Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/323830343a363538383a3a2f33322d3332203d3e20323639343937.roa
File:                     323830343a363538383a3a2f33322d3332203d3e20323639343937.roa (raw, json)
Hash identifier:          a1SlE2Cvu5+ymBlgO5di/HAZWJp+rFaPZ0Y/FL18LqY=
Subject key identifier:   FD:47:FB:38:5B:78:B1:9C:11:EC:73:4E:C3:6C:15:8B:6B:D0:66:FC
Certificate issuer:       /CN=FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F
Certificate serial:       4E204AB0DA802A410B4E66274198F2DCB87C58CB
Authority key identifier: FA:14:32:20:D3:E1:BA:51:4C:D2:CB:C4:E5:78:6E:02:66:B8:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/323830343a363538383a3a2f33322d3332203d3e20323639343937.roa
Signing time:             Thu 11 Apr 2024 20:40:24 +0000
ROA not before:           Thu 11 Apr 2024 20:35:24 +0000
ROA not after:            Thu 10 Apr 2025 20:40:24 +0000
asID:                     269497
IP address blocks:        2804:6588::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:4a:b0:da:80:2a:41:0b:4e:66:27:41:98:f2:dc:b8:7c:58:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F
        Validity
            Not Before: Apr 11 20:35:24 2024 GMT
            Not After : Apr 10 20:40:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:95:35:5b:1b:c3:3e:11:4b:85:7d:c4:0e:
                    c2:c8:5b:56:4a:f8:30:22:3d:26:6b:f3:5a:8b:4b:
                    7d:b6:98:c9:f6:30:71:01:d4:72:f1:9c:a3:c6:eb:
                    f9:1a:1b:90:4d:08:bc:0b:f0:91:c6:24:e3:aa:d5:
                    de:96:0f:e5:3d:1e:46:82:31:98:28:a8:df:69:b5:
                    b1:26:55:21:19:6c:da:6e:a9:0c:b0:18:d0:2c:7c:
                    20:87:4e:bb:a8:05:86:88:69:68:1c:d4:4e:55:7f:
                    e8:dc:dd:25:c7:0e:1f:02:d8:e3:0f:92:6d:9a:ba:
                    21:98:92:5c:04:02:63:b8:53:d3:b7:ae:2b:a2:c0:
                    67:3f:c4:f1:c1:df:9b:08:85:47:77:66:72:7a:40:
                    d9:cd:72:82:47:4e:76:c9:b1:0f:48:80:d3:b3:d0:
                    aa:78:45:de:6a:19:9c:64:a0:35:ed:4c:86:f9:e5:
                    84:c8:59:f8:37:4b:79:49:7e:74:e3:68:fb:b4:e6:
                    4c:3e:f7:b9:2f:0c:9f:7b:7a:60:71:ed:7c:a0:d9:
                    35:65:20:3c:44:e2:e7:30:8f:ab:27:db:70:c9:fa:
                    84:4b:68:6e:4a:d1:eb:36:12:61:f7:a2:17:01:10:
                    b8:da:5c:76:05:1c:8b:da:13:44:23:7f:31:04:04:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:47:FB:38:5B:78:B1:9C:11:EC:73:4E:C3:6C:15:8B:6B:D0:66:FC
            X509v3 Authority Key Identifier:
                keyid:FA:14:32:20:D3:E1:BA:51:4C:D2:CB:C4:E5:78:6E:02:66:B8:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/323830343a363538383a3a2f33322d3332203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6588::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:93:cc:1d:8a:95:df:4e:a5:09:dd:65:e5:b6:20:f9:c0:
         b4:71:06:09:92:21:7e:45:70:f9:cf:6a:1d:01:a7:56:fe:1e:
         bc:52:b0:e1:8d:2b:8b:34:ac:7d:d3:6e:ce:9e:46:ca:1d:62:
         ad:1c:eb:04:a0:4d:e1:39:1e:0a:26:67:64:c2:a7:10:db:70:
         d3:b7:be:75:49:08:c7:19:fc:4e:f6:f7:59:5a:69:c9:fa:87:
         b5:a0:db:4d:ae:52:65:72:a1:c7:34:15:a1:ca:8c:d2:ae:40:
         c8:18:b0:60:37:4b:f2:6a:a9:27:d5:48:c4:2b:f9:e4:9d:8c:
         f6:e2:bc:c6:fc:e8:25:cf:18:9d:a3:33:a9:74:1b:26:0a:36:
         9c:cb:ea:fa:25:2e:60:ec:b1:48:ed:cd:82:38:15:60:56:76:
         b4:e3:e1:11:5b:8c:2c:ec:ac:cb:b9:9e:78:97:c3:d3:de:dd:
         ba:79:c1:bb:cd:61:cd:ef:bd:22:f0:20:d5:50:8d:9b:46:3a:
         09:57:dc:9f:88:ac:b5:aa:9d:14:cb:2e:dd:14:bc:04:8f:ba:
         a9:5f:c2:08:b8:0f:7f:31:a0:4f:fb:e7:31:1b:29:67:78:56:
         19:4d:ea:61:37:da:eb:3d:60:74:7f:f8:db:ad:1a:db:a1:f1:
         34:7d:14:e8
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUTiBKsNqAKkELTmYnQZjy3Lh8WMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkExNDMyMjBEM0UxQkE1MTRDRDJDQkM0RTU3ODZFMDI2
NkI4QkUwRjAeFw0yNDA0MTEyMDM1MjRaFw0yNTA0MTAyMDQwMjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBFRTk1MzU1QjFCQzMzRTEx
NEI4NTdEQzQwRUMyQzg1QjU2NEFGODMwMjIzRDI2NkJGMzVBOEI0QjdEQjY5OEM5
RjYzMDcxMDFENDcyRjE5Q0EzQzZFQkY5MUExQjkwNEQwOEJDMEJGMDkxQzYyNEUz
QUFENURFOTYwRkU1M0QxRTQ2ODIzMTk4MjhBOERGNjlCNUIxMjY1NTIxMTk2Q0RB
NkVBOTBDQjAxOEQwMkM3QzIwODc0RUJCQTgwNTg2ODg2OTY4MUNENDRFNTU3RkU4
RENERDI1QzcwRTFGMDJEOEUzMEY5MjZEOUFCQTIxOTg5MjVDMDQwMjYzQjg1M0Qz
QjdBRTJCQTJDMDY3M0ZDNEYxQzFERjlCMDg4NTQ3Nzc2NjcyN0E0MEQ5Q0Q3Mjgy
NDc0RTc2QzlCMTBGNDg4MEQzQjNEMEFBNzg0NURFNkExOTlDNjRBMDM1RUQ0Qzg2
RjlFNTg0Qzg1OUY4Mzc0Qjc5NDk3RTc0RTM2OEZCQjRFNjRDM0VGN0I5MkYwQzlG
N0I3QTYwNzFFRDdDQTBEOTM1NjUyMDNDNDRFMkU3MzA4RkFCMjdEQjcwQzlGQTg0
NEI2ODZFNEFEMUVCMzYxMjYxRjdBMjE3MDExMEI4REE1Qzc2MDUxQzhCREExMzQ0
MjM3RjMxMDQwNDEzMzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0O6VNVsbwz4RS4V9xA7CyFtWSvgwIj0ma/Nai0t9tpjJ9jBxAdRy
8Zyjxuv5GhuQTQi8C/CRxiTjqtXelg/lPR5GgjGYKKjfabWxJlUhGWzabqkMsBjQ
LHwgh067qAWGiGloHNROVX/o3N0lxw4fAtjjD5JtmrohmJJcBAJjuFPTt64rosBn
P8Txwd+bCIVHd2ZyekDZzXKCR052ybEPSIDTs9CqeEXeahmcZKA17UyG+eWEyFn4
N0t5SX5042j7tOZMPve5Lwyfe3pgce18oNk1ZSA8ROLnMI+rJ9twyfqES2huStHr
NhJh96IXARC42lx2BRyL2hNEI38xBAQTMwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FP1H+zhbeLGcEexzTsNsFYtr0Gb8MB8GA1UdIwQYMBaAFPoUMiDT4bpRTNLLxOV4
bgJmuL4PMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JzUUhScXBLNXBaY0RW
WXVxM3VIdDJFSGdhaWZUVHpjMjRnb3JpdDNWamVnLzEvRkExNDMyMjBEM0UxQkE1
MTRDRDJDQkM0RTU3ODZFMDI2NkI4QkUwRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GQTE0MzIyMEQzRTFCQTUxNENEMkNCQzRFNTc4NkUwMjY2QjhC
RTBGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Cc1FIUnFwSzVwWmNEVll1cTN1
SHQyRUhnYWlmVFR6YzI0Z29yaXQzVmplZy8xLzMyMzgzMDM0M2EzNjM1MzgzODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM0MzkzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
ZYgwDQYJKoZIhvcNAQELBQADggEBAHn9k8wdipXfTqUJ3WXltiD5wLRxBgmSIX5F
cPnPah0Bp1b+HrxSsOGNK4s0rH3Tbs6eRsodYq0c6wSgTeE5HgomZ2TCpxDbcNO3
vnVJCMcZ/E7291laacn6h7Wg202uUmVyocc0FaHKjNKuQMgYsGA3S/JqqSfVSMQr
+eSdjPbivMb86CXPGJ2jM6l0GyYKNpzL6volLmDssUjtzYI4FWBWdrTj4RFbjCzs
rMu5nniXw9Pe3bp5wbvNYc3vvSLwINVQjZtGOglX3J+IrLWqnRTLLt0UvASPuqlf
wgi4D38xoE/75zEbKWd4VhlN6mE32us9YHR/+NutGtuh8TR9FOg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org