Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a343637383a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          mZCMCEwWyySKFvyYsp6wVhWu5FroAA9BSHuYYakRtQY=
Subject key identifier:   68:E9:40:3F:25:08:D6:BB:C1:68:69:A4:F4:77:51:CE:15:14:26:66
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       1D9DCBC57F45DA1740B3E74F091F947EE59C468D
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 08:56:37 +0000
ROA not before:           Sat 24 Feb 2024 08:51:37 +0000
ROA not after:            Mon 24 Feb 2025 08:56:37 +0000
asID:                     262494
IP address blocks:        2804:4678::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9d:cb:c5:7f:45:da:17:40:b3:e7:4f:09:1f:94:7e:e5:9c:46:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 08:51:37 2024 GMT
            Not After : Feb 24 08:56:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:9e:ed:e4:fd:e4:17:d9:b6:12:a5:4a:42:
                    ec:e5:16:6b:a6:bb:44:04:1c:3c:18:06:d3:4f:f7:
                    e7:e7:09:4e:8c:9f:41:71:e8:83:be:3e:42:f6:2e:
                    24:8e:c2:a6:11:e9:bd:e9:53:0f:69:77:45:4a:8d:
                    59:e4:06:1b:ef:c9:93:ff:f1:1c:46:49:87:10:3b:
                    64:c3:6b:81:36:03:13:11:7b:7a:9e:cb:31:5b:64:
                    d9:57:43:06:6e:1c:0c:96:06:de:03:9a:77:9c:c7:
                    8e:bc:cc:11:da:4b:98:e0:88:66:a5:50:5f:38:17:
                    ab:10:bc:29:4e:ec:c1:93:7b:41:ba:07:6d:d1:14:
                    7d:6c:5e:5b:92:75:f0:a1:c2:98:bb:bc:14:25:44:
                    1c:61:22:2e:5c:26:b0:9a:71:32:40:5f:93:aa:d8:
                    bb:9e:3b:d8:43:df:2e:e1:61:f2:b9:b3:4b:9f:c7:
                    be:0d:28:d0:8e:26:b9:65:4e:7f:8a:f8:8e:10:c7:
                    2f:f4:98:00:86:58:d1:23:f3:37:23:32:25:81:a2:
                    51:3f:bb:7b:4f:cb:2f:ff:0c:89:36:24:7f:7f:a5:
                    8f:9f:51:ba:e2:f0:bb:05:6a:9a:33:e0:dc:c5:53:
                    0c:f9:4b:3a:12:e3:ec:d0:be:6f:32:5b:97:dc:1e:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:40:3F:25:08:D6:BB:C1:68:69:A4:F4:77:51:CE:15:14:26:66
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678::/34

    Signature Algorithm: sha256WithRSAEncryption
         86:bb:45:8a:bc:46:77:29:cc:3f:28:df:b8:16:c6:79:69:03:
         3a:0a:1a:c2:f0:1e:c3:0e:65:bb:18:a8:66:70:94:32:8d:45:
         b3:4a:9a:9f:72:9d:74:9b:a4:d6:a2:64:17:ef:90:7a:e0:b9:
         b0:3b:57:4f:3c:aa:7f:eb:51:97:aa:80:5a:9b:22:ab:bc:be:
         15:62:16:63:64:f6:22:a2:20:6a:cf:48:cb:a0:84:ea:d1:88:
         be:b4:87:5f:22:d6:3a:96:2f:0a:90:fb:f1:29:c0:a3:41:b3:
         b7:38:f4:e9:1a:0a:2d:08:10:fe:67:7b:5f:b8:73:a3:7e:01:
         0a:cf:1c:03:b8:05:6e:9b:f9:7a:6a:a5:84:9c:7d:a2:a0:37:
         96:7c:bc:60:48:08:1a:e8:20:1b:c7:fe:cc:44:24:fd:09:f4:
         a8:db:28:c6:55:79:85:ba:53:c6:34:ee:ab:80:16:20:6d:37:
         31:78:83:b4:db:6e:7a:47:8e:bf:3a:f0:bd:76:cb:20:06:fa:
         3d:9f:58:95:0f:09:53:6c:44:f5:cc:54:23:1a:26:55:02:1a:
         6b:00:84:55:5e:9a:8d:1e:be:ae:08:5b:68:e7:7d:db:46:8d:
         9a:99:55:aa:53:df:48:e0:9f:d8:f7:c6:16:41:ea:04:e0:18:
         26:7b:61:e7
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHZ3LxX9F2hdAs+dPCR+UfuWcRo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yNDAyMjQwODUxMzdaFw0yNTAyMjQwODU2MzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJCOTlFRURFNEZERTQxN0Q5
QjYxMkE1NEE0MkVDRTUxNjZCQTZCQjQ0MDQxQzNDMTgwNkQzNEZGN0U3RTcwOTRF
OEM5RjQxNzFFODgzQkUzRTQyRjYyRTI0OEVDMkE2MTFFOUJERTk1MzBGNjk3NzQ1
NEE4RDU5RTQwNjFCRUZDOTkzRkZGMTFDNDY0OTg3MTAzQjY0QzM2QjgxMzYwMzEz
MTE3QjdBOUVDQjMxNUI2NEQ5NTc0MzA2NkUxQzBDOTYwNkRFMDM5QTc3OUNDNzhF
QkNDQzExREE0Qjk4RTA4ODY2QTU1MDVGMzgxN0FCMTBCQzI5NEVFQ0MxOTM3QjQx
QkEwNzZERDExNDdENkM1RTVCOTI3NUYwQTFDMjk4QkJCQzE0MjU0NDFDNjEyMjJF
NUMyNkIwOUE3MTMyNDA1RjkzQUFEOEJCOUUzQkQ4NDNERjJFRTE2MUYyQjlCMzRC
OUZDN0JFMEQyOEQwOEUyNkI5NjU0RTdGOEFGODhFMTBDNzJGRjQ5ODAwODY1OEQx
MjNGMzM3MjMzMjI1ODFBMjUxM0ZCQjdCNEZDQjJGRkYwQzg5MzYyNDdGN0ZBNThG
OUY1MUJBRTJGMEJCMDU2QTlBMzNFMERDQzU1MzBDRjk0QjNBMTJFM0VDRDBCRTZG
MzI1Qjk3REMxRTVCMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu7me7eT95BfZthKlSkLs5RZrprtEBBw8GAbTT/fn5wlOjJ9BceiD
vj5C9i4kjsKmEem96VMPaXdFSo1Z5AYb78mT//EcRkmHEDtkw2uBNgMTEXt6nssx
W2TZV0MGbhwMlgbeA5p3nMeOvMwR2kuY4IhmpVBfOBerELwpTuzBk3tBugdt0RR9
bF5bknXwocKYu7wUJUQcYSIuXCawmnEyQF+Tqti7njvYQ98u4WHyubNLn8e+DSjQ
jia5ZU5/iviOEMcv9JgAhljRI/M3IzIlgaJRP7t7T8sv/wyJNiR/f6WPn1G64vC7
BWqaM+DcxVMM+Us6EuPs0L5vMluX3B5bKQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGjpQD8lCNa7wWhppPR3Uc4VFCZmMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMyMzgzMDM0M2EzNDM2MzczODNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzMjM0MzkzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
RngAMA0GCSqGSIb3DQEBCwUAA4IBAQCGu0WKvEZ3Kcw/KN+4FsZ5aQM6ChrC8B7D
DmW7GKhmcJQyjUWzSpqfcp10m6TWomQX75B64LmwO1dPPKp/61GXqoBamyKrvL4V
YhZjZPYioiBqz0jLoITq0Yi+tIdfItY6li8KkPvxKcCjQbO3OPTpGgotCBD+Z3tf
uHOjfgEKzxwDuAVum/l6aqWEnH2ioDeWfLxgSAga6CAbx/7MRCT9CfSo2yjGVXmF
ulPGNO6rgBYgbTcxeIO02256R46/OvC9dssgBvo9n1iVDwlTbET1zFQjGiZVAhpr
AIRVXpqNHr6uCFto533bRo2amVWqU99I4J/Y98YWQeoE4Bgme2Hn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org