Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a633030303a3a2f33352d3335203d3e20323632363131.roa
File:                     323830343a326663383a633030303a3a2f33352d3335203d3e20323632363131.roa (raw, json)
Hash identifier:          O6idr37hFLHdi8WeBZvHqrhTztgJU0Yg9acaka+hbso=
Subject key identifier:   2F:20:75:A6:A6:03:04:CB:EA:BD:ED:6D:72:97:A9:F9:2B:3B:21:D3
Certificate issuer:       /CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
Certificate serial:       17BA0AA6FB9BE925807F6A8D12649457CDF59F38
Authority key identifier: AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a633030303a3a2f33352d3335203d3e20323632363131.roa
Signing time:             Fri 11 Aug 2023 11:30:00 +0000
ROA not before:           Fri 11 Aug 2023 11:25:00 +0000
ROA not after:            Fri 09 Aug 2024 11:30:00 +0000
asID:                     262611
IP address blocks:        2804:2fc8:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ba:0a:a6:fb:9b:e9:25:80:7f:6a:8d:12:64:94:57:cd:f5:9f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Validity
            Not Before: Aug 11 11:25:00 2023 GMT
            Not After : Aug  9 11:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:eb:a8:98:ac:db:19:0d:a2:5a:56:49:df:
                    5a:59:92:49:97:95:b7:2e:58:a7:19:43:2d:64:31:
                    fd:65:4d:72:73:16:1a:81:5b:6c:71:9c:1d:5e:06:
                    d7:31:f9:41:04:aa:9d:e3:cd:c0:82:d4:9b:66:0a:
                    a9:f8:63:a8:7a:89:c8:ec:f8:9f:73:1d:d6:ca:15:
                    13:5e:b7:19:2c:c6:06:14:af:76:f5:22:31:92:99:
                    a2:5d:b1:95:3a:28:ff:84:5b:bd:80:d4:41:17:51:
                    eb:07:15:ee:3a:66:38:1e:7a:cc:42:aa:6e:64:d0:
                    a7:4a:2f:99:de:17:c1:0c:3b:23:ac:a0:75:2c:22:
                    4d:62:90:7f:50:8e:69:29:ba:bb:30:cb:19:f8:51:
                    a7:5b:e0:a7:43:06:dd:d4:85:7e:2b:67:7f:a4:59:
                    be:43:ce:1e:e5:a6:b3:19:84:0d:2a:7b:d9:a6:b8:
                    28:68:de:20:8e:a3:eb:d6:31:a1:b5:2f:59:ed:ed:
                    ea:11:47:ec:d7:63:b8:86:8b:fe:b0:b5:14:3e:78:
                    c0:62:9c:15:f6:d7:4d:24:50:45:2c:30:56:15:ae:
                    ee:51:cf:e9:92:ea:58:19:33:4a:2e:aa:a0:9f:1f:
                    cf:ea:ee:07:a9:7d:be:af:94:bf:2c:17:b2:1a:a2:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:20:75:A6:A6:03:04:CB:EA:BD:ED:6D:72:97:A9:F9:2B:3B:21:D3
            X509v3 Authority Key Identifier:
                keyid:AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a633030303a3a2f33352d3335203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:ee:32:89:cd:cc:37:ce:eb:42:70:92:c1:2d:93:5b:32:
         04:59:28:95:f4:a7:bf:ef:34:90:2e:c0:5d:0a:b3:97:e2:fe:
         e2:d6:0a:e2:f6:f1:d6:2b:7e:bc:26:90:ed:7b:8a:0f:3e:6a:
         ff:ac:45:92:f2:d2:99:b9:3e:f0:60:5f:1b:d2:56:7b:89:be:
         df:cc:30:14:25:42:a5:7a:1e:12:d2:38:ab:7c:c8:55:d6:d2:
         74:8c:cd:b0:3a:09:3d:7a:11:8b:e1:65:49:3a:a3:2a:fb:c4:
         43:2b:fc:3d:1a:32:b3:e3:6e:97:fb:88:eb:22:00:f7:31:cf:
         f5:6b:a5:cc:5a:ff:ee:80:89:5b:52:83:14:d7:54:fe:39:ef:
         eb:84:65:fd:e6:82:31:02:64:8c:5f:5a:7e:2e:49:30:41:0d:
         56:5e:6d:39:52:d4:9c:d9:58:64:16:d5:e6:88:23:df:86:76:
         31:e4:03:20:b0:ec:33:e5:1f:69:8a:73:05:aa:0e:6b:0f:44:
         ea:9d:43:6e:8b:dc:ab:71:15:07:82:21:d2:52:76:c6:f7:82:
         e5:42:fe:33:77:58:9e:12:b2:9d:e5:11:2e:f2:93:db:1b:01:
         f9:58:08:ba:de:55:58:2b:46:72:53:18:29:5a:0e:4a:a3:e6:
         b5:d0:a3:46
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUF7oKpvub6SWAf2qNEmSUV831nzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBRUQ5MDA4RjI0RjVCNjE5ODcxODBCQjFDMUQ2ODgx
MEJBMTdDQzAeFw0yMzA4MTExMTI1MDBaFw0yNDA4MDkxMTMwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkMyNkVCQTg5OEFDREIxOTBE
QTI1QTU2NDlERjVBNTk5MjQ5OTc5NUI3MkU1OEE3MTk0MzJENjQzMUZENjU0RDcy
NzMxNjFBODE1QjZDNzE5QzFENUUwNkQ3MzFGOTQxMDRBQTlERTNDREMwODJENDlC
NjYwQUE5Rjg2M0E4N0E4OUM4RUNGODlGNzMxREQ2Q0ExNTEzNUVCNzE5MkNDNjA2
MTRBRjc2RjUyMjMxOTI5OUEyNURCMTk1M0EyOEZGODQ1QkJEODBENDQxMTc1MUVC
MDcxNUVFM0E2NjM4MUU3QUNDNDJBQTZFNjREMEE3NEEyRjk5REUxN0MxMEMzQjIz
QUNBMDc1MkMyMjRENjI5MDdGNTA4RTY5MjlCQUJCMzBDQjE5Rjg1MUE3NUJFMEE3
NDMwNkRERDQ4NTdFMkI2NzdGQTQ1OUJFNDNDRTFFRTVBNkIzMTk4NDBEMkE3QkQ5
QTZCODI4NjhERTIwOEVBM0VCRDYzMUExQjUyRjU5RURFREVBMTE0N0VDRDc2M0I4
ODY4QkZFQjBCNTE0M0U3OEMwNjI5QzE1RjZENzREMjQ1MDQ1MkMzMDU2MTVBRUVF
NTFDRkU5OTJFQTU4MTkzMzRBMkVBQUEwOUYxRkNGRUFFRTA3QTk3REJFQUY5NEJG
MkMxN0IyMUFBMkVBRTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvCbrqJis2xkNolpWSd9aWZJJl5W3LlinGUMtZDH9ZU1ycxYagVts
cZwdXgbXMflBBKqd483AgtSbZgqp+GOoeonI7Pifcx3WyhUTXrcZLMYGFK929SIx
kpmiXbGVOij/hFu9gNRBF1HrBxXuOmY4HnrMQqpuZNCnSi+Z3hfBDDsjrKB1LCJN
YpB/UI5pKbq7MMsZ+FGnW+CnQwbd1IV+K2d/pFm+Q84e5aazGYQNKnvZprgoaN4g
jqPr1jGhtS9Z7e3qEUfs12O4hov+sLUUPnjAYpwV9tdNJFBFLDBWFa7uUc/pkupY
GTNKLqqgnx/P6u4HqX2+r5S/LBeyGqLq5wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FC8gdaamAwTL6r3tbXKXqfkrOyHTMB8GA1UdIwQYMBaAFK2u2QCPJPW2GYcYC7HB
1ogQuhfMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FyVDh2ckRqcXk0Yldh
TUN0RlAyNENGVTVoTXpXaEhSa2p2Z3haeVFCUWtwLzAvQURBRUQ5MDA4RjI0RjVC
NjE5ODcxODBCQjFDMUQ2ODgxMEJBMTdDQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BREFFRDkwMDhGMjRGNUI2MTk4NzE4MEJCMUMxRDY4ODEwQkEx
N0NDLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BclQ4dnJEanF5NGJXYU1DdEZQ
MjRDRlU1aE16V2hIUmtqdmd4WnlRQlFrcC8wLzMyMzgzMDM0M2EzMjY2NjMzODNh
NjMzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM2MzIzNjMxMzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUoBC/IwDANBgkqhkiG9w0BAQsFAAOCAQEAXxfuMonNzDfO60JwksEt
k1syBFkolfSnv+80kC7AXQqzl+L+4tYK4vbx1it+vCaQ7XuKDz5q/6xFkvLSmbk+
8GBfG9JWe4m+38wwFCVCpXoeEtI4q3zIVdbSdIzNsDoJPXoRi+FlSTqjKvvEQyv8
PRoys+Nul/uI6yIA9zHP9WulzFr/7oCJW1KDFNdU/jnv64Rl/eaCMQJkjF9afi5J
MEENVl5tOVLUnNlYZBbV5ogj34Z2MeQDILDsM+UfaYpzBaoOaw9E6p1Dbovcq3EV
B4Ih0lJ2xveC5UL+M3dYnhKyneURLvKT2xsB+VgIut5VWCtGclMYKVoOSqPmtdCj
Rg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org