Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3438203d3e203532373036.roa
File:                     323830343a6337303a3a2f33322d3438203d3e203532373036.roa (raw, json)
Hash identifier:          ft3RX1STvXSeNyO0GzFRsygISlh/b7ssUE3fLHPpbHQ=
Subject key identifier:   3F:2D:FC:EB:1A:E8:63:BB:EA:DB:68:60:7F:63:42:38:29:97:55:18
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       09AB2DB4FD23131DA516B630E7A57291FCF71220
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3438203d3e203532373036.roa
Signing time:             Fri 14 Jul 2023 20:12:16 +0000
ROA not before:           Fri 14 Jul 2023 20:07:16 +0000
ROA not after:            Fri 12 Jul 2024 20:12:16 +0000
asID:                     52706
IP address blocks:        2804:c70::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:2d:b4:fd:23:13:1d:a5:16:b6:30:e7:a5:72:91:fc:f7:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 14 20:07:16 2023 GMT
            Not After : Jul 12 20:12:16 2024 GMT
        Subject: CN=3F2DFCEB1AE863BBEADB68607F63423829975518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:84:78:42:6b:93:30:8a:c8:c0:dc:c3:36:
                    29:0a:57:6b:b1:5c:76:97:ac:43:7e:ab:22:8e:f9:
                    aa:dd:7c:8a:79:87:71:4d:6b:65:35:13:f9:84:31:
                    3f:12:2f:53:44:82:2f:5d:28:e8:1d:14:84:f0:d7:
                    dc:9a:e7:52:ce:aa:61:23:dd:21:b2:fc:58:1f:74:
                    d3:0d:a1:de:6b:4f:a2:d6:ef:ed:c6:05:c1:e9:d5:
                    6a:27:7b:04:45:c5:02:c0:90:f2:bd:ed:c0:0e:12:
                    9b:b1:0a:e0:30:ab:74:56:13:7c:56:15:8e:f9:b4:
                    4f:11:c2:2a:03:02:c1:4f:54:bb:20:48:2d:73:48:
                    64:1c:7c:cd:ca:ed:1d:94:d4:b4:82:5f:88:81:c5:
                    e8:7b:7d:4f:c0:ea:14:57:61:1b:de:47:55:d0:48:
                    90:e0:48:1d:19:11:4d:47:0e:62:59:63:db:96:48:
                    a9:74:2b:27:c6:59:5a:3a:93:f6:0e:b3:f6:2b:7d:
                    a2:42:af:38:e1:91:35:73:51:77:f0:f4:52:2a:8a:
                    30:f7:4c:5f:d1:74:f3:1d:45:8d:8e:6e:aa:75:71:
                    e9:5c:a7:01:1b:2a:5b:4c:33:ed:96:08:0d:ef:be:
                    26:43:ad:5d:5e:83:79:77:01:54:64:56:21:33:59:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:FC:EB:1A:E8:63:BB:EA:DB:68:60:7F:63:42:38:29:97:55:18
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:34:07:5e:85:72:7c:02:58:e3:cd:15:fc:33:27:5d:7e:50:
         16:af:bf:5e:7b:73:e3:fe:99:4e:da:d5:a4:c5:2f:50:8b:17:
         d3:3c:f9:bd:31:96:35:03:8d:4d:fc:25:53:f4:9f:ed:b1:de:
         13:d2:49:03:43:0d:a5:78:93:d0:ca:33:70:46:ef:0c:31:c9:
         11:67:cb:b5:7a:e6:d5:2d:3f:dc:7c:96:ee:32:9c:a8:6d:e0:
         91:87:c1:fc:a1:8d:75:28:c6:7f:2a:06:73:6e:95:a6:fe:3e:
         0e:d3:8c:00:19:3f:08:f5:cd:56:ff:bd:82:91:3d:1c:2d:41:
         d2:2a:b5:ce:1a:b6:2f:69:c5:49:95:b3:f2:f6:39:b2:e3:50:
         44:61:02:bf:a8:c3:b2:5a:45:96:c7:86:15:f6:ba:b3:4a:8a:
         45:d1:1f:f4:48:5a:f1:6b:37:a9:d2:29:71:bf:e9:83:44:5a:
         01:79:d3:da:04:53:40:ad:34:dd:48:d8:b3:73:98:a8:57:65:
         75:6d:6d:23:17:b9:6d:b2:eb:ef:0e:1e:90:e3:7a:83:50:e9:
         cc:79:9f:01:62:26:46:ed:fc:47:9e:5e:f1:dc:2d:bb:91:8d:
         7e:87:c6:2f:af:68:a9:42:e8:64:e8:35:9c:88:9a:79:b9:bf:
         0c:8c:af:ed
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUCasttP0jEx2lFrYw56Vykfz3EiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MTQyMDA3MTZaFw0yNDA3MTIyMDEyMTZaMDMxMTAvBgNV
BAMTKDNGMkRGQ0VCMUFFODYzQkJFQURCNjg2MDdGNjM0MjM4Mjk5NzU1MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPIR4QmuTMIrIwNzDNikKV2ux
XHaXrEN+qyKO+ardfIp5h3FNa2U1E/mEMT8SL1NEgi9dKOgdFITw19ya51LOqmEj
3SGy/FgfdNMNod5rT6LW7+3GBcHp1WonewRFxQLAkPK97cAOEpuxCuAwq3RWE3xW
FY75tE8RwioDAsFPVLsgSC1zSGQcfM3K7R2U1LSCX4iBxeh7fU/A6hRXYRveR1XQ
SJDgSB0ZEU1HDmJZY9uWSKl0KyfGWVo6k/YOs/YrfaJCrzjhkTVzUXfw9FIqijD3
TF/RdPMdRY2Obqp1celcpwEbKltMM+2WCA3vviZDrV1eg3l3AVRkViEzWSnRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUPy386xroY7vq22hgf2NCOCmXVRgwHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNzMw
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAxwMA0GCSqGSIb3DQEBCwUAA4IBAQCnNAdehXJ8Aljj
zRX8MyddflAWr79ee3Pj/plO2tWkxS9QixfTPPm9MZY1A41N/CVT9J/tsd4T0kkD
Qw2leJPQyjNwRu8MMckRZ8u1eubVLT/cfJbuMpyobeCRh8H8oY11KMZ/KgZzbpWm
/j4O04wAGT8I9c1W/72CkT0cLUHSKrXOGrYvacVJlbPy9jmy41BEYQK/qMOyWkWW
x4YV9rqzSopF0R/0SFrxazep0ilxv+mDRFoBedPaBFNArTTdSNizc5ioV2V1bW0j
F7ltsuvvDh6Q43qDUOnMeZ8BYiZG7fxHnl7x3C27kY1+h8Yvr2ipQuhk6DWciJp5
ub8MjK/t
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org