Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666530303a3a2f33392d3339203d3e20323731333637.roa
File:                     323830343a376136303a666530303a3a2f33392d3339203d3e20323731333637.roa (raw, json)
Hash identifier:          cyI++ijz9xAMEayanuQPVPnum2dPVRxVE3ID490JOnU=
Subject key identifier:   DC:A8:1C:BC:05:AE:4F:2E:32:5C:29:BA:38:EE:FD:4F:F4:75:2B:1E
Certificate issuer:       /CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
Certificate serial:       3ACDDFAD1B868C5877B3F7F4617CA37FD7D91168
Authority key identifier: 8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666530303a3a2f33392d3339203d3e20323731333637.roa
Signing time:             Mon 22 May 2023 13:13:49 +0000
ROA not before:           Mon 22 May 2023 13:08:49 +0000
ROA not after:            Mon 20 May 2024 13:13:49 +0000
asID:                     271367
IP address blocks:        2804:7a60:fe00::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cd:df:ad:1b:86:8c:58:77:b3:f7:f4:61:7c:a3:7f:d7:d9:11:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
        Validity
            Not Before: May 22 13:08:49 2023 GMT
            Not After : May 20 13:13:49 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:2e:2b:88:68:1e:63:af:8a:c8:fb:6a:4b:
                    a4:af:d8:bf:66:f7:d4:cd:35:41:e7:12:9b:15:80:
                    24:01:38:8e:c4:bb:2b:53:2d:74:82:8a:a3:4a:fb:
                    78:ab:52:cd:45:ed:19:25:a1:10:5b:26:30:f6:7c:
                    14:6d:f8:d4:14:b7:05:4e:3a:46:f5:67:12:ca:da:
                    94:34:9f:4f:8c:82:68:f3:fe:26:20:6f:1f:63:f1:
                    22:cc:c6:03:f2:cf:13:16:ad:2a:a8:3b:83:8a:5b:
                    5e:a0:a3:f5:ff:88:f2:71:51:cc:ef:de:05:61:c7:
                    e9:f8:71:7c:6d:2c:a0:95:3b:79:bc:21:6a:d7:9d:
                    af:f7:02:ac:c2:00:5c:bb:72:97:e4:52:18:cd:08:
                    65:bc:da:e8:d7:af:8f:de:92:26:37:c1:56:4e:73:
                    18:fb:51:43:fe:a9:e1:82:ad:d8:f4:cf:d6:60:e5:
                    c7:83:0b:ae:5c:3c:61:5f:8f:4d:04:17:88:d8:0b:
                    16:1e:79:cd:af:c6:6c:e3:c3:f6:64:5e:70:67:84:
                    1d:47:06:9e:f4:d2:94:fd:0f:49:98:6f:8b:f0:40:
                    3c:3c:3c:89:66:24:a0:b2:48:66:a5:60:45:b1:19:
                    45:4e:da:6c:56:c3:eb:bb:2d:96:27:1a:71:60:f2:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A8:1C:BC:05:AE:4F:2E:32:5C:29:BA:38:EE:FD:4F:F4:75:2B:1E
            X509v3 Authority Key Identifier:
                keyid:8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666530303a3a2f33392d3339203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a60:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         9a:99:8d:51:b7:95:09:59:61:12:fe:b8:47:07:2c:22:c0:a0:
         a0:3f:a3:0c:6c:90:8c:29:51:fc:75:ba:d1:4e:a9:12:e0:5c:
         80:16:8c:ea:82:56:31:d4:cf:d7:66:c1:76:5e:58:8c:c4:8a:
         0a:b9:13:8e:b7:71:4f:22:40:dd:00:99:81:4e:8c:4f:c7:3a:
         86:b9:7f:f8:20:4b:52:85:f0:1b:b8:e7:1e:5c:2f:02:ad:4d:
         97:59:20:d8:92:c9:78:13:5d:1f:47:86:ae:e4:0d:49:0d:4a:
         70:5f:33:6b:cb:de:74:d5:d2:53:45:91:3e:cb:bc:ca:bc:dc:
         d5:67:b5:4b:93:3f:07:53:03:2b:66:fb:93:c5:56:b0:12:f1:
         4a:be:56:b3:6e:cc:3b:f9:e4:b0:5a:f4:1c:74:26:2a:49:f3:
         55:ab:47:96:4f:c1:de:a5:83:70:66:02:56:17:32:df:bc:44:
         6b:a4:e2:2b:1c:c3:92:9e:b8:48:4c:c3:d8:5a:f4:8f:9f:a5:
         cb:4f:03:b5:7f:6f:31:0f:60:99:7d:36:c6:6d:6d:4a:ec:06:
         09:20:60:20:ff:b1:00:16:46:bc:4e:0f:81:f2:7b:43:18:6c:
         0d:da:40:d2:9f:30:8a:21:91:08:0a:8a:5f:65:8c:09:76:36:
         89:93:b0:75
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUOs3frRuGjFh3s/f0YXyjf9fZEWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2QTAyNENFNDU5MDRDOUZCMTRGNDZGMEYyNzI1QTc4
MzY0M0MwQTAeFw0yMzA1MjIxMzA4NDlaFw0yNDA1MjAxMzEzNDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUU2RjJFMkI4ODY4MUU2M0FG
OEFDOEZCNkE0QkE0QUZEOEJGNjZGN0Q0Q0QzNTQxRTcxMjlCMTU4MDI0MDEzODhF
QzRCQjJCNTMyRDc0ODI4QUEzNEFGQjc4QUI1MkNENDVFRDE5MjVBMTEwNUIyNjMw
RjY3QzE0NkRGOEQ0MTRCNzA1NEUzQTQ2RjU2NzEyQ0FEQTk0MzQ5RjRGOEM4MjY4
RjNGRTI2MjA2RjFGNjNGMTIyQ0NDNjAzRjJDRjEzMTZBRDJBQTgzQjgzOEE1QjVF
QTBBM0Y1RkY4OEYyNzE1MUNDRUZERTA1NjFDN0U5Rjg3MTdDNkQyQ0EwOTUzQjc5
QkMyMTZBRDc5REFGRjcwMkFDQzIwMDVDQkI3Mjk3RTQ1MjE4Q0QwODY1QkNEQUU4
RDdBRjhGREU5MjI2MzdDMTU2NEU3MzE4RkI1MTQzRkVBOUUxODJBREQ4RjRDRkQ2
NjBFNUM3ODMwQkFFNUMzQzYxNUY4RjREMDQxNzg4RDgwQjE2MUU3OUNEQUZDNjZD
RTNDM0Y2NjQ1RTcwNjc4NDFENDcwNjlFRjREMjk0RkQwRjQ5OTg2RjhCRjA0MDND
M0MzQzg5NjYyNEEwQjI0ODY2QTU2MDQ1QjExOTQ1NEVEQTZDNTZDM0VCQkIyRDk2
MjcxQTcxNjBGMjhFQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnm8uK4hoHmOvisj7akukr9i/ZvfUzTVB5xKbFYAkATiOxLsrUy10
goqjSvt4q1LNRe0ZJaEQWyYw9nwUbfjUFLcFTjpG9WcSytqUNJ9PjIJo8/4mIG8f
Y/EizMYD8s8TFq0qqDuDilteoKP1/4jycVHM794FYcfp+HF8bSyglTt5vCFq152v
9wKswgBcu3KX5FIYzQhlvNro16+P3pImN8FWTnMY+1FD/qnhgq3Y9M/WYOXHgwuu
XDxhX49NBBeI2AsWHnnNr8Zs48P2ZF5wZ4QdRwae9NKU/Q9JmG+L8EA8PDyJZiSg
skhmpWBFsRlFTtpsVsPruy2WJxpxYPKOyQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FNyoHLwFrk8uMlwpujju/U/0dSseMB8GA1UdIwQYMBaAFIpqAkzkWQTJ+xT0bw8n
JaeDZDwKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRy
QjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzAvOEE2QTAyNENFNDU5MDRD
OUZCMTRGNDZGMEYyNzI1QTc4MzY0M0MwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QTZBMDI0Q0U0NTkwNEM5RkIxNEY0NkYwRjI3MjVBNzgzNjQz
QzBBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CRllIeTNwQmtZUlF0ckI4TTZq
d0pNYWp5VzRkZnprRW1SWVRzRnR3dXNnci8wLzMyMzgzMDM0M2EzNzYxMzYzMDNh
NjY2NTMwMzAzYTNhMmYzMzM5MmQzMzM5MjAzZDNlMjAzMjM3MzEzMzM2Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgEoBHpg/jANBgkqhkiG9w0BAQsFAAOCAQEAmpmNUbeVCVlhEv64Rwcs
IsCgoD+jDGyQjClR/HW60U6pEuBcgBaM6oJWMdTP12bBdl5YjMSKCrkTjrdxTyJA
3QCZgU6MT8c6hrl/+CBLUoXwG7jnHlwvAq1Nl1kg2JLJeBNdH0eGruQNSQ1KcF8z
a8vedNXSU0WRPsu8yrzc1We1S5M/B1MDK2b7k8VWsBLxSr5Ws27MO/nksFr0HHQm
KknzVatHlk/B3qWDcGYCVhcy37xEa6TiKxzDkp64SEzD2Fr0j5+ly08DtX9vMQ9g
mX02xm1tSuwGCSBgIP+xABZGvE4PgfJ7QxhsDdpA0p8wiiGRCAqKX2WMCXY2iZOw
dQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org