Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33322d3334203d3e20323639353538.roa
File:                     323830343a363637303a3a2f33322d3334203d3e20323639353538.roa (raw, json)
Hash identifier:          GLLe6bwCOFJ06dxgCxhf25Iq0Kytx4zbAZ1PdsH23X8=
Subject key identifier:   E5:E3:2A:69:AB:DA:95:52:F0:18:81:55:A6:DD:BB:DA:54:D2:67:B1
Certificate issuer:       /CN=C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9
Certificate serial:       1658C29A6FB0A91A4E543DBA22C515E6D0D45C0B
Authority key identifier: C3:BC:16:1B:1A:4B:D1:6E:42:39:69:EE:74:48:EF:EA:EF:4A:41:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33322d3334203d3e20323639353538.roa
Signing time:             Tue 27 Sep 2022 23:00:00 +0000
ROA not before:           Tue 27 Sep 2022 22:55:00 +0000
ROA not after:            Tue 26 Sep 2023 23:00:00 +0000
asID:                     269558
IP address blocks:        2804:6670::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:58:c2:9a:6f:b0:a9:1a:4e:54:3d:ba:22:c5:15:e6:d0:d4:5c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9
        Validity
            Not Before: Sep 27 22:55:00 2022 GMT
            Not After : Sep 26 23:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:b8:a7:d0:7d:34:19:cc:ab:54:af:cc:bd:
                    a0:77:37:d5:cc:5c:39:a2:16:c9:b8:6b:38:13:2a:
                    bf:e4:0c:71:1f:f6:39:df:d7:38:b6:7e:e6:91:c8:
                    23:01:85:9e:31:5d:a1:80:d3:c7:57:f2:a3:2d:08:
                    e8:d8:7f:f5:b1:44:9d:e3:70:5b:b0:11:ce:95:eb:
                    b9:4f:07:57:39:e6:5d:f4:fc:e3:c9:ea:ca:3e:99:
                    ed:a9:85:4c:32:4d:c9:b8:49:5e:c2:c4:80:6b:29:
                    4f:21:a8:84:a6:2d:83:3b:cc:c1:7e:f0:fa:d2:18:
                    61:0e:93:f7:ce:bb:4e:b5:32:f1:6e:36:6b:71:57:
                    fe:ec:92:c3:e3:35:96:ae:48:1d:e1:f2:0d:a4:bf:
                    b8:f1:00:58:eb:c9:48:ec:3b:77:f1:c9:10:f7:2c:
                    e5:f8:69:d2:39:1a:aa:ac:8b:82:e1:97:cf:9d:f6:
                    f4:7f:8f:21:02:33:2f:b5:54:44:96:45:8d:b4:bf:
                    75:2f:23:e8:4a:5c:84:4e:48:dc:42:1e:ea:ed:a7:
                    2c:bc:6c:e0:6e:f1:4e:6d:09:da:bc:22:5b:43:93:
                    d2:35:9a:91:30:77:2c:c8:ae:c8:58:34:b9:73:f1:
                    db:79:93:73:45:72:7c:ab:15:ee:82:5f:b2:aa:bb:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E3:2A:69:AB:DA:95:52:F0:18:81:55:A6:DD:BB:DA:54:D2:67:B1
            X509v3 Authority Key Identifier:
                keyid:C3:BC:16:1B:1A:4B:D1:6E:42:39:69:EE:74:48:EF:EA:EF:4A:41:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33322d3334203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6670::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:8a:92:6e:4c:f4:1e:71:68:0f:7e:27:bc:35:1e:41:81:
         32:9f:4b:89:bf:46:02:5a:c1:4b:54:c5:c9:27:75:98:ab:4f:
         da:e6:a1:c5:5e:8e:9b:f3:9b:65:6a:6d:36:dd:cb:d0:5f:27:
         4e:0b:be:d1:83:65:a0:1b:9f:ab:95:60:b0:57:51:70:a5:33:
         27:b9:c7:a8:f7:3c:60:89:aa:3b:7f:3d:7a:58:0e:10:14:5f:
         c8:95:21:08:3e:86:c8:e8:ce:5b:e9:1f:08:76:54:9b:60:7e:
         2b:3c:fc:f4:8c:3a:9a:d9:62:db:55:12:d7:28:45:27:70:e5:
         f5:30:fd:2c:65:9b:2e:00:a0:7a:a4:31:e9:9b:dc:b4:1c:71:
         47:33:a9:cb:39:2e:6c:29:47:fc:9c:9e:8f:b0:f3:6f:ee:ae:
         7f:92:1a:26:54:d1:83:35:85:72:8c:ab:df:65:9e:20:f3:07:
         ff:f1:a0:ed:01:ab:71:48:f5:ea:e5:63:0e:a4:9d:86:38:fb:
         1a:e9:a1:5d:7e:75:60:22:aa:25:5b:12:bf:7c:92:2a:2c:89:
         8e:75:aa:93:86:5e:b2:c5:e8:c3:ba:c2:ff:e7:78:9b:6e:5f:
         87:6c:60:68:56:02:c0:7d:98:17:98:99:2a:82:a8:0e:d6:1e:
         47:e0:49:13
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUFljCmm+wqRpOVD26IsUV5tDUXAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNCQzE2MUIxQTRCRDE2RTQyMzk2OUVFNzQ0OEVGRUFF
RjRBNDFCOTAeFw0yMjA5MjcyMjU1MDBaFw0yMzA5MjYyMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDVEOEI4QTdEMDdEMzQxOUND
QUI1NEFGQ0NCREEwNzczN0Q1Q0M1QzM5QTIxNkM5Qjg2QjM4MTMyQUJGRTQwQzcx
MUZGNjM5REZENzM4QjY3RUU2OTFDODIzMDE4NTlFMzE1REExODBEM0M3NTdGMkEz
MkQwOEU4RDg3RkY1QjE0NDlERTM3MDVCQjAxMUNFOTVFQkI5NEYwNzU3MzlFNjVE
RjRGQ0UzQzlFQUNBM0U5OUVEQTk4NTRDMzI0REM5Qjg0OTVFQzJDNDgwNkIyOTRG
MjFBODg0QTYyRDgzM0JDQ0MxN0VGMEZBRDIxODYxMEU5M0Y3Q0VCQjRFQjUzMkYx
NkUzNjZCNzE1N0ZFRUM5MkMzRTMzNTk2QUU0ODFERTFGMjBEQTRCRkI4RjEwMDU4
RUJDOTQ4RUMzQjc3RjFDOTEwRjcyQ0U1Rjg2OUQyMzkxQUFBQUM4QjgyRTE5N0NG
OURGNkY0N0Y4RjIxMDIzMzJGQjU1NDQ0OTY0NThEQjRCRjc1MkYyM0U4NEE1Qzg0
NEU0OERDNDIxRUVBRURBNzJDQkM2Q0UwNkVGMTRFNkQwOURBQkMyMjVCNDM5M0Qy
MzU5QTkxMzA3NzJDQzhBRUM4NTgzNEI5NzNGMURCNzk5MzczNDU3MjdDQUIxNUVF
ODI1RkIyQUFCQkNDRkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1di4p9B9NBnMq1SvzL2gdzfVzFw5ohbJuGs4Eyq/5AxxH/Y539c4
tn7mkcgjAYWeMV2hgNPHV/KjLQjo2H/1sUSd43BbsBHOleu5TwdXOeZd9PzjyerK
PpntqYVMMk3JuElewsSAaylPIaiEpi2DO8zBfvD60hhhDpP3zrtOtTLxbjZrcVf+
7JLD4zWWrkgd4fINpL+48QBY68lI7Dt38ckQ9yzl+GnSORqqrIuC4ZfPnfb0f48h
AjMvtVRElkWNtL91LyPoSlyETkjcQh7q7acsvGzgbvFObQnavCJbQ5PSNZqRMHcs
yK7IWDS5c/HbeZNzRXJ8qxXugl+yqrvM/wIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FOXjKmmr2pVS8BiBVabdu9pU0mexMB8GA1UdIwQYMBaAFMO8FhsaS9FuQjlp7nRI
7+rvSkG5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzd3YkR0cTFSa1d3NFNM
YXpzQUZOcVROQUt4OGNVcnZha0J1Q2lTNVY5UTZZLzAvQzNCQzE2MUIxQTRCRDE2
RTQyMzk2OUVFNzQ0OEVGRUFFRjRBNDFCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DM0JDMTYxQjFBNEJEMTZFNDIzOTY5RUU3NDQ4RUZFQUVGNEE0
MUI5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83d2JEdHExUmtXdzRTTGF6c0FG
TnFUTkFLeDhjVXJ2YWtCdUNpUzVWOVE2WS8wLzMyMzgzMDM0M2EzNjM2MzczMDNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzOTM1MzUzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
ZnAwDQYJKoZIhvcNAQELBQADggEBADv4ipJuTPQecWgPfie8NR5BgTKfS4m/RgJa
wUtUxckndZirT9rmocVejpvzm2VqbTbdy9BfJ04LvtGDZaAbn6uVYLBXUXClMye5
x6j3PGCJqjt/PXpYDhAUX8iVIQg+hsjozlvpHwh2VJtgfis8/PSMOprZYttVEtco
RSdw5fUw/Sxlmy4AoHqkMemb3LQccUczqcs5LmwpR/ycno+w82/urn+SGiZU0YM1
hXKMq99lniDzB//xoO0Bq3FI9erlYw6knYY4+xrpoV1+dWAiqiVbEr98kiosiY51
qpOGXrLF6MO6wv/neJtuX4dsYGhWAsB9mBeYmSqCqA7WHkfgSRM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org