Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a313038633a3a2f33322d3536203d3e203238313436.roa
File:                     323830343a313038633a3a2f33322d3536203d3e203238313436.roa (raw, json)
Hash identifier:          vnkvuoNwarqgqiHDvr3cyrR9t9lZTi1IDtDLICINz6s=
Subject key identifier:   8C:21:07:B8:3D:61:BF:2B:15:9F:2A:9B:15:F5:78:95:38:7D:3B:BA
Certificate issuer:       /CN=7B0D48B72953BA7287B21009BCDB530E46D53271
Certificate serial:       3B8943E13C0003B034DFFFFA67C5FA2E01F1202B
Authority key identifier: 7B:0D:48:B7:29:53:BA:72:87:B2:10:09:BC:DB:53:0E:46:D5:32:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B0D48B72953BA7287B21009BCDB530E46D53271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a313038633a3a2f33322d3536203d3e203238313436.roa
Signing time:             Mon 12 Apr 2021 13:41:56 +0000
ROA not before:           Mon 12 Apr 2021 13:36:56 +0000
ROA not after:            Mon 11 Apr 2022 13:41:56 +0000
asID:                     28146
IP address blocks:        2804:108c::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:89:43:e1:3c:00:03:b0:34:df:ff:fa:67:c5:fa:2e:01:f1:20:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B0D48B72953BA7287B21009BCDB530E46D53271
        Validity
            Not Before: Apr 12 13:36:56 2021 GMT
            Not After : Apr 11 13:41:56 2022 GMT
        Subject: CN=3082010A0282010100C4A4B497A67A7E203FD506050F8C4A2B15272D132CDB9355BA1F4F24EFDB5E61670A77130E20C3233156C5B2531871E36D26512FF5FB56EC431EBAA61E26AFC70A930BD8E06ECB6FEFD8B3D5B9FAE8BF7D9CE713762605E8052F6CF15C4D2DD2414A1B2DAED07C9072C549906A5E95F162F32BB5D2B1EE7BE68D72CCFF50693C5055E5C6CE06FFE49FAD6C5A4CD15E8965FF6FDA18EDD43A8E7A148659BEAA66B2961A9132052735626B9D590F4104A01F79033B2ADCCA564BF704DCD6DE2A3F40DD9C69D13D8982541EB596362C15BB8B7796CAC7EBC4CC096A0045DA1FE34B28D3A4760216DC35D10AE8EAC3B69B69FE5C0831AF6174CD3F091303047B54C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:b4:97:a6:7a:7e:20:3f:d5:06:05:0f:8c:
                    4a:2b:15:27:2d:13:2c:db:93:55:ba:1f:4f:24:ef:
                    db:5e:61:67:0a:77:13:0e:20:c3:23:31:56:c5:b2:
                    53:18:71:e3:6d:26:51:2f:f5:fb:56:ec:43:1e:ba:
                    a6:1e:26:af:c7:0a:93:0b:d8:e0:6e:cb:6f:ef:d8:
                    b3:d5:b9:fa:e8:bf:7d:9c:e7:13:76:26:05:e8:05:
                    2f:6c:f1:5c:4d:2d:d2:41:4a:1b:2d:ae:d0:7c:90:
                    72:c5:49:90:6a:5e:95:f1:62:f3:2b:b5:d2:b1:ee:
                    7b:e6:8d:72:cc:ff:50:69:3c:50:55:e5:c6:ce:06:
                    ff:e4:9f:ad:6c:5a:4c:d1:5e:89:65:ff:6f:da:18:
                    ed:d4:3a:8e:7a:14:86:59:be:aa:66:b2:96:1a:91:
                    32:05:27:35:62:6b:9d:59:0f:41:04:a0:1f:79:03:
                    3b:2a:dc:ca:56:4b:f7:04:dc:d6:de:2a:3f:40:dd:
                    9c:69:d1:3d:89:82:54:1e:b5:96:36:2c:15:bb:8b:
                    77:96:ca:c7:eb:c4:cc:09:6a:00:45:da:1f:e3:4b:
                    28:d3:a4:76:02:16:dc:35:d1:0a:e8:ea:c3:b6:9b:
                    69:fe:5c:08:31:af:61:74:cd:3f:09:13:03:04:7b:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:21:07:B8:3D:61:BF:2B:15:9F:2A:9B:15:F5:78:95:38:7D:3B:BA
            X509v3 Authority Key Identifier:
                keyid:7B:0D:48:B7:29:53:BA:72:87:B2:10:09:BC:DB:53:0E:46:D5:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7B0D48B72953BA7287B21009BCDB530E46D53271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B0D48B72953BA7287B21009BCDB530E46D53271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a313038633a3a2f33322d3536203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:108c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:30:d4:0c:93:11:11:97:01:e0:21:90:35:e7:c8:e9:6f:
         48:cb:75:b6:d8:45:64:0f:0e:ca:09:a7:1b:04:2b:0d:f2:1c:
         6f:b4:c8:a4:1a:85:95:59:6f:93:11:d3:bb:45:fa:98:8d:d7:
         a6:fd:8a:3f:68:db:04:e8:bc:ef:69:46:63:1a:71:47:ef:7b:
         86:49:56:88:06:54:92:21:a3:97:18:d7:2f:24:dc:0d:e1:62:
         b1:6c:f2:71:89:97:98:e6:ce:a1:24:8c:35:7c:0b:88:c3:5c:
         18:ab:8b:45:cd:ba:f4:6f:aa:2c:5a:3d:af:2f:b5:25:b1:0e:
         1d:61:b7:da:c7:1b:89:ca:1d:36:3c:3b:85:35:6e:d6:91:21:
         f0:50:85:1c:3b:63:c4:3e:a8:44:16:6c:dd:54:41:a4:9d:ac:
         a4:01:97:eb:d9:bf:32:db:ea:a0:6c:56:82:24:38:2a:b1:8c:
         02:60:2b:54:47:a1:53:61:b3:b5:f7:71:9d:b3:77:23:71:75:
         37:8c:fe:06:1b:25:75:b4:c1:97:7e:c4:46:b6:b9:39:ad:b9:
         16:4b:96:3e:59:ed:bb:22:f7:c6:80:20:e1:54:05:d4:79:6d:
         16:b1:06:24:ea:27:1d:27:79:5d:df:c8:07:a0:5a:2a:5a:7a:
         4e:71:63:5b
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUO4lD4TwAA7A03//6Z8X6LgHxICswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwRDQ4QjcyOTUzQkE3Mjg3QjIxMDA5QkNEQjUzMEU0
NkQ1MzI3MTAeFw0yMTA0MTIxMzM2NTZaFw0yMjA0MTExMzQxNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzRBNEI0OTdBNjdBN0UyMDNG
RDUwNjA1MEY4QzRBMkIxNTI3MkQxMzJDREI5MzU1QkExRjRGMjRFRkRCNUU2MTY3
MEE3NzEzMEUyMEMzMjMzMTU2QzVCMjUzMTg3MUUzNkQyNjUxMkZGNUZCNTZFQzQz
MUVCQUE2MUUyNkFGQzcwQTkzMEJEOEUwNkVDQjZGRUZEOEIzRDVCOUZBRThCRjdE
OUNFNzEzNzYyNjA1RTgwNTJGNkNGMTVDNEQyREQyNDE0QTFCMkRBRUQwN0M5MDcy
QzU0OTkwNkE1RTk1RjE2MkYzMkJCNUQyQjFFRTdCRTY4RDcyQ0NGRjUwNjkzQzUw
NTVFNUM2Q0UwNkZGRTQ5RkFENkM1QTRDRDE1RTg5NjVGRjZGREExOEVERDQzQThF
N0ExNDg2NTlCRUFBNjZCMjk2MUE5MTMyMDUyNzM1NjI2QjlENTkwRjQxMDRBMDFG
NzkwMzNCMkFEQ0NBNTY0QkY3MDREQ0Q2REUyQTNGNDBERDlDNjlEMTNEODk4MjU0
MUVCNTk2MzYyQzE1QkI4Qjc3OTZDQUM3RUJDNENDMDk2QTAwNDVEQTFGRTM0QjI4
RDNBNDc2MDIxNkRDMzVEMTBBRThFQUMzQjY5QjY5RkU1QzA4MzFBRjYxNzRDRDNG
MDkxMzAzMDQ3QjU0QzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxKS0l6Z6fiA/1QYFD4xKKxUnLRMs25NVuh9PJO/bXmFnCncTDiDD
IzFWxbJTGHHjbSZRL/X7VuxDHrqmHiavxwqTC9jgbstv79iz1bn66L99nOcTdiYF
6AUvbPFcTS3SQUobLa7QfJByxUmQal6V8WLzK7XSse575o1yzP9QaTxQVeXGzgb/
5J+tbFpM0V6JZf9v2hjt1DqOehSGWb6qZrKWGpEyBSc1YmudWQ9BBKAfeQM7KtzK
Vkv3BNzW3io/QN2cadE9iYJUHrWWNiwVu4t3lsrH68TMCWoARdof40so06R2Ahbc
NdEK6OrDtptp/lwIMa9hdM0/CRMDBHtUwwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FIwhB7g9Yb8rFZ8qmxX1eJU4fTu6MB8GA1UdIwQYMBaAFHsNSLcpU7pyh7IQCbzb
Uw5G1TJxMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhGRENoNlg1eXJLZDdD
WVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAvN0IwRDQ4QjcyOTUzQkE3
Mjg3QjIxMDA5QkNEQjUzMEU0NkQ1MzI3MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83QjBENDhCNzI5NTNCQTcyODdCMjEwMDlCQ0RCNTMwRTQ2RDUz
MjcxLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RkRDaDZYNXlyS2Q3Q1lZdlpw
REw5U3FTek1BQmpQYWE2ZHMxS1JLNnFLNi8wLzMyMzgzMDM0M2EzMTMwMzg2MzNh
M2EyZjMzMzIyZDM1MzYyMDNkM2UyMDMyMzgzMTM0MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBBCM
MA0GCSqGSIb3DQEBCwUAA4IBAQBVozDUDJMREZcB4CGQNefI6W9Iy3W22EVkDw7K
CacbBCsN8hxvtMikGoWVWW+TEdO7RfqYjdem/Yo/aNsE6LzvaUZjGnFH73uGSVaI
BlSSIaOXGNcvJNwN4WKxbPJxiZeY5s6hJIw1fAuIw1wYq4tFzbr0b6osWj2vL7Ul
sQ4dYbfaxxuJyh02PDuFNW7WkSHwUIUcO2PEPqhEFmzdVEGknaykAZfr2b8y2+qg
bFaCJDgqsYwCYCtUR6FTYbO193Gds3cjcXU3jP4GGyV1tMGXfsRGtrk5rbkWS5Y+
We27IvfGgCDhVAXUeW0WsQYk6icdJ3ld38gHoFoqWnpOcWNb
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org