Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3438203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33322d3438203d3e20323634353935.roa (raw, json)
Hash identifier:          w9eCwBdpiuG7uudZHJ/Jgrr0cET15xGSx1yvZRuLBSU=
Subject key identifier:   F3:44:B0:32:76:AD:55:D3:1C:26:1F:67:70:90:AF:5D:5B:55:D6:CE
Certificate issuer:       /CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
Certificate serial:       4652BF60F38907A9D802D43BEEA35B7CC6AAE87B
Authority key identifier: FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3438203d3e20323634353935.roa
Signing time:             Sat 10 Sep 2022 23:31:32 +0000
ROA not before:           Sat 10 Sep 2022 23:26:32 +0000
ROA not after:            Sat 09 Sep 2023 23:31:32 +0000
asID:                     264595
IP address blocks:        2804:2228::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:52:bf:60:f3:89:07:a9:d8:02:d4:3b:ee:a3:5b:7c:c6:aa:e8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
        Validity
            Not Before: Sep 10 23:26:32 2022 GMT
            Not After : Sep  9 23:31:32 2023 GMT
        Subject: CN=F344B03276AD55D31C261F677090AF5D5B55D6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:21:d5:08:d0:2f:b5:8e:6f:57:05:31:ac:
                    bd:4a:6e:4b:53:0a:43:3e:0b:f7:e9:45:1b:22:e0:
                    d5:61:d7:b4:f3:39:89:e5:f4:58:61:d9:d2:8a:da:
                    62:8a:70:8d:2f:3d:0f:08:68:28:e6:08:22:ad:31:
                    a5:43:53:e5:f4:04:f3:40:ed:4c:81:77:be:66:56:
                    a5:a4:57:ab:d6:22:3e:86:b4:c0:72:f0:2f:5b:e2:
                    63:15:4c:fd:40:d6:e5:f1:cd:17:d0:a5:23:94:94:
                    0f:34:da:02:e0:8b:44:3b:c8:f9:2d:33:20:f5:eb:
                    43:26:0d:9b:2d:62:29:58:c1:53:03:c7:74:9c:bc:
                    38:03:a9:a4:68:d2:37:a2:f7:b0:36:e6:6b:53:10:
                    0e:71:04:aa:83:58:fa:62:7d:8b:3a:78:a0:c7:b7:
                    f9:dc:58:a0:e7:e4:de:7d:68:ba:31:09:f3:66:57:
                    57:e0:ca:42:91:5f:04:b4:5a:ee:d3:0f:17:55:d7:
                    a5:15:86:ae:6c:30:96:2c:c3:30:ba:f9:77:fa:df:
                    e2:a7:6b:d1:4d:21:07:23:62:a5:db:08:9d:a8:cc:
                    2e:db:83:99:3d:19:b8:0e:16:b6:b3:31:a7:db:67:
                    85:f8:fe:49:24:43:79:c3:c4:2a:ce:d8:18:ba:09:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:44:B0:32:76:AD:55:D3:1C:26:1F:67:70:90:AF:5D:5B:55:D6:CE
            X509v3 Authority Key Identifier:
                keyid:FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3438203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:47:ec:21:79:e9:6a:32:69:ec:d6:44:a9:c2:c3:ee:77:ff:
         de:ba:de:01:d8:e6:ff:0d:fc:fc:56:d1:47:4c:b0:29:56:07:
         f2:86:bc:35:3c:69:f5:98:c1:45:3e:a5:2b:0c:26:a9:9d:a8:
         56:79:80:db:5f:26:2a:79:7f:64:0c:3e:6c:bd:4b:72:12:f6:
         14:e4:73:8d:a4:6c:5a:70:c9:2a:58:b3:76:04:8a:dc:ba:8d:
         dd:85:32:b1:3c:43:ff:c2:c0:48:e1:d3:fd:6a:bc:66:a6:de:
         18:d2:2f:e6:33:56:b0:b2:fe:e5:2c:5b:f2:eb:d4:53:54:46:
         33:61:24:d7:55:e5:e8:32:7d:45:cf:2f:a9:7f:11:e6:30:da:
         fc:e3:08:db:c8:22:29:39:fb:1e:2d:5e:c1:ab:f1:af:d9:6f:
         a9:3c:57:c0:05:46:68:d6:59:6d:d1:49:9b:7e:59:90:9b:08:
         93:8a:2d:15:a4:c5:73:bd:46:8d:12:a7:46:35:87:41:7a:45:
         e1:9a:ad:9a:eb:65:70:01:61:da:f6:5d:f1:af:61:7e:a7:b9:
         d0:95:fc:05:8e:48:78:45:02:f2:b6:5f:2f:7b:c9:fe:b7:4a:
         68:dc:ea:c7:0d:e6:f8:ef:53:b3:9d:0c:08:3d:17:11:96:21:
         b0:d8:01:4d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURlK/YPOJB6nYAtQ77qNbfMaq6HswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY3MTY2MURGM0Q0NkQwN0ZDMzdCRDcyRjFCNzlEMUQ1
RTg3OTYxQjAeFw0yMjA5MTAyMzI2MzJaFw0yMzA5MDkyMzMxMzJaMDMxMTAvBgNV
BAMTKEYzNDRCMDMyNzZBRDU1RDMxQzI2MUY2NzcwOTBBRjVENUI1NUQ2Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+iHVCNAvtY5vVwUxrL1KbktT
CkM+C/fpRRsi4NVh17TzOYnl9Fhh2dKK2mKKcI0vPQ8IaCjmCCKtMaVDU+X0BPNA
7UyBd75mVqWkV6vWIj6GtMBy8C9b4mMVTP1A1uXxzRfQpSOUlA802gLgi0Q7yPkt
MyD160MmDZstYilYwVMDx3ScvDgDqaRo0jei97A25mtTEA5xBKqDWPpifYs6eKDH
t/ncWKDn5N59aLoxCfNmV1fgykKRXwS0Wu7TDxdV16UVhq5sMJYswzC6+Xf63+Kn
a9FNIQcjYqXbCJ2ozC7bg5k9GbgOFrazMafbZ4X4/kkkQ3nDxCrO2Bi6CXXDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU80SwMnatVdMcJh9ncJCvXVtV1s4wHwYDVR0j
BBgwFoAU/3FmHfPUbQf8N71y8bedHV6HlhswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVQzOU5TV2laZzNlQXJLRzdYWUtBcFFUV2E2QmdMNURvamR5YmFqR3RG
VXkvMC9GRjcxNjYxREYzRDQ2RDA3RkMzN0JENzJGMUI3OUQxRDVFODc5NjFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGNzE2NjFERjNENDZEMDdG
QzM3QkQ3MkYxQjc5RDFENUU4Nzk2MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VUMzlOU1dpWmczZUFyS0c3WFlLQXBRVFdhNkJnTDVEb2pkeWJhakd0RlV5LzAv
MzIzODMwMzQzYTMyMzIzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQiKDANBgkqhkiG9w0BAQsFAAOCAQEAhkfsIXnp
ajJp7NZEqcLD7nf/3rreAdjm/w38/FbRR0ywKVYH8oa8NTxp9ZjBRT6lKwwmqZ2o
VnmA218mKnl/ZAw+bL1LchL2FORzjaRsWnDJKlizdgSK3LqN3YUysTxD/8LASOHT
/Wq8ZqbeGNIv5jNWsLL+5Sxb8uvUU1RGM2Ek11Xl6DJ9Rc8vqX8R5jDa/OMI28gi
KTn7Hi1ewavxr9lvqTxXwAVGaNZZbdFJm35ZkJsIk4otFaTFc71GjRKnRjWHQXpF
4ZqtmutlcAFh2vZd8a9hfqe50JX8BY5IeEUC8rZfL3vJ/rdKaNzqxw3m+O9Ts50M
CD0XEZYhsNgBTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org