Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          +6Hab0ShJ2pWHDnFuhreonlbTCB5SRL/kzbaYji++gM=
Subject key identifier:   B4:D1:34:4D:92:DE:FA:C6:72:A3:C3:FF:2F:90:2F:AA:31:EE:CF:08
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       70C1C55B677BCD70FC17BD3DE92DBB24063F1116
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:27 +0000
ROA not before:           Sat 11 Nov 2023 20:54:27 +0000
ROA not after:            Sat 09 Nov 2024 20:59:27 +0000
asID:                     267027
IP address blocks:        2804:4708:c800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c1:c5:5b:67:7b:cd:70:fc:17:bd:3d:e9:2d:bb:24:06:3f:11:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:27 2023 GMT
            Not After : Nov  9 20:59:27 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:55:b7:31:59:47:99:2c:da:38:d1:4a:37:
                    d6:24:b7:cc:10:f2:07:8a:55:38:c9:b2:23:62:91:
                    6f:93:99:8b:e2:9b:e7:ea:5f:12:d2:45:1a:28:e6:
                    5a:0f:5d:a7:ad:fa:57:13:38:ff:30:02:7e:ea:a0:
                    f3:00:a0:d6:f0:b6:cd:17:98:8d:4f:b1:01:c4:98:
                    c3:c0:d5:a6:63:85:4c:77:67:ad:a2:69:21:8a:c8:
                    bc:4e:69:fe:b9:93:0f:57:50:53:68:4b:0c:23:4d:
                    10:a4:03:07:ee:fb:8e:37:de:6c:85:db:46:5e:9a:
                    27:5b:6b:0a:67:02:4f:5d:2d:56:c7:75:84:d5:4e:
                    1c:26:76:43:f6:6c:c2:e1:87:c6:d1:68:2d:21:ab:
                    1f:7b:df:80:ca:bc:6e:6a:f7:be:c9:6c:01:38:1a:
                    3f:b2:05:50:f8:de:f1:45:4d:8e:2b:49:df:46:14:
                    65:c9:dd:a4:e8:e9:a8:57:66:78:af:e4:9f:9d:da:
                    c7:09:b4:a9:f9:f2:25:72:f1:ca:b9:54:31:60:25:
                    ac:f9:32:d3:ed:32:53:37:1d:fd:b1:8d:0f:71:c1:
                    db:d9:bb:f3:5c:e2:45:57:4b:88:4b:ee:66:50:4d:
                    ce:88:68:7d:05:d3:65:f7:f3:a7:0d:90:21:8a:55:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D1:34:4D:92:DE:FA:C6:72:A3:C3:FF:2F:90:2F:AA:31:EE:CF:08
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         1e:c4:e1:c6:23:48:c1:a4:77:08:ae:99:d7:a3:87:f4:10:64:
         c9:34:3e:06:d4:bf:bc:81:38:47:3c:9e:97:88:04:62:e0:9d:
         9c:ed:4f:8c:ed:0b:0c:ad:d4:8b:5c:96:64:2c:82:66:88:bb:
         38:18:4f:5b:8d:9c:88:b5:12:81:27:ec:85:1e:6d:23:2a:02:
         0e:0c:ce:3e:3f:90:6d:b7:bf:c7:15:d7:34:b0:22:b2:cd:3a:
         42:cd:cf:91:fa:21:ca:32:46:82:81:b9:08:b4:e9:3b:74:2a:
         48:08:0d:63:2e:05:71:a7:03:e1:ff:97:a0:3d:9d:1b:1c:8f:
         7c:dd:18:d4:06:51:15:f2:a7:f9:85:17:73:c3:b5:ea:ed:1c:
         77:3d:ab:8d:c9:7d:e9:c8:df:54:5e:24:0e:e8:83:5e:1f:ea:
         83:0a:48:c8:50:f1:a3:4d:a3:38:ba:89:21:5f:7b:00:bb:1c:
         95:81:0a:d2:94:be:9e:67:c6:5e:4a:54:3c:67:e1:ca:b7:19:
         31:fb:a5:4a:f8:04:72:5c:ca:4d:51:3b:ce:49:e7:6e:32:2a:
         4d:f5:80:7a:48:e3:ca:f8:e1:4b:08:85:ba:70:d4:e1:98:ca:
         9b:85:71:7a:7c:18:24:f0:2c:0f:05:23:c5:2f:e4:20:50:0b:
         d5:b0:9f:89
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUcMHFW2d7zXD8F7096S27JAY/ERYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc3Njc1NEEyQzhCMTAwMjE4QjA2MUFBNzlCRTkxODZG
MTkxNTAwRDAeFw0yMzExMTEyMDU0MjdaFw0yNDExMDkyMDU5MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOThERDU1QjczMTU5NDc5OTJD
REEzOEQxNEEzN0Q2MjRCN0NDMTBGMjA3OEE1NTM4QzlCMjIzNjI5MTZGOTM5OThC
RTI5QkU3RUE1RjEyRDI0NTFBMjhFNjVBMEY1REE3QURGQTU3MTMzOEZGMzAwMjdF
RUFBMEYzMDBBMEQ2RjBCNkNEMTc5ODhENEZCMTAxQzQ5OEMzQzBENUE2NjM4NTRD
Nzc2N0FEQTI2OTIxOEFDOEJDNEU2OUZFQjk5MzBGNTc1MDUzNjg0QjBDMjM0RDEw
QTQwMzA3RUVGQjhFMzdERTZDODVEQjQ2NUU5QTI3NUI2QjBBNjcwMjRGNUQyRDU2
Qzc3NTg0RDU0RTFDMjY3NjQzRjY2Q0MyRTE4N0M2RDE2ODJEMjFBQjFGN0JERjgw
Q0FCQzZFNkFGN0JFQzk2QzAxMzgxQTNGQjIwNTUwRjhERUYxNDU0RDhFMkI0OURG
NDYxNDY1QzlEREE0RThFOUE4NTc2Njc4QUZFNDlGOUREQUM3MDlCNEE5RjlGMjI1
NzJGMUNBQjk1NDMxNjAyNUFDRjkzMkQzRUQzMjUzMzcxREZEQjE4RDBGNzFDMURC
RDlCQkYzNUNFMjQ1NTc0Qjg4NEJFRTY2NTA0RENFODg2ODdEMDVEMzY1RjdGM0E3
MEQ5MDIxOEE1NTMwOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmN1VtzFZR5ks2jjRSjfWJLfMEPIHilU4ybIjYpFvk5mL4pvn6l8S
0kUaKOZaD12nrfpXEzj/MAJ+6qDzAKDW8LbNF5iNT7EBxJjDwNWmY4VMd2etomkh
isi8Tmn+uZMPV1BTaEsMI00QpAMH7vuON95shdtGXponW2sKZwJPXS1Wx3WE1U4c
JnZD9mzC4YfG0WgtIasfe9+Ayrxuave+yWwBOBo/sgVQ+N7xRU2OK0nfRhRlyd2k
6OmoV2Z4r+SfndrHCbSp+fIlcvHKuVQxYCWs+TLT7TJTNx39sY0PccHb2bvzXOJF
V0uIS+5mUE3OiGh9BdNl9/OnDZAhilUwmwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FLTRNE2S3vrGcqPD/y+QL6ox7s8IMB8GA1UdIwQYMBaAFLd2dUosixACGLBhqnm+
kYbxkVANMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV1dURacWdMcVlQb3RF
Y2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAvQjc3Njc1NEEyQzhCMTAw
MjE4QjA2MUFBNzlCRTkxODZGMTkxNTAwRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNzc2NzU0QTJDOEIxMDAyMThCMDYxQUE3OUJFOTE4NkYxOTE1
MDBELmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81dXVEWnFnTHFZUG90RWNlQnNt
Y1M2U2VNZHdweXFYVnVhaGh2cmFXdEpZei8wLzMyMzgzMDM0M2EzNDM3MzAzODNh
NjMzODMwMzAzYTNhMmYzMzM3MmQzMzM3MjAzZDNlMjAzMjM2MzczMDMyMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgMoBEcIyDANBgkqhkiG9w0BAQsFAAOCAQEAHsThxiNIwaR3CK6Z16OH
9BBkyTQ+BtS/vIE4Rzyel4gEYuCdnO1PjO0LDK3Ui1yWZCyCZoi7OBhPW42ciLUS
gSfshR5tIyoCDgzOPj+Qbbe/xxXXNLAiss06Qs3PkfohyjJGgoG5CLTpO3QqSAgN
Yy4FcacD4f+XoD2dGxyPfN0Y1AZRFfKn+YUXc8O16u0cdz2rjcl96cjfVF4kDuiD
Xh/qgwpIyFDxo02jOLqJIV97ALsclYEK0pS+nmfGXkpUPGfhyrcZMfulSvgEclzK
TVE7zknnbjIqTfWAekjjyvjhSwiFunDU4ZjKm4VxenwYJPAsDwUjxS/kIFAL1bCf
iQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org