Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33342d3334203d3e20323639323032.roa
File:                     323830343a363066343a3a2f33342d3334203d3e20323639323032.roa (raw, json)
Hash identifier:          qcR51patKjLSbrOpTuABnPhis/FJXR6fErX+Z9xZBp8=
Subject key identifier:   28:D6:0F:7F:A9:EE:1F:3C:C3:18:43:B2:2F:82:0F:12:CE:F1:53:4A
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       7481537FC9A0D6C893B5C4CC0FB64041F6E3293B
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33342d3334203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:16:25 +0000
ROA not before:           Mon 06 Feb 2023 22:11:25 +0000
ROA not after:            Mon 05 Feb 2024 22:16:25 +0000
asID:                     269202
IP address blocks:        2804:60f4::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:81:53:7f:c9:a0:d6:c8:93:b5:c4:cc:0f:b6:40:41:f6:e3:29:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:11:25 2023 GMT
            Not After : Feb  5 22:16:25 2024 GMT
        Subject: CN=28D60F7FA9EE1F3CC31843B22F820F12CEF1534A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:63:38:b0:5f:76:f0:b6:ff:23:f0:54:f0:
                    bc:65:a6:ad:5c:a3:a0:bc:0d:6d:4c:5d:e6:e4:ac:
                    c9:b3:f2:93:4b:b1:9e:a3:8b:8f:ca:3d:f2:98:a6:
                    04:67:ab:18:23:46:5f:f8:31:45:29:84:78:e1:2b:
                    56:a2:07:ff:77:16:f6:b8:74:93:db:f6:40:4c:2b:
                    6e:fc:47:fd:c7:c0:1e:72:f3:de:0b:d0:88:3f:33:
                    01:77:23:ff:08:68:cc:bc:6d:4d:7f:25:cb:64:d1:
                    2f:cf:bc:40:08:44:54:c8:87:26:82:ea:84:d1:40:
                    59:25:79:de:a1:e3:de:bd:a4:ab:1c:44:c8:57:51:
                    87:13:5b:4e:c7:ba:d3:77:b4:74:84:21:ed:e1:82:
                    fb:2c:90:44:b8:1e:de:e8:f5:af:8e:9b:32:de:52:
                    90:f3:df:9f:ad:c6:99:4e:fb:09:ea:6f:57:17:e1:
                    c7:12:cb:62:8e:98:36:13:0e:55:7d:f0:8c:cf:d4:
                    8b:5a:fb:a9:91:83:2e:cc:c9:8a:6a:e5:c0:10:6e:
                    84:c4:94:36:f9:df:6f:73:d0:9d:98:8d:26:27:ff:
                    26:4d:b3:77:3b:ce:19:19:91:c4:88:20:80:05:1b:
                    54:db:73:fd:d3:a6:71:07:6c:63:25:a8:16:dd:28:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D6:0F:7F:A9:EE:1F:3C:C3:18:43:B2:2F:82:0F:12:CE:F1:53:4A
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33342d3334203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4::/34

    Signature Algorithm: sha256WithRSAEncryption
         07:ec:d7:77:50:f4:29:b6:1d:91:f8:21:2a:b6:44:df:66:d7:
         ca:22:e7:8a:4d:b1:b2:9c:f2:c0:a6:8b:af:5f:f8:41:f9:e8:
         92:45:11:ab:dd:44:6c:3b:d1:0f:47:24:1d:00:16:41:fd:37:
         f2:08:e9:05:16:71:11:cd:6f:2d:a6:7d:60:dd:fc:8f:50:ec:
         a1:c5:68:6a:d5:bb:b6:d8:0f:0d:28:ed:88:2d:64:66:05:2a:
         74:2a:83:e7:c0:53:e2:22:6e:af:44:8b:6f:78:d4:a2:a3:8e:
         92:e6:41:d4:04:f6:38:77:9d:18:d6:ab:2e:14:f9:11:94:5e:
         39:fc:bc:0b:5c:8c:f0:87:02:d4:cb:67:40:53:02:9e:98:c1:
         29:df:ff:a7:2c:5b:bb:4b:12:f2:46:29:54:b7:5e:66:82:f5:
         6c:cb:f7:83:41:c8:ed:dc:02:07:52:f7:c3:18:62:e3:09:17:
         c2:bf:14:13:35:65:f1:9e:a3:9c:c1:97:50:d3:fe:c3:14:32:
         f4:26:93:1d:0e:1f:6f:8d:67:b4:ad:3f:b2:9a:eb:c7:e5:be:
         e9:78:27:51:36:ff:03:b8:c8:34:59:fc:af:b9:f4:a7:06:b1:
         1c:83:6b:44:7f:4c:d9:2a:f0:43:77:39:57:77:73:23:8c:5d:
         18:2b:41:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdIFTf8mg1siTtcTMD7ZAQfbjKTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExNTIxODk1QjA5NTNFNjg4M0Q1MTYzRDdDNjU2MkVE
MjE2ODVCRDAeFw0yMzAyMDYyMjExMjVaFw0yNDAyMDUyMjE2MjVaMDMxMTAvBgNV
BAMTKDI4RDYwRjdGQTlFRTFGM0NDMzE4NDNCMjJGODIwRjEyQ0VGMTUzNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgmM4sF928Lb/I/BU8Lxlpq1c
o6C8DW1MXebkrMmz8pNLsZ6ji4/KPfKYpgRnqxgjRl/4MUUphHjhK1aiB/93Fva4
dJPb9kBMK278R/3HwB5y894L0Ig/MwF3I/8IaMy8bU1/Jctk0S/PvEAIRFTIhyaC
6oTRQFkled6h4969pKscRMhXUYcTW07HutN3tHSEIe3hgvsskES4Ht7o9a+OmzLe
UpDz35+txplO+wnqb1cX4ccSy2KOmDYTDlV98IzP1Ita+6mRgy7MyYpq5cAQboTE
lDb5329z0J2YjSYn/yZNs3c7zhkZkcSIIIAFG1Tbc/3TpnEHbGMlqBbdKOJhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKNYPf6nuHzzDGEOyL4IPEs7xU0owHwYDVR0j
BBgwFoAUIRUhiVsJU+aIPVFj18ZWLtIWhb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0tUaXBDUWhIQUtFVWJEakNxM1NQV3FIUG1vUzhyWHhkVDdhUjVnU0hn
NmEvMS8yMTE1MjE4OTVCMDk1M0U2ODgzRDUxNjNEN0M2NTYyRUQyMTY4NUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxMTUyMTg5NUIwOTUzRTY4
ODNENTE2M0Q3QzY1NjJFRDIxNjg1QkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLVGlwQ1FoSEFLRVViRGpDcTNTUFdxSFBtb1M4clh4ZFQ3YVI1Z1NIZzZhLzEv
MzIzODMwMzQzYTM2MzA2NjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzIzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARg9AAwDQYJKoZIhvcNAQELBQADggEBAAfs13dQ
9Cm2HZH4ISq2RN9m18oi54pNsbKc8sCmi69f+EH56JJFEavdRGw70Q9HJB0AFkH9
N/II6QUWcRHNby2mfWDd/I9Q7KHFaGrVu7bYDw0o7YgtZGYFKnQqg+fAU+Iibq9E
i2941KKjjpLmQdQE9jh3nRjWqy4U+RGUXjn8vAtcjPCHAtTLZ0BTAp6YwSnf/6cs
W7tLEvJGKVS3XmaC9WzL94NByO3cAgdS98MYYuMJF8K/FBM1ZfGeo5zBl1DT/sMU
MvQmkx0OH2+NZ7StP7Ka68flvul4J1E2/wO4yDRZ/K+59KcGsRyDa0R/TNkq8EN3
OVd3cyOMXRgrQQs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org