Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          qn5uladbsIC71VpopR2cY6PZuWlpOEzARqyXPOKqYAA=
Subject key identifier:   59:BA:4B:5A:C6:C1:81:6A:31:F9:6A:B0:C2:31:CE:8D:5E:FF:C9:9C
Certificate issuer:       /CN=1425E96015DE13B67E1065F8E62962A71308FD33
Certificate serial:       271ECC52C7609EC10C992FB862EDE2F29717C1FF
Authority key identifier: 14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Tue 12 Sep 2023 18:00:00 +0000
ROA not before:           Tue 12 Sep 2023 17:55:00 +0000
ROA not after:            Tue 10 Sep 2024 18:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1e:cc:52:c7:60:9e:c1:0c:99:2f:b8:62:ed:e2:f2:97:17:c1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1425E96015DE13B67E1065F8E62962A71308FD33
        Validity
            Not Before: Sep 12 17:55:00 2023 GMT
            Not After : Sep 10 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:9a:47:49:79:6f:9b:5f:3b:03:7a:e8:c3:
                    80:7e:24:eb:c1:78:08:a7:c2:32:ff:10:ad:15:13:
                    e1:5c:ab:8c:c0:62:fa:6c:ca:b0:c7:7e:0e:e1:6e:
                    8a:2e:46:8d:52:6d:02:bb:2f:8b:88:e1:0c:69:73:
                    12:e1:21:ef:65:ca:2c:83:9f:60:f8:1b:37:a8:97:
                    5c:17:21:65:9b:aa:6a:0e:24:f5:41:3c:92:31:c0:
                    4c:24:d2:70:1f:bd:d8:3b:60:09:c1:6a:1d:be:2a:
                    9e:f3:15:8d:ac:18:f2:15:3e:0d:41:71:ee:35:e7:
                    b9:ac:0d:8a:4e:e6:09:aa:71:7f:45:d4:16:fb:ba:
                    9e:27:2f:ac:6e:3b:69:c9:61:b7:1d:64:5a:51:ec:
                    ad:62:58:de:41:33:62:bd:bb:68:97:a6:3d:93:9c:
                    20:12:57:5d:68:9f:34:1b:71:cb:d4:f9:01:35:23:
                    2f:19:60:73:2a:05:51:49:ac:85:72:39:80:e7:8d:
                    14:79:26:ed:3e:85:9d:5e:b7:0b:77:7d:a5:28:b5:
                    1a:c5:72:de:4c:5f:57:1c:b8:8f:42:1f:68:a6:fa:
                    d0:c9:ca:c2:ba:6a:66:3f:9e:54:a4:0c:da:b6:b4:
                    bf:4b:7a:2d:91:59:7a:13:01:dd:43:a0:7e:f1:c1:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BA:4B:5A:C6:C1:81:6A:31:F9:6A:B0:C2:31:CE:8D:5E:FF:C9:9C
            X509v3 Authority Key Identifier:
                keyid:14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:27:02:cc:68:94:5c:28:c3:e6:49:1b:d4:83:7e:d9:3a:
         1c:31:d0:58:52:a1:6d:52:22:f6:1b:dc:6d:bd:28:31:e2:fe:
         8b:1a:4f:ae:bf:51:b4:8d:13:34:dc:13:a8:e4:45:c4:e5:de:
         cd:f0:95:a2:d1:b7:34:2e:d0:9c:14:e6:b3:fb:fa:b7:82:23:
         15:39:ff:b7:6c:37:2f:c9:c1:5b:21:55:99:d8:80:61:86:4e:
         13:67:86:82:12:06:f5:ae:0f:a5:af:66:97:51:b4:dd:fe:5f:
         25:49:ea:0d:11:84:d0:1f:a2:51:9e:41:06:fd:43:9b:9e:bc:
         da:34:bf:d7:3f:75:1b:3d:ad:9d:4f:75:59:0c:7b:9c:f5:b1:
         c5:cd:49:0e:87:47:92:1c:ae:9e:d4:49:ab:28:32:96:26:3f:
         63:75:37:7e:7a:e3:ca:9d:4c:f7:8f:57:40:0d:47:9e:54:2c:
         57:67:c3:4f:0b:41:ad:14:c9:00:03:71:27:67:46:b6:21:14:
         6e:30:ff:38:14:1e:30:fa:d7:f7:f8:f5:90:92:93:1f:0a:a2:
         77:ea:5c:3d:0a:3b:eb:c3:58:0a:5b:7f:45:68:be:e4:d3:19:
         66:e0:0e:85:a5:0d:62:82:e4:51:21:26:82:a2:05:8f:5d:f1:
         f0:f1:94:af
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUJx7MUsdgnsEMmS+4Yu3i8pcXwf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQyNUU5NjAxNURFMTNCNjdFMTA2NUY4RTYyOTYyQTcx
MzA4RkQzMzAeFw0yMzA5MTIxNzU1MDBaFw0yNDA5MTAxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFFMDlBNDc0OTc5NkY5QjVG
M0IwMzdBRThDMzgwN0UyNEVCQzE3ODA4QTdDMjMyRkYxMEFEMTUxM0UxNUNBQjhD
QzA2MkZBNkNDQUIwQzc3RTBFRTE2RThBMkU0NjhENTI2RDAyQkIyRjhCODhFMTBD
Njk3MzEyRTEyMUVGNjVDQTJDODM5RjYwRjgxQjM3QTg5NzVDMTcyMTY1OUJBQTZB
MEUyNEY1NDEzQzkyMzFDMDRDMjREMjcwMUZCREQ4M0I2MDA5QzE2QTFEQkUyQTlF
RjMxNThEQUMxOEYyMTUzRTBENDE3MUVFMzVFN0I5QUMwRDhBNEVFNjA5QUE3MTdG
NDVENDE2RkJCQTlFMjcyRkFDNkUzQjY5Qzk2MUI3MUQ2NDVBNTFFQ0FENjI1OERF
NDEzMzYyQkRCQjY4OTdBNjNEOTM5QzIwMTI1NzVENjg5RjM0MUI3MUNCRDRGOTAx
MzUyMzJGMTk2MDczMkEwNTUxNDlBQzg1NzIzOTgwRTc4RDE0NzkyNkVEM0U4NTlE
NUVCNzBCNzc3REE1MjhCNTFBQzU3MkRFNEM1RjU3MUNCODhGNDIxRjY4QTZGQUQw
QzlDQUMyQkE2QTY2M0Y5RTU0QTQwQ0RBQjZCNEJGNEI3QTJEOTE1OTdBMTMwMURE
NDNBMDdFRjFDMTNGMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuuCaR0l5b5tfOwN66MOAfiTrwXgIp8Iy/xCtFRPhXKuMwGL6bMqw
x34O4W6KLkaNUm0Cuy+LiOEMaXMS4SHvZcosg59g+Bs3qJdcFyFlm6pqDiT1QTyS
McBMJNJwH73YO2AJwWodviqe8xWNrBjyFT4NQXHuNee5rA2KTuYJqnF/RdQW+7qe
Jy+sbjtpyWG3HWRaUeytYljeQTNivbtol6Y9k5wgElddaJ80G3HL1PkBNSMvGWBz
KgVRSayFcjmA540UeSbtPoWdXrcLd32lKLUaxXLeTF9XHLiPQh9opvrQycrCumpm
P55UpAzatrS/S3otkVl6EwHdQ6B+8cE/AwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FFm6S1rGwYFqMflqsMIxzo1e/8mcMB8GA1UdIwQYMBaAFBQl6WAV3hO2fhBl+OYp
YqcTCP0zMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNHNGU1c1VzQnIyQUhT
dzd3Z05TaW5WeHdXeHFuUW9aQmo2Nnh4NGtCWW1DLzAvMTQyNUU5NjAxNURFMTNC
NjdFMTA2NUY4RTYyOTYyQTcxMzA4RkQzMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNDI1RTk2MDE1REUxM0I2N0UxMDY1RjhFNjI5NjJBNzEzMDhG
RDMzLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRzRlNXNVc0JyMkFIU3c3d2dO
U2luVnh3V3hxblFvWkJqNjZ4eDRrQlltQy8wLzMyMzgzMDM0M2EzMjMwNjIzNDNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzQzNTMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBCC0wDANBgkqhkiG9w0BAQsFAAOCAQEAe8onAsxolFwow+ZJG9SD
ftk6HDHQWFKhbVIi9hvcbb0oMeL+ixpPrr9RtI0TNNwTqORFxOXezfCVotG3NC7Q
nBTms/v6t4IjFTn/t2w3L8nBWyFVmdiAYYZOE2eGghIG9a4Ppa9ml1G03f5fJUnq
DRGE0B+iUZ5BBv1Dm5682jS/1z91Gz2tnU91WQx7nPWxxc1JDodHkhyuntRJqygy
liY/Y3U3fnrjyp1M949XQA1HnlQsV2fDTwtBrRTJAANxJ2dGtiEUbjD/OBQeMPrX
9/j1kJKTHwqid+pcPQo768NYClt/RWi+5NMZZuAOhaUNYoLkUSEmgqIFj13x8PGU
rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org