Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/323830343a373933343a3a2f33342d3334203d3e20323731323931.roa
File:                     323830343a373933343a3a2f33342d3334203d3e20323731323931.roa (raw, json)
Hash identifier:          CE6uNUjT4eifc7kxBLGu+eizegkUsgYpgQWZ4AsTbP8=
Subject key identifier:   78:C6:98:7B:9F:07:0B:6C:C5:09:42:E2:3C:ED:7D:CE:80:42:F0:78
Certificate issuer:       /CN=BDCB9DC14FE30083C5A695F3934B760C84D0DA8F
Certificate serial:       12827290792B293EC654E6C9CD58017E6E2A341F
Authority key identifier: BD:CB:9D:C1:4F:E3:00:83:C5:A6:95:F3:93:4B:76:0C:84:D0:DA:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDCB9DC14FE30083C5A695F3934B760C84D0DA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/323830343a373933343a3a2f33342d3334203d3e20323731323931.roa
Signing time:             Sat 01 Oct 2022 00:00:00 +0000
ROA not before:           Fri 30 Sep 2022 23:55:00 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     271291
IP address blocks:        2804:7934::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:82:72:90:79:2b:29:3e:c6:54:e6:c9:cd:58:01:7e:6e:2a:34:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDCB9DC14FE30083C5A695F3934B760C84D0DA8F
        Validity
            Not Before: Sep 30 23:55:00 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:5e:60:79:f2:32:61:bd:08:c5:25:a1:8e:
                    56:6f:3c:60:4a:19:ef:d0:1b:6b:46:df:8a:2a:fc:
                    00:fe:94:08:1c:58:ab:df:a8:36:d1:58:f4:f4:ff:
                    65:9b:83:e2:ff:07:9a:0f:c4:f3:95:06:6e:b1:79:
                    33:78:c7:7d:0b:3a:2a:d8:b1:db:4d:d1:42:ed:44:
                    72:9e:37:4c:fa:6e:36:71:c5:e4:07:4b:47:6a:b6:
                    1e:5c:d4:73:9e:f7:64:9f:b9:ea:9f:6a:62:e3:87:
                    69:5d:24:e2:1b:38:01:8c:c9:12:0f:26:b1:19:c4:
                    2d:f5:4d:74:da:12:07:f3:14:ba:74:31:dd:08:53:
                    8b:24:15:48:50:63:8c:1d:ba:85:c5:e2:97:a4:03:
                    e3:db:a6:9b:c2:1e:e9:2d:e3:a0:ec:f8:c4:7e:fb:
                    e9:63:6e:17:05:25:bb:e2:75:1b:18:ed:eb:39:c2:
                    71:f1:71:7f:53:71:6c:32:9f:3d:01:6a:6a:09:19:
                    46:7e:cf:b3:25:43:0e:e4:a0:aa:80:95:ec:9d:7e:
                    59:ca:8a:29:67:8b:98:e3:73:9f:54:12:25:e7:f6:
                    0a:bf:ba:b1:a2:07:71:75:0b:0e:89:b8:6e:67:63:
                    1c:05:f1:5b:29:9c:53:88:81:c1:d4:b8:b3:f3:fd:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C6:98:7B:9F:07:0B:6C:C5:09:42:E2:3C:ED:7D:CE:80:42:F0:78
            X509v3 Authority Key Identifier:
                keyid:BD:CB:9D:C1:4F:E3:00:83:C5:A6:95:F3:93:4B:76:0C:84:D0:DA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/BDCB9DC14FE30083C5A695F3934B760C84D0DA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDCB9DC14FE30083C5A695F3934B760C84D0DA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2jmTK2NZU8GivFVWJvtrmyLokiMSJAsH3fEvM4mB5MM/0/323830343a373933343a3a2f33342d3334203d3e20323731323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7934::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:63:ca:f3:27:7b:b3:a4:a9:4f:c5:56:fe:c1:7d:a2:99:d0:
         ff:c9:aa:41:4d:d0:db:82:66:92:57:00:50:77:56:c1:f4:d1:
         27:52:36:3e:01:b0:56:4d:bb:d5:54:af:a2:f1:80:ed:df:f8:
         e5:83:5e:90:13:29:a4:9c:da:97:d2:0b:8e:ea:bf:bf:20:1e:
         e6:8f:40:39:af:ba:b1:87:02:cc:3a:cd:b2:96:21:e4:24:10:
         9a:ff:05:fe:7c:03:1b:91:8d:d2:d8:88:c8:49:7e:94:c6:23:
         bb:e3:9c:b6:e9:42:de:76:f2:07:71:ce:f6:b8:68:48:49:a0:
         1d:50:e6:73:fe:06:d4:40:00:87:3c:d6:1f:e1:19:8d:fe:1c:
         8e:11:78:33:3e:0c:c7:22:ab:a5:f1:8a:de:10:34:66:61:9f:
         89:35:55:be:98:2d:c4:8a:59:cb:28:54:36:c7:a4:0e:92:12:
         15:22:57:bc:bd:73:b3:fe:19:09:3b:5d:30:c0:53:58:01:64:
         a3:bd:e7:18:74:26:e9:9a:a8:4a:21:32:f1:d8:be:f3:9f:67:
         ce:fc:24:04:71:97:e5:1f:c7:f6:5a:10:7e:36:63:44:1b:42:
         5a:11:c4:e0:a0:cc:02:64:54:cb:31:da:b4:f3:4f:dc:4d:60:
         c9:ea:8c:c7
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEoJykHkrKT7GVObJzVgBfm4qNB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRDQjlEQzE0RkUzMDA4M0M1QTY5NUYzOTM0Qjc2MEM4
NEQwREE4RjAeFw0yMjA5MzAyMzU1MDBaFw0yMzA5MzAwMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTBCQzVFNjA3OUYyMzI2MUJE
MDhDNTI1QTE4RTU2NkYzQzYwNEExOUVGRDAxQjZCNDZERjhBMkFGQzAwRkU5NDA4
MUM1OEFCREZBODM2RDE1OEY0RjRGRjY1OUI4M0UyRkYwNzlBMEZDNEYzOTUwNjZF
QjE3OTMzNzhDNzdEMEIzQTJBRDhCMURCNEREMTQyRUQ0NDcyOUUzNzRDRkE2RTM2
NzFDNUU0MDc0QjQ3NkFCNjFFNUNENDczOUVGNzY0OUZCOUVBOUY2QTYyRTM4NzY5
NUQyNEUyMUIzODAxOENDOTEyMEYyNkIxMTlDNDJERjU0RDc0REExMjA3RjMxNEJB
NzQzMUREMDg1MzhCMjQxNTQ4NTA2MzhDMURCQTg1QzVFMjk3QTQwM0UzREJBNjlC
QzIxRUU5MkRFM0EwRUNGOEM0N0VGQkU5NjM2RTE3MDUyNUJCRTI3NTFCMThFREVC
MzlDMjcxRjE3MTdGNTM3MTZDMzI5RjNEMDE2QTZBMDkxOTQ2N0VDRkIzMjU0MzBF
RTRBMEFBODA5NUVDOUQ3RTU5Q0E4QTI5Njc4Qjk4RTM3MzlGNTQxMjI1RTdGNjBB
QkZCQUIxQTIwNzcxNzUwQjBFODlCODZFNjc2MzFDMDVGMTVCMjk5QzUzODg4MUMx
RDRCOEIzRjNGRENDQ0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4LxeYHnyMmG9CMUloY5WbzxgShnv0BtrRt+KKvwA/pQIHFir36g2
0Vj09P9lm4Pi/weaD8TzlQZusXkzeMd9Czoq2LHbTdFC7URynjdM+m42ccXkB0tH
arYeXNRznvdkn7nqn2pi44dpXSTiGzgBjMkSDyaxGcQt9U102hIH8xS6dDHdCFOL
JBVIUGOMHbqFxeKXpAPj26abwh7pLeOg7PjEfvvpY24XBSW74nUbGO3rOcJx8XF/
U3FsMp89AWpqCRlGfs+zJUMO5KCqgJXsnX5ZyoopZ4uY43OfVBIl5/YKv7qxogdx
dQsOibhuZ2McBfFbKZxTiIHB1Liz8/3MywIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHjGmHufBwtsxQlC4jztfc6AQvB4MB8GA1UdIwQYMBaAFL3LncFP4wCDxaaV85NL
dgyE0NqPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Uyam1USzJOWlU4R2l2
RlZXSnZ0cm15TG9raU1TSkFzSDNmRXZNNG1CNU1NLzAvQkRDQjlEQzE0RkUzMDA4
M0M1QTY5NUYzOTM0Qjc2MEM4NEQwREE4Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CRENCOURDMTRGRTMwMDgzQzVBNjk1RjM5MzRCNzYwQzg0RDBE
QThGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FMmptVEsyTlpVOEdpdkZWV0p2
dHJteUxva2lNU0pBc0gzZkV2TTRtQjVNTS8wLzMyMzgzMDM0M2EzNzM5MzMzNDNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzczMTMyMzkzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
eTQAMA0GCSqGSIb3DQEBCwUAA4IBAQBSY8rzJ3uzpKlPxVb+wX2imdD/yapBTdDb
gmaSVwBQd1bB9NEnUjY+AbBWTbvVVK+i8YDt3/jlg16QEymknNqX0guO6r+/IB7m
j0A5r7qxhwLMOs2yliHkJBCa/wX+fAMbkY3S2IjISX6UxiO745y26ULedvIHcc72
uGhISaAdUOZz/gbUQACHPNYf4RmN/hyOEXgzPgzHIqul8YreEDRmYZ+JNVW+mC3E
ilnLKFQ2x6QOkhIVIle8vXOz/hkJO10wwFNYAWSjvecYdCbpmqhKITLx2L7zn2fO
/CQEcZflH8f2WhB+NmNEG0JaEcTgoMwCZFTLMdq080/cTWDJ6ozH
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org