Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa
File:                     323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa (raw, json)
Hash identifier:          DQWUtRGKIfrigEstI7Mia4r4yc/JMw9hhjWwDqMw58g=
Subject key identifier:   D5:F2:C3:C3:15:AB:BD:F3:83:8C:F0:4D:30:AF:D7:50:F2:69:F0:B4
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       2CB6501DA9859FBF8FD23CDACB849EF1973C9033
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:03 +0000
ROA not before:           Tue 12 Sep 2023 04:55:03 +0000
ROA not after:            Tue 10 Sep 2024 05:00:03 +0000
asID:                     262713
IP address blocks:        2804:640:100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b6:50:1d:a9:85:9f:bf:8f:d2:3c:da:cb:84:9e:f1:97:3c:90:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:03 2023 GMT
            Not After : Sep 10 05:00:03 2024 GMT
        Subject: CN=3082010A0282010100BC772C8DF1C3453928B6B37AAC0344898B78FE40B2958B773E53B38C36043D26F2F02C4DD6B082CCCA79B2265F3FBC28A2EA38DEF4145278098DB90DF4FC0F01F7EF147A6058C1543F39CF2B8E968AF29F26F3BA4A97602A7F225F0493E8D60F2EEC91ECAD7959AB29835D8433E6C5F764405822AE4AAA720F3760198120CC758AC9284D65FB94632C19094712FAA24C48ECAADAB61ED1691F5E6843F269B02F3FC471FEFA7837DB8FFD39C6E2722BFC572B8CF13DDF7402FD1533D719507774AB4386B9D1C34F81373C1051D8E907CC8F5750F36AEAD1362EB6BD77F2BA80EE04AE95390005B3A1350E8968A172E51AF1A5729ED1BB856501D584496D37A7DF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:2c:8d:f1:c3:45:39:28:b6:b3:7a:ac:03:
                    44:89:8b:78:fe:40:b2:95:8b:77:3e:53:b3:8c:36:
                    04:3d:26:f2:f0:2c:4d:d6:b0:82:cc:ca:79:b2:26:
                    5f:3f:bc:28:a2:ea:38:de:f4:14:52:78:09:8d:b9:
                    0d:f4:fc:0f:01:f7:ef:14:7a:60:58:c1:54:3f:39:
                    cf:2b:8e:96:8a:f2:9f:26:f3:ba:4a:97:60:2a:7f:
                    22:5f:04:93:e8:d6:0f:2e:ec:91:ec:ad:79:59:ab:
                    29:83:5d:84:33:e6:c5:f7:64:40:58:22:ae:4a:aa:
                    72:0f:37:60:19:81:20:cc:75:8a:c9:28:4d:65:fb:
                    94:63:2c:19:09:47:12:fa:a2:4c:48:ec:aa:da:b6:
                    1e:d1:69:1f:5e:68:43:f2:69:b0:2f:3f:c4:71:fe:
                    fa:78:37:db:8f:fd:39:c6:e2:72:2b:fc:57:2b:8c:
                    f1:3d:df:74:02:fd:15:33:d7:19:50:77:74:ab:43:
                    86:b9:d1:c3:4f:81:37:3c:10:51:d8:e9:07:cc:8f:
                    57:50:f3:6a:ea:d1:36:2e:b6:bd:77:f2:ba:80:ee:
                    04:ae:95:39:00:05:b3:a1:35:0e:89:68:a1:72:e5:
                    1a:f1:a5:72:9e:d1:bb:85:65:01:d5:84:49:6d:37:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F2:C3:C3:15:AB:BD:F3:83:8C:F0:4D:30:AF:D7:50:F2:69:F0:B4
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3130303a3a2f34342d3434203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:fb:43:60:46:95:04:f5:c5:46:40:a6:98:1f:6f:3f:49:16:
         a5:af:15:5f:3d:ae:fa:07:42:68:33:ed:b7:d9:d3:aa:16:28:
         02:6f:08:dc:76:71:b2:69:be:0c:32:6a:e9:54:42:b2:60:05:
         50:99:8b:29:9a:e5:48:a7:20:67:62:0d:64:ff:79:15:f5:79:
         74:e2:92:d9:f6:5c:92:93:0b:1b:77:ba:64:3d:c2:8f:6f:84:
         54:f1:c6:e2:9d:fe:15:a5:3a:09:f9:7a:94:2e:89:3c:f7:93:
         a4:62:bd:fc:df:46:9f:2b:d2:62:8e:c6:cd:04:f4:d7:97:53:
         11:06:e3:75:2c:81:16:59:ac:9e:72:90:3e:68:06:21:54:97:
         9a:81:dc:1c:57:86:05:52:3d:b3:6a:27:52:87:d7:8f:34:cf:
         66:9d:90:c1:07:64:61:f3:eb:8d:78:63:a6:35:b9:4b:5b:48:
         97:a1:3a:b9:c7:a3:1f:25:40:5e:a0:7b:2e:ae:93:3d:df:5e:
         b5:b9:23:0b:91:54:df:ab:e0:db:5d:2c:2a:94:2e:b3:4c:ce:
         03:21:92:9a:5d:65:32:47:04:5e:6a:8b:b4:07:ef:11:32:1c:
         a9:ed:2a:6e:e8:fa:61:c4:6f:46:f0:10:94:d5:01:9e:8c:d3:
         a6:0d:d1:d2
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIULLZQHamFn7+P0jzay4Se8Zc8kDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNkI4QzUzN0FDMDYzQ0U1MTA3NUM2QjgxNkUzMzUz
RTU3NDc1QzAeFw0yMzA5MTIwNDU1MDNaFw0yNDA5MTAwNTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkM3NzJDOERGMUMzNDUzOTI4
QjZCMzdBQUMwMzQ0ODk4Qjc4RkU0MEIyOTU4Qjc3M0U1M0IzOEMzNjA0M0QyNkYy
RjAyQzRERDZCMDgyQ0NDQTc5QjIyNjVGM0ZCQzI4QTJFQTM4REVGNDE0NTI3ODA5
OERCOTBERjRGQzBGMDFGN0VGMTQ3QTYwNThDMTU0M0YzOUNGMkI4RTk2OEFGMjlG
MjZGM0JBNEE5NzYwMkE3RjIyNUYwNDkzRThENjBGMkVFQzkxRUNBRDc5NTlBQjI5
ODM1RDg0MzNFNkM1Rjc2NDQwNTgyMkFFNEFBQTcyMEYzNzYwMTk4MTIwQ0M3NThB
QzkyODRENjVGQjk0NjMyQzE5MDk0NzEyRkFBMjRDNDhFQ0FBREFCNjFFRDE2OTFG
NUU2ODQzRjI2OUIwMkYzRkM0NzFGRUZBNzgzN0RCOEZGRDM5QzZFMjcyMkJGQzU3
MkI4Q0YxM0RERjc0MDJGRDE1MzNENzE5NTA3Nzc0QUI0Mzg2QjlEMUMzNEY4MTM3
M0MxMDUxRDhFOTA3Q0M4RjU3NTBGMzZBRUFEMTM2MkVCNkJENzdGMkJBODBFRTA0
QUU5NTM5MDAwNUIzQTEzNTBFODk2OEExNzJFNTFBRjFBNTcyOUVEMUJCODU2NTAx
RDU4NDQ5NkQzN0E3REYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvHcsjfHDRTkotrN6rANEiYt4/kCylYt3PlOzjDYEPSby8CxN1rCC
zMp5siZfP7woouo43vQUUngJjbkN9PwPAffvFHpgWMFUPznPK46WivKfJvO6Spdg
Kn8iXwST6NYPLuyR7K15Waspg12EM+bF92RAWCKuSqpyDzdgGYEgzHWKyShNZfuU
YywZCUcS+qJMSOyq2rYe0WkfXmhD8mmwLz/Ecf76eDfbj/05xuJyK/xXK4zxPd90
Av0VM9cZUHd0q0OGudHDT4E3PBBR2OkHzI9XUPNq6tE2Lra9d/K6gO4ErpU5AAWz
oTUOiWihcuUa8aVyntG7hWUB1YRJbTen3wIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FNXyw8MVq73zg4zwTTCv11DyafC0MB8GA1UdIwQYMBaAFPTGuMU3rAY85RB1xrgW
4zU+V0dcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAvRjRDNkI4QzUzN0FDMDYz
Q0U1MTA3NUM2QjgxNkUzMzUzRTU3NDc1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNEM2QjhDNTM3QUMwNjNDRTUxMDc1QzZCODE2RTMzNTNFNTc0
NzVDLmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8wLzMyMzgzMDM0M2EzNjM0MzAzYTMx
MzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzYzMjM3MzEzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHBCgEBkABADANBgkqhkiG9w0BAQsFAAOCAQEAkPtDYEaVBPXFRkCmmB9vP0kW
pa8VXz2u+gdCaDPtt9nTqhYoAm8I3HZxsmm+DDJq6VRCsmAFUJmLKZrlSKcgZ2IN
ZP95FfV5dOKS2fZckpMLG3e6ZD3Cj2+EVPHG4p3+FaU6Cfl6lC6JPPeTpGK9/N9G
nyvSYo7GzQT015dTEQbjdSyBFlmsnnKQPmgGIVSXmoHcHFeGBVI9s2onUofXjzTP
Zp2QwQdkYfPrjXhjpjW5S1tIl6E6ucejHyVAXqB7Lq6TPd9etbkjC5FU36vg210s
KpQus0zOAyGSml1lMkcEXmqLtAfvETIcqe0qbuj6YcRvRvAQlNUBnozTpg3R0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org