Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a3a2f33322d3332203d3e20323637343234.roa
File:                     323830343a343134343a3a2f33322d3332203d3e20323637343234.roa (raw, json)
Hash identifier:          bwryJgG2vd28lAUOOtfEP6p1L6BAYc+Md9ZNWJXh6uc=
Subject key identifier:   48:A0:48:F2:72:F4:F3:1F:EF:56:80:09:03:BE:8D:CA:DF:41:13:F0
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       2F9ED221A837D4D2CEC8EC6C81EB0BD199C7B23C
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a3a2f33322d3332203d3e20323637343234.roa
Signing time:             Mon 25 Sep 2023 21:38:00 +0000
ROA not before:           Mon 25 Sep 2023 21:33:00 +0000
ROA not after:            Mon 23 Sep 2024 21:38:00 +0000
asID:                     267424
IP address blocks:        2804:4144::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9e:d2:21:a8:37:d4:d2:ce:c8:ec:6c:81:eb:0b:d1:99:c7:b2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Sep 25 21:33:00 2023 GMT
            Not After : Sep 23 21:38:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:7d:41:32:54:53:cf:75:4f:e7:40:46:90:
                    b3:4e:c7:63:0d:dd:c7:46:7f:4c:bf:ae:50:43:0d:
                    6f:2f:61:cf:f1:17:54:55:e0:54:b6:37:a6:d1:1e:
                    1e:58:f5:da:29:aa:21:c1:30:65:24:52:d5:f6:f7:
                    af:74:a1:4c:04:8a:96:28:5e:36:40:55:f9:f5:ad:
                    b1:c4:df:fd:83:70:99:d1:b9:35:6e:ef:66:e4:ba:
                    d7:04:47:72:98:5e:8a:33:ac:b0:90:7a:46:92:94:
                    a9:66:76:a2:b4:70:b9:b6:a4:fc:97:f1:45:b7:fd:
                    74:54:61:70:c7:e8:0b:d0:41:2c:fd:32:45:9c:11:
                    cc:f3:02:e4:15:f3:dc:ef:be:cd:64:10:3a:72:75:
                    99:dc:b1:94:02:61:3c:35:3c:19:10:94:1c:34:fa:
                    e4:a4:83:e6:7d:a4:98:1f:80:19:7e:5a:f2:d2:55:
                    0d:93:68:10:b1:ba:75:e0:67:85:e3:98:69:1b:b6:
                    b8:38:30:0c:34:70:e1:ad:87:f7:a3:9d:bf:e6:98:
                    4b:29:3f:c9:07:16:cc:ec:f5:c0:3a:94:52:30:99:
                    92:de:9a:99:0d:60:bb:fe:3b:52:0c:6b:46:13:30:
                    1c:19:d7:3d:f4:ff:66:b3:04:d8:a7:f2:1e:9d:ff:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:48:F2:72:F4:F3:1F:EF:56:80:09:03:BE:8D:CA:DF:41:13:F0
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/323830343a343134343a3a2f33322d3332203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4144::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:bb:a2:00:2e:00:1f:5f:0c:5a:44:f7:9e:80:a3:41:91:82:
         b1:fc:c0:1e:b5:7b:4d:33:68:4d:d0:fc:07:c8:58:e1:f6:43:
         1b:40:c5:ed:30:54:d3:43:fd:03:15:62:fb:8b:d8:54:70:91:
         88:34:d5:aa:7d:ae:9d:b1:51:77:38:5f:2f:e2:59:da:87:21:
         4d:a9:45:b4:35:c1:de:81:9f:72:09:c7:21:69:80:4d:75:0e:
         8a:94:93:9a:05:62:73:01:21:9a:5c:91:a4:a5:fd:5b:3f:81:
         2d:03:9b:9e:88:bb:ea:a5:32:84:b1:8e:24:54:9b:eb:f6:70:
         59:de:c9:03:7a:98:77:a0:04:fa:82:c0:a5:65:28:61:55:29:
         95:e9:c8:bf:3e:20:e4:b0:9c:d5:4e:dc:ee:97:5d:fd:6f:72:
         ec:f1:06:2e:f2:77:9a:f5:8b:3f:5b:dd:9d:fa:e9:82:01:7f:
         52:12:e5:48:c7:c6:d8:db:f6:24:65:df:71:dc:09:f4:aa:33:
         73:28:ff:c6:c4:50:a8:4f:04:c9:46:3a:a3:e3:d0:1b:cd:39:
         12:c3:cf:03:f6:7d:47:4a:0e:da:6c:c7:b7:50:a0:1c:8c:5e:
         10:36:75:3e:4f:ad:8c:05:d9:3a:aa:1f:00:84:52:3c:aa:6c:
         53:e9:2c:82
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUL57SIag31NLOyOxsgesL0ZnHsjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEMUU2OUY1NzgwN0MxRUQwMkNBNDU5NzFBRDE0RURB
MzkzMUYyRTAeFw0yMzA5MjUyMTMzMDBaFw0yNDA5MjMyMTM4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDA0RTdENDEzMjU0NTNDRjc1
NEZFNzQwNDY5MEIzNEVDNzYzMEREREM3NDY3RjRDQkZBRTUwNDMwRDZGMkY2MUNG
RjExNzU0NTVFMDU0QjYzN0E2RDExRTFFNThGNURBMjlBQTIxQzEzMDY1MjQ1MkQ1
RjZGN0FGNzRBMTRDMDQ4QTk2Mjg1RTM2NDA1NUY5RjVBREIxQzRERkZEODM3MDk5
RDFCOTM1NkVFRjY2RTRCQUQ3MDQ0NzcyOTg1RThBMzNBQ0IwOTA3QTQ2OTI5NEE5
NjY3NkEyQjQ3MEI5QjZBNEZDOTdGMTQ1QjdGRDc0NTQ2MTcwQzdFODBCRDA0MTJD
RkQzMjQ1OUMxMUNDRjMwMkU0MTVGM0RDRUZCRUNENjQxMDNBNzI3NTk5RENCMTk0
MDI2MTNDMzUzQzE5MTA5NDFDMzRGQUU0QTQ4M0U2N0RBNDk4MUY4MDE5N0U1QUYy
RDI1NTBEOTM2ODEwQjFCQTc1RTA2Nzg1RTM5ODY5MUJCNkI4MzgzMDBDMzQ3MEUx
QUQ4N0Y3QTM5REJGRTY5ODRCMjkzRkM5MDcxNkNDRUNGNUMwM0E5NDUyMzA5OTky
REU5QTk5MEQ2MEJCRkUzQjUyMEM2QjQ2MTMzMDFDMTlENzNERjRGRjY2QjMwNEQ4
QTdGMjFFOURGRjMzNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0E59QTJUU891T+dARpCzTsdjDd3HRn9Mv65QQw1vL2HP8RdUVeBU
tjem0R4eWPXaKaohwTBlJFLV9vevdKFMBIqWKF42QFX59a2xxN/9g3CZ0bk1bu9m
5LrXBEdymF6KM6ywkHpGkpSpZnaitHC5tqT8l/FFt/10VGFwx+gL0EEs/TJFnBHM
8wLkFfPc777NZBA6cnWZ3LGUAmE8NTwZEJQcNPrkpIPmfaSYH4AZflry0lUNk2gQ
sbp14GeF45hpG7a4ODAMNHDhrYf3o52/5phLKT/JBxbM7PXAOpRSMJmS3pqZDWC7
/jtSDGtGEzAcGdc99P9mswTYp/Ienf8zSQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FEigSPJy9PMf71aACQO+jcrfQRPwMB8GA1UdIwQYMBaAFKfR5p9XgHwe0CykWXGt
FO2jkx8uMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUyUmdqamc4eGp6TlFq
eG10dERMZDlDSGE4Z0ZQMTNxSFY0WjExb05YWVFLLzAvQTdEMUU2OUY1NzgwN0Mx
RUQwMkNBNDU5NzFBRDE0RURBMzkzMUYyRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BN0QxRTY5RjU3ODA3QzFFRDAyQ0E0NTk3MUFEMTRFREEzOTMx
RjJFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81MlJnampnOHhqek5RanhtdHRE
TGQ5Q0hhOGdGUDEzcUhWNFoxMW9OWFlRSy8wLzMyMzgzMDM0M2EzNDMxMzQzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM0MzIzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
QUQwDQYJKoZIhvcNAQELBQADggEBAJ27ogAuAB9fDFpE956Ao0GRgrH8wB61e00z
aE3Q/AfIWOH2QxtAxe0wVNND/QMVYvuL2FRwkYg01ap9rp2xUXc4Xy/iWdqHIU2p
RbQ1wd6Bn3IJxyFpgE11DoqUk5oFYnMBIZpckaSl/Vs/gS0Dm56Iu+qlMoSxjiRU
m+v2cFneyQN6mHegBPqCwKVlKGFVKZXpyL8+IOSwnNVO3O6XXf1vcuzxBi7yd5r1
iz9b3Z366YIBf1IS5UjHxtjb9iRl33HcCfSqM3Mo/8bEUKhPBMlGOqPj0BvNORLD
zwP2fUdKDtpsx7dQoByMXhA2dT5PrYwF2TqqHwCEUjyqbFPpLII=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org