Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a343030303a3a2f33342d3334203d3e20323637343234.roa
File:                     323830343a343134343a343030303a3a2f33342d3334203d3e20323637343234.roa (raw, json)
Hash identifier:          VEnHuAPTGHFH//E1VtiWtJAwakqEq616yGTY8dozIfM=
Subject key identifier:   96:BE:E6:96:9B:9F:67:AE:51:84:2D:61:47:07:73:42:42:D5:F7:69
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       7FD683E3A681FCCD0E40D917C6170FB73E1C443C
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a343030303a3a2f33342d3334203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:40:00 +0000
ROA not before:           Mon 25 Sep 2023 21:35:00 +0000
ROA not after:            Mon 23 Sep 2024 21:40:00 +0000
asID:                     267424
IP address blocks:        2804:4144:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d6:83:e3:a6:81:fc:cd:0e:40:d9:17:c6:17:0f:b7:3e:1c:44:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:35:00 2023 GMT
            Not After : Sep 23 21:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:ab:4f:aa:a9:b5:99:d8:56:ac:e5:05:b5:
                    d0:78:d6:d1:22:3e:1a:b8:40:cd:1d:ba:14:d7:72:
                    bf:9c:d2:37:3b:4c:d4:e5:0a:d9:5e:2f:17:19:3e:
                    3d:ac:45:11:8b:24:1c:ec:3e:e7:30:fc:b2:24:b3:
                    45:3e:11:ad:49:a8:31:20:4d:b8:a5:74:8f:e3:94:
                    76:6b:f4:db:a9:1d:7b:8c:70:0d:53:e1:fc:1e:d8:
                    24:97:16:b7:f3:18:e6:fc:cc:5f:a7:a0:50:dc:62:
                    fa:89:4a:52:4c:fc:9c:58:bd:d0:83:0f:86:6a:d4:
                    8e:6a:ac:ac:ff:9d:c7:db:ae:d2:5d:fb:49:50:80:
                    6a:76:5f:be:ab:be:45:18:31:ba:d5:29:ef:9e:2f:
                    c8:fb:d6:2b:4e:78:02:14:46:bf:6e:77:6b:f6:91:
                    1a:a4:dd:0d:a9:2f:4c:50:b7:ed:49:98:3c:50:68:
                    48:00:6d:36:90:88:b1:1e:97:9b:0a:92:56:43:57:
                    6f:77:ec:a8:62:60:f7:f9:df:4e:91:99:0c:c4:1d:
                    1d:b1:dd:1d:f5:7c:72:66:b9:df:07:50:99:af:3c:
                    2a:b0:43:05:e4:3f:d1:33:51:a3:29:d1:45:54:8d:
                    9b:39:79:26:64:ea:67:f2:a6:a7:af:61:6c:48:33:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BE:E6:96:9B:9F:67:AE:51:84:2D:61:47:07:73:42:42:D5:F7:69
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a343030303a3a2f33342d3334203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4144:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:98:63:16:86:31:3d:58:57:35:15:7a:32:fa:fa:ec:ee:
         ff:cf:ec:29:1b:b4:74:3e:80:fe:53:ca:34:78:d2:6c:8e:88:
         3c:ff:09:d1:82:c2:50:17:ff:e6:ec:db:2d:59:16:4b:29:e8:
         15:87:ab:2b:f7:1c:75:e2:33:ad:c1:56:2f:5d:fa:28:9b:28:
         64:4e:fa:bf:30:99:b2:a6:8d:4b:f2:26:01:06:ac:ed:8b:9f:
         a4:4e:c6:05:42:a6:85:8f:0a:13:6e:9e:4f:01:53:b0:58:8d:
         60:ee:11:33:7f:54:0b:46:9c:42:3d:37:c6:20:82:cd:3c:2d:
         be:82:ea:ea:08:dd:88:2e:0c:a7:c2:77:1c:f0:3c:3e:90:aa:
         2e:c2:dc:a3:1b:c4:dc:9e:0b:f8:2b:f1:cb:3a:3b:3c:cd:53:
         4e:5f:78:9a:9a:d8:c4:cf:48:58:ab:23:6c:37:08:e2:d2:91:
         ed:5b:70:13:5a:c0:41:dd:be:35:ea:69:f5:4b:f0:40:0c:64:
         75:79:47:4f:c2:8e:74:3e:1b:1c:f2:fe:5c:76:51:0d:66:02:
         06:4a:10:31:03:23:b9:63:59:75:94:de:85:de:aa:07:93:5c:
         ef:b1:55:cc:f6:e5:d0:df:ce:f7:c4:00:82:b5:c4:25:30:5a:
         af:75:50:63
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUf9aD46aB/M0OQNkXxhcPtz4cRDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEMUU2OUY1NzgwN0MxRUQwMkNBNDU5NzFBRDE0RURB
MzkzMUYyRTAeFw0yMzA5MjUyMTM1MDBaFw0yNDA5MjMyMTQwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkZFQ0FCNEZBQUE5QjU5OUQ4
NTZBQ0U1MDVCNUQwNzhENkQxMjIzRTFBQjg0MENEMURCQTE0RDc3MkJGOUNEMjM3
M0I0Q0Q0RTUwQUQ5NUUyRjE3MTkzRTNEQUM0NTExOEIyNDFDRUMzRUU3MzBGQ0Iy
MjRCMzQ1M0UxMUFENDlBODMxMjA0REI4QTU3NDhGRTM5NDc2NkJGNERCQTkxRDdC
OEM3MDBENTNFMUZDMUVEODI0OTcxNkI3RjMxOEU2RkNDQzVGQTdBMDUwREM2MkZB
ODk0QTUyNENGQzlDNThCREQwODMwRjg2NkFENDhFNkFBQ0FDRkY5REM3REJBRUQy
NURGQjQ5NTA4MDZBNzY1RkJFQUJCRTQ1MTgzMUJBRDUyOUVGOUUyRkM4RkJENjJC
NEU3ODAyMTQ0NkJGNkU3NzZCRjY5MTFBQTRERDBEQTkyRjRDNTBCN0VENDk5ODND
NTA2ODQ4MDA2RDM2OTA4OEIxMUU5NzlCMEE5MjU2NDM1NzZGNzdFQ0E4NjI2MEY3
RjlERjRFOTE5OTBDQzQxRDFEQjFERDFERjU3QzcyNjZCOURGMDc1MDk5QUYzQzJB
QjA0MzA1RTQzRkQxMzM1MUEzMjlEMTQ1NTQ4RDlCMzk3OTI2NjRFQTY3RjJBNkE3
QUY2MTZDNDgzM0M3RDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv+yrT6qptZnYVqzlBbXQeNbRIj4auEDNHboU13K/nNI3O0zU5QrZ
Xi8XGT49rEURiyQc7D7nMPyyJLNFPhGtSagxIE24pXSP45R2a/TbqR17jHANU+H8
Htgklxa38xjm/Mxfp6BQ3GL6iUpSTPycWL3Qgw+GatSOaqys/53H267SXftJUIBq
dl++q75FGDG61Snvni/I+9YrTngCFEa/bndr9pEapN0NqS9MULftSZg8UGhIAG02
kIixHpebCpJWQ1dvd+yoYmD3+d9OkZkMxB0dsd0d9XxyZrnfB1CZrzwqsEMF5D/R
M1GjKdFFVI2bOXkmZOpn8qanr2FsSDPH1wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FJa+5pabn2euUYQtYUcHc0JC1fdpMB8GA1UdIwQYMBaAFKfR5p9XgHwe0CykWXGt
FO2jkx8uMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUyUmdqamc4eGp6TlFq
eG10dERMZDlDSGE4Z0ZQMTNxSFY0WjExb05YWVFLLzAvQTdEMUU2OUY1NzgwN0Mx
RUQwMkNBNDU5NzFBRDE0RURBMzkzMUYyRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BN0QxRTY5RjU3ODA3QzFFRDAyQ0E0NTk3MUFEMTRFREEzOTMx
RjJFLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81MlJnampnOHhqek5RanhtdHRE
TGQ5Q0hhOGdGUDEzcUhWNFoxMW9OWFlRSy8wLzMyMzgzMDM0M2EzNDMxMzQzNDNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzczNDMyMzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBEFEQDANBgkqhkiG9w0BAQsFAAOCAQEAK0GYYxaGMT1YVzUVejL6
+uzu/8/sKRu0dD6A/lPKNHjSbI6IPP8J0YLCUBf/5uzbLVkWSynoFYerK/ccdeIz
rcFWL136KJsoZE76vzCZsqaNS/ImAQas7YufpE7GBUKmhY8KE26eTwFTsFiNYO4R
M39UC0acQj03xiCCzTwtvoLq6gjdiC4Mp8J3HPA8PpCqLsLcoxvE3J4L+Cvxyzo7
PM1TTl94mprYxM9IWKsjbDcI4tKR7VtwE1rAQd2+Nepp9UvwQAxkdXlHT8KOdD4b
HPL+XHZRDWYCBkoQMQMjuWNZdZTehd6qB5Nc77FVzPbl0N/O98QAgrXEJTBar3VQ
Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org