Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3332203d3e203631393438.roa
File:                     323830343a313862343a3a2f33322d3332203d3e203631393438.roa (raw, json)
Hash identifier:          kvvvqDuYlHST8Ex7G628yCB7knJzttc2MoY8owTGpC8=
Subject key identifier:   62:37:B4:9A:42:88:07:58:46:FA:5A:C4:51:06:85:7B:83:80:00:17
Certificate issuer:       /CN=F34FF7B3E81F1E395562D0D772890DC9D4690410
Certificate serial:       3E375D35F4BBF88F047001FFAC1A10F19BD99E7D
Authority key identifier: F3:4F:F7:B3:E8:1F:1E:39:55:62:D0:D7:72:89:0D:C9:D4:69:04:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3332203d3e203631393438.roa
Signing time:             Fri 17 Feb 2023 22:20:00 +0000
ROA not before:           Fri 17 Feb 2023 22:15:00 +0000
ROA not after:            Fri 16 Feb 2024 22:20:00 +0000
asID:                     61948
IP address blocks:        2804:18b4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:37:5d:35:f4:bb:f8:8f:04:70:01:ff:ac:1a:10:f1:9b:d9:9e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34FF7B3E81F1E395562D0D772890DC9D4690410
        Validity
            Not Before: Feb 17 22:15:00 2023 GMT
            Not After : Feb 16 22:20:00 2024 GMT
        Subject: CN=3082010A0282010100F01EA7F5133F2F9FFF616EE77C824672422B9C4ACE0595C4CEA9F59D76F91C3C98F9A78687346180800803B46954FF492F0D44677099CD69D07FA6B9EBDAADF23D12DB195EA1B000E38EDCFACEA7BD73841111D30835E60C840BD7908ADD3856F08178D697CE7FB9FB7FA66590C28351DE77DAAB3D63F78B46DDEFEE805D3227CB71E7BC3C01E097C60B56ADF5D11B8BEA1DD8E9A9A1AD12BEDB0962B8A44B26643353691D88C59A95BA003F9F8E3FD573F3A5035A61EB7184999B366F59272FDEA2A05B644A007708CEF5DBE2AC52D65C81A1E5F8322DD2A56FB45D15BCDBBE192C0D0E539FF6F44BD84DF559FF29E1FD244DAE728466456DFD775F2727C33B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1e:a7:f5:13:3f:2f:9f:ff:61:6e:e7:7c:82:
                    46:72:42:2b:9c:4a:ce:05:95:c4:ce:a9:f5:9d:76:
                    f9:1c:3c:98:f9:a7:86:87:34:61:80:80:08:03:b4:
                    69:54:ff:49:2f:0d:44:67:70:99:cd:69:d0:7f:a6:
                    b9:eb:da:ad:f2:3d:12:db:19:5e:a1:b0:00:e3:8e:
                    dc:fa:ce:a7:bd:73:84:11:11:d3:08:35:e6:0c:84:
                    0b:d7:90:8a:dd:38:56:f0:81:78:d6:97:ce:7f:b9:
                    fb:7f:a6:65:90:c2:83:51:de:77:da:ab:3d:63:f7:
                    8b:46:dd:ef:ee:80:5d:32:27:cb:71:e7:bc:3c:01:
                    e0:97:c6:0b:56:ad:f5:d1:1b:8b:ea:1d:d8:e9:a9:
                    a1:ad:12:be:db:09:62:b8:a4:4b:26:64:33:53:69:
                    1d:88:c5:9a:95:ba:00:3f:9f:8e:3f:d5:73:f3:a5:
                    03:5a:61:eb:71:84:99:9b:36:6f:59:27:2f:de:a2:
                    a0:5b:64:4a:00:77:08:ce:f5:db:e2:ac:52:d6:5c:
                    81:a1:e5:f8:32:2d:d2:a5:6f:b4:5d:15:bc:db:be:
                    19:2c:0d:0e:53:9f:f6:f4:4b:d8:4d:f5:59:ff:29:
                    e1:fd:24:4d:ae:72:84:66:45:6d:fd:77:5f:27:27:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:B4:9A:42:88:07:58:46:FA:5A:C4:51:06:85:7B:83:80:00:17
            X509v3 Authority Key Identifier:
                keyid:F3:4F:F7:B3:E8:1F:1E:39:55:62:D0:D7:72:89:0D:C9:D4:69:04:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F34FF7B3E81F1E395562D0D772890DC9D4690410.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3332203d3e203631393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:94:41:25:77:31:6f:31:41:f2:eb:b0:88:f8:58:b5:2f:e5:
         07:74:fe:33:78:11:e8:9b:d3:56:d6:2d:b7:53:14:07:1e:0f:
         fd:93:fa:34:d4:8d:25:0e:86:1d:92:37:9a:bb:d8:a5:25:b7:
         79:e5:c5:78:3a:03:91:87:df:5a:ff:bf:90:7a:bb:3d:c4:f9:
         ab:a7:98:bb:92:8e:ef:d8:b8:a5:f1:7d:ad:83:71:56:c0:81:
         94:a8:e4:0a:1c:5d:98:7f:02:03:c0:22:f4:2b:2e:9e:f9:9f:
         cc:2e:8d:02:af:a1:ec:36:72:85:c2:e1:1c:94:7c:e3:00:95:
         38:4d:8d:f1:7f:51:0f:64:e3:22:77:9d:13:f0:0e:97:c9:98:
         9c:fc:93:98:dd:bf:40:05:b2:76:eb:65:1a:64:89:d3:05:69:
         cc:1e:f4:a8:92:fa:b1:49:61:8d:8c:bf:e2:78:c9:23:9a:e5:
         be:93:1f:a1:79:3a:6d:f3:46:f7:51:b1:ef:ca:df:2f:32:77:
         a6:ba:76:8a:7b:90:e7:7d:3c:9f:3b:a0:a1:fe:37:2a:de:bc:
         87:2a:b0:97:5c:81:13:10:1d:c2:b1:90:b3:c9:f5:9a:d6:6a:
         e6:af:a5:68:f7:f7:0b:a4:06:39:a3:70:f8:c3:9c:b6:34:8d:
         9b:3f:7c:51
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUPjddNfS7+I8EcAH/rBoQ8ZvZnn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0RkY3QjNFODFGMUUzOTU1NjJEMEQ3NzI4OTBEQzlE
NDY5MDQxMDAeFw0yMzAyMTcyMjE1MDBaFw0yNDAyMTYyMjIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjAxRUE3RjUxMzNGMkY5RkZG
NjE2RUU3N0M4MjQ2NzI0MjJCOUM0QUNFMDU5NUM0Q0VBOUY1OUQ3NkY5MUMzQzk4
RjlBNzg2ODczNDYxODA4MDA4MDNCNDY5NTRGRjQ5MkYwRDQ0Njc3MDk5Q0Q2OUQw
N0ZBNkI5RUJEQUFERjIzRDEyREIxOTVFQTFCMDAwRTM4RURDRkFDRUE3QkQ3Mzg0
MTExMUQzMDgzNUU2MEM4NDBCRDc5MDhBREQzODU2RjA4MTc4RDY5N0NFN0ZCOUZC
N0ZBNjY1OTBDMjgzNTFERTc3REFBQjNENjNGNzhCNDZEREVGRUU4MDVEMzIyN0NC
NzFFN0JDM0MwMUUwOTdDNjBCNTZBREY1RDExQjhCRUExREQ4RTlBOUExQUQxMkJF
REIwOTYyQjhBNDRCMjY2NDMzNTM2OTFEODhDNTlBOTVCQTAwM0Y5RjhFM0ZENTcz
RjNBNTAzNUE2MUVCNzE4NDk5OUIzNjZGNTkyNzJGREVBMkEwNUI2NDRBMDA3NzA4
Q0VGNURCRTJBQzUyRDY1QzgxQTFFNUY4MzIyREQyQTU2RkI0NUQxNUJDREJCRTE5
MkMwRDBFNTM5RkY2RjQ0QkQ4NERGNTU5RkYyOUUxRkQyNDREQUU3Mjg0NjY0NTZE
RkQ3NzVGMjcyN0MzM0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8B6n9RM/L5//YW7nfIJGckIrnErOBZXEzqn1nXb5HDyY+aeGhzRh
gIAIA7RpVP9JLw1EZ3CZzWnQf6a569qt8j0S2xleobAA447c+s6nvXOEERHTCDXm
DIQL15CK3ThW8IF41pfOf7n7f6ZlkMKDUd532qs9Y/eLRt3v7oBdMifLcee8PAHg
l8YLVq310RuL6h3Y6amhrRK+2wliuKRLJmQzU2kdiMWalboAP5+OP9Vz86UDWmHr
cYSZmzZvWScv3qKgW2RKAHcIzvXb4qxS1lyBoeX4Mi3SpW+0XRW8274ZLA0OU5/2
9EvYTfVZ/ynh/SRNrnKEZkVt/XdfJyfDOwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FGI3tJpCiAdYRvpaxFEGhXuDgAAXMB8GA1UdIwQYMBaAFPNP97PoHx45VWLQ13KJ
DcnUaQQQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U2Q2FNcTh2REpQNHU1
RFRSTlBLRnF2TlJudmhqREQ4RGpzNVptaUFCbkVrLzAvRjM0RkY3QjNFODFGMUUz
OTU1NjJEMEQ3NzI4OTBEQzlENDY5MDQxMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GMzRGRjdCM0U4MUYxRTM5NTU2MkQwRDc3Mjg5MERDOUQ0Njkw
NDEwLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FNkNhTXE4dkRKUDR1NURUUk5Q
S0Zxdk5SbnZoakREOERqczVabWlBQm5Fay8wLzMyMzgzMDM0M2EzMTM4NjIzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzEzOTM0Mzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBBi0
MA0GCSqGSIb3DQEBCwUAA4IBAQCAlEEldzFvMUHy67CI+Fi1L+UHdP4zeBHom9NW
1i23UxQHHg/9k/o01I0lDoYdkjeau9ilJbd55cV4OgORh99a/7+Qers9xPmrp5i7
ko7v2Lil8X2tg3FWwIGUqOQKHF2YfwIDwCL0Ky6e+Z/MLo0Cr6HsNnKFwuEclHzj
AJU4TY3xf1EPZOMid50T8A6XyZic/JOY3b9ABbJ262UaZInTBWnMHvSokvqxSWGN
jL/ieMkjmuW+kx+heTpt80b3UbHvyt8vMnemunaKe5DnfTyfO6Ch/jcq3ryHKrCX
XIETEB3CsZCzyfWa1mrmr6Vo9/cLpAY5o3D4w5y2NI2bP3xR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org