Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3430303a3a2f33382d3338203d3e20323730393335.roa
File:                     323830343a373363303a3430303a3a2f33382d3338203d3e20323730393335.roa (raw, json)
Hash identifier:          kFLzSf3G5p07NjQ6Rwpx5RBssQ1PLJA+0Aryvwubdk0=
Subject key identifier:   73:52:1B:6E:3E:40:13:05:0B:74:BA:FD:EE:87:73:49:F0:AD:CF:EE
Certificate issuer:       /CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
Certificate serial:       6DD57B643EE0C1BD4A3E18F6D458296500FC4B20
Authority key identifier: F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3430303a3a2f33382d3338203d3e20323730393335.roa
Signing time:             Mon 31 Jan 2022 22:10:00 +0000
ROA not before:           Mon 31 Jan 2022 22:05:00 +0000
ROA not after:            Mon 30 Jan 2023 22:10:00 +0000
asID:                     270935
IP address blocks:        2804:73c0:400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d5:7b:64:3e:e0:c1:bd:4a:3e:18:f6:d4:58:29:65:00:fc:4b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
        Validity
            Not Before: Jan 31 22:05:00 2022 GMT
            Not After : Jan 30 22:10:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:b5:d2:2c:29:7a:54:cc:95:96:64:c6:49:
                    f8:d1:a5:a8:07:2e:91:9f:52:ed:c9:82:9b:16:40:
                    3e:3c:aa:6e:f7:6c:a1:47:ae:87:f1:d7:4d:bd:86:
                    8e:26:70:ec:72:19:7f:8c:df:d8:84:26:12:9c:d6:
                    fc:6d:8c:a2:e8:33:e1:ab:c4:53:1e:af:8b:8c:17:
                    4d:82:82:68:a9:9b:5b:30:3b:2d:19:70:ee:2c:0b:
                    d8:e6:c1:3a:4e:37:d7:4c:3d:c3:df:6f:99:6e:36:
                    d9:8e:77:96:7e:fd:3b:34:ce:62:d1:67:c3:fb:60:
                    d6:98:8e:2d:79:3e:b3:87:e9:f0:92:e8:6d:80:ef:
                    de:9a:e7:c2:32:d7:5e:af:44:ec:ef:6b:8d:01:26:
                    0a:26:46:c4:be:2a:38:2e:58:9d:fb:39:41:31:f5:
                    36:e1:21:f8:63:0b:45:fb:c9:c4:13:bb:3d:55:02:
                    d0:ac:6e:ae:8c:52:bb:2d:e1:47:16:24:da:81:fc:
                    7a:06:53:e0:f8:99:35:66:bd:9b:19:ed:b1:1f:25:
                    85:b8:40:2d:68:a4:d9:b8:04:34:1c:91:15:5d:56:
                    67:fa:3c:96:c4:21:76:c3:bf:0a:92:47:25:b3:8c:
                    9e:e8:58:4e:c9:c2:07:c3:54:1d:9a:49:97:c8:4c:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:52:1B:6E:3E:40:13:05:0B:74:BA:FD:EE:87:73:49:F0:AD:CF:EE
            X509v3 Authority Key Identifier:
                keyid:F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3430303a3a2f33382d3338203d3e20323730393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73c0:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         c1:98:9d:b6:e2:55:e6:9a:55:a2:1f:75:50:9a:7c:63:35:42:
         73:7a:aa:c1:0a:4e:5d:6b:c7:43:57:5e:77:cc:33:b9:17:70:
         38:ec:32:2f:a7:8c:35:e9:00:fa:0d:d4:53:a0:fb:20:59:67:
         7d:c2:47:b0:38:ab:e1:94:68:77:79:16:da:77:70:13:9b:1c:
         f2:5a:c7:92:57:4c:ac:33:e4:44:d4:3e:4e:c3:57:44:72:04:
         5b:30:6a:31:31:71:04:25:c0:85:d8:e2:af:3b:0a:f3:d4:2c:
         c6:14:a4:9b:3b:79:16:68:71:9f:1f:ed:02:7e:c4:49:f4:26:
         ea:f1:7b:a4:c7:f5:04:86:a5:9a:f4:a2:52:f2:56:1c:b9:00:
         d0:08:ab:c0:9e:e6:a2:02:c3:58:0b:a6:06:a8:09:3b:ee:51:
         0a:48:be:e7:fd:8f:76:c1:97:ff:5f:c9:86:74:fe:7a:7c:d8:
         d8:cc:3f:36:3b:c8:77:a8:24:09:8f:10:dd:9d:cb:86:4e:3f:
         c3:92:95:1d:62:2a:cc:b5:4d:17:24:ef:19:36:32:51:9a:9d:
         fc:30:61:42:1e:21:22:cc:3f:ba:58:c5:78:56:9d:b7:38:87:
         36:07:d4:0a:3a:3d:f6:49:16:7f:48:bf:61:93:0f:f2:f8:6a:
         10:9a:af:b9
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUbdV7ZD7gwb1KPhj21FgpZQD8SyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQjREOEM1NTVDNUM3NTU2MEVBQzEyNzMzQTM1NDcw
MDFFOTMzMjAeFw0yMjAxMzEyMjA1MDBaFw0yMzAxMzAyMjEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgzRUI1RDIyQzI5N0E1NEND
OTU5NjY0QzY0OUY4RDFBNUE4MDcyRTkxOUY1MkVEQzk4MjlCMTY0MDNFM0NBQTZF
Rjc2Q0ExNDdBRTg3RjFENzREQkQ4NjhFMjY3MEVDNzIxOTdGOENERkQ4ODQyNjEy
OUNENkZDNkQ4Q0EyRTgzM0UxQUJDNDUzMUVBRjhCOEMxNzREODI4MjY4QTk5QjVC
MzAzQjJEMTk3MEVFMkMwQkQ4RTZDMTNBNEUzN0Q3NEMzREMzREY2Rjk5NkUzNkQ5
OEU3Nzk2N0VGRDNCMzRDRTYyRDE2N0MzRkI2MEQ2OTg4RTJENzkzRUIzODdFOUYw
OTJFODZEODBFRkRFOUFFN0MyMzJENzVFQUY0NEVDRUY2QjhEMDEyNjBBMjY0NkM0
QkUyQTM4MkU1ODlERkIzOTQxMzFGNTM2RTEyMUY4NjMwQjQ1RkJDOUM0MTNCQjNE
NTUwMkQwQUM2RUFFOEM1MkJCMkRFMTQ3MTYyNERBODFGQzdBMDY1M0UwRjg5OTM1
NjZCRDlCMTlFREIxMUYyNTg1Qjg0MDJENjhBNEQ5QjgwNDM0MUM5MTE1NUQ1NjY3
RkEzQzk2QzQyMTc2QzNCRjBBOTI0NzI1QjM4QzlFRTg1ODRFQzlDMjA3QzM1NDFE
OUE0OTk3Qzg0QzgwQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyD610iwpelTMlZZkxkn40aWoBy6Rn1LtyYKbFkA+PKpu92yhR66H
8ddNvYaOJnDschl/jN/YhCYSnNb8bYyi6DPhq8RTHq+LjBdNgoJoqZtbMDstGXDu
LAvY5sE6TjfXTD3D32+ZbjbZjneWfv07NM5i0WfD+2DWmI4teT6zh+nwkuhtgO/e
mufCMtder0Ts72uNASYKJkbEvio4Llid+zlBMfU24SH4YwtF+8nEE7s9VQLQrG6u
jFK7LeFHFiTagfx6BlPg+Jk1Zr2bGe2xHyWFuEAtaKTZuAQ0HJEVXVZn+jyWxCF2
w78Kkkcls4ye6FhOycIHw1QdmkmXyEyAwQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FHNSG24+QBMFC3S6/e6Hc0nwrc/uMB8GA1UdIwQYMBaAFPLLTYxVXFx1Vg6sEnM6
NUcAHpMyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNZamQxelFxWm5zR3V0
QmQ3c1QxYnhRVGc0M3NObTFRNjh5QVR2ZTFRZWduLzAvRjJDQjREOEM1NTVDNUM3
NTU2MEVBQzEyNzMzQTM1NDcwMDFFOTMzMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GMkNCNEQ4QzU1NUM1Qzc1NTYwRUFDMTI3MzNBMzU0NzAwMUU5
MzMyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zWWpkMXpRcVpuc0d1dEJkN3NU
MWJ4UVRnNDNzTm0xUTY4eUFUdmUxUWVnbi8wLzMyMzgzMDM0M2EzNzMzNjMzMDNh
MzQzMDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzNzMwMzkzMzM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYCKARzwAQwDQYJKoZIhvcNAQELBQADggEBAMGYnbbiVeaaVaIfdVCafGM1
QnN6qsEKTl1rx0NXXnfMM7kXcDjsMi+njDXpAPoN1FOg+yBZZ33CR7A4q+GUaHd5
Ftp3cBObHPJax5JXTKwz5ETUPk7DV0RyBFswajExcQQlwIXY4q87CvPULMYUpJs7
eRZocZ8f7QJ+xEn0Jurxe6TH9QSGpZr0olLyVhy5ANAIq8Ce5qICw1gLpgaoCTvu
UQpIvuf9j3bBl/9fyYZ0/np82NjMPzY7yHeoJAmPEN2dy4ZOP8OSlR1iKsy1TRck
7xk2MlGanfwwYUIeISLMP7pYxXhWnbc4hzYH1Ao6PfZJFn9Iv2GTD/L4ahCar7k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org