Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a613a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a613a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          BkiU8jKEs6gKun+ZJuen4WNZE4Im/4JGihPca4jga1Q=
Subject key identifier:   00:66:33:6F:4A:A8:FA:3F:FA:7F:A4:07:46:FB:BB:E3:3A:C7:4C:38
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       67EE18E6E2E42E67D955FAC3BD9E817F2209F3AD
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a613a3a2f34382d3438203d3e203238323630.roa
Signing time:             Wed 09 Jun 2021 18:09:28 +0000
ROA not before:           Wed 09 Jun 2021 18:04:28 +0000
ROA not after:            Wed 08 Jun 2022 18:09:28 +0000
asID:                     28260
IP address blocks:        2804:28e4:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:18:e6:e2:e4:2e:67:d9:55:fa:c3:bd:9e:81:7f:22:09:f3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Jun  9 18:04:28 2021 GMT
            Not After : Jun  8 18:09:28 2022 GMT
        Subject: CN=3082010A0282010100D4A0049C33CC8489E6F6D06D85A213D4BF6139EC03C4CF0438B904046A9DD4C38E736DC2270A833B2559C5F041E3807EEC54985812CEC899AB25E89F2D7D3179E5B8CEF24753449C629D8633543E6A7ED46F577A44F1F81A982EC8569219DA0A6057D4C74AF748C39D1E04D46BC418E2DCCE4A5D5C38211090B9D67DE17AABA759BB39E67A49ED061D6D07879AC87944FDF1D3D9395FEA3F7B18F2A054A594E9A7BB3951074ABE4F92C8E9748CF3151AD11C65DCC7FDDE495540BF4772EB3940B7845456D64946A2FB316A6C0BF6B2FFCBAC36FC8E6363F5A5CA5414C8E37AC0A6C6ACD298216CC0E6334B6FF6AC436671AD6529B3E20F5BD53B0ABBBC0A60570203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:04:9c:33:cc:84:89:e6:f6:d0:6d:85:a2:
                    13:d4:bf:61:39:ec:03:c4:cf:04:38:b9:04:04:6a:
                    9d:d4:c3:8e:73:6d:c2:27:0a:83:3b:25:59:c5:f0:
                    41:e3:80:7e:ec:54:98:58:12:ce:c8:99:ab:25:e8:
                    9f:2d:7d:31:79:e5:b8:ce:f2:47:53:44:9c:62:9d:
                    86:33:54:3e:6a:7e:d4:6f:57:7a:44:f1:f8:1a:98:
                    2e:c8:56:92:19:da:0a:60:57:d4:c7:4a:f7:48:c3:
                    9d:1e:04:d4:6b:c4:18:e2:dc:ce:4a:5d:5c:38:21:
                    10:90:b9:d6:7d:e1:7a:ab:a7:59:bb:39:e6:7a:49:
                    ed:06:1d:6d:07:87:9a:c8:79:44:fd:f1:d3:d9:39:
                    5f:ea:3f:7b:18:f2:a0:54:a5:94:e9:a7:bb:39:51:
                    07:4a:be:4f:92:c8:e9:74:8c:f3:15:1a:d1:1c:65:
                    dc:c7:fd:de:49:55:40:bf:47:72:eb:39:40:b7:84:
                    54:56:d6:49:46:a2:fb:31:6a:6c:0b:f6:b2:ff:cb:
                    ac:36:fc:8e:63:63:f5:a5:ca:54:14:c8:e3:7a:c0:
                    a6:c6:ac:d2:98:21:6c:c0:e6:33:4b:6f:f6:ac:43:
                    66:71:ad:65:29:b3:e2:0f:5b:d5:3b:0a:bb:bc:0a:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:66:33:6F:4A:A8:FA:3F:FA:7F:A4:07:46:FB:BB:E3:3A:C7:4C:38
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a613a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:e3:3b:9b:9c:c0:5c:64:e2:73:f5:0e:99:d9:e5:4e:c4:
         10:7d:79:ae:e0:c7:d3:b3:1e:95:d6:c5:65:3b:78:d7:b1:01:
         ac:ba:14:d1:33:a1:cd:99:83:a2:6e:7d:fb:91:7e:84:e7:0a:
         21:97:c2:fe:18:f6:a2:dd:6e:86:d4:f8:e2:e9:d7:be:b4:6a:
         ca:c4:ca:ce:8d:65:49:68:76:e9:dd:23:8d:3d:52:a2:1b:48:
         1e:fe:f2:e3:85:62:4e:c3:22:e4:96:32:4f:b8:71:63:3a:06:
         0a:25:cd:02:bb:6b:7c:85:06:da:62:89:6c:ae:aa:04:bc:11:
         90:c7:70:92:1c:af:89:9c:f0:ee:47:3f:fd:21:f8:d1:c1:c1:
         2b:23:b2:41:33:37:ac:3b:5f:67:3d:9f:7e:30:32:54:97:05:
         30:5e:ec:a6:bd:89:71:44:79:ae:aa:97:89:46:58:d6:88:26:
         77:8a:ed:8e:57:4d:7f:ac:67:c7:db:12:e5:ae:e7:81:93:ef:
         be:63:1b:38:c6:bf:a3:6a:9f:0a:14:6b:d4:82:21:4b:d2:65:
         7e:02:2e:db:26:1f:5b:77:a9:99:d1:9b:17:ae:4b:7c:51:7c:
         78:c9:16:c6:ea:c0:29:8f:d3:eb:a8:cd:b9:a0:2e:f3:05:88:
         17:4f:4a:f7
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUZ+4Y5uLkLmfZVfrDvZ6BfyIJ860wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ2MEY2Njc1RTM1QUY0RTUwQTg5MTVEMEY1MzFDNDMx
QzZEQTE2NjAeFw0yMTA2MDkxODA0MjhaFw0yMjA2MDgxODA5MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRBMDA0OUMzM0NDODQ4OUU2
RjZEMDZEODVBMjEzRDRCRjYxMzlFQzAzQzRDRjA0MzhCOTA0MDQ2QTlERDRDMzhF
NzM2REMyMjcwQTgzM0IyNTU5QzVGMDQxRTM4MDdFRUM1NDk4NTgxMkNFQzg5OUFC
MjVFODlGMkQ3RDMxNzlFNUI4Q0VGMjQ3NTM0NDlDNjI5RDg2MzM1NDNFNkE3RUQ0
NkY1NzdBNDRGMUY4MUE5ODJFQzg1NjkyMTlEQTBBNjA1N0Q0Qzc0QUY3NDhDMzlE
MUUwNEQ0NkJDNDE4RTJEQ0NFNEE1RDVDMzgyMTEwOTBCOUQ2N0RFMTdBQUJBNzU5
QkIzOUU2N0E0OUVEMDYxRDZEMDc4NzlBQzg3OTQ0RkRGMUQzRDkzOTVGRUEzRjdC
MThGMkEwNTRBNTk0RTlBN0JCMzk1MTA3NEFCRTRGOTJDOEU5NzQ4Q0YzMTUxQUQx
MUM2NURDQzdGRERFNDk1NTQwQkY0NzcyRUIzOTQwQjc4NDU0NTZENjQ5NDZBMkZC
MzE2QTZDMEJGNkIyRkZDQkFDMzZGQzhFNjM2M0Y1QTVDQTU0MTRDOEUzN0FDMEE2
QzZBQ0QyOTgyMTZDQzBFNjMzNEI2RkY2QUM0MzY2NzFBRDY1MjlCM0UyMEY1QkQ1
M0IwQUJCQkMwQTYwNTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1KAEnDPMhInm9tBthaIT1L9hOewDxM8EOLkEBGqd1MOOc23CJwqD
OyVZxfBB44B+7FSYWBLOyJmrJeifLX0xeeW4zvJHU0ScYp2GM1Q+an7Ub1d6RPH4
GpguyFaSGdoKYFfUx0r3SMOdHgTUa8QY4tzOSl1cOCEQkLnWfeF6q6dZuznmeknt
Bh1tB4eayHlE/fHT2Tlf6j97GPKgVKWU6ae7OVEHSr5PksjpdIzzFRrRHGXcx/3e
SVVAv0dy6zlAt4RUVtZJRqL7MWpsC/ay/8usNvyOY2P1pcpUFMjjesCmxqzSmCFs
wOYzS2/2rENmca1lKbPiD1vVOwq7vApgVwIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FABmM29KqPo/+n+kB0b7u+M6x0w4MB8GA1UdIwQYMBaAFGRg9mdeNa9OUKiRXQ9T
HEMcbaFmMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q4MWFpWHBEQXY1V0Jt
Z0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAvNjQ2MEY2Njc1RTM1QUY0
RTUwQTg5MTVEMEY1MzFDNDMxQzZEQTE2Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82NDYwRjY2NzVFMzVBRjRFNTBBODkxNUQwRjUzMUM0MzFDNkRB
MTY2LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EODFhaVhwREF2NVdCbWdFOG9F
cGZvcmRqR1A2Mm90bjJmSHJoYUw0Y2dieS8wLzMyMzgzMDM0M2EzMjM4NjUzNDNh
NjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4MzIzNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KAQo5AAKMA0GCSqGSIb3DQEBCwUAA4IBAQAKHOM7m5zAXGTic/UOmdnlTsQQfXmu
4MfTsx6V1sVlO3jXsQGsuhTRM6HNmYOibn37kX6E5wohl8L+GPai3W6G1Pji6de+
tGrKxMrOjWVJaHbp3SONPVKiG0ge/vLjhWJOwyLkljJPuHFjOgYKJc0Cu2t8hQba
YolsrqoEvBGQx3CSHK+JnPDuRz/9IfjRwcErI7JBMzesO19nPZ9+MDJUlwUwXuym
vYlxRHmuqpeJRljWiCZ3iu2OV01/rGfH2xLlrueBk+++Yxs4xr+jap8KFGvUgiFL
0mV+Ai7bJh9bd6mZ0ZsXrkt8UXx4yRbG6sApj9PrqM25oC7zBYgXT0r3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org