Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3a2f33322d3332203d3e20323636343837.roa
File:                     323830343a333839343a3a2f33322d3332203d3e20323636343837.roa (raw, json)
Hash identifier:          x0sLYy6sTdnNlWlhDePwPpR621SEdMdrdFM8xmn7rZA=
Subject key identifier:   1E:F9:5D:6D:DC:CE:29:3E:C2:68:A8:D6:47:5E:FD:8A:50:6E:BD:DB
Certificate issuer:       /CN=2585A8C398BE08A08EC2DD74E3C377E02FCC61F1
Certificate serial:       38278BB99EC89F874E7BD533EC1B9BC67E9C15D8
Authority key identifier: 25:85:A8:C3:98:BE:08:A0:8E:C2:DD:74:E3:C3:77:E0:2F:CC:61:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3a2f33322d3332203d3e20323636343837.roa
Signing time:             Sun 05 Jun 2022 17:00:01 +0000
ROA not before:           Sun 05 Jun 2022 16:55:01 +0000
ROA not after:            Sun 04 Jun 2023 17:00:01 +0000
asID:                     266487
IP address blocks:        2804:3894::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:27:8b:b9:9e:c8:9f:87:4e:7b:d5:33:ec:1b:9b:c6:7e:9c:15:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2585A8C398BE08A08EC2DD74E3C377E02FCC61F1
        Validity
            Not Before: Jun  5 16:55:01 2022 GMT
            Not After : Jun  4 17:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:ab:3f:b7:88:9a:7c:57:55:11:a7:d9:d8:
                    ea:b8:71:79:f5:f2:cf:2a:d9:d3:64:90:4b:33:69:
                    5a:7f:24:0d:f6:f0:eb:0c:5a:0d:8d:9f:fb:39:55:
                    ec:b1:5c:ba:2c:34:15:fd:d4:00:83:fd:f5:6a:c7:
                    47:55:7c:cc:44:ab:df:83:52:98:2d:c3:44:e6:4e:
                    d4:c8:8d:7e:86:0a:96:80:3f:a6:43:fc:5c:85:21:
                    6f:92:7c:b4:f9:06:94:a1:db:18:37:74:c1:29:54:
                    0f:52:a6:2a:fc:71:fb:e7:bd:2c:6a:1d:29:fe:e3:
                    21:ba:9c:ef:38:5f:35:df:18:ce:19:51:63:0d:d5:
                    08:c1:d8:7a:56:54:b4:d1:46:99:d9:82:81:1f:23:
                    8b:c2:99:7a:86:8c:db:4d:d8:a3:e1:72:6a:1f:1e:
                    4e:56:82:5c:53:d9:ce:00:67:98:66:80:20:bc:39:
                    3e:13:c1:a9:a5:9f:4f:18:5c:e0:0c:67:f8:11:c2:
                    09:2d:74:09:7a:94:75:b8:2a:e8:0d:a7:73:81:dd:
                    4e:12:40:74:00:e1:fb:57:fa:cf:45:b2:da:74:81:
                    23:bc:50:5d:92:19:f5:4d:10:5c:a0:a9:43:84:74:
                    87:c5:e6:46:74:e9:a1:25:24:84:15:41:f6:08:c0:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F9:5D:6D:DC:CE:29:3E:C2:68:A8:D6:47:5E:FD:8A:50:6E:BD:DB
            X509v3 Authority Key Identifier:
                keyid:25:85:A8:C3:98:BE:08:A0:8E:C2:DD:74:E3:C3:77:E0:2F:CC:61:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/323830343a333839343a3a2f33322d3332203d3e20323636343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3894::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:97:9a:10:6b:0e:e2:43:3f:24:c8:32:3f:43:cd:25:2a:
         8d:ef:e0:ae:8f:e7:5b:01:67:02:b0:d4:7a:dc:b0:7e:fa:6e:
         09:7e:23:04:26:5f:19:d8:c7:b9:33:e8:29:17:5e:20:f5:e2:
         5e:10:14:6f:3f:2c:46:0b:c1:01:21:0b:89:22:19:b1:ce:1a:
         7a:ff:b7:a1:f6:76:23:35:e8:09:e0:3f:94:75:69:88:70:41:
         44:41:33:3b:34:46:90:69:2d:bb:85:df:72:5e:7f:e6:7a:66:
         f2:6d:82:5a:10:4f:83:ce:32:41:ac:86:6c:1b:12:f0:a5:22:
         7d:33:9e:fb:07:33:b3:e9:47:3b:19:e7:8b:59:50:22:d7:9d:
         78:ee:8e:23:4d:6c:be:ae:50:4d:4c:47:fd:04:d7:95:73:5b:
         3a:66:18:4f:f7:3c:85:eb:7b:76:e4:b1:4e:ac:91:09:31:a3:
         4d:06:89:82:c4:df:a3:31:80:b7:f4:0e:51:16:36:b1:d8:ea:
         ff:7a:9f:0b:da:fe:43:c0:96:54:92:c6:91:1e:4a:ec:6e:50:
         9b:30:c0:77:be:47:21:9c:23:02:e2:6c:ff:0b:29:7c:85:f0:
         e5:d5:6c:00:e9:af:a0:32:a6:d4:53:3b:7a:f8:22:0f:8c:62:
         73:fb:f2:1a
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUOCeLuZ7In4dOe9Uz7Bubxn6cFdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4NUE4QzM5OEJFMDhBMDhFQzJERDc0RTNDMzc3RTAy
RkNDNjFGMTAeFw0yMjA2MDUxNjU1MDFaFw0yMzA2MDQxNzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJGM0FCM0ZCNzg4OUE3QzU3
NTUxMUE3RDlEOEVBQjg3MTc5RjVGMkNGMkFEOUQzNjQ5MDRCMzM2OTVBN0YyNDBE
RjZGMEVCMEM1QTBEOEQ5RkZCMzk1NUVDQjE1Q0JBMkMzNDE1RkRENDAwODNGREY1
NkFDNzQ3NTU3Q0NDNDRBQkRGODM1Mjk4MkRDMzQ0RTY0RUQ0Qzg4RDdFODYwQTk2
ODAzRkE2NDNGQzVDODUyMTZGOTI3Q0I0RjkwNjk0QTFEQjE4Mzc3NEMxMjk1NDBG
NTJBNjJBRkM3MUZCRTdCRDJDNkExRDI5RkVFMzIxQkE5Q0VGMzg1RjM1REYxOENF
MTk1MTYzMERENTA4QzFEODdBNTY1NEI0RDE0Njk5RDk4MjgxMUYyMzhCQzI5OTdB
ODY4Q0RCNEREOEEzRTE3MjZBMUYxRTRFNTY4MjVDNTNEOUNFMDA2Nzk4NjY4MDIw
QkMzOTNFMTNDMUE5QTU5RjRGMTg1Q0UwMEM2N0Y4MTFDMjA5MkQ3NDA5N0E5NDc1
QjgyQUU4MERBNzczODFERDRFMTI0MDc0MDBFMUZCNTdGQUNGNDVCMkRBNzQ4MTIz
QkM1MDVEOTIxOUY1NEQxMDVDQTBBOTQzODQ3NDg3QzVFNjQ2NzRFOUExMjUyNDg0
MTU0MUY2MDhDMEEyNzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwvOrP7eImnxXVRGn2djquHF59fLPKtnTZJBLM2lafyQN9vDrDFoN
jZ/7OVXssVy6LDQV/dQAg/31asdHVXzMRKvfg1KYLcNE5k7UyI1+hgqWgD+mQ/xc
hSFvkny0+QaUodsYN3TBKVQPUqYq/HH7570sah0p/uMhupzvOF813xjOGVFjDdUI
wdh6VlS00UaZ2YKBHyOLwpl6hozbTdij4XJqHx5OVoJcU9nOAGeYZoAgvDk+E8Gp
pZ9PGFzgDGf4EcIJLXQJepR1uCroDadzgd1OEkB0AOH7V/rPRbLadIEjvFBdkhn1
TRBcoKlDhHSHxeZGdOmhJSSEFUH2CMCidQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FB75XW3czik+wmio1kde/YpQbr3bMB8GA1UdIwQYMBaAFCWFqMOYvgigjsLddOPD
d+AvzGHxMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlxY1lGYm1kZ2l0M2J5
SEx2RWduMUcyUkNxTGF2bUNTSDRXUWV1RkR5N3BVLzAvMjU4NUE4QzM5OEJFMDhB
MDhFQzJERDc0RTNDMzc3RTAyRkNDNjFGMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yNTg1QThDMzk4QkUwOEEwOEVDMkRENzRFM0MzNzdFMDJGQ0M2
MUYxLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85cWNZRmJtZGdpdDNieUhMdkVn
bjFHMlJDcUxhdm1DU0g0V1FldUZEeTdwVS8wLzMyMzgzMDM0M2EzMzM4MzkzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM0MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
OJQwDQYJKoZIhvcNAQELBQADggEBAHcPl5oQaw7iQz8kyDI/Q80lKo3v4K6P51sB
ZwKw1HrcsH76bgl+IwQmXxnYx7kz6CkXXiD14l4QFG8/LEYLwQEhC4kiGbHOGnr/
t6H2diM16AngP5R1aYhwQURBMzs0RpBpLbuF33Jef+Z6ZvJtgloQT4POMkGshmwb
EvClIn0znvsHM7PpRzsZ54tZUCLXnXjujiNNbL6uUE1MR/0E15VzWzpmGE/3PIXr
e3bksU6skQkxo00GiYLE36MxgLf0DlEWNrHY6v96nwva/kPAllSSxpEeSuxuUJsw
wHe+RyGcIwLibP8LKXyF8OXVbADpr6AyptRTO3r4Ig+MYnP78ho=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org