Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a633030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a313531303a633030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          MLNedHERjNQWBsJClT5SC3vqG7/lF+YkWHKPe/ugx6k=
Subject key identifier:   BE:92:63:E1:1E:35:36:D1:C0:28:14:4F:BB:68:C9:40:35:2E:4B:92
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       0ACC50D1290573DECA5390621B0EDD47FD3FD1F5
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a633030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Tue 12 Sep 2023 14:26:24 +0000
ROA not before:           Tue 12 Sep 2023 14:21:24 +0000
ROA not after:            Thu 12 Sep 2024 14:26:24 +0000
asID:                     262494
IP address blocks:        2804:1510:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cc:50:d1:29:05:73:de:ca:53:90:62:1b:0e:dd:47:fd:3f:d1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Sep 12 14:21:24 2023 GMT
            Not After : Sep 12 14:26:24 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:70:9e:d7:5d:b1:af:be:90:a8:50:69:88:
                    18:43:13:22:2e:41:99:7c:12:71:95:b0:55:e6:f2:
                    b1:0f:cb:6d:8d:d7:c1:09:f3:6f:71:fb:ca:17:54:
                    6b:25:2c:2b:3b:8c:af:a5:16:84:b7:79:38:5d:d3:
                    44:82:27:92:81:6b:68:35:bd:48:7e:ca:0c:83:1e:
                    43:bc:b9:33:8a:3a:bc:f9:44:d4:f4:cb:5d:28:ec:
                    e9:27:be:05:90:c5:56:ec:56:6a:05:0e:d5:63:56:
                    c7:20:97:4e:a6:3c:55:b4:ae:88:3d:1f:43:0d:77:
                    6b:35:d3:6e:09:6e:c9:76:d1:34:80:d9:a9:5f:c1:
                    22:61:24:d4:d6:2f:b8:97:9c:9d:72:8c:ab:17:f1:
                    34:18:b4:5e:73:f1:d3:32:48:58:45:30:1b:fc:37:
                    5a:a5:b8:9b:c6:cf:3b:65:0e:e4:bb:80:ee:c3:40:
                    bb:15:12:c1:bd:bd:c2:4f:1a:12:4c:f5:ae:28:52:
                    4f:c0:76:bb:0e:be:4c:a8:2c:59:fc:31:8a:fd:b5:
                    03:e4:c4:3f:b2:df:95:03:23:4a:02:86:3a:f4:3a:
                    d9:bd:6e:50:30:03:ac:5c:89:74:70:d7:35:d5:26:
                    14:85:5e:42:ae:95:ef:fc:a0:d7:cd:f2:f8:73:c2:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:92:63:E1:1E:35:36:D1:C0:28:14:4F:BB:68:C9:40:35:2E:4B:92
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a313531303a633030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:49:b6:4d:3d:44:70:df:db:00:f5:90:e1:08:c5:4f:c8:d8:
         5b:0c:31:1b:3c:04:a4:11:e8:d3:ab:d1:55:7f:39:0e:81:97:
         51:0d:1c:5a:7b:2c:33:36:a2:4d:04:b5:34:54:68:48:6b:31:
         65:90:cc:b1:4b:c6:04:19:fc:9f:1d:6a:51:83:e8:13:3c:fd:
         60:14:f6:7d:5a:74:eb:13:da:e1:50:c0:4e:01:af:85:3d:2b:
         17:b7:1b:e2:1e:e1:73:df:6e:7e:5c:cf:ca:2e:f3:28:4b:e6:
         18:8c:d2:66:46:b6:86:24:82:7c:97:4e:11:c1:dc:5d:e0:ca:
         6f:d8:6c:a6:fe:c3:67:9c:60:ae:a5:b6:b8:3d:bc:92:67:08:
         43:11:93:cf:de:71:64:4a:e2:6a:66:2b:57:00:38:86:5a:07:
         8a:b2:49:3c:0a:b9:df:96:f6:8e:fc:da:20:4c:b7:67:4e:6a:
         71:91:c5:08:f1:e0:2d:a4:67:7d:ac:2a:38:aa:ff:52:38:15:
         66:be:60:4e:fb:98:67:a9:81:23:a7:b5:6b:e3:74:6f:cc:b4:
         21:00:64:b7:c3:c5:55:16:cd:b2:0d:c9:6f:f4:df:68:70:ba:
         a0:43:2d:d8:84:c5:7f:79:6e:ca:82:1d:1c:9d:20:56:24:f0:
         8f:4c:64:ce
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUCsxQ0SkFc97KU5BiGw7dR/0/0fUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzA5MTIxNDIxMjRaFw0yNDA5MTIxNDI2MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ4NjcwOUVENzVEQjFBRkJF
OTBBODUwNjk4ODE4NDMxMzIyMkU0MTk5N0MxMjcxOTVCMDU1RTZGMkIxMEZDQjZE
OEREN0MxMDlGMzZGNzFGQkNBMTc1NDZCMjUyQzJCM0I4Q0FGQTUxNjg0Qjc3OTM4
NUREMzQ0ODIyNzkyODE2QjY4MzVCRDQ4N0VDQTBDODMxRTQzQkNCOTMzOEEzQUJD
Rjk0NEQ0RjRDQjVEMjhFQ0U5MjdCRTA1OTBDNTU2RUM1NjZBMDUwRUQ1NjM1NkM3
MjA5NzRFQTYzQzU1QjRBRTg4M0QxRjQzMEQ3NzZCMzVEMzZFMDk2RUM5NzZEMTM0
ODBEOUE5NUZDMTIyNjEyNEQ0RDYyRkI4OTc5QzlENzI4Q0FCMTdGMTM0MThCNDVF
NzNGMUQzMzI0ODU4NDUzMDFCRkMzNzVBQTVCODlCQzZDRjNCNjUwRUU0QkI4MEVF
QzM0MEJCMTUxMkMxQkRCREMyNEYxQTEyNENGNUFFMjg1MjRGQzA3NkJCMEVCRTRD
QTgyQzU5RkMzMThBRkRCNTAzRTRDNDNGQjJERjk1MDMyMzRBMDI4NjNBRjQzQUQ5
QkQ2RTUwMzAwM0FDNUM4OTc0NzBENzM1RDUyNjE0ODU1RTQyQUU5NUVGRkNBMEQ3
Q0RGMkY4NzNDMkEyOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApIZwntddsa++kKhQaYgYQxMiLkGZfBJxlbBV5vKxD8ttjdfBCfNv
cfvKF1RrJSwrO4yvpRaEt3k4XdNEgieSgWtoNb1IfsoMgx5DvLkzijq8+UTU9Mtd
KOzpJ74FkMVW7FZqBQ7VY1bHIJdOpjxVtK6IPR9DDXdrNdNuCW7JdtE0gNmpX8Ei
YSTU1i+4l5ydcoyrF/E0GLRec/HTMkhYRTAb/Ddapbibxs87ZQ7ku4Duw0C7FRLB
vb3CTxoSTPWuKFJPwHa7Dr5MqCxZ/DGK/bUD5MQ/st+VAyNKAoY69DrZvW5QMAOs
XIl0cNc11SYUhV5CrpXv/KDXzfL4c8KiiwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FL6SY+EeNTbRwCgUT7toyUA1LkuSMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMyMzgzMDM0M2EzMTM1MzEzMDNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBBUQwDANBgkqhkiG9w0BAQsFAAOCAQEAJUm2TT1EcN/bAPWQ4QjF
T8jYWwwxGzwEpBHo06vRVX85DoGXUQ0cWnssMzaiTQS1NFRoSGsxZZDMsUvGBBn8
nx1qUYPoEzz9YBT2fVp06xPa4VDATgGvhT0rF7cb4h7hc99uflzPyi7zKEvmGIzS
Zka2hiSCfJdOEcHcXeDKb9hspv7DZ5xgrqW2uD28kmcIQxGTz95xZEriamYrVwA4
hloHirJJPAq535b2jvzaIEy3Z05qcZHFCPHgLaRnfawqOKr/UjgVZr5gTvuYZ6mB
I6e1a+N0b8y0IQBkt8PFVRbNsg3Jb/TfaHC6oEMt2ITFf3luyoIdHJ0gViTwj0xk
zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org