Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3a2f33382d3338203d3e20323730393335.roa
File:                     323830343a373363303a3a2f33382d3338203d3e20323730393335.roa (raw, json)
Hash identifier:          L6nCvtV3gjfHyHpFH2DWeZYivFWrdjLqSxZJ4/oNPoY=
Subject key identifier:   72:61:49:4A:8E:2D:BE:C9:6F:F7:5A:91:CE:5A:B4:B0:7A:BB:4D:9A
Certificate issuer:       /CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
Certificate serial:       75FED6EC45FE25F5CEE1FCDE466F19F43909D6FA
Authority key identifier: F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3a2f33382d3338203d3e20323730393335.roa
Signing time:             Mon 31 Jan 2022 22:08:00 +0000
ROA not before:           Mon 31 Jan 2022 22:03:00 +0000
ROA not after:            Mon 30 Jan 2023 22:08:00 +0000
asID:                     270935
IP address blocks:        2804:73c0::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fe:d6:ec:45:fe:25:f5:ce:e1:fc:de:46:6f:19:f4:39:09:d6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
        Validity
            Not Before: Jan 31 22:03:00 2022 GMT
            Not After : Jan 30 22:08:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:99:e5:ad:fe:e8:51:71:6c:fb:6a:42:c9:
                    b9:13:b8:fc:5c:da:8e:af:7a:6e:c4:4c:55:94:f2:
                    c8:fe:69:b6:00:41:c0:d0:70:8a:f3:7a:f7:2d:16:
                    a9:46:c6:b2:e7:81:c2:3a:08:a9:0f:4a:1c:f9:cf:
                    7f:55:cf:11:13:f2:5d:8a:da:01:2c:b9:41:23:a3:
                    de:82:8a:35:b1:20:28:74:86:d6:1c:a0:29:0b:5a:
                    82:9a:1f:56:db:61:bb:a4:47:74:65:06:bc:ff:94:
                    f8:b5:63:16:f8:92:d1:2e:4d:37:44:96:73:5b:5c:
                    b7:ab:36:11:a3:77:36:e0:77:b3:b1:7d:8b:7c:27:
                    b8:3b:37:47:2c:01:2f:69:52:cd:25:6b:92:3e:a8:
                    9b:0a:92:b3:ab:da:f2:14:32:04:c3:4a:25:3e:8e:
                    61:57:0d:c2:29:b8:02:9d:ee:85:e8:d7:4d:64:5a:
                    8c:25:0a:6e:11:ad:e0:bf:4a:3a:9c:75:4a:bc:fd:
                    45:23:03:84:af:a5:3e:0d:ff:14:d1:65:40:80:a7:
                    d1:80:67:5e:a1:1e:fb:77:87:08:34:0e:22:25:38:
                    e3:d6:9a:09:f1:e0:4b:41:03:df:22:15:be:f8:b4:
                    f9:8f:4f:b1:83:9c:07:c2:48:8f:ca:6b:4c:cf:60:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:61:49:4A:8E:2D:BE:C9:6F:F7:5A:91:CE:5A:B4:B0:7A:BB:4D:9A
            X509v3 Authority Key Identifier:
                keyid:F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/323830343a373363303a3a2f33382d3338203d3e20323730393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73c0::/38

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:e5:73:45:76:b1:12:ae:4e:5c:65:c8:0b:86:a1:fe:32:
         ce:e0:4e:3f:59:b8:62:b6:81:6f:9a:09:82:9b:38:9b:d3:62:
         e0:c4:cf:69:bc:39:e4:71:b5:af:39:c4:48:ea:26:35:d2:dd:
         09:fa:25:fa:4d:5e:38:3f:55:2a:f9:f6:89:ff:a2:0c:d4:a7:
         1b:ba:5b:fb:2a:ca:b4:73:29:92:85:79:e5:90:a3:cf:52:ba:
         f9:ec:49:23:e8:71:9e:0b:71:72:93:01:3c:52:92:5c:6a:7f:
         0c:bb:a2:4f:34:17:80:31:e1:53:a9:05:ad:f9:77:f9:80:c5:
         d5:dc:68:c3:fb:a4:58:8f:0e:49:7d:e3:92:b6:02:12:a0:b4:
         fd:9b:12:02:8d:25:f4:b4:f5:5c:c3:28:4f:ae:14:bb:29:ee:
         95:e1:ab:06:2d:5c:b9:21:fe:b9:fa:30:8d:7d:c4:9b:74:13:
         6c:a8:64:2b:3a:d8:be:4b:2e:f8:e8:99:df:70:dd:dc:57:08:
         45:9f:82:05:32:ae:34:cb:73:30:66:c5:be:75:14:06:09:9b:
         9c:f5:57:4b:77:43:15:c8:57:9f:2d:58:ee:8c:cc:71:17:6f:
         c1:e0:89:75:18:91:d6:9b:5f:a8:33:5f:11:7e:05:0b:92:3d:
         d3:5a:ee:28
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUdf7W7EX+JfXO4fzeRm8Z9DkJ1vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQjREOEM1NTVDNUM3NTU2MEVBQzEyNzMzQTM1NDcw
MDFFOTMzMjAeFw0yMjAxMzEyMjAzMDBaFw0yMzAxMzAyMjA4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE3OTk5RTVBREZFRTg1MTcx
NkNGQjZBNDJDOUI5MTNCOEZDNUNEQThFQUY3QTZFQzQ0QzU1OTRGMkM4RkU2OUI2
MDA0MUMwRDA3MDhBRjM3QUY3MkQxNkE5NDZDNkIyRTc4MUMyM0EwOEE5MEY0QTFD
RjlDRjdGNTVDRjExMTNGMjVEOEFEQTAxMkNCOTQxMjNBM0RFODI4QTM1QjEyMDI4
NzQ4NkQ2MUNBMDI5MEI1QTgyOUExRjU2REI2MUJCQTQ0Nzc0NjUwNkJDRkY5NEY4
QjU2MzE2Rjg5MkQxMkU0RDM3NDQ5NjczNUI1Q0I3QUIzNjExQTM3NzM2RTA3N0Iz
QjE3RDhCN0MyN0I4M0IzNzQ3MkMwMTJGNjk1MkNEMjU2QjkyM0VBODlCMEE5MkIz
QUJEQUYyMTQzMjA0QzM0QTI1M0U4RTYxNTcwREMyMjlCODAyOURFRTg1RThENzRE
NjQ1QThDMjUwQTZFMTFBREUwQkY0QTNBOUM3NTRBQkNGRDQ1MjMwMzg0QUZBNTNF
MERGRjE0RDE2NTQwODBBN0QxODA2NzVFQTExRUZCNzc4NzA4MzQwRTIyMjUzOEUz
RDY5QTA5RjFFMDRCNDEwM0RGMjIxNUJFRjhCNEY5OEY0RkIxODM5QzA3QzI0ODhG
Q0E2QjRDQ0Y2MDBDRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwXmZ5a3+6FFxbPtqQsm5E7j8XNqOr3puxExVlPLI/mm2AEHA0HCK
83r3LRapRsay54HCOgipD0oc+c9/Vc8RE/JditoBLLlBI6Pegoo1sSAodIbWHKAp
C1qCmh9W22G7pEd0ZQa8/5T4tWMW+JLRLk03RJZzW1y3qzYRo3c24HezsX2LfCe4
OzdHLAEvaVLNJWuSPqibCpKzq9ryFDIEw0olPo5hVw3CKbgCne6F6NdNZFqMJQpu
Ea3gv0o6nHVKvP1FIwOEr6U+Df8U0WVAgKfRgGdeoR77d4cINA4iJTjj1poJ8eBL
QQPfIhW++LT5j0+xg5wHwkiPymtMz2AM0QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHJhSUqOLb7Jb/dakc5atLB6u02aMB8GA1UdIwQYMBaAFPLLTYxVXFx1Vg6sEnM6
NUcAHpMyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNZamQxelFxWm5zR3V0
QmQ3c1QxYnhRVGc0M3NObTFRNjh5QVR2ZTFRZWduLzAvRjJDQjREOEM1NTVDNUM3
NTU2MEVBQzEyNzMzQTM1NDcwMDFFOTMzMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GMkNCNEQ4QzU1NUM1Qzc1NTYwRUFDMTI3MzNBMzU0NzAwMUU5
MzMyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zWWpkMXpRcVpuc0d1dEJkN3NU
MWJ4UVRnNDNzTm0xUTY4eUFUdmUxUWVnbi8wLzMyMzgzMDM0M2EzNzMzNjMzMDNh
M2EyZjMzMzgyZDMzMzgyMDNkM2UyMDMyMzczMDM5MzMzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigE
c8AAMA0GCSqGSIb3DQEBCwUAA4IBAQA2feVzRXaxEq5OXGXIC4ah/jLO4E4/Wbhi
toFvmgmCmzib02LgxM9pvDnkcbWvOcRI6iY10t0J+iX6TV44P1Uq+faJ/6IM1Kcb
ulv7Ksq0cymShXnlkKPPUrr57Ekj6HGeC3FykwE8UpJcan8Mu6JPNBeAMeFTqQWt
+Xf5gMXV3GjD+6RYjw5JfeOStgISoLT9mxICjSX0tPVcwyhPrhS7Ke6V4asGLVy5
If65+jCNfcSbdBNsqGQrOti+Sy746JnfcN3cVwhFn4IFMq40y3MwZsW+dRQGCZuc
9VdLd0MVyFefLVjujMxxF2/B4Il1GJHWm1+oM18RfgULkj3TWu4o
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org