Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a6164383a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          aTP7REMH0r+G9wMPnkh8X/e8fEeCtyMNXLvpcpnFM8k=
Subject key identifier:   60:E2:D3:8D:16:93:9A:4A:89:C2:B3:72:33:0B:E7:38:2E:F2:7E:C8
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       34F1A515B6A6B0AED2C7143159B327D430A90773
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Thu 23 Nov 2023 19:00:00 +0000
ROA not before:           Thu 23 Nov 2023 18:55:00 +0000
ROA not after:            Sat 23 Nov 2024 19:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f1:a5:15:b6:a6:b0:ae:d2:c7:14:31:59:b3:27:d4:30:a9:07:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Nov 23 18:55:00 2023 GMT
            Not After : Nov 23 19:00:00 2024 GMT
        Subject: CN=3082010A0282010100AE9D34A671712DA7BDF88C19ABEA6935D0057F4778FBC3E159851397A8BBDD896B6C6E4E298FA9963937787881A78C8F2EA33C6B999FE37C538AF6C74CE9912FA0408E507A70CEACE0D51BE6C02EBA1D49F4D33E594B0CC34D88832DBAB1787742CB24FE83CBE246FB37F1F4CFB35AB3AF02F51C0B46FFFBB68648E4B491C895E4E97A64EE53F05E2AA5B9DA39D6D99AC093ED17AD358A9710E26105A4ABCB744539C3E9BE35A0C5E16715AD1B989E05EA6BA09F4943BA6CAFD85C78F9590D3F0E1B9FA4D02D1FD2CF8A96EA80ECD99F224AADE1CCD4B38C0B9057157CB7FA48A227FD08CDF90B27492AA102678035CFE7298F887277812BFE6704014C3A6E250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:34:a6:71:71:2d:a7:bd:f8:8c:19:ab:ea:
                    69:35:d0:05:7f:47:78:fb:c3:e1:59:85:13:97:a8:
                    bb:dd:89:6b:6c:6e:4e:29:8f:a9:96:39:37:78:78:
                    81:a7:8c:8f:2e:a3:3c:6b:99:9f:e3:7c:53:8a:f6:
                    c7:4c:e9:91:2f:a0:40:8e:50:7a:70:ce:ac:e0:d5:
                    1b:e6:c0:2e:ba:1d:49:f4:d3:3e:59:4b:0c:c3:4d:
                    88:83:2d:ba:b1:78:77:42:cb:24:fe:83:cb:e2:46:
                    fb:37:f1:f4:cf:b3:5a:b3:af:02:f5:1c:0b:46:ff:
                    fb:b6:86:48:e4:b4:91:c8:95:e4:e9:7a:64:ee:53:
                    f0:5e:2a:a5:b9:da:39:d6:d9:9a:c0:93:ed:17:ad:
                    35:8a:97:10:e2:61:05:a4:ab:cb:74:45:39:c3:e9:
                    be:35:a0:c5:e1:67:15:ad:1b:98:9e:05:ea:6b:a0:
                    9f:49:43:ba:6c:af:d8:5c:78:f9:59:0d:3f:0e:1b:
                    9f:a4:d0:2d:1f:d2:cf:8a:96:ea:80:ec:d9:9f:22:
                    4a:ad:e1:cc:d4:b3:8c:0b:90:57:15:7c:b7:fa:48:
                    a2:27:fd:08:cd:f9:0b:27:49:2a:a1:02:67:80:35:
                    cf:e7:29:8f:88:72:77:81:2b:fe:67:04:01:4c:3a:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E2:D3:8D:16:93:9A:4A:89:C2:B3:72:33:0B:E7:38:2E:F2:7E:C8
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:44:40:4d:85:72:70:1e:95:8a:fd:4b:ce:5b:15:02:9c:98:
         4e:f7:b6:ed:1c:c1:82:41:33:28:a8:1b:f3:0e:ec:a8:e4:94:
         7f:dd:96:aa:9a:e1:0b:2d:8b:a4:ea:48:53:ab:e8:75:f2:27:
         74:79:6a:63:9a:94:d6:4c:f8:50:00:a5:0c:61:7d:0d:3f:b1:
         f2:ca:cd:29:61:c1:2a:cb:92:70:2b:fd:41:1c:ad:5c:22:aa:
         2e:0e:94:d4:70:fd:d2:f1:10:40:3f:1f:0f:9e:62:f0:71:39:
         ab:fa:ce:5d:8c:e2:b6:49:4e:d4:e4:ae:3a:1a:9b:8c:0a:40:
         8e:d2:08:d5:c6:30:42:03:43:b3:db:9e:76:64:9d:ae:37:cb:
         5d:19:93:7f:43:de:e8:1e:e0:3f:73:9a:44:b7:78:7e:d5:01:
         92:58:d1:65:f8:c7:b6:83:bf:2d:62:ad:93:df:52:f7:ad:c4:
         7b:0e:f7:ef:a7:70:2a:c9:d7:da:c9:af:04:5d:26:60:9f:5d:
         44:29:7c:75:01:1c:12:86:fe:af:f0:54:73:bc:40:c3:d7:d9:
         aa:9d:a0:26:0b:b4:c2:ee:90:45:f5:d3:e5:7d:43:04:51:63:
         2d:06:3e:2f:69:41:fd:7c:8c:51:18:1b:c5:62:57:d7:71:77:
         f2:3a:db:ba
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUNPGlFbamsK7SxxQxWbMn1DCpB3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yMzExMjMxODU1MDBaFw0yNDExMjMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUU5RDM0QTY3MTcxMkRBN0JE
Rjg4QzE5QUJFQTY5MzVEMDA1N0Y0Nzc4RkJDM0UxNTk4NTEzOTdBOEJCREQ4OTZC
NkM2RTRFMjk4RkE5OTYzOTM3Nzg3ODgxQTc4QzhGMkVBMzNDNkI5OTlGRTM3QzUz
OEFGNkM3NENFOTkxMkZBMDQwOEU1MDdBNzBDRUFDRTBENTFCRTZDMDJFQkExRDQ5
RjREMzNFNTk0QjBDQzM0RDg4ODMyREJBQjE3ODc3NDJDQjI0RkU4M0NCRTI0NkZC
MzdGMUY0Q0ZCMzVBQjNBRjAyRjUxQzBCNDZGRkZCQjY4NjQ4RTRCNDkxQzg5NUU0
RTk3QTY0RUU1M0YwNUUyQUE1QjlEQTM5RDZEOTlBQzA5M0VEMTdBRDM1OEE5NzEw
RTI2MTA1QTRBQkNCNzQ0NTM5QzNFOUJFMzVBMEM1RTE2NzE1QUQxQjk4OUUwNUVB
NkJBMDlGNDk0M0JBNkNBRkQ4NUM3OEY5NTkwRDNGMEUxQjlGQTREMDJEMUZEMkNG
OEE5NkVBODBFQ0Q5OUYyMjRBQURFMUNDRDRCMzhDMEI5MDU3MTU3Q0I3RkE0OEEy
MjdGRDA4Q0RGOTBCMjc0OTJBQTEwMjY3ODAzNUNGRTcyOThGODg3Mjc3ODEyQkZF
NjcwNDAxNEMzQTZFMjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArp00pnFxLae9+IwZq+ppNdAFf0d4+8PhWYUTl6i73YlrbG5OKY+p
ljk3eHiBp4yPLqM8a5mf43xTivbHTOmRL6BAjlB6cM6s4NUb5sAuuh1J9NM+WUsM
w02Igy26sXh3Qssk/oPL4kb7N/H0z7Nas68C9RwLRv/7toZI5LSRyJXk6Xpk7lPw
Xiqludo51tmawJPtF601ipcQ4mEFpKvLdEU5w+m+NaDF4WcVrRuYngXqa6CfSUO6
bK/YXHj5WQ0/DhufpNAtH9LPipbqgOzZnyJKreHM1LOMC5BXFXy3+kiiJ/0IzfkL
J0kqoQJngDXP5ymPiHJ3gSv+ZwQBTDpuJQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGDi040Wk5pKicKzcjML5zgu8n7IMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMyMzgzMDM0M2E2MTY0MzgzYTNh
MmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBArY
ADANBgkqhkiG9w0BAQsFAAOCAQEAekRATYVycB6Viv1LzlsVApyYTve27RzBgkEz
KKgb8w7sqOSUf92WqprhCy2LpOpIU6vodfIndHlqY5qU1kz4UAClDGF9DT+x8srN
KWHBKsuScCv9QRytXCKqLg6U1HD90vEQQD8fD55i8HE5q/rOXYzitklO1OSuOhqb
jApAjtII1cYwQgNDs9uedmSdrjfLXRmTf0Pe6B7gP3OaRLd4ftUBkljRZfjHtoO/
LWKtk99S963Eew7376dwKsnX2smvBF0mYJ9dRCl8dQEcEob+r/BUc7xAw9fZqp2g
Jgu0wu6QRfXT5X1DBFFjLQY+L2lB/XyMURgbxWJX13F38jrbug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org