Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          YDt6e30fd/SGjGUAYypPd1bMq4rAxEFRtOqf2mpOHqg=
Subject key identifier:   CF:4E:FC:1D:41:48:E3:C6:11:50:62:1D:0B:76:48:F8:4B:02:D9:E1
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       5759498303DBF01319A76B046FC89D53FD00E26A
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     262713
IP address blocks:        2804:640:3e94::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:59:49:83:03:db:f0:13:19:a7:6b:04:6f:c8:9d:53:fd:00:e2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ca:57:cc:99:9f:1b:37:58:8a:01:27:db:a4:
                    9a:8f:9e:4e:fa:99:47:f7:7f:30:75:f7:98:36:e7:
                    59:50:82:78:68:43:6b:8c:71:42:e1:4f:11:92:fe:
                    5e:47:35:32:7f:63:3e:a8:4a:96:4f:e3:84:68:77:
                    be:e6:36:12:c6:35:cd:d2:8f:03:0f:a0:c4:2a:4a:
                    cf:64:65:50:1e:3f:07:29:80:9d:18:46:87:d2:ff:
                    6a:a1:14:03:e1:f1:42:c7:bf:e8:b1:eb:b7:3d:c0:
                    96:4d:3f:ee:0e:cb:83:b3:f8:b9:44:2e:c4:8e:4e:
                    fd:31:67:d7:03:6e:69:91:48:e4:20:55:58:3f:35:
                    8a:a1:38:64:54:e7:73:34:bb:ed:8b:aa:b3:27:e7:
                    32:79:fd:54:06:f4:59:3a:50:0a:8c:88:f1:7d:7a:
                    c6:02:eb:52:b7:8c:02:b8:cc:28:1c:9f:d2:a6:3e:
                    78:f4:9b:f1:49:e0:b7:20:0f:0f:8e:e6:2d:d7:27:
                    c7:b8:32:8c:98:88:37:f2:28:15:01:70:48:d4:44:
                    aa:3d:42:8e:76:0c:e9:f9:a2:85:d0:46:4c:be:02:
                    a2:7d:11:0e:08:41:70:08:fb:22:28:9f:cd:e9:25:
                    28:5e:9b:fe:62:51:8a:f1:da:ad:6a:a7:5a:ae:ed:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4E:FC:1D:41:48:E3:C6:11:50:62:1D:0B:76:48:F8:4B:02:D9:E1
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a336539343a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:3e94::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:da:18:24:a8:d1:2d:da:01:68:b1:29:ad:f0:2d:f2:ce:be:
         f5:47:1d:85:fb:ad:c9:d2:51:70:5f:3c:14:2c:15:ee:71:2b:
         42:2e:8c:e0:73:14:b6:16:04:34:79:9e:52:f7:4f:b9:42:e1:
         b5:e2:60:e7:e0:59:d5:27:3e:81:bc:e4:c3:33:5a:74:1b:c0:
         1d:fd:62:de:69:1e:eb:9c:69:2c:3a:87:41:90:f9:68:0c:c7:
         2a:96:a5:bd:32:46:78:f7:c7:67:cb:5a:66:ff:a5:ee:6f:bd:
         ca:be:55:7d:ec:87:8c:96:8d:b5:e1:31:92:03:46:23:89:d4:
         ea:eb:6a:14:2c:c6:14:df:6b:d0:07:ad:0e:48:a3:8a:78:16:
         70:a5:68:5c:3e:de:eb:0c:27:95:26:ca:3a:f0:c9:3d:8b:2b:
         44:41:00:20:68:e1:46:d0:7d:7a:60:cc:e8:2b:e4:15:ce:e0:
         82:82:9c:8c:b4:79:55:05:ba:1f:64:85:93:3e:e2:b6:46:df:
         2e:42:99:90:6a:8f:2e:6b:75:08:39:86:8d:1e:85:49:72:23:
         86:e2:ca:bb:86:63:1b:b4:da:0c:f5:db:da:bc:8e:d8:59:dc:
         08:93:a3:e9:b3:c0:ed:2b:ef:c1:44:af:14:d9:05:89:e2:84:
         13:9b:df:5d
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUV1lJgwPb8BMZp2sEb8idU/0A4mowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMENBOTgwOTFEQTg2QjNFNkQxOEZEMjA3RjFGQjY1
ODg1MjQ2MzAeFw0yNDA0MDMxODI1NTNaFw0yNTA0MDIxODMwNTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREZDQTU3Q0M5OTlGMUIzNzU4
OEEwMTI3REJBNDlBOEY5RTRFRkE5OTQ3Rjc3RjMwNzVGNzk4MzZFNzU5NTA4Mjc4
Njg0MzZCOEM3MTQyRTE0RjExOTJGRTVFNDczNTMyN0Y2MzNFQTg0QTk2NEZFMzg0
Njg3N0JFRTYzNjEyQzYzNUNERDI4RjAzMEZBMEM0MkE0QUNGNjQ2NTUwMUUzRjA3
Mjk4MDlEMTg0Njg3RDJGRjZBQTExNDAzRTFGMTQyQzdCRkU4QjFFQkI3M0RDMDk2
NEQzRkVFMEVDQjgzQjNGOEI5NDQyRUM0OEU0RUZEMzE2N0Q3MDM2RTY5OTE0OEU0
MjA1NTU4M0YzNThBQTEzODY0NTRFNzczMzRCQkVEOEJBQUIzMjdFNzMyNzlGRDU0
MDZGNDU5M0E1MDBBOEM4OEYxN0Q3QUM2MDJFQjUyQjc4QzAyQjhDQzI4MUM5RkQy
QTYzRTc4RjQ5QkYxNDlFMEI3MjAwRjBGOEVFNjJERDcyN0M3QjgzMjhDOTg4ODM3
RjIyODE1MDE3MDQ4RDQ0NEFBM0Q0MjhFNzYwQ0U5RjlBMjg1RDA0NjRDQkUwMkEy
N0QxMTBFMDg0MTcwMDhGQjIyMjg5RkNERTkyNTI4NUU5QkZFNjI1MThBRjFEQUFE
NkFBNzVBQUVFRDczQ0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA38pXzJmfGzdYigEn26Saj55O+plH938wdfeYNudZUIJ4aENrjHFC
4U8Rkv5eRzUyf2M+qEqWT+OEaHe+5jYSxjXN0o8DD6DEKkrPZGVQHj8HKYCdGEaH
0v9qoRQD4fFCx7/oseu3PcCWTT/uDsuDs/i5RC7Ejk79MWfXA25pkUjkIFVYPzWK
oThkVOdzNLvti6qzJ+cyef1UBvRZOlAKjIjxfXrGAutSt4wCuMwoHJ/Spj549Jvx
SeC3IA8PjuYt1yfHuDKMmIg38igVAXBI1ESqPUKOdgzp+aKF0EZMvgKifREOCEFw
CPsiKJ/N6SUoXpv+YlGK8dqtaqdaru1zzQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FM9O/B1BSOPGEVBiHQt2SPhLAtnhMB8GA1UdIwQYMBaAFD8wypgJHahrPm0Y/SB/
H7ZYhSRjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzEvM0YzMENBOTgwOTFEQTg2
QjNFNkQxOEZEMjA3RjFGQjY1ODg1MjQ2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRjMwQ0E5ODA5MURBODZCM0U2RDE4RkQyMDdGMUZCNjU4ODUy
NDYzLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8xLzMyMzgzMDM0M2EzNjM0MzAzYTMz
NjUzOTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzczMTMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQGQD6UMA0GCSqGSIb3DQEBCwUAA4IBAQDP2hgkqNEt2gFosSmt8C3y
zr71Rx2F+63J0lFwXzwULBXucStCLozgcxS2FgQ0eZ5S90+5QuG14mDn4FnVJz6B
vOTDM1p0G8Ad/WLeaR7rnGksOodBkPloDMcqlqW9MkZ498dny1pm/6Xub73KvlV9
7IeMlo214TGSA0YjidTq62oULMYU32vQB60OSKOKeBZwpWhcPt7rDCeVJso68Mk9
iytEQQAgaOFG0H16YMzoK+QVzuCCgpyMtHlVBbofZIWTPuK2Rt8uQpmQao8ua3UI
OYaNHoVJciOG4sq7hmMbtNoM9dvavI7YWdwIk6Pps8DtK+/BRK8U2QWJ4oQTm99d
-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org