Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e203238323230.roa
File:                     323830343a313133343a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier:          cX3KFSsSy1XEQ6yiVh7WYJOKlx8uKbk1fOq9vqyLEPQ=
Subject key identifier:   AD:A7:EF:C2:54:6B:41:6A:03:59:54:03:02:AE:61:C1:3F:97:09:08
Certificate issuer:       /CN=9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A
Certificate serial:       44716B4AD8EDBFA1D61311A9D2A5CA7AFA3671C2
Authority key identifier: 9A:F4:CE:ED:37:1E:AA:FF:F9:2E:8E:45:A5:53:7E:65:10:B1:EF:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:39:59 +0000
ROA not before:           Thu 06 Oct 2022 17:34:59 +0000
ROA not after:            Thu 05 Oct 2023 17:39:59 +0000
asID:                     28220
IP address blocks:        2804:1134::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:71:6b:4a:d8:ed:bf:a1:d6:13:11:a9:d2:a5:ca:7a:fa:36:71:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A
        Validity
            Not Before: Oct  6 17:34:59 2022 GMT
            Not After : Oct  5 17:39:59 2023 GMT
        Subject: CN=ADA7EFC2546B416A0359540302AE61C13F970908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:a6:d8:f9:55:d7:dc:b0:56:c1:db:4a:a2:
                    49:42:8d:e2:12:3c:07:a3:1a:f0:b2:de:c6:24:f4:
                    0a:56:db:eb:4e:7c:0f:c3:09:ad:34:4c:44:ab:1c:
                    3b:24:6a:53:e4:fb:fa:b2:5d:b1:34:c2:20:06:a4:
                    df:16:d8:80:f5:ae:ad:68:48:bb:e7:44:6b:7b:26:
                    d1:14:04:42:13:cd:36:bd:1b:5f:d2:38:bd:26:d9:
                    b1:fa:9b:8f:d5:3f:21:29:e9:7a:e2:7b:1a:35:97:
                    e2:b9:dd:32:ab:89:ee:d7:bc:26:75:2c:97:34:9f:
                    e4:53:62:8f:43:bb:c2:f5:8f:2f:d9:89:e0:7a:f1:
                    b6:e6:b2:17:e1:e7:eb:0c:9c:4b:a9:d8:05:db:33:
                    c8:c0:2d:ee:79:36:d9:38:22:e5:4e:68:86:05:37:
                    36:68:81:ea:c3:e6:f3:80:e1:bb:3f:11:42:dc:4d:
                    a1:e1:e8:41:34:0e:3f:3e:00:ef:9a:d0:ae:ef:84:
                    bc:11:f7:f0:1c:2e:19:ae:7d:a6:71:57:53:72:1b:
                    43:32:8b:65:98:9f:61:23:d0:c6:6d:a8:0f:0e:81:
                    9f:8e:e0:99:75:da:ed:5c:54:a3:7a:8c:92:f5:91:
                    2f:09:d2:43:9c:24:32:32:c5:3e:fb:39:90:88:d0:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A7:EF:C2:54:6B:41:6A:03:59:54:03:02:AE:61:C1:3F:97:09:08
            X509v3 Authority Key Identifier:
                keyid:9A:F4:CE:ED:37:1E:AA:FF:F9:2E:8E:45:A5:53:7E:65:10:B1:EF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1134::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:b8:00:b8:4c:30:8f:c6:ac:b5:bc:ad:2b:f6:30:58:8b:
         18:0d:aa:cb:06:74:a3:25:b9:b4:5f:be:40:88:67:9f:1a:10:
         3c:ec:03:14:a5:24:ef:22:14:ae:ac:ab:92:33:6f:82:9c:dd:
         d3:01:91:1e:f2:c6:ef:83:5e:85:4f:42:b5:c9:10:05:3b:38:
         fc:a3:d9:c7:11:87:ef:b2:9c:6e:2e:2a:41:aa:79:a0:9d:84:
         44:8d:be:1f:79:47:d5:06:cf:d6:be:c2:c8:c2:16:d9:ec:23:
         cc:66:1c:65:ed:9d:56:51:ac:3b:f9:31:2b:cb:80:ee:d8:23:
         d9:aa:57:be:c8:bc:bf:4c:d1:32:1f:84:18:77:be:0f:31:e4:
         ce:f6:9c:9d:34:ff:ef:7f:93:48:95:1e:32:55:e5:39:f8:cd:
         57:4f:ba:8e:af:02:b2:ae:b8:9a:3e:78:06:21:ff:fe:a8:4e:
         02:cb:50:8e:8c:a8:65:b0:ce:f0:0d:f1:cd:27:b2:2f:aa:fb:
         41:94:67:17:ac:4c:34:c8:a1:8d:e2:64:71:43:62:f2:2e:bd:
         70:64:d2:15:86:8a:fc:26:4c:24:1d:2a:4c:2c:09:21:e9:a4:
         1b:6b:cd:4f:9b:72:c3:55:9a:55:e9:81:32:97:79:e1:ef:5b:
         ed:a3:13:c7
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIURHFrStjtv6HWExGp0qXKevo2ccIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFGNENFRUQzNzFFQUFGRkY5MkU4RTQ1QTU1MzdFNjUx
MEIxRUY2QTAeFw0yMjEwMDYxNzM0NTlaFw0yMzEwMDUxNzM5NTlaMDMxMTAvBgNV
BAMTKEFEQTdFRkMyNTQ2QjQxNkEwMzU5NTQwMzAyQUU2MUMxM0Y5NzA5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7KbY+VXX3LBWwdtKoklCjeIS
PAejGvCy3sYk9ApW2+tOfA/DCa00TESrHDskalPk+/qyXbE0wiAGpN8W2ID1rq1o
SLvnRGt7JtEUBEITzTa9G1/SOL0m2bH6m4/VPyEp6Xriexo1l+K53TKrie7XvCZ1
LJc0n+RTYo9Du8L1jy/ZieB68bbmshfh5+sMnEup2AXbM8jALe55Ntk4IuVOaIYF
NzZogerD5vOA4bs/EULcTaHh6EE0Dj8+AO+a0K7vhLwR9/AcLhmufaZxV1NyG0My
i2WYn2Ej0MZtqA8OgZ+O4Jl12u1cVKN6jJL1kS8J0kOcJDIyxT77OZCI0HwzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUrafvwlRrQWoDWVQDAq5hwT+XCQgwHwYDVR0j
BBgwFoAUmvTO7Tceqv/5Lo5FpVN+ZRCx72owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC85QUY0Q0VFRDM3MUVBQUZGRjkyRThFNDVBNTUzN0U2NTEwQjFFRjZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBRjRDRUVEMzcxRUFBRkZG
OTJFOEU0NUE1NTM3RTY1MTBCMUVGNkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzIzODMwMzQzYTMxMzEzMzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMy
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEETQwDQYJKoZIhvcNAQELBQADggEBAG9guAC4TDCP
xqy1vK0r9jBYixgNqssGdKMlubRfvkCIZ58aEDzsAxSlJO8iFK6sq5Izb4Kc3dMB
kR7yxu+DXoVPQrXJEAU7OPyj2ccRh++ynG4uKkGqeaCdhESNvh95R9UGz9a+wsjC
FtnsI8xmHGXtnVZRrDv5MSvLgO7YI9mqV77IvL9M0TIfhBh3vg8x5M72nJ00/+9/
k0iVHjJV5Tn4zVdPuo6vArKuuJo+eAYh//6oTgLLUI6MqGWwzvAN8c0nsi+q+0GU
ZxesTDTIoY3iZHFDYvIuvXBk0hWGivwmTCQdKkwsCSHppBtrzU+bcsNVmlXpgTKX
eeHvW+2jE8c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org