Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/323830343a333963303a3a2f33322d3334203d3e20323636303438.roa
File:                     323830343a333963303a3a2f33322d3334203d3e20323636303438.roa (raw, json)
Hash identifier:          aOrvZEctPUHXblMBikBLpHmIJqlyQA73bW6bwPb2jpE=
Subject key identifier:   49:5F:96:40:B5:ED:F9:B1:EC:C1:C8:7F:FB:E6:1F:89:76:68:43:8E
Certificate issuer:       /CN=75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE
Certificate serial:       7DC1E4B359BEF7DE9862FCA7C63B6957ECC64856
Authority key identifier: 75:92:9E:53:33:E7:D7:81:D3:AC:3F:C1:DE:1E:5B:A2:E9:74:B0:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/323830343a333963303a3a2f33322d3334203d3e20323636303438.roa
Signing time:             Mon 04 Jul 2022 21:00:00 +0000
ROA not before:           Mon 04 Jul 2022 20:55:00 +0000
ROA not after:            Mon 03 Jul 2023 21:00:00 +0000
asID:                     266048
IP address blocks:        2804:39c0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c1:e4:b3:59:be:f7:de:98:62:fc:a7:c6:3b:69:57:ec:c6:48:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE
        Validity
            Not Before: Jul  4 20:55:00 2022 GMT
            Not After : Jul  3 21:00:00 2023 GMT
        Subject: CN=3082010A0282010100E65C7894E613345307FBC00C32E9896B26443AC4123C8D2A920CA902EFCF35A57ED0DE30FD89978A1C5FFD8A998BCA6200F344E2942DF62F0D369037F494B4A71531FC6B50E732379E0D8653E7FA5BF87CB7084CCFF092D492F3F467C0C75F292179466E0689B0A730AC41CA01E93CCFE7A938F1B0C9D9D8390664A39C565881286E9B8C7F744FA1131D60BAC08099FEAC123BB5C531F3FA58CE631E34187D6181D7673EC885E58945B748160CC82DEDDEC8FCC0F68BC3C53A0BB7BA6E57D555F33929E9A0BF569399C61A628FC63B5F8F938BF92B37B50451D8A858E568573DF40D38F47913AD564A8FF21AC1571875B301D015326613BCE88B349D8BC0F3370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:78:94:e6:13:34:53:07:fb:c0:0c:32:e9:
                    89:6b:26:44:3a:c4:12:3c:8d:2a:92:0c:a9:02:ef:
                    cf:35:a5:7e:d0:de:30:fd:89:97:8a:1c:5f:fd:8a:
                    99:8b:ca:62:00:f3:44:e2:94:2d:f6:2f:0d:36:90:
                    37:f4:94:b4:a7:15:31:fc:6b:50:e7:32:37:9e:0d:
                    86:53:e7:fa:5b:f8:7c:b7:08:4c:cf:f0:92:d4:92:
                    f3:f4:67:c0:c7:5f:29:21:79:46:6e:06:89:b0:a7:
                    30:ac:41:ca:01:e9:3c:cf:e7:a9:38:f1:b0:c9:d9:
                    d8:39:06:64:a3:9c:56:58:81:28:6e:9b:8c:7f:74:
                    4f:a1:13:1d:60:ba:c0:80:99:fe:ac:12:3b:b5:c5:
                    31:f3:fa:58:ce:63:1e:34:18:7d:61:81:d7:67:3e:
                    c8:85:e5:89:45:b7:48:16:0c:c8:2d:ed:de:c8:fc:
                    c0:f6:8b:c3:c5:3a:0b:b7:ba:6e:57:d5:55:f3:39:
                    29:e9:a0:bf:56:93:99:c6:1a:62:8f:c6:3b:5f:8f:
                    93:8b:f9:2b:37:b5:04:51:d8:a8:58:e5:68:57:3d:
                    f4:0d:38:f4:79:13:ad:56:4a:8f:f2:1a:c1:57:18:
                    75:b3:01:d0:15:32:66:13:bc:e8:8b:34:9d:8b:c0:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:96:40:B5:ED:F9:B1:EC:C1:C8:7F:FB:E6:1F:89:76:68:43:8E
            X509v3 Authority Key Identifier:
                keyid:75:92:9E:53:33:E7:D7:81:D3:AC:3F:C1:DE:1E:5B:A2:E9:74:B0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75929E5333E7D781D3AC3FC1DE1E5BA2E974B0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/323830343a333963303a3a2f33322d3334203d3e20323636303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:46:db:a2:f2:93:1e:d9:c7:c4:d4:5a:72:90:87:73:85:
         48:22:72:1f:35:74:64:dd:a1:cd:17:7a:1d:d2:4b:f0:c9:a8:
         6b:8b:57:5e:10:5a:57:c1:1f:0b:1d:79:ee:e6:59:59:5e:80:
         6c:ae:28:86:af:16:19:f9:e0:9e:27:44:72:c3:d4:ee:03:24:
         ae:39:3d:0e:7d:63:a9:88:d7:c9:25:2f:f2:9e:27:fe:04:8a:
         24:9d:f1:f4:7e:73:4e:1f:34:86:b5:95:24:f8:57:ea:37:18:
         a8:c4:55:99:b8:9f:33:8b:c6:1d:e5:62:fe:64:27:a7:48:11:
         af:60:ad:f0:1c:d4:7d:53:e9:98:97:54:af:a6:98:ff:a5:02:
         7b:32:59:47:ab:38:10:02:59:72:f2:b2:b8:f2:e5:8c:cd:cc:
         b8:7a:33:4b:cf:25:16:30:b4:d2:99:92:25:df:ff:ce:d4:d4:
         22:ae:8d:f8:4f:98:7e:2b:1a:8a:40:db:b9:c2:4b:4f:1f:14:
         7f:65:b4:ab:a8:12:fa:f5:17:63:6f:e8:d0:24:a5:f9:64:2c:
         70:bf:64:3a:00:a3:3b:95:15:38:de:eb:b5:a8:b8:da:44:6c:
         b2:0e:8f:12:30:65:6a:95:38:9a:fd:63:73:67:de:4a:85:4c:
         3c:49:82:23
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUfcHks1m+996YYvynxjtpV+zGSFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5MjlFNTMzM0U3RDc4MUQzQUMzRkMxREUxRTVCQTJF
OTc0QjBGRTAeFw0yMjA3MDQyMDU1MDBaFw0yMzA3MDMyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTY1Qzc4OTRFNjEzMzQ1MzA3
RkJDMDBDMzJFOTg5NkIyNjQ0M0FDNDEyM0M4RDJBOTIwQ0E5MDJFRkNGMzVBNTdF
RDBERTMwRkQ4OTk3OEExQzVGRkQ4QTk5OEJDQTYyMDBGMzQ0RTI5NDJERjYyRjBE
MzY5MDM3RjQ5NEI0QTcxNTMxRkM2QjUwRTczMjM3OUUwRDg2NTNFN0ZBNUJGODdD
QjcwODRDQ0ZGMDkyRDQ5MkYzRjQ2N0MwQzc1RjI5MjE3OTQ2NkUwNjg5QjBBNzMw
QUM0MUNBMDFFOTNDQ0ZFN0E5MzhGMUIwQzlEOUQ4MzkwNjY0QTM5QzU2NTg4MTI4
NkU5QjhDN0Y3NDRGQTExMzFENjBCQUMwODA5OUZFQUMxMjNCQjVDNTMxRjNGQTU4
Q0U2MzFFMzQxODdENjE4MUQ3NjczRUM4ODVFNTg5NDVCNzQ4MTYwQ0M4MkRFRERF
QzhGQ0MwRjY4QkMzQzUzQTBCQjdCQTZFNTdENTU1RjMzOTI5RTlBMEJGNTY5Mzk5
QzYxQTYyOEZDNjNCNUY4RjkzOEJGOTJCMzdCNTA0NTFEOEE4NThFNTY4NTczREY0
MEQzOEY0NzkxM0FENTY0QThGRjIxQUMxNTcxODc1QjMwMUQwMTUzMjY2MTNCQ0U4
OEIzNDlEOEJDMEYzMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5lx4lOYTNFMH+8AMMumJayZEOsQSPI0qkgypAu/PNaV+0N4w/YmX
ihxf/YqZi8piAPNE4pQt9i8NNpA39JS0pxUx/GtQ5zI3ng2GU+f6W/h8twhMz/CS
1JLz9GfAx18pIXlGbgaJsKcwrEHKAek8z+epOPGwydnYOQZko5xWWIEobpuMf3RP
oRMdYLrAgJn+rBI7tcUx8/pYzmMeNBh9YYHXZz7IheWJRbdIFgzILe3eyPzA9ovD
xToLt7puV9VV8zkp6aC/VpOZxhpij8Y7X4+Ti/krN7UEUdioWOVoVz30DTj0eROt
VkqP8hrBVxh1swHQFTJmE7zoizSdi8DzNwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FElflkC17fmx7MHIf/vmH4l2aEOOMB8GA1UdIwQYMBaAFHWSnlMz59eB06w/wd4e
W6LpdLD+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRpUHhMQzNnV3dkanJy
UW1UTFpic1p1MWVWV2ZMcXl2WDFZbkdXNk40UDU2LzAvNzU5MjlFNTMzM0U3RDc4
MUQzQUMzRkMxREUxRTVCQTJFOTc0QjBGRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NTkyOUU1MzMzRTdENzgxRDNBQzNGQzFERTFFNUJBMkU5NzRC
MEZFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80aVB4TEMzZ1d3ZGpyclFtVExa
YnNadTFlVldmTHF5dlgxWW5HVzZONFA1Ni8wLzMyMzgzMDM0M2EzMzM5NjMzMDNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNjMwMzQzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
OcAwDQYJKoZIhvcNAQELBQADggEBAAewRtui8pMe2cfE1FpykIdzhUgich81dGTd
oc0Xeh3SS/DJqGuLV14QWlfBHwsdee7mWVlegGyuKIavFhn54J4nRHLD1O4DJK45
PQ59Y6mI18klL/KeJ/4EiiSd8fR+c04fNIa1lST4V+o3GKjEVZm4nzOLxh3lYv5k
J6dIEa9grfAc1H1T6ZiXVK+mmP+lAnsyWUerOBACWXLysrjy5YzNzLh6M0vPJRYw
tNKZkiXf/87U1CKujfhPmH4rGopA27nCS08fFH9ltKuoEvr1F2Nv6NAkpflkLHC/
ZDoAozuVFTje67WouNpEbLIOjxIwZWqVOJr9Y3Nn3kqFTDxJgiM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org