Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666530303a3a2f34302d3430203d3e20323731333637.roa
File:                     323830343a376136303a666530303a3a2f34302d3430203d3e20323731333637.roa (raw, json)
Hash identifier:          FgMAlo5+b60exUILsViqf053En386/GafMWKo2t+mB8=
Subject key identifier:   CD:B6:C5:E7:CE:A4:09:8C:52:BF:9E:3D:C4:C9:E8:91:EF:6C:93:2F
Certificate issuer:       /CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
Certificate serial:       4AEB699437844AEDDC54872B5CB8E05FA923B289
Authority key identifier: 9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666530303a3a2f34302d3430203d3e20323731333637.roa
Signing time:             Thu 05 May 2022 12:16:30 +0000
ROA not before:           Thu 05 May 2022 12:11:30 +0000
ROA not after:            Thu 04 May 2023 12:16:30 +0000
asID:                     271367
IP address blocks:        2804:7a60:fe00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:eb:69:94:37:84:4a:ed:dc:54:87:2b:5c:b8:e0:5f:a9:23:b2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
        Validity
            Not Before: May  5 12:11:30 2022 GMT
            Not After : May  4 12:16:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:08:f0:65:b0:fa:62:3b:be:d9:28:7f:3e:
                    14:ec:23:e8:ab:9b:46:44:22:c4:3b:d3:40:0e:b3:
                    a5:a5:6e:d5:82:4e:1b:4f:64:23:16:07:1f:38:9c:
                    3c:8d:7e:7d:31:1c:4f:5f:2c:3d:4b:f0:b1:4d:9c:
                    88:98:9b:ad:e6:99:e2:34:eb:66:54:48:66:da:10:
                    20:bd:68:20:2c:30:1e:bc:3c:4c:73:69:27:c2:26:
                    77:68:11:a6:71:98:bb:71:9e:0f:f6:b1:40:58:c8:
                    f7:ca:17:03:6a:fa:24:ff:7a:ee:8f:d2:2e:6b:7c:
                    66:ea:31:bd:5c:fc:ba:ad:41:2e:97:03:e6:d8:2a:
                    c8:14:58:61:7d:9a:42:46:08:11:7d:0d:3f:2b:13:
                    fc:f1:97:91:18:07:d5:a9:92:a1:16:2f:fe:4c:b3:
                    1f:81:67:82:7c:9f:5f:84:eb:55:34:18:e2:fd:58:
                    b4:a0:ab:43:a6:36:85:8a:4f:1f:23:05:4a:87:e2:
                    41:12:15:7f:39:07:67:f7:a0:d1:45:72:7a:92:af:
                    d6:c7:ef:14:d0:5d:59:d0:7f:de:00:d2:c3:76:1f:
                    67:18:b6:4d:9f:95:0f:dc:93:54:87:fa:3c:c5:12:
                    47:27:de:d4:81:41:50:b0:40:4c:3b:e3:ad:b6:1d:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:C5:E7:CE:A4:09:8C:52:BF:9E:3D:C4:C9:E8:91:EF:6C:93:2F
            X509v3 Authority Key Identifier:
                keyid:9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/323830343a376136303a666530303a3a2f34302d3430203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a60:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:af:bc:b8:24:ab:df:79:db:c4:fe:0e:c7:33:10:05:28:
         cc:32:79:80:68:9f:80:87:96:07:e9:b5:6a:b7:bf:90:09:32:
         b7:01:22:96:97:df:53:56:1b:f8:cf:88:71:23:2f:98:c9:68:
         04:75:f0:29:26:8b:bc:c2:57:57:90:2e:a0:f2:86:e7:2e:fd:
         92:db:83:04:47:65:6c:b8:d5:25:a9:90:29:b2:2b:60:c5:f4:
         e2:62:5e:f5:43:7d:39:da:ae:d8:62:02:e0:b8:18:53:a6:b2:
         51:37:2b:3f:47:18:36:21:8d:d4:56:51:f5:78:d1:df:3b:53:
         63:64:1e:e3:88:cc:9f:40:89:52:0a:59:04:bc:31:ac:43:0d:
         16:22:18:b2:54:45:8d:1a:01:29:c2:43:7f:9e:fd:30:c2:45:
         6d:c0:e7:7e:c1:ae:3c:99:ef:e6:ac:2e:fd:b2:cc:26:f0:e0:
         61:c9:4e:70:29:27:ab:44:2d:13:76:0b:04:a3:21:b2:4f:8c:
         c8:2c:c0:df:9a:1c:96:3c:d6:02:3e:aa:7d:32:75:8f:97:d7:
         1c:2b:df:b2:e1:0e:c3:6e:b0:91:c0:9f:c2:d8:76:b7:f0:80:
         ad:cf:a1:05:62:f3:d1:49:65:2c:f3:1d:79:ec:3a:fa:39:66:
         46:3a:e0:d3
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUSutplDeESu3cVIcrXLjgX6kjsokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDNTA4QkI5Njg0Qjg4Mzc0MDJFNzFEMkFGNERENjZC
NzdGNkMyNzAeFw0yMjA1MDUxMjExMzBaFw0yMzA1MDQxMjE2MzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzUxRjA4RjA2NUIwRkE2MjNC
QkVEOTI4N0YzRTE0RUMyM0U4QUI5QjQ2NDQyMkM0M0JEMzQwMEVCM0E1QTU2RUQ1
ODI0RTFCNEY2NDIzMTYwNzFGMzg5QzNDOEQ3RTdEMzExQzRGNUYyQzNENEJGMEIx
NEQ5Qzg4OTg5QkFERTY5OUUyMzRFQjY2NTQ0ODY2REExMDIwQkQ2ODIwMkMzMDFF
QkMzQzRDNzM2OTI3QzIyNjc3NjgxMUE2NzE5OEJCNzE5RTBGRjZCMTQwNThDOEY3
Q0ExNzAzNkFGQTI0RkY3QUVFOEZEMjJFNkI3QzY2RUEzMUJENUNGQ0JBQUQ0MTJF
OTcwM0U2RDgyQUM4MTQ1ODYxN0Q5QTQyNDYwODExN0QwRDNGMkIxM0ZDRjE5Nzkx
MTgwN0Q1QTk5MkExMTYyRkZFNENCMzFGODE2NzgyN0M5RjVGODRFQjU1MzQxOEUy
RkQ1OEI0QTBBQjQzQTYzNjg1OEE0RjFGMjMwNTRBODdFMjQxMTIxNTdGMzkwNzY3
RjdBMEQxNDU3MjdBOTJBRkQ2QzdFRjE0RDA1RDU5RDA3RkRFMDBEMkMzNzYxRjY3
MThCNjREOUY5NTBGREM5MzU0ODdGQTNDQzUxMjQ3MjdERUQ0ODE0MTUwQjA0MDRD
M0JFM0FEQjYxRDNGRjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxR8I8GWw+mI7vtkofz4U7CPoq5tGRCLEO9NADrOlpW7Vgk4bT2Qj
FgcfOJw8jX59MRxPXyw9S/CxTZyImJut5pniNOtmVEhm2hAgvWggLDAevDxMc2kn
wiZ3aBGmcZi7cZ4P9rFAWMj3yhcDavok/3ruj9Iua3xm6jG9XPy6rUEulwPm2CrI
FFhhfZpCRggRfQ0/KxP88ZeRGAfVqZKhFi/+TLMfgWeCfJ9fhOtVNBji/Vi0oKtD
pjaFik8fIwVKh+JBEhV/OQdn96DRRXJ6kq/Wx+8U0F1Z0H/eANLDdh9nGLZNn5UP
3JNUh/o8xRJHJ97UgUFQsEBMO+Otth0/8QIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FM22xefOpAmMUr+ePcTJ6JHvbJMvMB8GA1UdIwQYMBaAFJzFCLuWhLiDdALnHSr0
3Wa3f2wnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRy
QjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzAvOUNDNTA4QkI5Njg0Qjg4
Mzc0MDJFNzFEMkFGNERENjZCNzdGNkMyNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85Q0M1MDhCQjk2ODRCODgzNzQwMkU3MUQyQUY0REQ2NkI3N0Y2
QzI3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CRllIeTNwQmtZUlF0ckI4TTZq
d0pNYWp5VzRkZnprRW1SWVRzRnR3dXNnci8wLzMyMzgzMDM0M2EzNzYxMzYzMDNh
NjY2NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzEzMzM2Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBHpg/jANBgkqhkiG9w0BAQsFAAOCAQEAoYWvvLgkq99528T+Dscz
EAUozDJ5gGifgIeWB+m1are/kAkytwEilpffU1Yb+M+IcSMvmMloBHXwKSaLvMJX
V5AuoPKG5y79ktuDBEdlbLjVJamQKbIrYMX04mJe9UN9Odqu2GIC4LgYU6ayUTcr
P0cYNiGN1FZR9XjR3ztTY2Qe44jMn0CJUgpZBLwxrEMNFiIYslRFjRoBKcJDf579
MMJFbcDnfsGuPJnv5qwu/bLMJvDgYclOcCknq0QtE3YLBKMhsk+MyCzA35ocljzW
Aj6qfTJ1j5fXHCvfsuEOw26wkcCfwth2t/CArc+hBWLz0UllLPMdeew6+jlmRjrg
0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org