Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/323830343a376233343a3a2f33322d3333203d3e20323731343137.roa
File:                     323830343a376233343a3a2f33322d3333203d3e20323731343137.roa (raw, json)
Hash identifier:          aOIR999Fav74z2ZvNRA1MEovtAPYGOQk64d2NU+sDlU=
Subject key identifier:   F2:F9:52:11:B7:FF:90:A5:B1:F8:E5:3F:4A:6D:CC:F0:48:24:AF:99
Certificate issuer:       /CN=22756D0D9233F6BE83CECFB06E33B7BEDE24BA1E
Certificate serial:       39D18456E02F77CB7FBB7D7934976B89B0A63C94
Authority key identifier: 22:75:6D:0D:92:33:F6:BE:83:CE:CF:B0:6E:33:B7:BE:DE:24:BA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22756D0D9233F6BE83CECFB06E33B7BEDE24BA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/323830343a376233343a3a2f33322d3333203d3e20323731343137.roa
Signing time:             Tue 05 Jul 2022 19:59:13 +0000
ROA not before:           Tue 05 Jul 2022 19:54:13 +0000
ROA not after:            Tue 04 Jul 2023 19:59:13 +0000
asID:                     271417
IP address blocks:        2804:7b34::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d1:84:56:e0:2f:77:cb:7f:bb:7d:79:34:97:6b:89:b0:a6:3c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22756D0D9233F6BE83CECFB06E33B7BEDE24BA1E
        Validity
            Not Before: Jul  5 19:54:13 2022 GMT
            Not After : Jul  4 19:59:13 2023 GMT
        Subject: CN=F2F95211B7FF90A5B1F8E53F4A6DCCF04824AF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:0c:d7:a5:b3:34:d2:7d:ea:f7:e5:0c:f5:
                    dd:ab:60:96:5e:d4:d1:37:1a:de:63:d7:79:22:b3:
                    c9:5e:73:6e:41:41:df:9d:98:a0:24:f0:44:c4:e8:
                    18:ff:b1:59:30:67:cf:08:03:ea:f2:0d:fd:3b:2d:
                    88:92:46:9c:a4:4f:a2:73:7a:a3:0d:5a:79:a5:b7:
                    1f:30:d6:51:c5:ba:78:a3:34:23:5d:d4:09:a4:c4:
                    b0:c0:b9:60:c3:c4:9c:c4:fe:e4:b5:41:f2:b8:25:
                    45:8d:02:33:7a:0e:84:8e:7b:13:a6:98:f3:08:5a:
                    3c:a2:9f:bd:6f:53:ca:10:fe:d9:d3:03:97:4d:ed:
                    3e:c7:37:a0:87:72:34:1c:c3:5d:40:27:24:4e:96:
                    33:79:30:0e:8a:a6:78:fc:af:4f:b4:c2:b4:1f:ef:
                    8f:cc:4b:4e:0c:f1:b3:34:f0:fa:c7:b8:ee:34:fe:
                    3e:8e:f4:2d:3d:55:d9:b1:62:e3:1c:d6:b7:c7:2b:
                    1b:b4:83:77:5a:66:57:49:23:65:f2:3b:6a:3f:b2:
                    2d:f2:8a:aa:50:91:f3:a1:64:b2:e0:fe:31:4c:37:
                    c3:e8:6c:35:d5:74:9b:ea:50:ea:80:2b:16:97:63:
                    9d:d3:53:93:e2:b5:5b:59:72:95:5b:d0:bb:4e:bd:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F9:52:11:B7:FF:90:A5:B1:F8:E5:3F:4A:6D:CC:F0:48:24:AF:99
            X509v3 Authority Key Identifier:
                keyid:22:75:6D:0D:92:33:F6:BE:83:CE:CF:B0:6E:33:B7:BE:DE:24:BA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/22756D0D9233F6BE83CECFB06E33B7BEDE24BA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22756D0D9233F6BE83CECFB06E33B7BEDE24BA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/0/323830343a376233343a3a2f33322d3333203d3e20323731343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b34::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:d2:a7:60:a3:f5:0d:52:1e:b7:2d:0e:b8:d9:7f:d8:66:3c:
         4e:a8:71:46:6e:8d:12:01:bc:72:d6:37:8f:d4:7c:3b:ab:01:
         4f:81:81:d3:b5:ca:ec:e3:91:cd:0c:95:09:f7:a3:ed:76:8b:
         f1:60:f9:be:5f:72:21:d4:33:8d:dc:92:91:ef:f3:81:f1:fe:
         ad:79:04:c8:77:c6:32:12:3e:18:31:01:d9:83:19:44:c3:a9:
         c1:aa:2c:66:21:0f:bb:57:71:e8:43:ee:78:30:a1:13:0d:19:
         99:3c:9e:e8:af:76:81:a5:41:da:a9:03:e6:00:96:a2:74:f1:
         43:6a:54:de:ea:02:0a:d7:8f:be:cd:ba:90:9f:a5:a8:2c:1f:
         76:55:0c:ce:fd:0c:8a:4c:d1:eb:0a:35:d4:34:9a:45:83:84:
         bb:55:91:bb:fe:ff:0a:85:d2:8a:04:db:ab:f3:48:e1:69:27:
         c3:47:98:18:76:0f:05:66:ea:4c:39:4e:6c:78:3d:5f:4e:94:
         20:82:8e:b5:bf:db:88:75:9b:f9:e0:56:a8:6b:29:e9:9a:7f:
         5c:06:c0:e6:bf:ee:1a:1b:fc:0b:c9:fa:15:6f:1d:7a:60:10:
         94:49:75:19:c7:93:e1:18:ab:8f:0b:e2:fb:f1:34:5d:f0:2f:
         48:fa:ca:81
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOdGEVuAvd8t/u315NJdribCmPJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI3NTZEMEQ5MjMzRjZCRTgzQ0VDRkIwNkUzM0I3QkVE
RTI0QkExRTAeFw0yMjA3MDUxOTU0MTNaFw0yMzA3MDQxOTU5MTNaMDMxMTAvBgNV
BAMTKEYyRjk1MjExQjdGRjkwQTVCMUY4RTUzRjRBNkRDQ0YwNDgyNEFGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mAzXpbM00n3q9+UM9d2rYJZe
1NE3Gt5j13kis8lec25BQd+dmKAk8ETE6Bj/sVkwZ88IA+ryDf07LYiSRpykT6Jz
eqMNWnmltx8w1lHFunijNCNd1AmkxLDAuWDDxJzE/uS1QfK4JUWNAjN6DoSOexOm
mPMIWjyin71vU8oQ/tnTA5dN7T7HN6CHcjQcw11AJyROljN5MA6Kpnj8r0+0wrQf
74/MS04M8bM08PrHuO40/j6O9C09VdmxYuMc1rfHKxu0g3daZldJI2XyO2o/si3y
iqpQkfOhZLLg/jFMN8PobDXVdJvqUOqAKxaXY53TU5PitVtZcpVb0LtOvVCNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8vlSEbf/kKWx+OU/Sm3M8Egkr5kwHwYDVR0j
BBgwFoAUInVtDZIz9r6Dzs+wbjO3vt4kuh4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXVSdlVjMTlyTmgxaHFZZmNwNTExQzRBU1k2QjlrRGJiYUpaUzhFUmVT
cFMvMC8yMjc1NkQwRDkyMzNGNkJFODNDRUNGQjA2RTMzQjdCRURFMjRCQTFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIyNzU2RDBEOTIzM0Y2QkU4
M0NFQ0ZCMDZFMzNCN0JFREUyNEJBMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl1UnZVYzE5ck5oMWhxWWZjcDUxMUM0QVNZNkI5a0RiYmFKWlM4RVJlU3BTLzAv
MzIzODMwMzQzYTM3NjIzMzM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMx
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR7NDANBgkqhkiG9w0BAQsFAAOCAQEASdKnYKP1
DVIety0OuNl/2GY8TqhxRm6NEgG8ctY3j9R8O6sBT4GB07XK7OORzQyVCfej7XaL
8WD5vl9yIdQzjdySke/zgfH+rXkEyHfGMhI+GDEB2YMZRMOpwaosZiEPu1dx6EPu
eDChEw0ZmTye6K92gaVB2qkD5gCWonTxQ2pU3uoCCtePvs26kJ+lqCwfdlUMzv0M
ikzR6wo11DSaRYOEu1WRu/7/CoXSigTbq/NI4Wknw0eYGHYPBWbqTDlObHg9X06U
IIKOtb/biHWb+eBWqGsp6Zp/XAbA5r/uGhv8C8n6FW8demAQlEl1GceT4Rirjwvi
+/E0XfAvSPrKgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org