Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa
File:                     323830343a363838633a3a2f33322d3332203d3e20323639373030.roa (raw, json)
Hash identifier:          amWg1k6LoQKHjxoc2cr8DAzDRD22ajjfSz1R8Shqbr4=
Subject key identifier:   44:C5:8A:13:F4:6C:33:E4:69:83:AD:7A:D0:26:1B:13:CE:96:AE:43
Certificate issuer:       /CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
Certificate serial:       79DC1F450BB7BAE8E49779A5192084F412302739
Authority key identifier: F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa
Signing time:             Wed 07 Feb 2024 17:00:00 +0000
ROA not before:           Wed 07 Feb 2024 16:55:00 +0000
ROA not after:            Wed 05 Feb 2025 17:00:00 +0000
asID:                     269700
IP address blocks:        2804:688c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dc:1f:45:0b:b7:ba:e8:e4:97:79:a5:19:20:84:f4:12:30:27:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
        Validity
            Not Before: Feb  7 16:55:00 2024 GMT
            Not After : Feb  5 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:e9:b8:07:07:b9:43:c2:97:14:61:b9:41:
                    40:47:21:c3:e4:da:49:53:e5:e6:62:c3:9d:8c:4d:
                    76:61:ca:6f:74:58:ba:02:a7:1a:0d:54:40:56:27:
                    b1:93:95:04:3b:ed:b8:b1:94:8b:08:70:47:b0:4d:
                    b9:c0:53:81:5f:1a:0e:1c:6b:76:c5:fc:4a:14:89:
                    c5:77:f0:50:a8:b8:26:d9:be:05:c9:ba:1e:7b:98:
                    9d:4e:29:f3:c5:83:e2:b6:73:96:f4:4c:a5:93:85:
                    5d:1b:4b:f2:63:79:3d:a6:0c:30:bf:d8:8d:98:06:
                    d1:a9:4a:8e:29:e6:0a:af:1c:ef:97:e7:47:6d:50:
                    8c:e9:68:ff:ea:bc:5f:03:3e:b8:ff:56:07:0d:28:
                    6b:29:a8:48:a3:c1:64:04:b3:2e:6b:83:bd:99:45:
                    77:5f:7d:c4:b7:c5:43:b7:a3:23:57:f9:1f:c0:b8:
                    f0:08:87:67:de:35:45:80:60:bf:3c:2d:ad:df:0b:
                    31:a7:03:92:47:de:d7:f0:05:f4:78:92:0c:99:64:
                    0a:3c:69:6b:7b:ed:ba:cd:4c:cb:c3:6e:fc:b7:ae:
                    9c:ff:c1:30:b8:35:66:ee:9b:ea:cd:76:dd:fd:48:
                    0e:b5:86:49:9c:3d:2b:98:95:b8:90:dc:00:4e:75:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C5:8A:13:F4:6C:33:E4:69:83:AD:7A:D0:26:1B:13:CE:96:AE:43
            X509v3 Authority Key Identifier:
                keyid:F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/323830343a363838633a3a2f33322d3332203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:688c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:26:55:9c:9a:c7:a3:95:3d:ae:ac:d3:61:93:eb:67:a4:
         38:b0:50:c7:39:a5:4c:60:57:27:5f:4e:ba:7b:a4:56:63:84:
         52:b3:18:8d:48:fa:b4:cb:a8:be:62:46:21:fc:25:37:d3:a0:
         dd:e6:9d:e2:b7:5a:57:a3:9c:47:12:df:f0:f8:c6:62:fd:8d:
         5d:51:fb:40:56:59:cb:48:59:75:5c:10:2d:57:33:fd:c0:62:
         ad:4c:b3:6c:89:b8:bf:b7:4a:ac:df:e7:81:42:d3:98:ee:83:
         9c:f6:95:d5:98:96:bf:d0:7f:ae:63:b6:63:82:12:96:76:81:
         5b:93:dc:e0:5c:ec:36:57:eb:9b:83:17:bf:e4:a6:c0:fc:ba:
         40:4b:d4:1c:85:8e:11:25:dc:6b:7b:13:07:7f:d2:01:d5:40:
         76:b3:81:76:3d:e2:1c:fd:41:07:38:3c:44:60:48:5d:f9:d1:
         cf:ef:80:12:06:3b:51:cb:98:0d:4d:95:c4:6a:bd:d6:4d:27:
         27:67:60:7f:09:c2:bb:09:bf:bc:4c:5b:0f:a5:6e:88:68:76:
         e8:be:4b:57:fa:15:ea:75:35:f3:9b:e1:f4:a7:b2:08:f3:7f:
         17:9d:b4:4d:64:d1:7a:e3:87:f7:6c:45:7b:b8:da:47:56:d5:
         ef:be:c6:47
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUedwfRQu3uujkl3mlGSCE9BIwJzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlCNjcxMjlCREMzQkQwQ0ZCQjNBNEU2OTNCQUEzNDA3
NjIyRkRBQTAeFw0yNDAyMDcxNjU1MDBaFw0yNTAyMDUxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTdCNUU5QjgwNzA3Qjk0M0My
OTcxNDYxQjk0MTQwNDcyMUMzRTREQTQ5NTNFNUU2NjJDMzlEOEM0RDc2NjFDQTZG
NzQ1OEJBMDJBNzFBMEQ1NDQwNTYyN0IxOTM5NTA0M0JFREI4QjE5NDhCMDg3MDQ3
QjA0REI5QzA1MzgxNUYxQTBFMUM2Qjc2QzVGQzRBMTQ4OUM1NzdGMDUwQThCODI2
RDlCRTA1QzlCQTFFN0I5ODlENEUyOUYzQzU4M0UyQjY3Mzk2RjQ0Q0E1OTM4NTVE
MUI0QkYyNjM3OTNEQTYwQzMwQkZEODhEOTgwNkQxQTk0QThFMjlFNjBBQUYxQ0VG
OTdFNzQ3NkQ1MDhDRTk2OEZGRUFCQzVGMDMzRUI4RkY1NjA3MEQyODZCMjlBODQ4
QTNDMTY0MDRCMzJFNkI4M0JEOTk0NTc3NUY3REM0QjdDNTQzQjdBMzIzNTdGOTFG
QzBCOEYwMDg4NzY3REUzNTQ1ODA2MEJGM0MyREFEREYwQjMxQTcwMzkyNDdERUQ3
RjAwNUY0Nzg5MjBDOTk2NDBBM0M2OTZCN0JFREJBQ0Q0Q0NCQzM2RUZDQjdBRTlD
RkZDMTMwQjgzNTY2RUU5QkVBQ0Q3NkRERkQ0ODBFQjU4NjQ5OUMzRDJCOTg5NUI4
OTBEQzAwNEU3NTQwN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp7XpuAcHuUPClxRhuUFARyHD5NpJU+XmYsOdjE12YcpvdFi6Aqca
DVRAViexk5UEO+24sZSLCHBHsE25wFOBXxoOHGt2xfxKFInFd/BQqLgm2b4Fyboe
e5idTinzxYPitnOW9Eylk4VdG0vyY3k9pgwwv9iNmAbRqUqOKeYKrxzvl+dHbVCM
6Wj/6rxfAz64/1YHDShrKahIo8FkBLMua4O9mUV3X33Et8VDt6MjV/kfwLjwCIdn
3jVFgGC/PC2t3wsxpwOSR97X8AX0eJIMmWQKPGlre+26zUzLw278t66c/8EwuDVm
7pvqzXbd/UgOtYZJnD0rmJW4kNwATnVAewIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FETFihP0bDPkaYOtetAmGxPOlq5DMB8GA1UdIwQYMBaAFPm2cSm9w70M+7Ok5pO6
o0B2Iv2qMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FyY0JyUXB6RnVUZkVr
SFZGRnFoTWt2VVl6QTNSaFNWVG10MnN2TUQyS3F5LzAvRjlCNjcxMjlCREMzQkQw
Q0ZCQjNBNEU2OTNCQUEzNDA3NjIyRkRBQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GOUI2NzEyOUJEQzNCRDBDRkJCM0E0RTY5M0JBQTM0MDc2MjJG
REFBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BcmNCclFwekZ1VGZFa0hWRkZx
aE1rdlVZekEzUmhTVlRtdDJzdk1EMktxeS8wLzMyMzgzMDM0M2EzNjM4Mzg2MzNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM3MzAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
aIwwDQYJKoZIhvcNAQELBQADggEBABEvJlWcmsejlT2urNNhk+tnpDiwUMc5pUxg
VydfTrp7pFZjhFKzGI1I+rTLqL5iRiH8JTfToN3mneK3WlejnEcS3/D4xmL9jV1R
+0BWWctIWXVcEC1XM/3AYq1Ms2yJuL+3Sqzf54FC05jug5z2ldWYlr/Qf65jtmOC
EpZ2gVuT3OBc7DZX65uDF7/kpsD8ukBL1ByFjhEl3Gt7Ewd/0gHVQHazgXY94hz9
QQc4PERgSF350c/vgBIGO1HLmA1NlcRqvdZNJydnYH8JwrsJv7xMWw+lbohodui+
S1f6Fep1NfOb4fSnsgjzfxedtE1k0Xrjh/dsRXu42kdW1e++xkc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org