Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a666530303a3a2f34302d3430203d3e20323639343235.roa
File:                     323830343a363436343a666530303a3a2f34302d3430203d3e20323639343235.roa (raw, json)
Hash identifier:          +OCBIpsqd3ODYLPTDfF/w9AhNNxBw2c6yxymE4kOqBE=
Subject key identifier:   22:42:CC:DF:BE:A7:C9:CB:EE:E1:A8:A5:8F:98:67:D9:65:9C:8F:66
Certificate issuer:       /CN=9B51B15273976450E1F7907A02174B498E4E9C95
Certificate serial:       307D6A74A46299995B549E77F72C3F6655EBA055
Authority key identifier: 9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a666530303a3a2f34302d3430203d3e20323639343235.roa
Signing time:             Tue 10 Sep 2024 17:48:21 +0000
ROA not before:           Tue 10 Sep 2024 17:43:21 +0000
ROA not after:            Tue 09 Sep 2025 17:48:21 +0000
asID:                     269425
IP address blocks:        2804:6464:fe00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7d:6a:74:a4:62:99:99:5b:54:9e:77:f7:2c:3f:66:55:eb:a0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B51B15273976450E1F7907A02174B498E4E9C95
        Validity
            Not Before: Sep 10 17:43:21 2024 GMT
            Not After : Sep  9 17:48:21 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:52:0f:6a:72:79:4a:5d:2b:a6:ce:1d:d7:
                    43:3a:c1:b2:5d:3f:54:3a:59:98:d8:9f:fe:e4:ab:
                    06:38:35:58:3f:8c:62:39:23:4f:50:4d:ba:79:24:
                    a9:2c:13:73:a9:be:82:6e:98:f2:3f:e2:03:5c:d7:
                    18:a1:c6:e6:b5:5d:e7:17:dd:39:f0:57:7f:84:4b:
                    12:1e:67:2b:1b:7d:15:5e:bb:fc:66:40:0d:00:b0:
                    8e:08:a1:f6:0d:26:c6:61:42:68:5a:46:0b:bd:4f:
                    1f:0b:c2:b5:c9:b7:60:cc:3e:ea:70:5d:36:18:74:
                    c7:31:30:13:94:2f:f5:ed:85:7a:5f:83:38:d0:a1:
                    c8:38:a5:83:46:45:5d:ad:20:2c:50:0e:40:c0:c6:
                    39:d8:b8:bf:a2:30:07:21:fb:60:20:93:88:70:83:
                    a4:6f:39:1b:31:b2:d1:ff:0f:e6:36:bd:b0:9d:df:
                    51:b3:87:c9:4c:56:58:c4:8b:38:40:f8:b3:9e:59:
                    bf:15:7d:5a:f9:0b:e0:5a:3b:f2:58:37:6d:53:32:
                    99:b2:ae:56:6f:7b:1d:79:b1:48:da:49:6d:6c:cb:
                    48:8a:b4:72:4a:76:54:8d:93:4e:a3:5a:b6:50:1f:
                    dc:42:6f:03:9a:6f:0e:26:83:80:90:40:1c:29:3a:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:42:CC:DF:BE:A7:C9:CB:EE:E1:A8:A5:8F:98:67:D9:65:9C:8F:66
            X509v3 Authority Key Identifier:
                keyid:9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/9B51B15273976450E1F7907A02174B498E4E9C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a666530303a3a2f34302d3430203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6464:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ed:21:72:13:4a:0e:00:29:b8:7a:64:41:73:d2:98:9e:44:e3:
         79:39:f1:78:58:80:b2:ed:8b:0a:70:15:06:d3:f8:58:ad:8e:
         5b:f0:ac:0e:65:11:bc:c7:9c:57:85:3b:53:29:5e:ce:9c:8e:
         89:1b:5d:db:f0:0f:76:16:f4:cd:22:67:56:2e:65:f1:56:9e:
         a9:62:eb:c2:e0:53:6f:5a:02:0d:8e:5d:b9:62:4d:a8:23:a9:
         cd:88:35:59:b5:af:0c:fc:56:f7:4b:c0:15:94:47:21:f0:5e:
         12:1e:60:6a:f6:64:30:eb:b9:35:90:ef:99:05:48:37:03:c8:
         d8:c1:43:33:fa:2d:49:90:72:1a:b5:aa:dc:da:98:35:26:34:
         c4:85:6a:83:cc:82:eb:9d:98:34:fc:ed:88:7d:fe:08:e8:13:
         97:d9:66:03:4d:48:80:09:91:0d:4e:ef:ee:4f:fb:d3:08:56:
         71:b7:de:e5:e6:7b:68:13:40:72:32:e4:a4:29:4c:99:19:db:
         62:03:0f:90:33:51:0b:5f:72:0f:7a:b4:fe:23:68:94:a9:9c:
         18:25:b0:9a:13:22:6e:e8:a7:24:a9:61:a0:c6:ab:0f:cb:4e:
         cd:b5:ce:55:be:43:3a:91:7d:46:24:90:9c:0e:6a:c2:7b:16:
         e2:b7:48:2e
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUMH1qdKRimZlbVJ539yw/ZlXroFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI1MUIxNTI3Mzk3NjQ1MEUxRjc5MDdBMDIxNzRCNDk4
RTRFOUM5NTAeFw0yNDA5MTAxNzQzMjFaFw0yNTA5MDkxNzQ4MjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJGRTUyMEY2QTcyNzk0QTVE
MkJBNkNFMURENzQzM0FDMUIyNUQzRjU0M0E1OTk4RDg5RkZFRTRBQjA2MzgzNTU4
M0Y4QzYyMzkyMzRGNTA0REJBNzkyNEE5MkMxMzczQTlCRTgyNkU5OEYyM0ZFMjAz
NUNENzE4QTFDNkU2QjU1REU3MTdERDM5RjA1NzdGODQ0QjEyMUU2NzJCMUI3RDE1
NUVCQkZDNjY0MDBEMDBCMDhFMDhBMUY2MEQyNkM2NjE0MjY4NUE0NjBCQkQ0RjFG
MEJDMkI1QzlCNzYwQ0MzRUVBNzA1RDM2MTg3NEM3MzEzMDEzOTQyRkY1RUQ4NTdB
NUY4MzM4RDBBMUM4MzhBNTgzNDY0NTVEQUQyMDJDNTAwRTQwQzBDNjM5RDhCOEJG
QTIzMDA3MjFGQjYwMjA5Mzg4NzA4M0E0NkYzOTFCMzFCMkQxRkYwRkU2MzZCREIw
OURERjUxQjM4N0M5NEM1NjU4QzQ4QjM4NDBGOEIzOUU1OUJGMTU3RDVBRjkwQkUw
NUEzQkYyNTgzNzZENTMzMjk5QjJBRTU2NkY3QjFENzlCMTQ4REE0OTZENkNDQjQ4
OEFCNDcyNEE3NjU0OEQ5MzRFQTM1QUI2NTAxRkRDNDI2RjAzOUE2RjBFMjY4Mzgw
OTA0MDFDMjkzQThDQkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsv5SD2pyeUpdK6bOHddDOsGyXT9UOlmY2J/+5KsGODVYP4xiOSNP
UE26eSSpLBNzqb6CbpjyP+IDXNcYocbmtV3nF9058Fd/hEsSHmcrG30VXrv8ZkAN
ALCOCKH2DSbGYUJoWkYLvU8fC8K1ybdgzD7qcF02GHTHMTATlC/17YV6X4M40KHI
OKWDRkVdrSAsUA5AwMY52Li/ojAHIftgIJOIcIOkbzkbMbLR/w/mNr2wnd9Rs4fJ
TFZYxIs4QPiznlm/FX1a+QvgWjvyWDdtUzKZsq5Wb3sdebFI2kltbMtIirRySnZU
jZNOo1q2UB/cQm8Dmm8OJoOAkEAcKTqMvQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCJCzN++p8nL7uGopY+YZ9llnI9mMB8GA1UdIwQYMBaAFJtRsVJzl2RQ4feQegIX
S0mOTpyVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JicFFQakw2eUhzZmVl
Z0piQUt3N2ZEM2g3WHpXTnFMdjNLampjSkRkTEdOLzEvOUI1MUIxNTI3Mzk3NjQ1
MEUxRjc5MDdBMDIxNzRCNDk4RTRFOUM5NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85QjUxQjE1MjczOTc2NDUwRTFGNzkwN0EwMjE3NEI0OThFNEU5
Qzk1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CYnBRUGpMNnlIc2ZlZWdKYkFL
dzdmRDNoN1h6V05xTHYzS2pqY0pEZExHTi8xLzMyMzgzMDM0M2EzNjM0MzYzNDNh
NjY2NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzkzNDMyMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBGRk/jANBgkqhkiG9w0BAQsFAAOCAQEA7SFyE0oOACm4emRBc9KY
nkTjeTnxeFiAsu2LCnAVBtP4WK2OW/CsDmURvMecV4U7UylezpyOiRtd2/APdhb0
zSJnVi5l8VaeqWLrwuBTb1oCDY5duWJNqCOpzYg1WbWvDPxW90vAFZRHIfBeEh5g
avZkMOu5NZDvmQVINwPI2MFDM/otSZByGrWq3NqYNSY0xIVqg8yC652YNPztiH3+
COgTl9lmA01IgAmRDU7v7k/70whWcbfe5eZ7aBNAcjLkpClMmRnbYgMPkDNRC19y
D3q0/iNolKmcGCWwmhMibuinJKlhoMarD8tOzbXOVb5DOpF9RiSQnA5qwnsW4rdI
Lg==
-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:58 2024 by rpki-client on console-ams.rpki-client.org