:d6:e6:22:
                    bc:6a:31:8d:93:0b:4e:d1:3f:23:c5:db:8b:51:32:
                    3f:a1:4b:6b:fc:db:3d:26:b5:2b:74:37:55:46:8d:
                    e0:32:1f:87:92:b8:79:0b:66:53:2d:89:81:f0:f4:
                    01:be:dc:1b:a8:50:f6:b5:0c:fe:a0:39:d9:cc:8d:
                    c0:99:24:87:04:d4:c1:25:ca:2a:3b:cc:20:8a:ec:
                    e0:78:02:b0:6c:5e:10:8e:4e:f0:39:64:2d:47:8c:
                    9d:b7:51:21:d6:70:f3:19:38:a8:35:5a:81:f4:d1:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:13:E4:78:DD:A2:90:20:9C:59:00:E7:2B:2F:97:70:DA:9C:16:EE
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a663030303a3a2f34342d3434203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:2a:8c:0f:d5:7f:f1:93:4f:d4:c6:f9:e6:e2:92:83:b2:b2:
         aa:fb:15:c4:6b:fc:4f:0f:01:ed:7c:48:9b:5d:42:e7:3a:fc:
         0a:6c:b7:ef:73:dc:5e:10:99:d5:74:d3:dd:d0:51:84:13:43:
         e1:e5:95:1a:aa:3c:67:0c:9d:e4:d6:a0:97:ad:e8:51:84:a6:
         32:11:b7:0d:fd:d3:33:3f:7a:7d:bb:28:3f:ba:bb:0e:6e:3c:
         5c:f0:37:51:08:25:43:71:db:d5:6e:fe:07:27:6d:5b:14:da:
         d1:cd:a6:95:5f:e4:70:9a:72:31:cb:28:4b:de:b1:92:2f:c4:
         81:2b:42:8f:b3:27:6c:e2:95:9e:b7:32:7c:c3:8e:21:2a:0f:
         7d:e6:49:7f:bf:f4:81:00:39:3c:4e:03:de:51:ff:fc:f0:c0:
         36:85:69:23:67:35:73:36:31:06:0f:2e:66:a9:87:b9:08:77:
         e4:c4:dd:93:ba:c5:e1:14:3e:8a:d7:eb:11:7a:52:f0:a1:2e:
         de:76:b5:42:13:37:bc:d3:c4:24:e4:17:49:c0:9f:33:d9:03:
         84:73:0f:7a:3e:f8:67:4b:25:fe:23:8a:81:50:91:94:db:62:
         25:c4:5e:55:66:63:77:10:73:73:da:82:3e:8a:89:2c:e0:89:
         a3:ef:15:c4
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUKOE8u5ND+t81cNr6VU0Tk2ztuTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY2N0U1REM3NEU3NkQyQzZDNUUxQTAyRTkxQTQ5QzMx
NDlGNzYzNzAeFw0yMjEwMDUyMDU1MDBaFw0yMzEwMDQyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTExREZDMzc2Q0RBNDdEREU4
NzI1REUxMUYxNzU2MkQ2MkRFQUFFNzY1MkU1MEQ5RjY0NTRCODRGMTRGRjg3RjBB
NUM0QjA2MDU1QkRGMjVFMzk5RUFERUY1N0IzOUI0Rjg1MTQ1NzlGRTg3QTJBRDAz
MkZCOTgzRTkyQUQ1QjcxNTQzQUM1MzNCRkVDRkFGNEMyOTRFN0VFMjREMEUyQ0JE
RkJGOTJGQkYwOEZGMkEzNjg5QkVFOTY1MkE4QkFBRTA2NjE3OTVFREE4NzU2NEEz
MThDNDQwNzBDRDg4QTE5RkZERUM3QTI4NzlFODczQTlGNjZDNDkxQTNGRTZCNzky
QkI5ODk2RUM1OTA4RUVBNEEyRTFENDc0MDg0OUVCMDRGMUQ2RTYyMkJDNkEzMThE
OTMwQjRFRDEzRjIzQzVEQjhCNTEzMjNGQTE0QjZCRkNEQjNEMjZCNTJCNzQzNzU1
NDY4REUwMzIxRjg3OTJCODc5MEI2NjUzMkQ4OTgxRjBGNDAxQkVEQzFCQTg1MEY2
QjUwQ0ZFQTAzOUQ5Q0M4REMwOTkyNDg3MDRENEMxMjVDQTJBM0JDQzIwOEFFQ0Uw
NzgwMkIwNkM1RTEwOEU0RUYwMzk2NDJENDc4QzlEQjc1MTIxRDY3MEYzMTkzOEE4
MzU1QTgxRjREMTRCOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4R38N2zaR93ocl3hHxdWLWLequdlLlDZ9kVLhPFP+H8KXEsGBVvf
JeOZ6t71ezm0+FFFef6Hoq0DL7mD6SrVtxVDrFM7/s+vTClOfuJNDiy9+/kvvwj/
KjaJvullKouq4GYXle2odWSjGMRAcM2IoZ/97HooeehzqfZsSRo/5reSu5iW7FkI
7qSi4dR0CEnrBPHW5iK8ajGNkwtO0T8jxduLUTI/oUtr/Ns9JrUrdDdVRo3gMh+H
krh5C2ZTLYmB8PQBvtwbqFD2tQz+oDnZzI3AmSSHBNTBJcoqO8wgiuzgeAKwbF4Q
jk7wOWQtR4ydt1Eh1nDzGTioNVqB9NFLnwIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FOgT5HjdopAgnFkA5ysvl3DanBbuMB8GA1UdIwQYMBaAFL9n5dx0520sbF4aAuka
ScMUn3Y3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuaDlhZDJjNnZTamFQ
NWpUd1RIUXpDRXZLdm9XY3gxSnozaWtIU1NnYXlGLzAvQkY2N0U1REM3NEU3NkQy
QzZDNUUxQTAyRTkxQTQ5QzMxNDlGNzYzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CRjY3RTVEQzc0RTc2RDJDNkM1RTFBMDJFOTFBNDlDMzE0OUY3
NjM3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybmg5YWQyYzZ2U2phUDVqVHdU
SFF6Q0V2S3ZvV2N4MUp6M2lrSFNTZ2F5Ri8wLzMyMzgzMDM0M2EzNDYxNjY2MzNh
NjYzMDMwMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjM2MzczMjM3MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQoBEr88AAwDQYJKoZIhvcNAQELBQADggEBAKAqjA/Vf/GTT9TG+ebi
koOysqr7FcRr/E8PAe18SJtdQuc6/Apst+9z3F4QmdV0093QUYQTQ+HllRqqPGcM
neTWoJet6FGEpjIRtw390zM/en27KD+6uw5uPFzwN1EIJUNx29Vu/gcnbVsU2tHN
ppVf5HCacjHLKEvesZIvxIErQo+zJ2zilZ63MnzDjiEqD33mSX+/9IEAOTxOA95R
//zwwDaFaSNnNXM2MQYPLmaph7kId+TE3ZO6xeEUPorX6xF6UvChLt52tUITN7zT
xCTkF0nAnzPZA4RzD3o++GdLJf4jioFQkZTbYiXEXlVmY3cQc3Pagj6KiSzgiaPv
FcQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org