Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3234303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3234303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          M6iE4pt6SMiBm/iD0k6QGxFA6dvvl5zjmn6+70rCGLs=
Subject key identifier:   7E:79:88:45:2C:13:5F:69:35:06:ED:22:08:D4:A3:70:93:BA:F3:7D
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       0D67B13FF09D324698A04BBACB4C466BD8AD659A
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3234303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Thu 03 Aug 2023 19:00:00 +0000
ROA not before:           Thu 03 Aug 2023 18:55:00 +0000
ROA not after:            Thu 01 Aug 2024 19:00:00 +0000
asID:                     265187
IP address blocks:        2804:2c00:240::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:67:b1:3f:f0:9d:32:46:98:a0:4b:ba:cb:4c:46:6b:d8:ad:65:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Aug  3 18:55:00 2023 GMT
            Not After : Aug  1 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:80:af:c8:e4:f6:60:b0:c7:a3:11:a9:7a:
                    9a:e9:fa:f5:ba:65:bf:86:53:51:8b:50:6e:12:05:
                    1f:ac:60:85:24:06:4b:97:11:1b:43:d2:6b:cb:45:
                    b1:e4:a0:51:7d:ef:22:50:31:d3:2a:97:28:4d:ef:
                    f4:ba:47:19:e4:f3:4e:14:58:27:51:80:fc:5c:d4:
                    11:04:9a:dd:59:e5:ef:6b:53:96:2d:cd:bd:45:8f:
                    4c:c9:ae:af:fe:6a:12:12:1e:15:0d:07:e8:34:48:
                    46:d5:d6:37:37:2b:93:d5:60:b4:3d:af:5d:60:1d:
                    61:7b:68:18:c0:00:95:9a:48:3c:d2:2e:f7:c1:7b:
                    12:71:0d:46:0d:f3:62:a5:f0:65:e7:34:ba:80:d3:
                    1c:0b:5e:aa:22:9d:12:fd:3f:c1:dd:91:bf:18:ed:
                    7a:f4:51:ef:5e:58:81:fb:75:ad:6d:4c:7d:26:3c:
                    44:00:c0:75:e7:e0:e7:65:6a:88:f5:c3:15:9a:1c:
                    0e:9f:02:83:8d:05:6b:dc:d9:38:39:d1:f5:f0:b4:
                    80:0a:f7:f0:63:46:34:ca:85:39:90:b4:d4:39:79:
                    f1:9d:55:24:ec:1e:cf:93:6d:75:d4:80:93:57:44:
                    d8:d0:3b:8b:9d:03:a9:ce:c6:e5:76:36:53:b0:be:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:79:88:45:2C:13:5F:69:35:06:ED:22:08:D4:A3:70:93:BA:F3:7D
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3234303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:240::/42

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:0e:17:38:17:bf:44:a1:3c:ce:ea:0a:84:4c:f0:34:08:
         c2:e5:23:1b:4d:9f:bf:7f:f7:ac:33:59:5e:f3:fe:a9:47:04:
         16:a1:39:ce:ca:e3:60:c1:d0:61:92:aa:dd:0e:f1:e2:c7:15:
         07:e4:ef:2c:02:af:95:aa:47:34:51:97:e4:0f:1e:e5:56:31:
         2b:4b:c5:04:9c:16:8b:ea:c0:9b:65:b4:e0:8f:e8:f8:e5:b8:
         43:54:a1:4f:97:8b:78:71:69:91:2a:e1:49:61:b8:e0:43:5f:
         b8:b3:89:72:aa:0c:2a:19:8d:e2:f6:b9:81:32:4d:02:39:40:
         fb:ca:88:63:a7:7a:18:ca:d1:f6:aa:78:fd:20:48:15:0c:15:
         ca:01:6f:ee:40:cd:fd:28:1a:40:41:3d:55:2b:b6:e9:bb:41:
         b9:2c:73:98:cc:4f:ad:49:f0:c2:d8:58:df:75:43:4d:42:64:
         8a:4a:17:53:b9:8e:67:d0:93:3e:59:e5:b3:a1:22:50:63:11:
         98:25:a1:80:8f:85:95:5a:1b:e8:ce:b0:b0:c5:91:88:8d:4f:
         c3:e9:c2:11:b4:07:22:27:51:31:8c:1d:bf:0e:8e:59:fe:67:
         be:bf:b8:02:b4:d4:11:ce:90:17:5f:5d:a4:74:4d:56:9c:fe:
         82:73:9d:af
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUDWexP/CdMkaYoEu6y0xGa9itZZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODExNzUzNzAyMjFFMjYxODFGMzlGQjQwN0U2MzA2NERF
QjIwRTZFRTAeFw0yMzA4MDMxODU1MDBaFw0yNDA4MDExOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc1MTgwQUZDOEU0RjY2MEIw
QzdBMzExQTk3QTlBRTlGQUY1QkE2NUJGODY1MzUxOEI1MDZFMTIwNTFGQUM2MDg1
MjQwNjRCOTcxMTFCNDNEMjZCQ0I0NUIxRTRBMDUxN0RFRjIyNTAzMUQzMkE5NzI4
NERFRkY0QkE0NzE5RTRGMzRFMTQ1ODI3NTE4MEZDNUNENDExMDQ5QURENTlFNUVG
NkI1Mzk2MkRDREJENDU4RjRDQzlBRUFGRkU2QTEyMTIxRTE1MEQwN0U4MzQ0ODQ2
RDVENjM3MzcyQjkzRDU2MEI0M0RBRjVENjAxRDYxN0I2ODE4QzAwMDk1OUE0ODND
RDIyRUY3QzE3QjEyNzEwRDQ2MERGMzYyQTVGMDY1RTczNEJBODBEMzFDMEI1RUFB
MjI5RDEyRkQzRkMxREQ5MUJGMThFRDdBRjQ1MUVGNUU1ODgxRkI3NUFENkQ0QzdE
MjYzQzQ0MDBDMDc1RTdFMEU3NjU2QTg4RjVDMzE1OUExQzBFOUYwMjgzOEQwNTZC
RENEOTM4MzlEMUY1RjBCNDgwMEFGN0YwNjM0NjM0Q0E4NTM5OTBCNEQ0Mzk3OUYx
OUQ1NTI0RUMxRUNGOTM2RDc1RDQ4MDkzNTc0NEQ4RDAzQjhCOUQwM0E5Q0VDNkU1
NzYzNjUzQjBCRUNCQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt1GAr8jk9mCwx6MRqXqa6fr1umW/hlNRi1BuEgUfrGCFJAZLlxEb
Q9Jry0Wx5KBRfe8iUDHTKpcoTe/0ukcZ5PNOFFgnUYD8XNQRBJrdWeXva1OWLc29
RY9Mya6v/moSEh4VDQfoNEhG1dY3NyuT1WC0Pa9dYB1he2gYwACVmkg80i73wXsS
cQ1GDfNipfBl5zS6gNMcC16qIp0S/T/B3ZG/GO169FHvXliB+3WtbUx9JjxEAMB1
5+DnZWqI9cMVmhwOnwKDjQVr3Nk4OdH18LSACvfwY0Y0yoU5kLTUOXnxnVUk7B7P
k2111ICTV0TY0DuLnQOpzsbldjZTsL7LrwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FH55iEUsE19pNQbtIgjUo3CTuvN9MB8GA1UdIwQYMBaAFIEXU3AiHiYYHzn7QH5j
Bk3rIObuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3RkhRN2JZMzdWeFZK
bzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAvODExNzUzNzAyMjFFMjYx
ODFGMzlGQjQwN0U2MzA2NERFQjIwRTZFRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MTE3NTM3MDIyMUUyNjE4MUYzOUZCNDA3RTYzMDY0REVCMjBF
NkVFLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EN0ZIUTdiWTM3VnhWSm8zZEVW
anBQYXB4cGJ6SGtNTGdRS1R6bkdiUWF4Yi8wLzMyMzgzMDM0M2EzMjYzMzAzMDNh
MzIzNDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM1MzEzODM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcGKAQsAAJAMA0GCSqGSIb3DQEBCwUAA4IBAQCTWg4XOBe/RKE8zuoKhEzw
NAjC5SMbTZ+/f/esM1le8/6pRwQWoTnOyuNgwdBhkqrdDvHixxUH5O8sAq+Vqkc0
UZfkDx7lVjErS8UEnBaL6sCbZbTgj+j45bhDVKFPl4t4cWmRKuFJYbjgQ1+4s4ly
qgwqGY3i9rmBMk0COUD7yohjp3oYytH2qnj9IEgVDBXKAW/uQM39KBpAQT1VK7bp
u0G5LHOYzE+tSfDC2FjfdUNNQmSKShdTuY5n0JM+WeWzoSJQYxGYJaGAj4WVWhvo
zrCwxZGIjU/D6cIRtAciJ1ExjB2/Do5Z/me+v7gCtNQRzpAXX12kdE1WnP6Cc52v
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org