Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/323830343a323334383a3a2f33332d3333203d3e20323634313533.roa
File:                     323830343a323334383a3a2f33332d3333203d3e20323634313533.roa (raw, json)
Hash identifier:          CM6iF5AvrbUbolxIU9N2uU8hLAd78R16pslC1ul82as=
Subject key identifier:   9E:67:E0:4D:70:22:3F:A8:9A:3A:37:40:D1:31:36:0E:62:E6:A3:99
Certificate issuer:       /CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
Certificate serial:       11362AADF124AC80FE0E58A0646F3EAD707ED403
Authority key identifier: 23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/323830343a323334383a3a2f33332d3333203d3e20323634313533.roa
Signing time:             Tue 21 Feb 2023 01:31:43 +0000
ROA not before:           Tue 21 Feb 2023 01:26:43 +0000
ROA not after:            Tue 20 Feb 2024 01:31:43 +0000
asID:                     264153
IP address blocks:        2804:2348::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:36:2a:ad:f1:24:ac:80:fe:0e:58:a0:64:6f:3e:ad:70:7e:d4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
        Validity
            Not Before: Feb 21 01:26:43 2023 GMT
            Not After : Feb 20 01:31:43 2024 GMT
        Subject: CN=9E67E04D70223FA89A3A3740D131360E62E6A399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:92:1f:e2:f1:64:61:2f:36:24:57:96:ad:
                    16:4d:bb:8b:34:be:8a:9b:07:5b:9d:5f:6f:69:5e:
                    cb:3a:d3:07:19:ee:61:e9:77:7e:9a:81:a1:5d:22:
                    04:77:f1:3e:95:cc:75:ca:4b:ab:a5:b7:f8:17:69:
                    82:01:6c:fe:f8:de:ae:99:ad:1f:96:ea:8a:2e:ef:
                    12:3a:2c:f0:6b:c6:ba:93:0a:02:ce:3a:da:cb:4b:
                    d1:2b:9c:d4:2e:86:35:db:ba:a5:1c:87:13:12:23:
                    4f:a9:8e:53:f8:8b:01:bf:90:53:a7:94:61:14:5e:
                    bb:e5:28:5d:2f:8e:e1:37:ca:80:2d:ad:dc:30:96:
                    36:6e:8b:ca:d1:75:37:ee:11:86:db:01:dd:df:b2:
                    02:dd:ad:17:5d:3a:36:46:2b:14:06:7c:65:49:c6:
                    a0:dd:e8:4d:bf:c1:46:c1:11:be:4c:db:c4:ce:04:
                    62:2c:cb:c6:f2:4b:01:59:c2:42:32:ec:00:ad:69:
                    89:09:63:18:33:9d:4a:b8:0f:c0:78:03:7a:b1:8b:
                    bc:4d:fe:36:20:37:87:f7:e9:a2:42:30:63:66:79:
                    08:58:d5:29:a6:4a:9f:5b:55:ba:af:f9:e5:ba:0a:
                    a7:ca:a1:08:16:d1:b9:e5:6c:94:01:da:6e:31:d1:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:E0:4D:70:22:3F:A8:9A:3A:37:40:D1:31:36:0E:62:E6:A3:99
            X509v3 Authority Key Identifier:
                keyid:23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/323830343a323334383a3a2f33332d3333203d3e20323634313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2348::/33

    Signature Algorithm: sha256WithRSAEncryption
         52:35:ca:4a:f5:f5:1d:a9:3c:14:4f:2f:af:1e:b2:f9:0c:82:
         ce:48:eb:45:f4:b7:ad:2b:8e:19:31:d8:f7:ed:cd:f4:47:fc:
         3f:5b:04:61:c9:d8:62:f6:9e:b7:2e:d1:f2:0e:fd:ae:34:70:
         3f:8b:7d:61:35:3f:1f:4d:b5:6b:5f:05:b1:c4:5e:a7:81:e3:
         a9:a4:4a:8d:bf:85:2b:32:67:55:2b:36:ad:f3:9b:a2:d6:82:
         f5:b0:36:ea:01:82:d6:d2:d2:91:d9:66:f0:c0:24:3a:8d:53:
         96:3a:3a:e7:23:80:d0:2e:07:06:7a:48:da:dd:5a:f9:33:c7:
         80:46:73:89:20:0d:59:12:2d:c6:20:a0:17:31:b1:12:fb:95:
         e2:7e:54:b1:ed:f3:9e:c2:5e:0f:95:4b:60:1e:46:22:c8:9a:
         b4:79:6d:35:b2:7c:59:27:be:a1:a2:e2:79:97:ca:3d:64:c7:
         a8:92:71:35:e3:e1:2f:33:0c:b4:e3:f3:9e:9f:4d:71:a6:c2:
         e7:24:13:9a:c1:57:48:eb:ed:0b:73:62:9e:f1:5b:0b:8d:e2:
         98:c0:90:cf:10:b1:5a:0a:80:cb:44:36:ba:b1:aa:d9:02:32:
         30:b9:5c:cd:42:32:56:56:0f:a9:f4:70:7e:0e:1d:ef:69:8d:
         00:6e:7a:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUETYqrfEkrID+DligZG8+rXB+1AMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNGODQ2QTNERDM4MDE5ODFFOTgzN0M0RjMwNjRFQUM5
QTU4RTBGQzAeFw0yMzAyMjEwMTI2NDNaFw0yNDAyMjAwMTMxNDNaMDMxMTAvBgNV
BAMTKDlFNjdFMDRENzAyMjNGQTg5QTNBMzc0MEQxMzEzNjBFNjJFNkEzOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cJIf4vFkYS82JFeWrRZNu4s0
voqbB1udX29pXss60wcZ7mHpd36agaFdIgR38T6VzHXKS6ult/gXaYIBbP743q6Z
rR+W6oou7xI6LPBrxrqTCgLOOtrLS9ErnNQuhjXbuqUchxMSI0+pjlP4iwG/kFOn
lGEUXrvlKF0vjuE3yoAtrdwwljZui8rRdTfuEYbbAd3fsgLdrRddOjZGKxQGfGVJ
xqDd6E2/wUbBEb5M28TOBGIsy8bySwFZwkIy7ACtaYkJYxgznUq4D8B4A3qxi7xN
/jYgN4f36aJCMGNmeQhY1SmmSp9bVbqv+eW6CqfKoQgW0bnlbJQB2m4x0a6bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnmfgTXAiP6iaOjdA0TE2DmLmo5kwHwYDVR0j
BBgwFoAUI/hGo904AZgemDfE8wZOrJpY4PwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZ6VUxzV2FWdzMxc3BWZGdFUjZ1VlFKOEUxZHM3N25ENXRIcnhnbXhN
UUcvMC8yM0Y4NDZBM0REMzgwMTk4MUU5ODM3QzRGMzA2NEVBQzlBNThFMEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIzRjg0NkEzREQzODAxOTgx
RTk4MzdDNEYzMDY0RUFDOUE1OEUwRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmelVMc1dhVnczMXNwVmRnRVI2dVZRSjhFMWRzNzduRDV0SHJ4Z214TVFHLzAv
MzIzODMwMzQzYTMyMzMzNDM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQjSAAwDQYJKoZIhvcNAQELBQADggEBAFI1ykr1
9R2pPBRPL68esvkMgs5I60X0t60rjhkx2PftzfRH/D9bBGHJ2GL2nrcu0fIO/a40
cD+LfWE1Px9NtWtfBbHEXqeB46mkSo2/hSsyZ1UrNq3zm6LWgvWwNuoBgtbS0pHZ
ZvDAJDqNU5Y6OucjgNAuBwZ6SNrdWvkzx4BGc4kgDVkSLcYgoBcxsRL7leJ+VLHt
857CXg+VS2AeRiLImrR5bTWyfFknvqGi4nmXyj1kx6iScTXj4S8zDLTj856fTXGm
wuckE5rBV0jr7QtzYp7xWwuN4pjAkM8QsVoKgMtENrqxqtkCMjC5XM1CMlZWD6n0
cH4OHe9pjQBuemk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org