Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a3a2f33322d3332203d3e20323730393736.roa
File:                     323830343a373435633a3a2f33322d3332203d3e20323730393736.roa (raw, json)
Hash identifier:          PS5SP3Y3W4jrbQ1QydRtW0t5ROxuUjtMme4nq1r5OxU=
Subject key identifier:   C8:CD:2E:8B:D0:AA:E0:3E:4C:E7:C6:51:DA:C6:78:6E:46:25:43:E7
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       04AE8D2D56B14DA98685EB5B34A25675318ED52F
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a3a2f33322d3332203d3e20323730393736.roa
Signing time:             Thu 13 Jul 2023 14:00:00 +0000
ROA not before:           Thu 13 Jul 2023 13:55:00 +0000
ROA not after:            Thu 11 Jul 2024 14:00:00 +0000
asID:                     270976
IP address blocks:        2804:745c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:8d:2d:56:b1:4d:a9:86:85:eb:5b:34:a2:56:75:31:8e:d5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Jul 13 13:55:00 2023 GMT
            Not After : Jul 11 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:48:a2:af:52:65:1e:8f:61:9a:21:67:6b:
                    5b:31:6e:fb:87:91:66:89:d4:09:dc:ce:ce:bb:ef:
                    c6:20:e4:7a:61:db:d9:f9:f0:52:5a:5e:74:12:71:
                    49:eb:6a:f3:a7:62:e0:f7:a4:ea:69:cb:91:84:6d:
                    d5:58:75:b0:f2:25:fa:4f:af:85:c1:a1:cb:fd:6c:
                    ff:42:7e:9e:02:40:dd:c9:ff:81:ca:1e:26:ec:d5:
                    77:fc:53:f9:c7:f4:3d:47:e1:c2:d0:6a:75:45:b4:
                    e6:fe:61:7a:ed:5a:de:73:5d:cf:26:97:40:3f:8d:
                    52:c9:63:55:72:13:ea:b4:89:dd:47:47:13:cc:e8:
                    d9:13:36:01:22:36:d2:a8:09:b0:b2:de:66:1a:31:
                    e8:f1:51:66:95:fb:4d:02:8d:79:1b:3e:dc:bc:3b:
                    d5:c5:d6:e6:f6:fd:92:31:9e:e0:c8:6b:cf:83:8a:
                    73:ed:ce:29:1e:00:07:43:13:7d:e7:01:e5:e7:d9:
                    20:62:68:4d:af:d2:09:4a:46:d5:a9:19:78:c1:1a:
                    81:bc:8e:3a:89:87:f9:e7:62:20:86:6a:b3:f0:5c:
                    96:1b:51:41:be:61:6d:92:06:ba:45:98:0a:e6:fb:
                    71:c5:31:9e:fb:8b:f4:39:bb:30:52:9f:ac:46:e8:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CD:2E:8B:D0:AA:E0:3E:4C:E7:C6:51:DA:C6:78:6E:46:25:43:E7
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a3a2f33322d3332203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:745c::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:92:63:06:1c:b4:bd:db:e7:7f:25:f0:47:ac:01:d0:1f:
         88:ff:b2:4f:53:9c:59:fc:49:4f:f1:78:a0:4a:c3:30:56:5c:
         f0:7a:69:07:fe:d8:db:05:81:cc:f3:b6:3a:b2:16:5b:c8:07:
         17:54:ac:8d:27:5c:3c:88:47:e3:2c:f1:21:98:a0:03:bf:67:
         78:47:4c:53:0b:89:a1:00:c9:57:10:37:41:94:d7:c4:de:f4:
         77:4f:a2:3e:03:00:ff:0d:76:fd:80:4a:54:9f:25:d9:30:fc:
         3d:39:45:aa:0d:92:ec:40:52:d9:25:25:ad:5c:c7:83:bf:5d:
         1c:81:a5:8d:e2:5e:91:23:30:04:b1:4a:63:2e:ea:33:18:e0:
         80:47:f0:03:4f:1d:cd:66:57:f8:86:af:a8:07:4d:54:7c:f5:
         91:7b:b9:a6:59:70:57:e3:38:3d:10:6f:e9:55:3e:57:d8:90:
         ae:f9:f8:4d:08:78:d9:a4:aa:3f:d3:6e:20:9b:60:35:15:09:
         dd:ac:bb:03:f5:a6:3d:35:78:fe:03:34:d3:5f:2e:9c:75:56:
         cb:18:ff:f8:34:09:61:7f:77:ca:fb:30:bf:4d:e5:12:08:43:
         90:35:92:8f:db:81:3d:0a:8b:10:f8:f2:54:d4:b4:33:0b:80:
         b5:a3:eb:51
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUBK6NLVaxTamGhetbNKJWdTGO1S8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBGRERGRDAwNjkzMTQ5RTEwNDIyMTg1MTg4RjIyQUU5
N0M2QTQ4QTAeFw0yMzA3MTMxMzU1MDBaFw0yNDA3MTExNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M0NzQ4QTJBRjUyNjUxRThG
NjE5QTIxNjc2QjVCMzE2RUZCODc5MTY2ODlENDA5RENDRUNFQkJFRkM2MjBFNDdB
NjFEQkQ5RjlGMDUyNUE1RTc0MTI3MTQ5RUI2QUYzQTc2MkUwRjdBNEVBNjlDQjkx
ODQ2REQ1NTg3NUIwRjIyNUZBNEZBRjg1QzFBMUNCRkQ2Q0ZGNDI3RTlFMDI0MERE
QzlGRjgxQ0ExRTI2RUNENTc3RkM1M0Y5QzdGNDNENDdFMUMyRDA2QTc1NDVCNEU2
RkU2MTdBRUQ1QURFNzM1RENGMjY5NzQwM0Y4RDUyQzk2MzU1NzIxM0VBQjQ4OURE
NDc0NzEzQ0NFOEQ5MTMzNjAxMjIzNkQyQTgwOUIwQjJERTY2MUEzMUU4RjE1MTY2
OTVGQjREMDI4RDc5MUIzRURDQkMzQkQ1QzVENkU2RjZGRDkyMzE5RUUwQzg2QkNG
ODM4QTczRURDRTI5MUUwMDA3NDMxMzdERTcwMUU1RTdEOTIwNjI2ODREQUZEMjA5
NEE0NkQ1QTkxOTc4QzExQTgxQkM4RTNBODk4N0Y5RTc2MjIwODY2QUIzRjA1Qzk2
MUI1MTQxQkU2MTZEOTIwNkJBNDU5ODBBRTZGQjcxQzUzMTlFRkI4QkY0MzlCQjMw
NTI5RkFDNDZFOENGODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzEdIoq9SZR6PYZohZ2tbMW77h5FmidQJ3M7Ou+/GIOR6YdvZ+fBS
Wl50EnFJ62rzp2Lg96TqacuRhG3VWHWw8iX6T6+FwaHL/Wz/Qn6eAkDdyf+Byh4m
7NV3/FP5x/Q9R+HC0Gp1RbTm/mF67Vrec13PJpdAP41SyWNVchPqtIndR0cTzOjZ
EzYBIjbSqAmwst5mGjHo8VFmlftNAo15Gz7cvDvVxdbm9v2SMZ7gyGvPg4pz7c4p
HgAHQxN95wHl59kgYmhNr9IJSkbVqRl4wRqBvI46iYf552Ighmqz8FyWG1FBvmFt
kga6RZgK5vtxxTGe+4v0ObswUp+sRujPhwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FMjNLovQquA+TOfGUdrGeG5GJUPnMB8GA1UdIwQYMBaAFND939AGkxSeEEIhhRiP
Iq6XxqSKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZrSFBER1FLYjVZQVlQ
MWE3ckxtV2hOcUJKd2doakd6WGViaFhRZVFvNldBLzAvRDBGRERGRDAwNjkzMTQ5
RTEwNDIyMTg1MTg4RjIyQUU5N0M2QTQ4QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMEZEREZEMDA2OTMxNDlFMTA0MjIxODUxODhGMjJBRTk3QzZB
NDhBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82a0hQREdRS2I1WUFZUDFhN3JM
bVdoTnFCSndnaGpHelhlYmhYUWVRbzZXQS8wLzMyMzgzMDM0M2EzNzM0MzU2MzNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDM5MzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
dFwwDQYJKoZIhvcNAQELBQADggEBABVekmMGHLS92+d/JfBHrAHQH4j/sk9TnFn8
SU/xeKBKwzBWXPB6aQf+2NsFgczztjqyFlvIBxdUrI0nXDyIR+Ms8SGYoAO/Z3hH
TFMLiaEAyVcQN0GU18Te9HdPoj4DAP8Ndv2ASlSfJdkw/D05RaoNkuxAUtklJa1c
x4O/XRyBpY3iXpEjMASxSmMu6jMY4IBH8ANPHc1mV/iGr6gHTVR89ZF7uaZZcFfj
OD0Qb+lVPlfYkK75+E0IeNmkqj/TbiCbYDUVCd2suwP1pj01eP4DNNNfLpx1VssY
//g0CWF/d8r7ML9N5RIIQ5A1ko/bgT0KixD48lTUtDMLgLWj61E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org