Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f3336203d3e20323636303230.roa
File:                     323830343a333933633a383030303a3a2f3336203d3e20323636303230.roa (raw, json)
Hash identifier:          4GRIbWc5qmkDibtZGky37ABnd/a2n9lKOq85eSH64kQ=
Subject key identifier:   7A:0E:D8:83:81:2C:3D:F0:28:61:DE:9B:0B:C1:E7:5F:C9:71:C9:C4
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       3BAC9C41B790C50D6D5BEF8089EC729029B316F9
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f3336203d3e20323636303230.roa
Signing time:             Sat 20 May 2023 12:00:00 +0000
ROA not before:           Sat 20 May 2023 11:55:00 +0000
ROA not after:            Mon 20 May 2024 12:00:00 +0000
asID:                     266020
IP address blocks:        2804:393c:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ac:9c:41:b7:90:c5:0d:6d:5b:ef:80:89:ec:72:90:29:b3:16:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: May 20 11:55:00 2023 GMT
            Not After : May 20 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:f2:55:71:35:29:5a:15:4b:31:79:4b:46:
                    02:76:97:fc:94:b3:09:7c:7a:11:23:4a:4c:78:6f:
                    df:3e:9f:7b:2d:8e:86:14:92:7c:66:ad:b5:20:55:
                    a7:84:f2:0f:f3:91:96:1c:35:5c:86:fe:d1:ca:59:
                    f5:d1:99:0b:0a:62:4b:d3:12:a6:cb:9e:f6:7c:69:
                    d7:19:0d:5c:f9:06:f7:63:a6:e3:71:26:e4:0b:c1:
                    ef:f4:14:67:cd:2f:0d:f2:7f:1c:00:ad:ce:1c:c4:
                    bc:b4:65:4e:dc:7a:26:48:64:19:59:cf:cb:54:6b:
                    11:1c:00:52:42:95:23:65:9e:b2:33:d6:3e:dc:0b:
                    b7:ce:f4:7b:1f:84:a6:19:a4:1d:ad:03:80:7f:da:
                    70:37:0b:91:75:52:a6:65:fa:d8:9c:fd:9c:6b:91:
                    63:29:94:d4:db:22:ce:9b:53:c3:13:b3:d2:cb:19:
                    01:3b:b0:d6:c9:f5:c9:01:e3:de:f9:91:c3:0e:e6:
                    34:0c:4a:3c:7c:55:27:fd:54:ff:09:12:18:9d:15:
                    4d:a5:2e:1e:ad:35:71:da:55:df:6d:8c:fa:7e:5d:
                    dd:02:41:20:c7:ab:d4:44:2d:6c:45:ed:19:27:1b:
                    68:e5:d6:f5:68:95:2a:2d:8d:f4:1e:34:a9:79:f7:
                    04:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:D8:83:81:2C:3D:F0:28:61:DE:9B:0B:C1:E7:5F:C9:71:C9:C4
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f3336203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         af:6b:55:86:29:a4:e0:08:05:ff:ce:ba:8e:ef:5e:6b:b7:74:
         a7:cd:31:80:47:45:b5:60:e0:fb:05:da:1b:51:cc:47:e9:57:
         e8:25:eb:59:8a:9e:50:7e:7b:58:df:91:90:bb:ad:44:dd:dd:
         b5:aa:0e:f5:46:0c:ab:4b:31:d2:1b:f6:a6:24:8c:d7:2b:d3:
         c4:49:83:ae:cb:1e:dd:9a:e8:1e:45:f3:15:20:80:52:15:2a:
         6b:69:8f:16:5c:41:4c:d8:eb:9a:5e:17:91:ae:4a:2c:6a:2f:
         41:69:17:09:fa:6c:6e:8d:62:24:6a:f0:06:1e:8f:ca:76:6b:
         08:64:cd:e0:22:8a:e4:70:b4:35:2f:ef:85:13:e4:6c:7b:de:
         18:84:0b:11:3f:ae:70:48:ad:b7:d1:e0:1d:45:d0:fd:96:20:
         a8:a5:9d:77:f4:7a:e9:d3:de:ef:44:c0:5f:8e:4b:d8:38:4c:
         0d:00:81:7e:41:fe:b8:24:c2:50:be:c7:c5:e6:2d:b4:d5:15:
         a2:54:31:91:79:70:b3:d9:80:49:39:92:a6:24:c1:40:31:e9:
         23:7d:7b:8b:33:7d:63:33:ff:4f:c2:ef:93:d7:a6:88:79:93:
         c8:87:f7:39:b8:3e:ce:63:32:dd:d2:c4:b0:3d:a7:37:a2:85:
         8d:04:46:94
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUO6ycQbeQxQ1tW++AiexykCmzFvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4MjM2NzAyNkFGMTlFNTJCQzgwQzk0MkRFRjhEQTA5
RDc2QUVGMzAeFw0yMzA1MjAxMTU1MDBaFw0yNDA1MjAxMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzVEQ0YyNTU3MTM1Mjk1QTE1
NEIzMTc5NEI0NjAyNzY5N0ZDOTRCMzA5N0M3QTExMjM0QTRDNzg2RkRGM0U5RjdC
MkQ4RTg2MTQ5MjdDNjZBREI1MjA1NUE3ODRGMjBGRjM5MTk2MUMzNTVDODZGRUQx
Q0E1OUY1RDE5OTBCMEE2MjRCRDMxMkE2Q0I5RUY2N0M2OUQ3MTkwRDVDRjkwNkY3
NjNBNkUzNzEyNkU0MEJDMUVGRjQxNDY3Q0QyRjBERjI3RjFDMDBBRENFMUNDNEJD
QjQ2NTRFREM3QTI2NDg2NDE5NTlDRkNCNTQ2QjExMUMwMDUyNDI5NTIzNjU5RUIy
MzNENjNFREMwQkI3Q0VGNDdCMUY4NEE2MTlBNDFEQUQwMzgwN0ZEQTcwMzcwQjkx
NzU1MkE2NjVGQUQ4OUNGRDlDNkI5MTYzMjk5NEQ0REIyMkNFOUI1M0MzMTNCM0Qy
Q0IxOTAxM0JCMEQ2QzlGNUM5MDFFM0RFRjk5MUMzMEVFNjM0MEM0QTNDN0M1NTI3
RkQ1NEZGMDkxMjE4OUQxNTREQTUyRTFFQUQzNTcxREE1NURGNkQ4Q0ZBN0U1RERE
MDI0MTIwQzdBQkQ0NDQyRDZDNDVFRDE5MjcxQjY4RTVENkY1Njg5NTJBMkQ4REY0
MUUzNEE5NzlGNzA0NjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxdzyVXE1KVoVSzF5S0YCdpf8lLMJfHoRI0pMeG/fPp97LY6GFJJ8
Zq21IFWnhPIP85GWHDVchv7Ryln10ZkLCmJL0xKmy572fGnXGQ1c+Qb3Y6bjcSbk
C8Hv9BRnzS8N8n8cAK3OHMS8tGVO3HomSGQZWc/LVGsRHABSQpUjZZ6yM9Y+3Au3
zvR7H4SmGaQdrQOAf9pwNwuRdVKmZfrYnP2ca5FjKZTU2yLOm1PDE7PSyxkBO7DW
yfXJAePe+ZHDDuY0DEo8fFUn/VT/CRIYnRVNpS4erTVx2lXfbYz6fl3dAkEgx6vU
RC1sRe0ZJxto5db1aJUqLY30HjSpefcEYQIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FHoO2IOBLD3wKGHemwvB51/JccnEMB8GA1UdIwQYMBaAFJuCNnAmrxnlK8gMlC3v
jaCddq7zMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNBVHlxRHVwZHFwNlc3
d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAvOUI4MjM2NzAyNkFGMTlF
NTJCQzgwQzk0MkRFRjhEQTA5RDc2QUVGMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85QjgyMzY3MDI2QUYxOUU1MkJDODBDOTQyREVGOERBMDlENzZB
RUYzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zQVR5cUR1cGRxcDZXN3dVSGQz
ejRIUEhRZ3I2VlNIZWhaWWR0VFZyRUFFTi8wLzMyMzgzMDM0M2EzMzM5MzM2MzNh
MzgzMDMwMzAzYTNhMmYzMzM2MjAzZDNlMjAzMjM2MzYzMDMyMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD
BgQoBDk8gDANBgkqhkiG9w0BAQsFAAOCAQEAr2tVhimk4AgF/866ju9ea7d0p80x
gEdFtWDg+wXaG1HMR+lX6CXrWYqeUH57WN+RkLutRN3dtaoO9UYMq0sx0hv2piSM
1yvTxEmDrsse3ZroHkXzFSCAUhUqa2mPFlxBTNjrml4Xka5KLGovQWkXCfpsbo1i
JGrwBh6PynZrCGTN4CKK5HC0NS/vhRPkbHveGIQLET+ucEitt9HgHUXQ/ZYgqKWd
d/R66dPe70TAX45L2DhMDQCBfkH+uCTCUL7HxeYttNUVolQxkXlws9mASTmSpiTB
QDHpI317izN9YzP/T8Lvk9emiHmTyIf3Obg+zmMy3dLEsD2nN6KFjQRGlA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org