Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a33643a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a33643a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          zW3SLkveTcJwvOMYckRySEsjAyrf36CENKb8WtldM0g=
Subject key identifier:   66:25:A3:D2:FB:07:27:68:41:9B:14:5A:1A:1E:2E:21:06:A3:52:15
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       08CCD0208070A1CF692663D616B06F00F1812459
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a33643a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:28:13 +0000
ROA not before:           Thu 20 Jul 2023 14:23:13 +0000
ROA not after:            Thu 18 Jul 2024 14:28:13 +0000
asID:                     52706
IP address blocks:        2804:c70:3d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cc:d0:20:80:70:a1:cf:69:26:63:d6:16:b0:6f:00:f1:81:24:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:23:13 2023 GMT
            Not After : Jul 18 14:28:13 2024 GMT
        Subject: CN=6625A3D2FB072768419B145A1A1E2E2106A35215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:60:9c:ea:2c:d1:15:ea:f0:14:c6:7b:5c:
                    b8:c1:b6:b5:87:99:04:84:dd:fe:cf:3f:61:0c:f8:
                    54:d4:63:d0:bd:05:02:09:17:b9:b8:30:55:e5:dd:
                    41:05:d1:9d:3d:cd:06:36:aa:f3:fb:6c:c0:b9:5b:
                    c9:ce:e4:38:21:ae:21:83:00:3b:b8:7f:ac:92:22:
                    6a:94:32:e7:39:3d:52:4e:14:40:f3:3b:59:4e:ac:
                    f6:f1:e4:d1:8e:28:a3:67:4f:a8:13:78:d3:51:75:
                    6b:0c:e6:02:97:16:c6:55:b7:27:cd:68:df:ff:85:
                    08:68:a3:88:93:1d:a2:fa:22:79:57:74:be:10:e9:
                    35:f2:b9:09:3a:92:9e:8f:c7:00:49:e4:27:8c:21:
                    21:c7:67:e5:e6:d5:33:49:eb:47:dd:d9:8a:27:bd:
                    12:e5:4d:16:a6:08:0f:5a:b2:0b:f2:7a:25:21:93:
                    ef:f2:f4:ea:42:d2:2c:6e:43:21:63:6d:9c:ea:5b:
                    56:c5:e6:d2:2b:5f:1f:8a:3f:47:f6:11:46:0a:cb:
                    30:3e:01:27:47:d0:81:b8:d9:9b:77:15:ee:0d:3a:
                    06:18:46:35:55:b0:13:76:22:cf:1b:ec:03:8e:fa:
                    6e:55:d9:6e:42:13:8c:5a:65:12:ce:1e:71:7e:4e:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:25:A3:D2:FB:07:27:68:41:9B:14:5A:1A:1E:2E:21:06:A3:52:15
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a33643a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:3d::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:16:59:99:8f:f6:9d:6a:89:fe:0b:fc:e1:56:da:5f:26:
         07:dc:54:d2:6b:98:d6:0b:82:58:a6:48:79:2f:d8:3b:61:0c:
         8f:50:ab:24:24:1c:06:69:21:6d:89:94:8f:ce:62:4b:e2:51:
         3e:9b:1e:f3:4a:47:0d:39:ac:c2:97:1d:a8:a4:c0:ae:73:98:
         86:32:54:b4:4b:13:94:5d:40:1e:14:34:89:f8:50:c5:d9:5f:
         58:f1:0b:dc:05:77:30:8f:92:8f:04:c9:a4:ed:58:fe:86:2f:
         bd:80:0f:c6:c8:cd:ec:f3:b0:10:3b:57:d0:cc:43:e7:6c:9e:
         e1:35:fe:8d:c8:9f:ce:55:2c:d3:a1:ba:e6:6c:7e:4d:ce:1a:
         17:61:d7:f5:0a:be:3c:a9:f4:ef:29:ae:f3:e7:15:5c:b6:72:
         cf:b5:18:7f:5a:6d:3b:14:85:15:38:1c:63:d9:13:19:ba:50:
         66:60:50:f5:cc:a9:0a:0e:6a:96:3e:24:f1:d4:84:d9:c2:6c:
         10:08:58:59:e4:c6:82:4d:bb:73:bc:46:db:72:58:63:3b:ac:
         41:53:89:74:eb:d9:09:50:09:1e:94:f2:65:ca:fe:19:9a:6f:
         0b:eb:7b:a0:67:25:6d:f8:b2:c7:b3:eb:62:1f:92:47:47:f3:
         d3:b8:62:17
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUCMzQIIBwoc9pJmPWFrBvAPGBJFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxNDIzMTNaFw0yNDA3MTgxNDI4MTNaMDMxMTAvBgNV
BAMTKDY2MjVBM0QyRkIwNzI3Njg0MTlCMTQ1QTFBMUUyRTIxMDZBMzUyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcWCc6izRFerwFMZ7XLjBtrWH
mQSE3f7PP2EM+FTUY9C9BQIJF7m4MFXl3UEF0Z09zQY2qvP7bMC5W8nO5DghriGD
ADu4f6ySImqUMuc5PVJOFEDzO1lOrPbx5NGOKKNnT6gTeNNRdWsM5gKXFsZVtyfN
aN//hQhoo4iTHaL6InlXdL4Q6TXyuQk6kp6PxwBJ5CeMISHHZ+Xm1TNJ60fd2Yon
vRLlTRamCA9asgvyeiUhk+/y9OpC0ixuQyFjbZzqW1bF5tIrXx+KP0f2EUYKyzA+
ASdH0IG42Zt3Fe4NOgYYRjVVsBN2Is8b7AOO+m5V2W5CE4xaZRLOHnF+TmMvAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUZiWj0vsHJ2hBmxRaGh4uIQajUhUwHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzM2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1
MzIzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBAxwAD0wDQYJKoZIhvcNAQELBQADggEBAIBP
FlmZj/adaon+C/zhVtpfJgfcVNJrmNYLglimSHkv2DthDI9QqyQkHAZpIW2JlI/O
YkviUT6bHvNKRw05rMKXHaikwK5zmIYyVLRLE5RdQB4UNIn4UMXZX1jxC9wFdzCP
ko8EyaTtWP6GL72AD8bIzezzsBA7V9DMQ+dsnuE1/o3In85VLNOhuuZsfk3OGhdh
1/UKvjyp9O8prvPnFVy2cs+1GH9abTsUhRU4HGPZExm6UGZgUPXMqQoOapY+JPHU
hNnCbBAIWFnkxoJNu3O8RttyWGM7rEFTiXTr2QlQCR6U8mXK/hmabwvre6BnJW34
ssez62IfkkdH89O4Yhc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org