Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/0/323830343a363463633a3a2f33322d3334203d3e20323639343439.roa
File:                     323830343a363463633a3a2f33322d3334203d3e20323639343439.roa (raw, json)
Hash identifier:          FwIwrgC5IiejweuXQ+8RVq8vkRBsNhTnH3eDvOQUDYI=
Subject key identifier:   1C:69:AA:DD:9E:D8:8E:76:CE:1D:33:C1:06:35:8A:9A:70:05:21:D2
Certificate issuer:       /CN=D617A39796495A7CB63E719476CBBABD2A1BF3E2
Certificate serial:       0AF2B0C50D386B1D6CAD4D0F8262411130D6C4E8
Authority key identifier: D6:17:A3:97:96:49:5A:7C:B6:3E:71:94:76:CB:BA:BD:2A:1B:F3:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D617A39796495A7CB63E719476CBBABD2A1BF3E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/0/323830343a363463633a3a2f33322d3334203d3e20323639343439.roa
Signing time:             Tue 26 Mar 2024 17:00:00 +0000
ROA not before:           Tue 26 Mar 2024 16:55:00 +0000
ROA not after:            Tue 25 Mar 2025 17:00:00 +0000
asID:                     269449
IP address blocks:        2804:64cc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f2:b0:c5:0d:38:6b:1d:6c:ad:4d:0f:82:62:41:11:30:d6:c4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D617A39796495A7CB63E719476CBBABD2A1BF3E2
        Validity
            Not Before: Mar 26 16:55:00 2024 GMT
            Not After : Mar 25 17:00:00 2025 GMT
        Subject: CN=3082010A0282010100E28E6289725815AE6B09B568C721D311B9B084C7067623542903A2FA2D5127C28242B36B31DF8784F9BA7B50E27534348A010BCE62894C12422D0B41AD8131CC7DE9C37F62088A979822D3C742EDE34CDD5484B9184DAFDC1D0482D30F4D43331315D920CBB6253E35E0ADEA42A550601AE9A70D89A368656084BFFB4B0110AF6E8D5A9D5502ADD0C52D6CFAECDF14129E4C57609A9C0583104645960D2E480B7D8C9D653C947BC847E331F96E42F594EE466E50B4944ECD8FE955E51634E28EE451B1C91F9C6BF9BD54146B712BF04E516588BC6C9C4CE757DDC5D3DC5AE19F5D6A601FF11C2B35FA29A49388405474FBF6B2DBA64D406E79E2F455C3914C050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:62:89:72:58:15:ae:6b:09:b5:68:c7:21:
                    d3:11:b9:b0:84:c7:06:76:23:54:29:03:a2:fa:2d:
                    51:27:c2:82:42:b3:6b:31:df:87:84:f9:ba:7b:50:
                    e2:75:34:34:8a:01:0b:ce:62:89:4c:12:42:2d:0b:
                    41:ad:81:31:cc:7d:e9:c3:7f:62:08:8a:97:98:22:
                    d3:c7:42:ed:e3:4c:dd:54:84:b9:18:4d:af:dc:1d:
                    04:82:d3:0f:4d:43:33:13:15:d9:20:cb:b6:25:3e:
                    35:e0:ad:ea:42:a5:50:60:1a:e9:a7:0d:89:a3:68:
                    65:60:84:bf:fb:4b:01:10:af:6e:8d:5a:9d:55:02:
                    ad:d0:c5:2d:6c:fa:ec:df:14:12:9e:4c:57:60:9a:
                    9c:05:83:10:46:45:96:0d:2e:48:0b:7d:8c:9d:65:
                    3c:94:7b:c8:47:e3:31:f9:6e:42:f5:94:ee:46:6e:
                    50:b4:94:4e:cd:8f:e9:55:e5:16:34:e2:8e:e4:51:
                    b1:c9:1f:9c:6b:f9:bd:54:14:6b:71:2b:f0:4e:51:
                    65:88:bc:6c:9c:4c:e7:57:dd:c5:d3:dc:5a:e1:9f:
                    5d:6a:60:1f:f1:1c:2b:35:fa:29:a4:93:88:40:54:
                    74:fb:f6:b2:db:a6:4d:40:6e:79:e2:f4:55:c3:91:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:AA:DD:9E:D8:8E:76:CE:1D:33:C1:06:35:8A:9A:70:05:21:D2
            X509v3 Authority Key Identifier:
                keyid:D6:17:A3:97:96:49:5A:7C:B6:3E:71:94:76:CB:BA:BD:2A:1B:F3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/0/D617A39796495A7CB63E719476CBBABD2A1BF3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D617A39796495A7CB63E719476CBBABD2A1BF3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/0/323830343a363463633a3a2f33322d3334203d3e20323639343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:9c:fc:ee:f7:7f:15:9d:a9:f1:2b:2c:50:77:62:c0:94:
         c4:ae:fc:9d:1c:e6:fd:81:ee:12:c7:3f:71:db:83:ab:c4:29:
         16:ac:1d:70:11:a9:f8:b4:06:8a:93:18:43:36:28:15:cc:3d:
         1e:dd:90:40:67:60:85:2d:da:30:8e:de:b1:1c:97:50:1b:79:
         75:eb:21:bb:55:36:81:8b:29:d0:a6:3d:10:eb:57:e7:45:23:
         58:74:9b:7a:93:a2:b4:28:5d:f9:cf:42:08:09:3a:a9:21:ff:
         88:dc:25:be:c5:d8:7f:fe:7b:a3:39:f2:b9:45:e3:74:82:32:
         40:c9:9f:23:5e:42:4d:c6:de:ad:93:8e:24:f8:67:c8:3f:e5:
         05:9f:13:66:63:cf:6f:d8:b4:3a:01:81:7d:5d:18:69:2b:44:
         a8:3c:a0:48:8f:e5:d5:04:6d:b3:e6:ad:2b:01:b4:93:ee:3b:
         25:3e:65:98:4c:8e:d0:8c:58:ab:41:5e:a9:65:da:a9:b4:a0:
         26:f1:9f:9e:be:94:31:d3:63:f3:6b:44:29:5d:c3:6c:91:51:
         a4:f5:59:5d:cd:51:33:6a:22:a8:5e:34:f4:eb:ca:5f:3d:d1:
         5d:e4:e5:76:32:7d:15:32:53:6d:21:27:24:98:f4:9f:89:0d:
         0a:28:ab:e0
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUCvKwxQ04ax1srU0PgmJBETDWxOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYxN0EzOTc5NjQ5NUE3Q0I2M0U3MTk0NzZDQkJBQkQy
QTFCRjNFMjAeFw0yNDAzMjYxNjU1MDBaFw0yNTAzMjUxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTI4RTYyODk3MjU4MTVBRTZC
MDlCNTY4QzcyMUQzMTFCOUIwODRDNzA2NzYyMzU0MjkwM0EyRkEyRDUxMjdDMjgy
NDJCMzZCMzFERjg3ODRGOUJBN0I1MEUyNzUzNDM0OEEwMTBCQ0U2Mjg5NEMxMjQy
MkQwQjQxQUQ4MTMxQ0M3REU5QzM3RjYyMDg4QTk3OTgyMkQzQzc0MkVERTM0Q0RE
NTQ4NEI5MTg0REFGREMxRDA0ODJEMzBGNEQ0MzMzMTMxNUQ5MjBDQkI2MjUzRTM1
RTBBREVBNDJBNTUwNjAxQUU5QTcwRDg5QTM2ODY1NjA4NEJGRkI0QjAxMTBBRjZF
OEQ1QTlENTUwMkFERDBDNTJENkNGQUVDREYxNDEyOUU0QzU3NjA5QTlDMDU4MzEw
NDY0NTk2MEQyRTQ4MEI3RDhDOUQ2NTNDOTQ3QkM4NDdFMzMxRjk2RTQyRjU5NEVF
NDY2RTUwQjQ5NDRFQ0Q4RkU5NTVFNTE2MzRFMjhFRTQ1MUIxQzkxRjlDNkJGOUJE
NTQxNDZCNzEyQkYwNEU1MTY1ODhCQzZDOUM0Q0U3NTdEREM1RDNEQzVBRTE5RjVE
NkE2MDFGRjExQzJCMzVGQTI5QTQ5Mzg4NDA1NDc0RkJGNkIyREJBNjRENDA2RTc5
RTJGNDU1QzM5MTRDMDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4o5iiXJYFa5rCbVoxyHTEbmwhMcGdiNUKQOi+i1RJ8KCQrNrMd+H
hPm6e1DidTQ0igELzmKJTBJCLQtBrYExzH3pw39iCIqXmCLTx0Lt40zdVIS5GE2v
3B0EgtMPTUMzExXZIMu2JT414K3qQqVQYBrppw2Jo2hlYIS/+0sBEK9ujVqdVQKt
0MUtbPrs3xQSnkxXYJqcBYMQRkWWDS5IC32MnWU8lHvIR+Mx+W5C9ZTuRm5QtJRO
zY/pVeUWNOKO5FGxyR+ca/m9VBRrcSvwTlFliLxsnEznV93F09xa4Z9damAf8Rwr
NfoppJOIQFR0+/ay26ZNQG554vRVw5FMBQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FBxpqt2e2I52zh0zwQY1ippwBSHSMB8GA1UdIwQYMBaAFNYXo5eWSVp8tj5xlHbL
ur0qG/PiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q5YjNXbjg4Slh0V1FQ
bUxLanFQdFJ1Q05IZ2ZScU5ybWR4a1hSVTMxVUNRLzAvRDYxN0EzOTc5NjQ5NUE3
Q0I2M0U3MTk0NzZDQkJBQkQyQTFCRjNFMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENjE3QTM5Nzk2NDk1QTdDQjYzRTcxOTQ3NkNCQkFCRDJBMUJG
M0UyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EOWIzV244OEpYdFdRUG1MS2px
UHRSdUNOSGdmUnFOcm1keGtYUlUzMVVDUS8wLzMyMzgzMDM0M2EzNjM0NjM2MzNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzOTM0MzQzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
ZMwwDQYJKoZIhvcNAQELBQADggEBAAzdnPzu938VnanxKyxQd2LAlMSu/J0c5v2B
7hLHP3Hbg6vEKRasHXARqfi0BoqTGEM2KBXMPR7dkEBnYIUt2jCO3rEcl1AbeXXr
IbtVNoGLKdCmPRDrV+dFI1h0m3qTorQoXfnPQggJOqkh/4jcJb7F2H/+e6M58rlF
43SCMkDJnyNeQk3G3q2TjiT4Z8g/5QWfE2Zjz2/YtDoBgX1dGGkrRKg8oEiP5dUE
bbPmrSsBtJPuOyU+ZZhMjtCMWKtBXqll2qm0oCbxn56+lDHTY/NrRCldw2yRUaT1
WV3NUTNqIqheNPTryl890V3k5XYyfRUyU20hJySY9J+JDQooq+A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org