Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/323830343a323664343a3a2f33322d3438203d3e20323633383630.roa
File:                     323830343a323664343a3a2f33322d3438203d3e20323633383630.roa (raw, json)
Hash identifier:          Jg7g4srYlSCsnJSobCDqmb8AAN0HyZQOnnT6oc3ZTMg=
Subject key identifier:   51:89:AF:CB:96:F6:BF:56:FB:3B:1C:CE:4E:DB:7B:4D:91:E1:A0:63
Certificate issuer:       /CN=BDFD21B6B386CCF7BC5285E094BDDC32B6AC86EF
Certificate serial:       1FCDAB5E7D07CC4DF35ECC3CDC84F7E1B502320A
Authority key identifier: BD:FD:21:B6:B3:86:CC:F7:BC:52:85:E0:94:BD:DC:32:B6:AC:86:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDFD21B6B386CCF7BC5285E094BDDC32B6AC86EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/323830343a323664343a3a2f33322d3438203d3e20323633383630.roa
Signing time:             Thu 13 Oct 2022 12:06:00 +0000
ROA not before:           Thu 13 Oct 2022 12:01:00 +0000
ROA not after:            Thu 12 Oct 2023 12:06:00 +0000
asID:                     263860
IP address blocks:        2804:26d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cd:ab:5e:7d:07:cc:4d:f3:5e:cc:3c:dc:84:f7:e1:b5:02:32:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFD21B6B386CCF7BC5285E094BDDC32B6AC86EF
        Validity
            Not Before: Oct 13 12:01:00 2022 GMT
            Not After : Oct 12 12:06:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:ce:9f:25:db:a8:56:62:4d:10:a2:33:52:
                    a4:2a:b6:f3:2f:ad:c1:04:41:e8:87:68:e3:b8:bc:
                    88:1b:1c:0a:8a:c5:13:a9:15:dc:48:12:5a:f7:46:
                    fe:b4:1a:6e:bb:19:6d:4f:67:67:c6:ea:35:8b:af:
                    07:38:43:fa:af:88:24:19:b4:f0:90:80:02:cb:b7:
                    01:1e:68:f0:ca:5b:07:58:8d:85:75:b4:f4:a5:bf:
                    8a:ce:78:4f:91:80:58:2c:79:b3:4e:53:c5:1b:18:
                    33:a8:03:c8:f0:fe:37:03:af:43:b7:77:aa:ad:cf:
                    bc:57:da:9c:59:f2:7c:a2:e3:ce:67:dc:1f:6b:41:
                    8b:12:49:dd:bf:b1:7d:d5:74:dd:17:7f:d6:3f:96:
                    ab:7b:a6:e6:98:12:56:f1:f3:d3:df:67:9d:c6:41:
                    21:0c:18:04:58:68:26:77:c8:ec:c1:38:2f:d8:74:
                    b4:0f:b1:b4:e2:c0:6e:2d:2c:78:6f:f7:35:65:1d:
                    43:49:7e:93:1c:67:13:ef:ef:a7:12:49:cb:9f:df:
                    c9:e6:90:d5:c3:80:c7:13:89:b1:2b:8b:30:6c:e7:
                    05:ec:00:63:9e:4e:9f:d9:a4:ff:cb:2c:24:56:71:
                    fb:2f:39:8c:f2:f2:d1:fa:f3:fa:cb:4f:f6:42:0b:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:89:AF:CB:96:F6:BF:56:FB:3B:1C:CE:4E:DB:7B:4D:91:E1:A0:63
            X509v3 Authority Key Identifier:
                keyid:BD:FD:21:B6:B3:86:CC:F7:BC:52:85:E0:94:BD:DC:32:B6:AC:86:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/BDFD21B6B386CCF7BC5285E094BDDC32B6AC86EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDFD21B6B386CCF7BC5285E094BDDC32B6AC86EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/323830343a323664343a3a2f33322d3438203d3e20323633383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:5c:4f:c2:5d:a1:1b:5a:59:3e:43:26:98:af:3c:50:f2:f2:
         cb:76:7c:2e:0b:b3:af:7e:6a:d1:eb:53:f5:2e:09:d2:46:88:
         9b:2f:02:1c:66:05:1f:e2:5d:a4:f0:bf:03:b6:9c:14:01:72:
         fd:bd:12:ab:3d:c6:6f:94:6d:45:f1:89:e6:4f:92:5d:c1:ad:
         1f:70:f3:1c:92:71:3b:a5:e6:34:f9:d8:63:12:26:5b:db:7a:
         98:0e:ce:83:df:45:e5:dc:0c:a8:5f:ef:47:65:bf:0f:79:f3:
         9f:f2:7b:b6:1d:8f:05:c9:36:e3:07:03:1b:41:64:2d:ab:0d:
         da:f3:c9:08:6f:f9:23:95:6d:d3:31:81:03:9c:56:65:e9:a7:
         a6:bb:c7:10:61:2b:b6:67:69:2d:4c:21:d1:15:6e:8a:88:5c:
         01:7a:8c:d2:b7:b4:a5:e2:e6:1b:c8:75:d8:8d:77:94:6e:a4:
         ba:28:37:55:0a:82:b9:76:4f:93:c5:ae:30:77:1a:7c:67:36:
         61:10:06:fc:02:44:10:f1:dc:7d:c9:ac:b2:1e:2c:f4:62:af:
         59:9c:cd:54:eb:5d:cb:d1:5e:6f:81:ed:1e:6a:88:54:e9:5c:
         74:0f:a8:44:a7:db:4a:22:99:5a:0b:64:8e:ae:50:7a:a6:28:
         a6:9c:e5:fb
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUH82rXn0HzE3zXsw83IT34bUCMgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGRDIxQjZCMzg2Q0NGN0JDNTI4NUUwOTRCRERDMzJC
NkFDODZFRjAeFw0yMjEwMTMxMjAxMDBaFw0yMzEwMTIxMjA2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTJGMkNFOUYyNURCQTg1NjYy
NEQxMEEyMzM1MkE0MkFCNkYzMkZBREMxMDQ0MUU4ODc2OEUzQjhCQzg4MUIxQzBB
OEFDNTEzQTkxNURDNDgxMjVBRjc0NkZFQjQxQTZFQkIxOTZENEY2NzY3QzZFQTM1
OEJBRjA3Mzg0M0ZBQUY4ODI0MTlCNEYwOTA4MDAyQ0JCNzAxMUU2OEYwQ0E1QjA3
NTg4RDg1NzVCNEY0QTVCRjhBQ0U3ODRGOTE4MDU4MkM3OUIzNEU1M0M1MUIxODMz
QTgwM0M4RjBGRTM3MDNBRjQzQjc3N0FBQURDRkJDNTdEQTlDNTlGMjdDQTJFM0NF
NjdEQzFGNkI0MThCMTI0OUREQkZCMTdERDU3NEREMTc3RkQ2M0Y5NkFCN0JBNkU2
OTgxMjU2RjFGM0QzREY2NzlEQzY0MTIxMEMxODA0NTg2ODI2NzdDOEVDQzEzODJG
RDg3NEI0MEZCMUI0RTJDMDZFMkQyQzc4NkZGNzM1NjUxRDQzNDk3RTkzMUM2NzEz
RUZFRkE3MTI0OUNCOUZERkM5RTY5MEQ1QzM4MEM3MTM4OUIxMkI4QjMwNkNFNzA1
RUMwMDYzOUU0RTlGRDlBNEZGQ0IyQzI0NTY3MUZCMkYzOThDRjJGMkQxRkFGM0ZB
Q0I0RkY2NDIwQjg2MzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAovLOnyXbqFZiTRCiM1KkKrbzL63BBEHoh2jjuLyIGxwKisUTqRXc
SBJa90b+tBpuuxltT2dnxuo1i68HOEP6r4gkGbTwkIACy7cBHmjwylsHWI2FdbT0
pb+KznhPkYBYLHmzTlPFGxgzqAPI8P43A69Dt3eqrc+8V9qcWfJ8ouPOZ9wfa0GL
Ekndv7F91XTdF3/WP5are6bmmBJW8fPT32edxkEhDBgEWGgmd8jswTgv2HS0D7G0
4sBuLSx4b/c1ZR1DSX6THGcT7++nEknLn9/J5pDVw4DHE4mxK4swbOcF7ABjnk6f
2aT/yywkVnH7LzmM8vLR+vP6y0/2QguGNQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FFGJr8uW9r9W+zsczk7be02R4aBjMB8GA1UdIwQYMBaAFL39Ibazhsz3vFKF4JS9
3DK2rIbvMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M5cjJBSkd5em9xdFdz
cUVGM0hRYnpSNXFaYWF1Q2UxVmdQTFpmalZMZGRqLzAvQkRGRDIxQjZCMzg2Q0NG
N0JDNTI4NUUwOTRCRERDMzJCNkFDODZFRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CREZEMjFCNkIzODZDQ0Y3QkM1Mjg1RTA5NEJEREMzMkI2QUM4
NkVGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DOXIyQUpHeXpvcXRXc3FFRjNI
UWJ6UjVxWmFhdUNlMVZnUExaZmpWTGRkai8wLzMyMzgzMDM0M2EzMjM2NjQzNDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM4MzYzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
JtQwDQYJKoZIhvcNAQELBQADggEBAJJcT8JdoRtaWT5DJpivPFDy8st2fC4Ls69+
atHrU/UuCdJGiJsvAhxmBR/iXaTwvwO2nBQBcv29Eqs9xm+UbUXxieZPkl3BrR9w
8xyScTul5jT52GMSJlvbepgOzoPfReXcDKhf70dlvw9585/ye7YdjwXJNuMHAxtB
ZC2rDdrzyQhv+SOVbdMxgQOcVmXpp6a7xxBhK7ZnaS1MIdEVboqIXAF6jNK3tKXi
5hvIddiNd5RupLooN1UKgrl2T5PFrjB3GnxnNmEQBvwCRBDx3H3JrLIeLPRir1mc
zVTrXcvRXm+B7R5qiFTpXHQPqESn20oimVoLZI6uUHqmKKac5fs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org