Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33332d3333203d3e20323634303436.roa
File:                     323830343a323966303a3a2f33332d3333203d3e20323634303436.roa (raw, json)
Hash identifier:          Hk82jne+ARTY5UNtqfP3AK7gMm0gczulyQjqNdCiSrM=
Subject key identifier:   FB:1F:0E:A1:1B:F0:26:15:C2:16:A0:8E:3E:8B:17:1D:E2:08:C7:25
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       11C71F2BF5D9393A0541F7B6404E559C4A941AF3
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33332d3333203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:01 +0000
ROA not before:           Thu 14 Jul 2022 11:55:01 +0000
ROA not after:            Fri 14 Jul 2023 12:00:01 +0000
asID:                     264046
IP address blocks:        2804:29f0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c7:1f:2b:f5:d9:39:3a:05:41:f7:b6:40:4e:55:9c:4a:94:1a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:01 2022 GMT
            Not After : Jul 14 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:df:51:04:a1:84:ef:08:df:cc:d1:30:7a:
                    13:53:2e:4a:cd:cc:2a:79:82:01:2a:03:8e:a9:10:
                    5e:d2:06:d3:10:13:c1:63:f1:37:44:c2:76:3b:45:
                    98:95:df:f1:ff:d1:05:46:6e:bc:63:e5:a4:68:97:
                    3a:06:13:cb:c5:92:f0:a5:ed:3e:31:2e:1b:9c:21:
                    a2:ca:44:29:5e:f2:fd:d1:a7:25:db:89:09:a2:1a:
                    fa:4c:aa:26:fc:b1:0b:aa:74:5e:d9:b2:e8:4e:94:
                    14:66:8d:20:3b:80:53:10:d5:64:ff:cd:97:4f:2b:
                    bb:67:66:db:83:6a:b2:34:36:a1:fc:1f:f6:2f:d6:
                    40:70:02:3d:63:1e:e5:3c:38:99:28:1d:34:07:88:
                    d7:6e:a7:8d:f8:4f:4b:28:1b:a8:8e:27:5d:81:8f:
                    b4:aa:f4:a3:df:c3:15:b0:e8:c1:01:16:6d:32:ee:
                    e7:16:c8:26:06:82:b8:d2:d5:aa:bf:d0:d0:91:a9:
                    96:af:56:10:ab:28:6d:eb:03:1d:6b:ab:4e:e9:ba:
                    bd:1e:c1:2a:f7:3c:cb:bd:33:8f:93:30:a9:59:f1:
                    e8:28:c6:08:0f:41:6f:a3:a9:8d:76:82:13:b6:2b:
                    5c:06:2f:b0:72:92:7e:25:c0:0e:59:af:c0:3d:ca:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:0E:A1:1B:F0:26:15:C2:16:A0:8E:3E:8B:17:1D:E2:08:C7:25
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33332d3333203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:1d:0d:9f:b1:49:96:fb:6f:46:df:c1:7a:56:e6:6d:97:b5:
         ff:16:20:9d:78:d8:db:76:71:d4:b3:d3:f7:bc:49:10:6e:d0:
         06:4a:3b:f3:da:43:d3:6f:b1:99:f2:42:37:aa:8a:77:a1:d0:
         9c:4c:31:96:99:0b:ec:01:f5:d4:08:cf:a5:bd:8d:64:83:97:
         1b:12:8e:ee:d9:b8:32:ab:35:3b:eb:30:8b:60:b6:1d:60:47:
         d7:14:b1:b3:39:a1:76:e1:75:c9:b0:d0:92:46:af:ca:52:a4:
         5b:83:da:5a:32:0c:ac:68:47:b3:06:0a:80:79:04:d2:5b:59:
         49:57:bf:d4:68:7f:bc:34:e4:28:46:41:9d:02:de:71:be:d8:
         84:2b:d5:1b:92:4e:e4:68:80:c0:29:a0:58:2b:9c:49:b6:8d:
         ec:ec:ba:02:1e:cc:bc:6e:8b:84:0c:a7:72:97:f7:49:fa:21:
         63:1c:9f:7f:41:e2:b2:26:ba:7d:d8:a7:48:39:38:32:58:92:
         69:df:11:96:18:5c:c9:e1:72:03:2a:70:c1:bd:8d:73:32:85:
         10:c9:09:19:90:e5:36:9c:2c:49:31:5c:33:31:07:15:a5:86:
         79:27:f9:0d:56:a6:b9:7a:a0:7a:42:4e:f1:9d:82:41:8a:54:
         f6:bf:fa:9f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEccfK/XZOToFQfe2QE5VnEqUGvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBCMEJBMjcyNUE4NDA5RkIzQTUwMzA3M0RBRUE0NDc0
Q0YyQzU0RjAeFw0yMjA3MTQxMTU1MDFaFw0yMzA3MTQxMjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUyMURGNTEwNEExODRFRjA4
REZDQ0QxMzA3QTEzNTMyRTRBQ0RDQzJBNzk4MjAxMkEwMzhFQTkxMDVFRDIwNkQz
MTAxM0MxNjNGMTM3NDRDMjc2M0I0NTk4OTVERkYxRkZEMTA1NDY2RUJDNjNFNUE0
Njg5NzNBMDYxM0NCQzU5MkYwQTVFRDNFMzEyRTFCOUMyMUEyQ0E0NDI5NUVGMkZE
RDFBNzI1REI4OTA5QTIxQUZBNENBQTI2RkNCMTBCQUE3NDVFRDlCMkU4NEU5NDE0
NjY4RDIwM0I4MDUzMTBENTY0RkZDRDk3NEYyQkJCNjc2NkRCODM2QUIyMzQzNkEx
RkMxRkY2MkZENjQwNzAwMjNENjMxRUU1M0MzODk5MjgxRDM0MDc4OEQ3NkVBNzhE
Rjg0RjRCMjgxQkE4OEUyNzVEODE4RkI0QUFGNEEzREZDMzE1QjBFOEMxMDExNjZE
MzJFRUU3MTZDODI2MDY4MkI4RDJENUFBQkZEMEQwOTFBOTk2QUY1NjEwQUIyODZE
RUIwMzFENkJBQjRFRTlCQUJEMUVDMTJBRjczQ0NCQkQzMzhGOTMzMEE5NTlGMUU4
MjhDNjA4MEY0MTZGQTNBOThENzY4MjEzQjYyQjVDMDYyRkIwNzI5MjdFMjVDMDBF
NTlBRkMwM0RDQTNEODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAviHfUQShhO8I38zRMHoTUy5KzcwqeYIBKgOOqRBe0gbTEBPBY/E3
RMJ2O0WYld/x/9EFRm68Y+WkaJc6BhPLxZLwpe0+MS4bnCGiykQpXvL90acl24kJ
ohr6TKom/LELqnRe2bLoTpQUZo0gO4BTENVk/82XTyu7Z2bbg2qyNDah/B/2L9ZA
cAI9Yx7lPDiZKB00B4jXbqeN+E9LKBuojiddgY+0qvSj38MVsOjBARZtMu7nFsgm
BoK40tWqv9DQkamWr1YQqyht6wMda6tO6bq9HsEq9zzLvTOPkzCpWfHoKMYID0Fv
o6mNdoITtitcBi+wcpJ+JcAOWa/APco9hQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPsfDqEb8CYVwhagjj6LFx3iCMclMB8GA1UdIwQYMBaAFPCwuiclqECfs6UDBz2u
pEdM8sVPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlKNnZBdEd2VDV0THlo
Tjl0SHB0dFlGN2lpUXc5ckxRaUNZWmV2Znd6cDhiLzAvRjBCMEJBMjcyNUE4NDA5
RkIzQTUwMzA3M0RBRUE0NDc0Q0YyQzU0Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GMEIwQkEyNzI1QTg0MDlGQjNBNTAzMDczREFFQTQ0NzRDRjJD
NTRGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SjZ2QXRHdlQ1dEx5aE45dEhw
dHRZRjdpaVF3OXJMUWlDWVpldmZ3enA4Yi8wLzMyMzgzMDM0M2EzMjM5NjYzMDNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzNDMwMzQzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
KfAAMA0GCSqGSIb3DQEBCwUAA4IBAQC8HQ2fsUmW+29G38F6VuZtl7X/FiCdeNjb
dnHUs9P3vEkQbtAGSjvz2kPTb7GZ8kI3qop3odCcTDGWmQvsAfXUCM+lvY1kg5cb
Eo7u2bgyqzU76zCLYLYdYEfXFLGzOaF24XXJsNCSRq/KUqRbg9paMgysaEezBgqA
eQTSW1lJV7/UaH+8NOQoRkGdAt5xvtiEK9Ubkk7kaIDAKaBYK5xJto3s7LoCHsy8
bouEDKdyl/dJ+iFjHJ9/QeKyJrp92KdIOTgyWJJp3xGWGFzJ4XIDKnDBvY1zMoUQ
yQkZkOU2nCxJMVwzMQcVpYZ5J/kNVqa5eqB6Qk7xnYJBilT2v/qf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org