Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/323830343a316632323a3a2f33322d3438203d3e20323634393537.roa
File:                     323830343a316632323a3a2f33322d3438203d3e20323634393537.roa (raw, json)
Hash identifier:          1BbTsgzVNgUjWS6dnwa/kTKWihc9gxVQyTMdwfjnwrM=
Subject key identifier:   AD:96:D6:4D:3E:20:58:D5:7C:EE:16:94:46:95:C3:FF:5D:8B:16:5B
Certificate issuer:       /CN=9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B
Certificate serial:       0157D476C67C67D3737B86CDDE3CBF14F0B772F8
Authority key identifier: 9B:5A:84:80:E7:C0:E5:E4:5D:E2:2C:D5:15:8A:05:5B:99:45:AB:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/323830343a316632323a3a2f33322d3438203d3e20323634393537.roa
Signing time:             Tue 30 May 2023 18:32:00 +0000
ROA not before:           Tue 30 May 2023 18:27:00 +0000
ROA not after:            Tue 28 May 2024 18:32:00 +0000
asID:                     264957
IP address blocks:        2804:1f22::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:57:d4:76:c6:7c:67:d3:73:7b:86:cd:de:3c:bf:14:f0:b7:72:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B
        Validity
            Not Before: May 30 18:27:00 2023 GMT
            Not After : May 28 18:32:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:41:96:52:c2:07:61:b1:85:a5:fa:74:c0:
                    62:4f:24:91:78:e1:bc:4b:3a:d0:c0:cb:fb:10:75:
                    3d:43:bf:4d:e5:3e:90:00:1b:e6:fe:7d:70:10:bc:
                    90:98:3e:ed:15:88:38:cc:4e:b8:97:5e:3e:da:94:
                    1c:10:fc:ae:c0:22:67:68:46:30:42:81:08:fd:b1:
                    85:69:66:5e:20:72:e4:77:7e:4f:c4:66:10:55:70:
                    af:9b:94:41:c8:dd:29:ec:04:23:f6:16:dd:63:98:
                    d6:e5:2b:4d:79:0d:74:55:81:e1:34:f8:cd:84:b9:
                    08:66:0e:06:fa:35:18:94:0a:a2:e4:73:24:1f:a5:
                    69:1c:41:d0:0f:a2:50:0e:f1:9b:3f:6a:8c:37:6c:
                    cb:dc:9b:73:a2:9c:ea:94:d4:7b:fb:cb:e6:1a:ee:
                    b4:15:d1:24:06:16:66:4c:d8:8f:88:19:9c:f6:a0:
                    dd:fc:13:05:e7:0a:13:72:24:f5:26:bf:88:1b:de:
                    53:dd:5e:96:38:7e:99:32:7d:01:be:30:ad:4c:e1:
                    90:e8:4b:de:c8:03:e2:dd:2f:a6:5a:b4:80:0c:7f:
                    93:06:d8:79:8d:e5:c3:dd:33:14:c0:a7:ec:ed:b4:
                    f4:6d:92:33:a2:d8:6b:85:2d:a1:72:7d:bb:24:df:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:96:D6:4D:3E:20:58:D5:7C:EE:16:94:46:95:C3:FF:5D:8B:16:5B
            X509v3 Authority Key Identifier:
                keyid:9B:5A:84:80:E7:C0:E5:E4:5D:E2:2C:D5:15:8A:05:5B:99:45:AB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B5A8480E7C0E5E45DE22CD5158A055B9945AB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Gb3TxHKuv9GSvtYb8RLuaPYEtKeMXQt1x73YvhE11Sz/0/323830343a316632323a3a2f33322d3438203d3e20323634393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f22::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:0e:d8:b2:4c:00:b3:e0:ca:7e:5f:d7:c6:23:65:6b:d4:
         1d:ee:99:58:cc:79:34:eb:bb:56:67:7c:1b:5c:fc:41:40:19:
         cc:a3:c8:a6:ba:97:b1:4d:70:c9:82:72:c8:d3:e7:f6:75:fe:
         de:84:29:f5:0a:45:01:a4:14:cf:a1:3e:63:2b:64:36:14:9e:
         6e:48:c7:69:76:04:47:32:f1:bd:c4:b4:31:c1:3a:10:8b:8c:
         f0:80:d4:0a:f2:6c:a0:a8:b9:5c:fc:6e:04:fe:1c:2e:90:af:
         2d:54:e4:6e:85:83:ad:b8:85:a6:7a:a3:12:2f:8a:b7:34:2d:
         5f:98:b2:17:73:f2:86:f5:8c:83:76:80:b1:64:ee:a6:21:13:
         f4:d7:2a:14:16:4b:dd:95:49:85:0f:39:3b:3c:9c:d9:01:ef:
         48:0c:70:a0:1d:e5:fa:fc:fb:e6:88:d0:6c:ac:a0:11:72:7d:
         d7:1b:35:92:f2:6f:06:95:91:3f:15:f5:52:76:ff:64:59:c8:
         88:87:76:a0:a0:8e:f5:de:11:36:9b:1a:9e:d7:9b:62:57:63:
         4c:0a:47:2a:e2:59:17:db:4d:75:52:65:3d:c6:7e:d1:b0:51:
         30:ed:fc:8c:af:29:a4:3f:c9:90:6c:7c:e1:62:27:0d:e8:7c:
         69:73:3f:f9
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUAVfUdsZ8Z9Nze4bN3jy/FPC3cvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI1QTg0ODBFN0MwRTVFNDVERTIyQ0Q1MTU4QTA1NUI5
OTQ1QUI5QjAeFw0yMzA1MzAxODI3MDBaFw0yNDA1MjgxODMyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDM5NTQxOTY1MkMyMDc2MUIx
ODVBNUZBNzRDMDYyNEYyNDkxNzhFMUJDNEIzQUQwQzBDQkZCMTA3NTNENDNCRjRE
RTUzRTkwMDAxQkU2RkU3RDcwMTBCQzkwOTgzRUVEMTU4ODM4Q0M0RUI4OTc1RTNF
REE5NDFDMTBGQ0FFQzAyMjY3Njg0NjMwNDI4MTA4RkRCMTg1Njk2NjVFMjA3MkU0
Nzc3RTRGQzQ2NjEwNTU3MEFGOUI5NDQxQzhERDI5RUMwNDIzRjYxNkRENjM5OEQ2
RTUyQjRENzkwRDc0NTU4MUUxMzRGOENEODRCOTA4NjYwRTA2RkEzNTE4OTQwQUEy
RTQ3MzI0MUZBNTY5MUM0MUQwMEZBMjUwMEVGMTlCM0Y2QThDMzc2Q0NCREM5Qjcz
QTI5Q0VBOTRENDdCRkJDQkU2MUFFRUI0MTVEMTI0MDYxNjY2NENEODhGODgxOTlD
RjZBMERERkMxMzA1RTcwQTEzNzIyNEY1MjZCRjg4MUJERTUzREQ1RTk2Mzg3RTk5
MzI3RDAxQkUzMEFENENFMTkwRTg0QkRFQzgwM0UyREQyRkE2NUFCNDgwMEM3Rjkz
MDZEODc5OERFNUMzREQzMzE0QzBBN0VDRURCNEY0NkQ5MjMzQTJEODZCODUyREEx
NzI3REJCMjRERjZEMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA05VBllLCB2GxhaX6dMBiTySReOG8SzrQwMv7EHU9Q79N5T6QABvm
/n1wELyQmD7tFYg4zE64l14+2pQcEPyuwCJnaEYwQoEI/bGFaWZeIHLkd35PxGYQ
VXCvm5RByN0p7AQj9hbdY5jW5StNeQ10VYHhNPjNhLkIZg4G+jUYlAqi5HMkH6Vp
HEHQD6JQDvGbP2qMN2zL3JtzopzqlNR7+8vmGu60FdEkBhZmTNiPiBmc9qDd/BMF
5woTciT1Jr+IG95T3V6WOH6ZMn0BvjCtTOGQ6EveyAPi3S+mWrSADH+TBth5jeXD
3TMUwKfs7bT0bZIzothrhS2hcn27JN9tEQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FK2W1k0+IFjVfO4WlEaVw/9dixZbMB8GA1UdIwQYMBaAFJtahIDnwOXkXeIs1RWK
BVuZRaubMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNHYjNUeEhLdXY5R1N2
dFliOFJMdWFQWUV0S2VNWFF0MXg3M1l2aEUxMVN6LzAvOUI1QTg0ODBFN0MwRTVF
NDVERTIyQ0Q1MTU4QTA1NUI5OTQ1QUI5Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85QjVBODQ4MEU3QzBFNUU0NURFMjJDRDUxNThBMDU1Qjk5NDVB
QjlCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zR2IzVHhIS3V2OUdTdnRZYjhS
THVhUFlFdEtlTVhRdDF4NzNZdmhFMTFTei8wLzMyMzgzMDM0M2EzMTY2MzIzMjNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNDM5MzUzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
HyIwDQYJKoZIhvcNAQELBQADggEBADPzDtiyTACz4Mp+X9fGI2Vr1B3umVjMeTTr
u1ZnfBtc/EFAGcyjyKa6l7FNcMmCcsjT5/Z1/t6EKfUKRQGkFM+hPmMrZDYUnm5I
x2l2BEcy8b3EtDHBOhCLjPCA1ArybKCouVz8bgT+HC6Qry1U5G6Fg624haZ6oxIv
irc0LV+Yshdz8ob1jIN2gLFk7qYhE/TXKhQWS92VSYUPOTs8nNkB70gMcKAd5fr8
++aI0GysoBFyfdcbNZLybwaVkT8V9VJ2/2RZyIiHdqCgjvXeETabGp7Xm2JXY0wK
RyriWRfbTXVSZT3GftGwUTDt/IyvKaQ/yZBsfOFiJw3ofGlzP/k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org