Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa
File:                     323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa (raw, json)
Hash identifier:          12ONX2kFfysUO0C+59kjBocgFSCprhimU82I3KTOe3o=
Subject key identifier:   A8:83:E2:41:B2:47:3B:7B:87:2B:C9:88:E9:A6:2B:47:0E:86:41:A0
Certificate issuer:       /CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
Certificate serial:       76B6C8F26FBA9E98BC150A98F5F4100F8DD28E55
Authority key identifier: 6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa
Signing time:             Wed 28 Jun 2023 23:00:00 +0000
ROA not before:           Wed 28 Jun 2023 22:55:00 +0000
ROA not after:            Wed 26 Jun 2024 23:00:00 +0000
asID:                     272164
IP address blocks:        2804:82e8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b6:c8:f2:6f:ba:9e:98:bc:15:0a:98:f5:f4:10:0f:8d:d2:8e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D0C2E6FED7E38F97A258171425DB7D75B7F8247
        Validity
            Not Before: Jun 28 22:55:00 2023 GMT
            Not After : Jun 26 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:f2:8d:cd:32:df:60:48:eb:56:c0:14:98:
                    e9:e4:57:71:8c:e4:1c:1e:1d:ec:98:96:73:33:2b:
                    9d:be:e9:f4:4a:fb:53:94:3c:02:bb:4b:6b:84:ea:
                    22:71:31:b8:e8:47:d5:b4:70:42:e9:da:21:5a:00:
                    70:f2:8d:d6:c7:77:ee:d1:f1:30:c3:8b:a4:2b:78:
                    ce:4e:21:b2:68:61:63:3d:25:43:8f:3e:74:65:d3:
                    41:1e:d7:2d:11:3f:b7:ae:b7:24:23:53:34:7d:df:
                    49:da:0d:2f:27:4d:e1:66:a0:42:db:0f:22:bf:84:
                    e9:d5:21:05:c0:cf:96:09:c5:39:d0:d6:08:bf:b0:
                    9f:97:77:df:c4:fa:f9:01:a1:fa:bd:88:73:a1:ad:
                    9a:67:99:3f:e4:7c:c8:46:45:57:05:f5:a8:c8:cf:
                    3d:bb:55:8a:13:c8:5f:78:a3:ae:79:6f:5f:7a:be:
                    02:48:32:86:07:2b:9d:3b:0d:39:90:d1:b4:79:28:
                    91:d0:34:01:76:49:be:7a:69:39:e1:ba:33:91:0f:
                    03:8e:34:34:8d:25:2a:9b:ab:5d:74:55:75:40:e0:
                    89:b3:6a:ec:c4:1d:2c:9f:8e:42:f8:c2:4d:02:d5:
                    14:7e:c2:42:9e:13:4b:7f:8a:89:07:ce:bc:da:81:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:83:E2:41:B2:47:3B:7B:87:2B:C9:88:E9:A6:2B:47:0E:86:41:A0
            X509v3 Authority Key Identifier:
                keyid:6D:0C:2E:6F:ED:7E:38:F9:7A:25:81:71:42:5D:B7:D7:5B:7F:82:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D0C2E6FED7E38F97A258171425DB7D75B7F8247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QxpGJjP9Q6bgLnrg5FwMFJLfZ9L5SuH65vcmyrxSdhm/0/323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:95:3b:7c:7d:4c:c4:12:27:85:b4:2e:b4:07:b2:0c:93:
         ea:ba:5a:4d:a4:0f:9c:04:79:04:aa:5e:26:62:b1:f9:c2:40:
         5c:e5:f3:df:70:b2:53:45:75:e2:aa:c8:fb:2d:96:4d:34:6a:
         f1:38:e5:12:ab:8e:54:b6:29:10:41:a9:92:30:fe:e9:59:9b:
         d7:98:2d:ad:b7:22:8c:21:b3:4e:a7:76:01:20:a5:be:46:72:
         9c:fa:db:24:49:6c:2f:44:09:42:05:74:c0:0e:54:2f:ab:7f:
         2e:f2:88:65:5e:ee:a7:1b:14:91:40:b8:d3:c3:c9:ec:00:71:
         6b:b2:4d:72:1a:3c:58:ab:dd:19:8f:2c:fe:15:db:7f:4f:81:
         3b:b9:d3:5d:2a:f4:bf:09:1e:66:c6:84:ff:6d:ee:09:b2:39:
         a7:33:68:3e:d6:14:38:99:3f:94:45:18:28:a0:d5:5f:24:27:
         b4:56:84:1c:5b:b4:28:72:0a:bb:88:5e:16:13:1b:ab:3f:06:
         5b:d1:42:c2:eb:07:8f:2f:cd:a6:fa:0a:9b:a3:ab:1b:e5:99:
         2b:4d:d6:f4:2b:98:8f:99:d4:e7:29:de:e7:fb:3e:60:8f:75:
         68:99:af:bb:b5:b8:48:ee:fe:63:d5:c7:0e:5e:12:99:bc:89:
         11:bb:87:54
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUdrbI8m+6npi8FQqY9fQQD43SjlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQwQzJFNkZFRDdFMzhGOTdBMjU4MTcxNDI1REI3RDc1
QjdGODI0NzAeFw0yMzA2MjgyMjU1MDBaFw0yNDA2MjYyMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkVCQUYyOERDRDMyREY2MDQ4
RUI1NkMwMTQ5OEU5RTQ1NzcxOENFNDFDMUUxREVDOTg5NjczMzMyQjlEQkVFOUY0
NEFGQjUzOTQzQzAyQkI0QjZCODRFQTIyNzEzMUI4RTg0N0Q1QjQ3MDQyRTlEQTIx
NUEwMDcwRjI4REQ2Qzc3N0VFRDFGMTMwQzM4QkE0MkI3OENFNEUyMUIyNjg2MTYz
M0QyNTQzOEYzRTc0NjVEMzQxMUVENzJEMTEzRkI3QUVCNzI0MjM1MzM0N0RERjQ5
REEwRDJGMjc0REUxNjZBMDQyREIwRjIyQkY4NEU5RDUyMTA1QzBDRjk2MDlDNTM5
RDBENjA4QkZCMDlGOTc3N0RGQzRGQUY5MDFBMUZBQkQ4ODczQTFBRDlBNjc5OTNG
RTQ3Q0M4NDY0NTU3MDVGNUE4QzhDRjNEQkI1NThBMTNDODVGNzhBM0FFNzk2RjVG
N0FCRTAyNDgzMjg2MDcyQjlEM0IwRDM5OTBEMUI0NzkyODkxRDAzNDAxNzY0OUJF
N0E2OTM5RTFCQTMzOTEwRjAzOEUzNDM0OEQyNTJBOUJBQjVENzQ1NTc1NDBFMDg5
QjM2QUVDQzQxRDJDOUY4RTQyRjhDMjREMDJENTE0N0VDMjQyOUUxMzRCN0Y4QTg5
MDdDRUJDREE4MUYyQ0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvrryjc0y32BI61bAFJjp5FdxjOQcHh3smJZzMyudvun0SvtTlDwC
u0trhOoicTG46EfVtHBC6dohWgBw8o3Wx3fu0fEww4ukK3jOTiGyaGFjPSVDjz50
ZdNBHtctET+3rrckI1M0fd9J2g0vJ03hZqBC2w8iv4Tp1SEFwM+WCcU50NYIv7Cf
l3ffxPr5AaH6vYhzoa2aZ5k/5HzIRkVXBfWoyM89u1WKE8hfeKOueW9fer4CSDKG
ByudOw05kNG0eSiR0DQBdkm+emk54bozkQ8DjjQ0jSUqm6tddFV1QOCJs2rsxB0s
n45C+MJNAtUUfsJCnhNLf4qJB8682oHyzwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FKiD4kGyRzt7hyvJiOmmK0cOhkGgMB8GA1UdIwQYMBaAFG0MLm/tfjj5eiWBcUJd
t9dbf4JHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlReHBHSmpQOVE2YmdM
bnJnNUZ3TUZKTGZaOUw1U3VINjV2Y215cnhTZGhtLzAvNkQwQzJFNkZFRDdFMzhG
OTdBMjU4MTcxNDI1REI3RDc1QjdGODI0Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82RDBDMkU2RkVEN0UzOEY5N0EyNTgxNzE0MjVEQjdENzVCN0Y4
MjQ3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UXhwR0pqUDlRNmJnTG5yZzVG
d01GSkxmWjlMNVN1SDY1dmNteXJ4U2RobS8wLzMyMzgzMDM0M2EzODMyNjUzODNh
MzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM3MzIzMTM2MzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBILogDANBgkqhkiG9w0BAQsFAAOCAQEAGryVO3x9TMQSJ4W0LrQH
sgyT6rpaTaQPnAR5BKpeJmKx+cJAXOXz33CyU0V14qrI+y2WTTRq8TjlEquOVLYp
EEGpkjD+6Vmb15gtrbcijCGzTqd2ASClvkZynPrbJElsL0QJQgV0wA5UL6t/LvKI
ZV7upxsUkUC408PJ7ABxa7JNcho8WKvdGY8s/hXbf0+BO7nTXSr0vwkeZsaE/23u
CbI5pzNoPtYUOJk/lEUYKKDVXyQntFaEHFu0KHIKu4heFhMbqz8GW9FCwusHjy/N
pvoKm6OrG+WZK03W9CuYj5nU5yne5/s+YI91aJmvu7W4SO7+Y9XHDl4SmbyJEbuH
VA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org