Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393230303a3a2f34302d3430203d3e20323633313434.roa
File:                     323830343a313736383a393230303a3a2f34302d3430203d3e20323633313434.roa (raw, json)
Hash identifier:          abnHZ0fXPTNyMOZKK9sqKXrOjTotK1/q65GQQl17Ai4=
Subject key identifier:   4D:8F:64:38:17:A1:CE:90:8F:D0:E5:44:6A:50:B4:77:82:34:97:F2
Certificate issuer:       /CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
Certificate serial:       3A3CE7D4DDB47DC1A914DB4C1FAD55F8BF056C85
Authority key identifier: 6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393230303a3a2f34302d3430203d3e20323633313434.roa
Signing time:             Sat 22 Jan 2022 23:31:37 +0000
ROA not before:           Sat 22 Jan 2022 23:26:37 +0000
ROA not after:            Sat 21 Jan 2023 23:31:37 +0000
asID:                     263144
IP address blocks:        2804:1768:9200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3c:e7:d4:dd:b4:7d:c1:a9:14:db:4c:1f:ad:55:f8:bf:05:6c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E
        Validity
            Not Before: Jan 22 23:26:37 2022 GMT
            Not After : Jan 21 23:31:37 2023 GMT
        Subject: CN=4D8F643817A1CE908FD0E5446A50B477823497F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:45:19:5c:48:07:e0:75:c8:1d:81:53:cd:
                    38:07:d4:50:71:64:4b:b0:48:38:69:b4:ad:a7:2e:
                    ea:7f:b5:69:0e:2c:ee:6b:0b:11:70:9c:e0:9b:55:
                    36:ed:e4:be:4d:d4:b9:37:8a:98:e8:e6:d0:90:1d:
                    3e:f9:67:33:9b:c0:52:56:3d:2c:4d:d1:a0:ae:05:
                    2c:68:fe:d7:7f:d4:6b:ef:3d:ae:a2:45:9b:3e:e6:
                    d9:b1:b5:c9:e7:54:c2:ee:e4:3e:f0:3d:74:03:4f:
                    44:15:84:3d:bd:cb:fa:07:02:d6:cc:1a:97:95:8c:
                    59:95:63:4b:b8:5b:ec:25:5e:1a:24:4f:7c:73:35:
                    69:92:e8:09:4a:91:cc:67:2b:56:58:2c:df:83:94:
                    c9:91:fe:46:03:55:e9:5d:44:3f:ea:42:96:ba:79:
                    e3:8f:50:a9:68:fd:9d:79:33:4e:5c:de:45:81:58:
                    15:d8:f8:9a:b2:27:82:49:e3:45:ad:bc:50:56:6b:
                    9d:7f:18:c4:78:b0:cb:1d:f1:67:73:3c:88:6c:d7:
                    b9:74:4d:fa:e9:6c:d2:04:d7:04:bd:16:18:44:c3:
                    55:61:28:8f:00:e4:e4:39:27:e4:0c:58:45:8d:6a:
                    5e:da:a3:91:23:0e:f4:b1:cf:28:e7:3b:df:ed:17:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8F:64:38:17:A1:CE:90:8F:D0:E5:44:6A:50:B4:77:82:34:97:F2
            X509v3 Authority Key Identifier:
                keyid:6A:DE:CC:DC:E1:47:1A:CF:CD:4F:48:E0:D8:9E:5C:D3:FA:79:8D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6ADECCDCE1471ACFCD4F48E0D89E5CD3FA798D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a393230303a3a2f34302d3430203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:bf:16:e7:0e:b4:33:7e:39:19:aa:29:3d:07:b0:3c:35:68:
         b9:f7:73:75:48:62:ba:b9:7b:8d:4c:a2:f4:c2:23:da:35:f5:
         f5:6a:32:a2:07:2b:33:6f:e0:99:81:02:f0:26:9c:c3:7b:dd:
         09:bd:2a:1a:96:34:b0:0a:60:c1:e4:bf:7d:a2:77:61:56:4d:
         d1:88:5a:c1:99:55:dd:37:c6:cd:fa:67:40:18:ea:88:32:27:
         86:36:87:d7:0a:c9:2c:dd:40:25:3f:ab:a4:70:aa:ed:32:11:
         c7:d8:8a:fd:68:33:40:47:4c:42:db:d9:e7:2c:e9:f2:e1:7b:
         8d:4c:1e:87:c9:b3:95:05:d5:d6:52:5e:91:6e:c7:87:30:de:
         7e:cf:91:d7:54:03:df:22:24:e3:8b:c8:cf:e1:f3:eb:87:e4:
         c2:4f:97:9b:d8:54:b7:38:5e:92:f3:0e:05:88:88:26:7c:94:
         df:6e:e7:b5:7e:be:c7:fa:ca:c1:c5:96:bc:9d:37:f6:60:48:
         41:48:45:9f:77:51:d7:ca:03:a0:75:59:1e:c1:94:1f:1d:73:
         b6:f5:f3:f3:05:50:ae:c5:9d:67:27:79:31:43:ed:a8:dd:5d:
         fa:27:17:8c:a0:ea:3b:d1:8d:c1:68:53:8f:b1:04:bb:3c:ae:
         2e:90:46:2f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOjzn1N20fcGpFNtMH61V+L8FbIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFERUNDRENFMTQ3MUFDRkNENEY0OEUwRDg5RTVDRDNG
QTc5OEQ3RTAeFw0yMjAxMjIyMzI2MzdaFw0yMzAxMjEyMzMxMzdaMDMxMTAvBgNV
BAMTKDREOEY2NDM4MTdBMUNFOTA4RkQwRTU0NDZBNTBCNDc3ODIzNDk3RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrykUZXEgH4HXIHYFTzTgH1FBx
ZEuwSDhptK2nLup/tWkOLO5rCxFwnOCbVTbt5L5N1Lk3ipjo5tCQHT75ZzObwFJW
PSxN0aCuBSxo/td/1GvvPa6iRZs+5tmxtcnnVMLu5D7wPXQDT0QVhD29y/oHAtbM
GpeVjFmVY0u4W+wlXhokT3xzNWmS6AlKkcxnK1ZYLN+DlMmR/kYDVeldRD/qQpa6
eeOPUKlo/Z15M05c3kWBWBXY+JqyJ4JJ40WtvFBWa51/GMR4sMsd8WdzPIhs17l0
TfrpbNIE1wS9FhhEw1VhKI8A5OQ5J+QMWEWNal7ao5EjDvSxzyjnO9/tF5qFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUTY9kOBehzpCP0OVEalC0d4I0l/IwHwYDVR0j
BBgwFoAUat7M3OFHGs/NT0jg2J5c0/p5jX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJSMVNCZ01YMUN2ekVYMWlpUXMzM3lTZG5kQjIzVUd1b29VRHJDNndO
UWIvMC82QURFQ0NEQ0UxNDcxQUNGQ0Q0RjQ4RTBEODlFNUNEM0ZBNzk4RDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBREVDQ0RDRTE0NzFBQ0ZD
RDRGNDhFMEQ4OUU1Q0QzRkE3OThEN0UuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyUjFTQmdNWDFDdnpFWDFpaVFzMzN5U2RuZEIyM1VHdW9vVURyQzZ3TlFiLzAv
MzIzODMwMzQzYTMxMzczNjM4M2EzOTMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzMxMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEF2iSMA0GCSqGSIb3DQEBCwUA
A4IBAQCLvxbnDrQzfjkZqik9B7A8NWi593N1SGK6uXuNTKL0wiPaNfX1ajKiBysz
b+CZgQLwJpzDe90JvSoaljSwCmDB5L99ondhVk3RiFrBmVXdN8bN+mdAGOqIMieG
NofXCsks3UAlP6ukcKrtMhHH2Ir9aDNAR0xC29nnLOny4XuNTB6HybOVBdXWUl6R
bseHMN5+z5HXVAPfIiTji8jP4fPrh+TCT5eb2FS3OF6S8w4FiIgmfJTfbue1fr7H
+srBxZa8nTf2YEhBSEWfd1HXygOgdVkewZQfHXO29fPzBVCuxZ1nJ3kxQ+2o3V36
JxeMoOo70Y3BaFOPsQS7PK4ukEYv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org