Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa
File:                     323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa (raw, json)
Hash identifier:          EMcjGN7716mavrDEm0XJNSYfgI5NJS7bHowhYsOzRn0=
Subject key identifier:   56:55:F7:0F:F6:97:F4:3A:F9:CD:14:5D:1E:35:96:3F:48:46:61:90
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       3F27CC42BC66CA300CD86E82240A921333848979
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa
Signing time:             Tue 15 Aug 2023 17:09:07 +0000
ROA not before:           Tue 15 Aug 2023 17:04:07 +0000
ROA not after:            Tue 13 Aug 2024 17:09:07 +0000
asID:                     270976
IP address blocks:        2804:745c:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:27:cc:42:bc:66:ca:30:0c:d8:6e:82:24:0a:92:13:33:84:89:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Aug 15 17:04:07 2023 GMT
            Not After : Aug 13 17:09:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:c1:23:cb:c7:b0:d2:60:2b:fd:70:56:1c:
                    df:8d:4c:bc:0c:d2:b5:02:23:35:91:68:d3:04:80:
                    b8:84:75:34:cf:36:cc:d5:64:a9:d8:9a:28:75:df:
                    cb:1f:e8:d7:5d:42:08:26:5a:ac:8e:08:28:9f:a0:
                    48:ba:b8:c7:9c:12:53:97:ac:2e:44:e1:d2:11:bd:
                    a1:b1:c9:ab:e1:40:af:35:7a:a6:ca:39:20:22:3c:
                    13:cb:bd:f8:bf:7d:43:b2:2f:40:12:88:6d:93:dd:
                    dc:d5:f9:e6:de:4c:ea:7b:30:1d:9f:b4:77:c5:09:
                    ef:ad:25:bd:04:4b:1a:f0:ce:6a:d9:ab:8a:fd:35:
                    3c:37:c0:f8:a4:10:a8:de:86:54:36:6b:de:c9:ec:
                    85:d5:bf:f1:54:87:71:c5:5c:7a:7a:a8:bc:2d:4e:
                    f5:4b:63:94:45:7a:28:85:de:5a:c1:f7:8a:f7:3f:
                    f0:52:b6:4d:3f:d3:57:ba:db:4d:aa:98:70:39:be:
                    15:d7:19:52:78:9b:ab:37:97:8f:14:a4:0c:05:31:
                    32:70:ad:82:b9:48:5a:65:fa:b3:cd:2c:f1:d7:23:
                    86:44:f4:3c:d1:d7:88:25:c4:a4:6e:27:07:43:10:
                    73:23:cf:7c:0a:3c:3c:a3:e7:c7:69:e1:73:c1:a4:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:55:F7:0F:F6:97:F4:3A:F9:CD:14:5D:1E:35:96:3F:48:46:61:90
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:745c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:f8:64:79:81:cc:17:39:da:8b:3e:13:0b:dd:4b:7c:f8:ec:
         a5:60:8a:91:05:f1:5e:1d:5f:a5:63:bd:99:2a:d2:88:0f:c8:
         4a:9c:54:a7:7d:e4:c9:11:16:c1:80:f8:0e:35:45:09:fa:2a:
         8e:f5:8a:d4:03:03:2e:d6:76:81:52:da:48:13:d2:db:3c:12:
         a4:9a:0f:e8:36:48:53:d0:24:a0:17:31:35:10:86:22:af:13:
         03:4f:17:40:af:ce:a9:d3:ce:c8:8e:a5:c5:b4:6d:3b:8f:6f:
         0c:cd:a4:e2:49:5a:f2:f5:51:fb:79:f5:52:06:62:6a:71:d8:
         7f:7b:4f:66:dd:db:b3:46:41:0e:ae:e3:f6:86:ff:92:6f:c4:
         be:d6:6d:ad:45:5f:40:5a:ed:e5:a9:e5:b6:72:80:fd:45:6d:
         59:ba:df:d8:4f:bd:17:94:a2:7e:5a:46:45:c7:02:84:5d:26:
         a3:01:be:6f:1a:6b:c3:33:a2:84:31:b0:39:1f:99:2b:cb:9f:
         4e:0f:c2:d3:3d:8c:3e:3d:a0:2b:88:7f:4c:e7:3f:c0:bc:66:
         bc:a2:3b:a6:cb:93:ab:45:f3:1e:cc:87:6d:1e:be:79:17:5f:
         3b:06:b4:3c:de:7c:d5:6c:a9:c6:0e:77:51:da:40:e9:b2:63:
         23:12:9d:8b
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUPyfMQrxmyjAM2G6CJAqSEzOEiXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBGRERGRDAwNjkzMTQ5RTEwNDIyMTg1MTg4RjIyQUU5
N0M2QTQ4QTAeFw0yMzA4MTUxNzA0MDdaFw0yNDA4MTMxNzA5MDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBENEMxMjNDQkM3QjBEMjYw
MkJGRDcwNTYxQ0RGOEQ0Q0JDMENEMkI1MDIyMzM1OTE2OEQzMDQ4MEI4ODQ3NTM0
Q0YzNkNDRDU2NEE5RDg5QTI4NzVERkNCMUZFOEQ3NUQ0MjA4MjY1QUFDOEUwODI4
OUZBMDQ4QkFCOEM3OUMxMjUzOTdBQzJFNDRFMUQyMTFCREExQjFDOUFCRTE0MEFG
MzU3QUE2Q0EzOTIwMjIzQzEzQ0JCREY4QkY3RDQzQjIyRjQwMTI4ODZEOTNERERD
RDVGOUU2REU0Q0VBN0IzMDFEOUZCNDc3QzUwOUVGQUQyNUJEMDQ0QjFBRjBDRTZB
RDlBQjhBRkQzNTNDMzdDMEY4QTQxMEE4REU4NjU0MzY2QkRFQzlFQzg1RDVCRkYx
NTQ4NzcxQzU1QzdBN0FBOEJDMkQ0RUY1NEI2Mzk0NDU3QTI4ODVERTVBQzFGNzhB
RjczRkYwNTJCNjREM0ZEMzU3QkFEQjREQUE5ODcwMzlCRTE1RDcxOTUyNzg5QkFC
Mzc5NzhGMTRBNDBDMDUzMTMyNzBBRDgyQjk0ODVBNjVGQUIzQ0QyQ0YxRDcyMzg2
NDRGNDNDRDFENzg4MjVDNEE0NkUyNzA3NDMxMDczMjNDRjdDMEEzQzNDQTNFN0M3
NjlFMTczQzFBNDg3RUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0NTBI8vHsNJgK/1wVhzfjUy8DNK1AiM1kWjTBIC4hHU0zzbM1WSp
2Joodd/LH+jXXUIIJlqsjggon6BIurjHnBJTl6wuROHSEb2hscmr4UCvNXqmyjkg
IjwTy734v31Dsi9AEohtk93c1fnm3kzqezAdn7R3xQnvrSW9BEsa8M5q2auK/TU8
N8D4pBCo3oZUNmveyeyF1b/xVIdxxVx6eqi8LU71S2OURXoohd5awfeK9z/wUrZN
P9NXuttNqphwOb4V1xlSeJurN5ePFKQMBTEycK2CuUhaZfqzzSzx1yOGRPQ80deI
JcSkbicHQxBzI898Cjw8o+fHaeFzwaSH7wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FFZV9w/2l/Q6+c0UXR41lj9IRmGQMB8GA1UdIwQYMBaAFND939AGkxSeEEIhhRiP
Iq6XxqSKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZrSFBER1FLYjVZQVlQ
MWE3ckxtV2hOcUJKd2doakd6WGViaFhRZVFvNldBLzAvRDBGRERGRDAwNjkzMTQ5
RTEwNDIyMTg1MTg4RjIyQUU5N0M2QTQ4QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMEZEREZEMDA2OTMxNDlFMTA0MjIxODUxODhGMjJBRTk3QzZB
NDhBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82a0hQREdRS2I1WUFZUDFhN3JM
bVdoTnFCSndnaGpHelhlYmhYUWVRbzZXQS8wLzMyMzgzMDM0M2EzNzM0MzU2MzNh
MzgzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzAzOTM3MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBHRcgDANBgkqhkiG9w0BAQsFAAOCAQEAIvhkeYHMFznaiz4TC91L
fPjspWCKkQXxXh1fpWO9mSrSiA/ISpxUp33kyREWwYD4DjVFCfoqjvWK1AMDLtZ2
gVLaSBPS2zwSpJoP6DZIU9AkoBcxNRCGIq8TA08XQK/OqdPOyI6lxbRtO49vDM2k
4kla8vVR+3n1UgZianHYf3tPZt3bs0ZBDq7j9ob/km/EvtZtrUVfQFrt5anltnKA
/UVtWbrf2E+9F5SiflpGRccChF0mowG+bxprwzOihDGwOR+ZK8ufTg/C0z2MPj2g
K4h/TOc/wLxmvKI7psuTq0XzHsyHbR6+eRdfOwa0PN581Wypxg53UdpA6bJjIxKd
iw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org