Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/323830343a3964303a3a2f33322d3332203d3e20323632393935.roa
File:                     323830343a3964303a3a2f33322d3332203d3e20323632393935.roa (raw, json)
Hash identifier:          VMT4xtjRaIesqYYTx2GuAlrirFzU4b49tSXLoaWv89E=
Subject key identifier:   25:FB:F0:ED:18:F4:C1:3B:A7:6A:9C:1B:DA:84:18:E3:24:1F:59:18
Certificate issuer:       /CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
Certificate serial:       3E1FA679CA7EEAA80E12091EEA555F3CBEA5D1E1
Authority key identifier: 47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/323830343a3964303a3a2f33322d3332203d3e20323632393935.roa
Signing time:             Thu 09 Mar 2023 01:00:00 +0000
ROA not before:           Thu 09 Mar 2023 00:55:00 +0000
ROA not after:            Sat 09 Mar 2024 01:00:00 +0000
asID:                     262995
IP address blocks:        2804:9d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1f:a6:79:ca:7e:ea:a8:0e:12:09:1e:ea:55:5f:3c:be:a5:d1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
        Validity
            Not Before: Mar  9 00:55:00 2023 GMT
            Not After : Mar  9 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:6d:e5:a5:9e:31:f7:9d:aa:f0:be:c9:f4:
                    bf:49:e1:ff:a5:81:0f:7c:8e:a5:e3:1a:d5:51:17:
                    f6:b3:cf:95:5e:76:22:ea:0d:84:3e:c6:a2:24:0f:
                    79:2f:81:57:d3:d0:e9:d7:bc:93:72:5b:e4:22:f8:
                    eb:d8:6c:93:30:d5:42:43:6d:b4:5b:fe:68:14:b4:
                    e4:71:cc:5e:c6:70:0f:c4:8d:a7:9d:50:09:1a:99:
                    d9:89:0f:ce:15:1b:c0:bd:b5:2b:6a:8a:51:be:0a:
                    47:07:88:ed:16:49:18:2a:69:df:8d:fd:cb:18:d2:
                    87:08:43:5b:59:e4:04:b9:9c:5e:e6:12:9d:2d:65:
                    4a:c9:6b:ee:84:9e:48:96:d4:30:b4:b9:48:4b:82:
                    de:f3:59:aa:b4:bd:b7:01:f8:bd:4d:c6:bf:6d:bc:
                    ef:00:aa:3b:fb:17:81:dd:c8:c4:53:bb:b7:83:e1:
                    27:3c:61:bd:f7:1d:ee:42:71:d4:dd:aa:05:d6:99:
                    40:d2:85:a2:9c:42:6c:f3:5a:ba:a3:e5:cc:3d:a9:
                    3d:17:a8:40:bf:18:ec:fd:8c:c8:4d:fd:46:56:54:
                    b1:20:6e:b6:9b:99:fb:61:6b:a2:01:9b:fb:2f:e0:
                    8f:73:9e:ed:c2:37:b6:be:74:be:50:de:1c:50:6f:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FB:F0:ED:18:F4:C1:3B:A7:6A:9C:1B:DA:84:18:E3:24:1F:59:18
            X509v3 Authority Key Identifier:
                keyid:47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/323830343a3964303a3a2f33322d3332203d3e20323632393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:32:f4:8f:0e:dd:a7:d8:94:ab:2a:fc:99:4f:6a:e3:b0:bb:
         6e:fd:2d:63:cb:15:b0:a6:7b:82:92:ba:6d:cf:cc:49:e7:aa:
         c1:1e:41:1f:9c:6b:2d:a8:7b:d4:ad:6d:86:b1:a0:73:87:88:
         e7:8b:cc:34:9d:7a:02:f4:91:34:72:e0:8a:18:c7:d8:dc:aa:
         8f:ec:89:79:a3:bd:d1:38:dc:31:ec:c7:2b:b5:45:e8:ef:be:
         13:2a:62:c0:14:01:25:b8:8f:0f:ee:d5:fb:99:5a:b5:dd:a0:
         62:52:c1:78:dc:63:74:31:c3:21:97:ef:ae:f0:e4:d5:b2:06:
         50:ce:5c:3f:fd:fe:d9:00:09:b3:6d:fd:dc:29:7a:18:5f:a7:
         49:f6:bd:70:18:e3:fa:f4:c7:87:c1:a6:1c:25:54:58:60:ef:
         51:5c:bd:f9:76:03:2c:9e:d6:34:16:6e:08:fa:e8:ad:0f:03:
         01:55:06:83:a9:23:9b:6d:8b:b4:d4:5e:f9:80:8b:dc:4e:dd:
         3d:e2:e9:c3:69:2d:e1:af:73:87:53:ab:b8:39:f1:94:ea:fe:
         0f:49:3b:65:37:85:10:3e:a7:84:e4:dc:e2:b6:26:fc:7a:f8:
         d3:75:e8:b6:07:49:ed:3c:4d:27:a3:d9:55:d0:a3:28:b9:36:
         ef:bf:43:69
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUPh+mecp+6qgOEgke6lVfPL6l0eEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc1MDZDQkNEN0M5NDY4Q0ZERjVDMkJCOUIyMzk0NkYz
NDBFM0VEMzAeFw0yMzAzMDkwMDU1MDBaFw0yNDAzMDkwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA4OTZERTVBNTlFMzFGNzlE
QUFGMEJFQzlGNEJGNDlFMUZGQTU4MTBGN0M4RUE1RTMxQUQ1NTExN0Y2QjNDRjk1
NUU3NjIyRUEwRDg0M0VDNkEyMjQwRjc5MkY4MTU3RDNEMEU5RDdCQzkzNzI1QkU0
MjJGOEVCRDg2QzkzMzBENTQyNDM2REI0NUJGRTY4MTRCNEU0NzFDQzVFQzY3MDBG
QzQ4REE3OUQ1MDA5MUE5OUQ5ODkwRkNFMTUxQkMwQkRCNTJCNkE4QTUxQkUwQTQ3
MDc4OEVEMTY0OTE4MkE2OURGOERGRENCMThEMjg3MDg0MzVCNTlFNDA0Qjk5QzVF
RTYxMjlEMkQ2NTRBQzk2QkVFODQ5RTQ4OTZENDMwQjRCOTQ4NEI4MkRFRjM1OUFB
QjRCREI3MDFGOEJENERDNkJGNkRCQ0VGMDBBQTNCRkIxNzgxRERDOEM0NTNCQkI3
ODNFMTI3M0M2MUJERjcxREVFNDI3MUQ0RERBQTA1RDY5OTQwRDI4NUEyOUM0MjZD
RjM1QUJBQTNFNUNDM0RBOTNEMTdBODQwQkYxOEVDRkQ4Q0M4NERGRDQ2NTY1NEIx
MjA2RUI2OUI5OUZCNjE2QkEyMDE5QkZCMkZFMDhGNzM5RUVEQzIzN0I2QkU3NEJF
NTBERTFDNTA2Rjk3MjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsIlt5aWeMfedqvC+yfS/SeH/pYEPfI6l4xrVURf2s8+VXnYi6g2E
PsaiJA95L4FX09Dp17yTclvkIvjr2GyTMNVCQ220W/5oFLTkccxexnAPxI2nnVAJ
GpnZiQ/OFRvAvbUraopRvgpHB4jtFkkYKmnfjf3LGNKHCENbWeQEuZxe5hKdLWVK
yWvuhJ5IltQwtLlIS4Le81mqtL23Afi9Tca/bbzvAKo7+xeB3cjEU7u3g+EnPGG9
9x3uQnHU3aoF1plA0oWinEJs81q6o+XMPak9F6hAvxjs/YzITf1GVlSxIG62m5n7
YWuiAZv7L+CPc57twje2vnS+UN4cUG+XJQIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FCX78O0Y9ME7p2qcG9qEGOMkH1kYMB8GA1UdIwQYMBaAFEdQbLzXyUaM/fXCu5sj
lG80Dj7TMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJwTFc0Qk13bkhuUDli
V0VVMkc5MllveWFLQmRqVFp6RlFNNnloSFQ5bko0LzAvNDc1MDZDQkNEN0M5NDY4
Q0ZERjVDMkJCOUIyMzk0NkYzNDBFM0VEMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NzUwNkNCQ0Q3Qzk0NjhDRkRGNUMyQkI5QjIzOTQ2RjM0MEUz
RUQzLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ycExXNEJNd25IblA5YldFVTJH
OTJZb3lhS0JkalRaekZRTTZ5aEhUOW5KNC8wLzMyMzgzMDM0M2EzOTY0MzAzYTNh
MmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM2MzIzOTM5MzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBAnQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBIMvSPDt2n2JSrKvyZT2rjsLtu/S1jyxWwpnuC
krptz8xJ56rBHkEfnGstqHvUrW2GsaBzh4jni8w0nXoC9JE0cuCKGMfY3KqP7Il5
o73RONwx7McrtUXo774TKmLAFAEluI8P7tX7mVq13aBiUsF43GN0McMhl++u8OTV
sgZQzlw//f7ZAAmzbf3cKXoYX6dJ9r1wGOP69MeHwaYcJVRYYO9RXL35dgMsntY0
Fm4I+uitDwMBVQaDqSObbYu01F75gIvcTt094unDaS3hr3OHU6u4OfGU6v4PSTtl
N4UQPqeE5Nzitib8evjTdei2B0ntPE0no9lV0KMouTbvv0Np
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org