Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/323830343a363534303a3a2f33322d3336203d3e20323639343738.roa
File:                     323830343a363534303a3a2f33322d3336203d3e20323639343738.roa (raw, json)
Hash identifier:          sHaJCsbBh6pvowJ5fSxLZ7pcj5vcMdlANJr2fUmN0LU=
Subject key identifier:   F5:7D:3A:06:D7:B7:88:13:61:5F:DF:87:DB:41:AE:C4:F7:D8:12:47
Certificate issuer:       /CN=DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432
Certificate serial:       2CDE3011D74626BA383264E4EF771E4FD744FC08
Authority key identifier: DC:B1:AF:2C:54:63:8B:5C:BA:A6:E2:21:C6:2D:B3:A5:EE:43:C4:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/323830343a363534303a3a2f33322d3336203d3e20323639343738.roa
Signing time:             Wed 06 Sep 2023 21:00:00 +0000
ROA not before:           Wed 06 Sep 2023 20:55:00 +0000
ROA not after:            Wed 04 Sep 2024 21:00:00 +0000
asID:                     269478
IP address blocks:        2804:6540::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:de:30:11:d7:46:26:ba:38:32:64:e4:ef:77:1e:4f:d7:44:fc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432
        Validity
            Not Before: Sep  6 20:55:00 2023 GMT
            Not After : Sep  4 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:00:fd:63:02:cc:b4:d0:34:6a:8c:10:e6:
                    a3:11:8d:cd:80:30:4b:01:a2:e6:08:7b:f7:f3:b4:
                    aa:46:bd:d3:e1:2e:2a:5a:7d:b5:9e:5a:00:6f:21:
                    28:2e:c1:fa:60:74:9e:cd:81:82:77:b4:4d:4b:5f:
                    c9:db:59:8a:e2:05:91:a1:5d:ec:cb:a2:11:05:c9:
                    da:13:27:ee:fc:e4:98:c8:67:93:a5:c4:00:1d:f7:
                    24:92:db:96:38:f9:57:9f:79:56:35:d5:d7:02:a7:
                    dd:c5:27:2e:4b:f5:8f:ce:e0:b2:41:c5:b6:c8:60:
                    ff:cf:02:dc:f3:35:dc:cf:71:a9:63:73:b7:b0:7f:
                    f5:8a:e9:eb:2b:8d:a6:9f:a2:d8:5c:16:89:37:83:
                    3b:98:71:ed:58:0b:76:27:88:9f:5d:01:a5:9d:53:
                    4e:22:81:f0:be:ff:69:1b:54:02:cd:b6:0b:99:05:
                    51:45:0e:ff:3e:2b:fd:a7:57:09:99:b2:73:a0:96:
                    02:a1:3f:67:e3:07:1a:bf:85:eb:13:94:d8:5a:66:
                    6f:2f:42:4d:e9:bd:92:5b:2a:99:01:f8:c7:c5:74:
                    a3:8d:4c:25:28:01:61:52:f7:14:14:54:f0:37:93:
                    97:b4:0c:67:7f:3b:77:a6:4f:ca:0e:f7:52:80:a0:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7D:3A:06:D7:B7:88:13:61:5F:DF:87:DB:41:AE:C4:F7:D8:12:47
            X509v3 Authority Key Identifier:
                keyid:DC:B1:AF:2C:54:63:8B:5C:BA:A6:E2:21:C6:2D:B3:A5:EE:43:C4:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/323830343a363534303a3a2f33322d3336203d3e20323639343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6540::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:bd:da:f1:93:50:66:73:4f:6e:88:ae:5e:f5:dc:ba:90:f8:
         b1:da:af:94:20:ab:22:14:f3:5e:52:c0:1a:a7:7a:85:64:54:
         f6:c3:85:7e:2b:28:c9:ae:0f:70:5e:f0:83:1c:f7:cf:e0:88:
         2c:46:6e:b4:b0:d8:01:05:43:31:7a:32:6f:c1:54:36:9d:2e:
         1f:4d:70:70:d6:76:4f:30:42:2b:4c:14:83:68:15:c0:12:a6:
         98:63:3b:73:fb:71:ef:26:00:01:4d:03:a0:01:4b:fd:4a:4a:
         dc:65:ba:89:dc:9d:94:b1:7b:ad:5b:6f:ff:eb:be:47:48:cf:
         2d:d5:2a:34:01:87:a7:92:bd:66:67:56:76:35:ba:17:da:51:
         98:7f:b5:31:ff:c6:d2:80:32:71:7e:86:16:dc:99:1c:74:1c:
         31:7a:e2:83:9a:c0:c6:af:2a:f7:d2:e9:a5:be:cc:ed:0d:b5:
         79:7c:66:27:36:60:c6:0b:39:c0:04:76:ed:cc:6c:01:63:b0:
         9f:2f:74:2d:66:bf:5f:4b:be:1c:d4:f3:b9:fa:12:60:12:47:
         71:a4:c0:33:1d:09:a1:27:da:40:21:ea:7e:f9:d3:a4:24:8d:
         c7:88:2d:d1:b5:a9:1b:67:e1:fc:5c:f5:d6:fc:8a:43:62:13:
         52:66:31:c6
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIULN4wEddGJro4MmTk73ceT9dE/AgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENCMUFGMkM1NDYzOEI1Q0JBQTZFMjIxQzYyREIzQTVF
RTQzQzQzMjAeFw0yMzA5MDYyMDU1MDBaFw0yNDA5MDQyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjRDNDAwRkQ2MzAyQ0NCNEQw
MzQ2QThDMTBFNkEzMTE4RENEODAzMDRCMDFBMkU2MDg3QkY3RjNCNEFBNDZCREQz
RTEyRTJBNUE3REI1OUU1QTAwNkYyMTI4MkVDMUZBNjA3NDlFQ0Q4MTgyNzdCNDRE
NEI1RkM5REI1OThBRTIwNTkxQTE1REVDQ0JBMjExMDVDOURBMTMyN0VFRkNFNDk4
Qzg2NzkzQTVDNDAwMURGNzI0OTJEQjk2MzhGOTU3OUY3OTU2MzVENUQ3MDJBN0RE
QzUyNzJFNEJGNThGQ0VFMEIyNDFDNUI2Qzg2MEZGQ0YwMkRDRjMzNURDQ0Y3MUE5
NjM3M0I3QjA3RkY1OEFFOUVCMkI4REE2OUZBMkQ4NUMxNjg5Mzc4MzNCOTg3MUVE
NTgwQjc2Mjc4ODlGNUQwMUE1OUQ1MzRFMjI4MUYwQkVGRjY5MUI1NDAyQ0RCNjBC
OTkwNTUxNDUwRUZGM0UyQkZEQTc1NzA5OTlCMjczQTA5NjAyQTEzRjY3RTMwNzFB
QkY4NUVCMTM5NEQ4NUE2NjZGMkY0MjRERTlCRDkyNUIyQTk5MDFGOEM3QzU3NEEz
OEQ0QzI1MjgwMTYxNTJGNzE0MTQ1NEYwMzc5Mzk3QjQwQzY3N0YzQjc3QTY0RkNB
MEVGNzUyODBBMEUxOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtMQA/WMCzLTQNGqMEOajEY3NgDBLAaLmCHv387SqRr3T4S4qWn21
nloAbyEoLsH6YHSezYGCd7RNS1/J21mK4gWRoV3sy6IRBcnaEyfu/OSYyGeTpcQA
HfckktuWOPlXn3lWNdXXAqfdxScuS/WPzuCyQcW2yGD/zwLc8zXcz3GpY3O3sH/1
iunrK42mn6LYXBaJN4M7mHHtWAt2J4ifXQGlnVNOIoHwvv9pG1QCzbYLmQVRRQ7/
Piv9p1cJmbJzoJYCoT9n4wcav4XrE5TYWmZvL0JN6b2SWyqZAfjHxXSjjUwlKAFh
UvcUFFTwN5OXtAxnfzt3pk/KDvdSgKDhnwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FPV9OgbXt4gTYV/fh9tBrsT32BJHMB8GA1UdIwQYMBaAFNyxryxUY4tcuqbiIcYt
s6XuQ8QyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JBQWZqRVBleUt4aGI0
TnpqSG1oMlVBeUxTMU1DZGpQeUZnWkhjb0ZDRDdvLzAvRENCMUFGMkM1NDYzOEI1
Q0JBQTZFMjIxQzYyREIzQTVFRTQzQzQzMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EQ0IxQUYyQzU0NjM4QjVDQkFBNkUyMjFDNjJEQjNBNUVFNDND
NDMyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CQUFmakVQZXlLeGhiNE56akht
aDJVQXlMUzFNQ2RqUHlGZ1pIY29GQ0Q3by8wLzMyMzgzMDM0M2EzNjM1MzQzMDNh
M2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzOTM0MzczOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
ZUAwDQYJKoZIhvcNAQELBQADggEBAMy92vGTUGZzT26Irl713LqQ+LHar5QgqyIU
815SwBqneoVkVPbDhX4rKMmuD3Be8IMc98/giCxGbrSw2AEFQzF6Mm/BVDadLh9N
cHDWdk8wQitMFINoFcASpphjO3P7ce8mAAFNA6ABS/1KStxluoncnZSxe61bb//r
vkdIzy3VKjQBh6eSvWZnVnY1uhfaUZh/tTH/xtKAMnF+hhbcmRx0HDF64oOawMav
KvfS6aW+zO0NtXl8Zic2YMYLOcAEdu3MbAFjsJ8vdC1mv19LvhzU87n6EmASR3Gk
wDMdCaEn2kAh6n7506QkjceILdG1qRtn4fxc9db8ikNiE1JmMcY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org