Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6564383a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a6564383a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          Y4mHAXMykaFmDNCMaPTSpu+qtjLuHCc7o9VJrHWbb5Y=
Subject key identifier:   F6:56:84:2F:D8:31:40:D8:25:8B:66:69:0E:DD:31:B5:A2:CE:F0:E1
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       679C3288B61FCF5C401BA85DDE9F5ED7E7D8291F
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6564383a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:10 +0000
ROA not before:           Thu 30 Dec 2021 18:17:10 +0000
ROA not after:            Thu 29 Dec 2022 18:22:10 +0000
asID:                     28343
IP address blocks:        2804:ed8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9c:32:88:b6:1f:cf:5c:40:1b:a8:5d:de:9f:5e:d7:e7:d8:29:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:10 2021 GMT
            Not After : Dec 29 18:22:10 2022 GMT
        Subject: CN=3082010A0282010100F95FFB819BBD5ED0671700F2236E3DE4A12FEE5B01FEADF05330E86043A73A8BDA01E4BECB5ABB3D2915565FBEA7A2A5B711363EC78E4B8107D4246B9EB6FAB04F08F47073EA985497368761AA760875ADB68A31412B4A844710A3F2B021BCFDC38782DD9B1EB48E2D33737D5CF8770FE7FE82357F63E5F5A6EBBB561CD6C9FE6EC95B2FAC4BE17353B77C956E1A8CA90D0BBDC70E7BC6890A5602F08BFE1DE07F82D350BBAA8AAAF96627E63873B5F64EF3AF7FE25B601B3C9B3E462C9FD923F2F7C5A75158FFAEF4EDD85BF1D9867876EE8FC9438A896F422B7353E46CB16E73FB5E650841B7117543C9BA424630002E6A649FAE733C08EA0B14882E3FAA3F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5f:fb:81:9b:bd:5e:d0:67:17:00:f2:23:6e:
                    3d:e4:a1:2f:ee:5b:01:fe:ad:f0:53:30:e8:60:43:
                    a7:3a:8b:da:01:e4:be:cb:5a:bb:3d:29:15:56:5f:
                    be:a7:a2:a5:b7:11:36:3e:c7:8e:4b:81:07:d4:24:
                    6b:9e:b6:fa:b0:4f:08:f4:70:73:ea:98:54:97:36:
                    87:61:aa:76:08:75:ad:b6:8a:31:41:2b:4a:84:47:
                    10:a3:f2:b0:21:bc:fd:c3:87:82:dd:9b:1e:b4:8e:
                    2d:33:73:7d:5c:f8:77:0f:e7:fe:82:35:7f:63:e5:
                    f5:a6:eb:bb:56:1c:d6:c9:fe:6e:c9:5b:2f:ac:4b:
                    e1:73:53:b7:7c:95:6e:1a:8c:a9:0d:0b:bd:c7:0e:
                    7b:c6:89:0a:56:02:f0:8b:fe:1d:e0:7f:82:d3:50:
                    bb:aa:8a:aa:f9:66:27:e6:38:73:b5:f6:4e:f3:af:
                    7f:e2:5b:60:1b:3c:9b:3e:46:2c:9f:d9:23:f2:f7:
                    c5:a7:51:58:ff:ae:f4:ed:d8:5b:f1:d9:86:78:76:
                    ee:8f:c9:43:8a:89:6f:42:2b:73:53:e4:6c:b1:6e:
                    73:fb:5e:65:08:41:b7:11:75:43:c9:ba:42:46:30:
                    00:2e:6a:64:9f:ae:73:3c:08:ea:0b:14:88:2e:3f:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:84:2F:D8:31:40:D8:25:8B:66:69:0E:DD:31:B5:A2:CE:F0:E1
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6564383a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:12:02:65:d2:ef:16:59:3e:fb:c3:de:fb:b9:6c:76:52:ba:
         1b:2a:61:2a:80:4e:f8:ba:92:5c:9a:ed:dd:9e:0a:a7:16:d7:
         f8:f2:60:88:ae:4a:36:a5:e5:1d:78:2e:ec:72:fa:4e:7f:e4:
         f4:e8:e1:61:83:3a:a3:f2:fb:10:64:d5:62:b7:5a:ca:03:c9:
         5f:77:99:04:1d:04:3a:40:e8:76:b6:e1:05:d9:ed:66:74:ba:
         f4:a5:6b:a8:d8:7e:08:65:7c:84:cc:c8:86:0c:97:ad:20:de:
         5c:84:78:da:af:5a:20:bf:a5:8b:e4:18:d5:1e:13:dc:fc:8b:
         a2:1d:64:52:5b:41:74:95:55:45:3b:62:fd:8e:b3:e2:92:59:
         1c:64:ca:17:98:23:6b:a2:a5:a4:e2:93:6d:c4:f2:3a:f0:84:
         6b:7a:71:7f:89:4a:dc:fa:a6:f4:57:7f:1c:f0:cf:8f:db:d9:
         0f:c1:51:a2:40:4b:60:53:0f:d4:1a:fe:52:18:68:16:bc:92:
         f8:d4:8d:e2:f9:af:87:d3:30:dc:9a:f0:82:cf:5c:bd:73:7a:
         11:97:36:6b:79:c0:98:4c:e8:4f:61:e7:be:c6:82:d8:b1:28:
         f2:c7:be:30:62:e9:ca:ab:cf:6f:d8:f2:29:e3:85:6a:e3:0a:
         90:b0:fb:4b
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUZ5wyiLYfz1xAG6hd3p9e1+fYKR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTBaFw0yMjEyMjkxODIyMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjk1RkZCODE5QkJENUVEMDY3
MTcwMEYyMjM2RTNERTRBMTJGRUU1QjAxRkVBREYwNTMzMEU4NjA0M0E3M0E4QkRB
MDFFNEJFQ0I1QUJCM0QyOTE1NTY1RkJFQTdBMkE1QjcxMTM2M0VDNzhFNEI4MTA3
RDQyNDZCOUVCNkZBQjA0RjA4RjQ3MDczRUE5ODU0OTczNjg3NjFBQTc2MDg3NUFE
QjY4QTMxNDEyQjRBODQ0NzEwQTNGMkIwMjFCQ0ZEQzM4NzgyREQ5QjFFQjQ4RTJE
MzM3MzdENUNGODc3MEZFN0ZFODIzNTdGNjNFNUY1QTZFQkJCNTYxQ0Q2QzlGRTZF
Qzk1QjJGQUM0QkUxNzM1M0I3N0M5NTZFMUE4Q0E5MEQwQkJEQzcwRTdCQzY4OTBB
NTYwMkYwOEJGRTFERTA3RjgyRDM1MEJCQUE4QUFBRjk2NjI3RTYzODczQjVGNjRF
RjNBRjdGRTI1QjYwMUIzQzlCM0U0NjJDOUZEOTIzRjJGN0M1QTc1MTU4RkZBRUY0
RUREODVCRjFEOTg2Nzg3NkVFOEZDOTQzOEE4OTZGNDIyQjczNTNFNDZDQjE2RTcz
RkI1RTY1MDg0MUI3MTE3NTQzQzlCQTQyNDYzMDAwMkU2QTY0OUZBRTczM0MwOEVB
MEIxNDg4MkUzRkFBM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA+V/7gZu9XtBnFwDyI2495KEv7lsB/q3wUzDoYEOnOovaAeS+y1q7
PSkVVl++p6KltxE2PseOS4EH1CRrnrb6sE8I9HBz6phUlzaHYap2CHWttooxQStK
hEcQo/KwIbz9w4eC3ZsetI4tM3N9XPh3D+f+gjV/Y+X1puu7VhzWyf5uyVsvrEvh
c1O3fJVuGoypDQu9xw57xokKVgLwi/4d4H+C01C7qoqq+WYn5jhztfZO869/4ltg
GzybPkYsn9kj8vfFp1FY/6707dhb8dmGeHbuj8lDiolvQitzU+RssW5z+15lCEG3
EXVDybpCRjAALmpkn65zPAjqCxSILj+qPwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FPZWhC/YMUDYJYtmaQ7dMbWizvDhMB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMyMzgzMDM0M2E2NTY0MzgzYTNh
MmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAQO2DAN
BgkqhkiG9w0BAQsFAAOCAQEASRICZdLvFlk++8Pe+7lsdlK6GyphKoBO+LqSXJrt
3Z4KpxbX+PJgiK5KNqXlHXgu7HL6Tn/k9OjhYYM6o/L7EGTVYrdaygPJX3eZBB0E
OkDodrbhBdntZnS69KVrqNh+CGV8hMzIhgyXrSDeXIR42q9aIL+li+QY1R4T3PyL
oh1kUltBdJVVRTti/Y6z4pJZHGTKF5gja6KlpOKTbcTyOvCEa3pxf4lK3Pqm9Fd/
HPDPj9vZD8FRokBLYFMP1Br+UhhoFryS+NSN4vmvh9Mw3Jrwgs9cvXN6EZc2a3nA
mEzoT2HnvsaC2LEo8se+MGLpyqvPb9jyKeOFauMKkLD7Sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org