Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/323830343a373330343a323030303a3a2f33352d3335203d3e20323730383930.roa
File:                     323830343a373330343a323030303a3a2f33352d3335203d3e20323730383930.roa (raw, json)
Hash identifier:          KRklpjMV2js8fVO/Yq1eAM1erXZExBfhN1LBm0wh6/g=
Subject key identifier:   2B:FA:66:77:78:7D:2E:10:DC:3E:68:E0:69:C2:E2:75:59:07:5A:22
Certificate issuer:       /CN=08D214D87C37896C9BD427BBBEF3FEF67273A810
Certificate serial:       17D29C532EDBA3D8835C33E83E7E32E3B473C8BC
Authority key identifier: 08:D2:14:D8:7C:37:89:6C:9B:D4:27:BB:BE:F3:FE:F6:72:73:A8:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08D214D87C37896C9BD427BBBEF3FEF67273A810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/323830343a373330343a323030303a3a2f33352d3335203d3e20323730383930.roa
Signing time:             Sat 12 Mar 2022 12:42:00 +0000
ROA not before:           Sat 12 Mar 2022 12:37:00 +0000
ROA not after:            Sat 11 Mar 2023 12:42:00 +0000
asID:                     270890
IP address blocks:        2804:7304:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d2:9c:53:2e:db:a3:d8:83:5c:33:e8:3e:7e:32:e3:b4:73:c8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D214D87C37896C9BD427BBBEF3FEF67273A810
        Validity
            Not Before: Mar 12 12:37:00 2022 GMT
            Not After : Mar 11 12:42:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:38:c7:8b:f5:9c:49:d6:08:f8:5b:39:bf:
                    44:b2:7b:76:94:0c:ab:3b:19:7a:49:e2:ca:87:2f:
                    c5:e4:1f:a5:4d:99:6b:23:1d:03:58:54:25:af:bf:
                    19:07:cf:1d:6c:1c:bb:3f:db:15:43:75:55:76:11:
                    75:3d:4d:67:87:3e:a6:75:79:4b:0e:f5:c9:f0:33:
                    b2:3a:eb:37:9e:99:d8:f9:79:61:0b:de:87:86:df:
                    d3:eb:99:df:ca:45:8b:95:1a:1d:4b:66:77:b8:cd:
                    90:7d:42:8d:11:fe:f8:67:e4:8b:31:dd:1e:fe:0d:
                    4b:6f:ec:09:07:b1:d4:e7:3e:83:db:cf:70:30:03:
                    e0:17:b8:4b:c8:31:72:48:7f:f5:27:1c:66:1b:4a:
                    9e:57:32:04:b1:25:b1:f6:a8:a0:58:e1:15:e6:77:
                    bc:db:43:18:8b:2f:6d:ce:20:78:9e:fc:d6:84:26:
                    9d:99:6a:78:f7:da:30:e1:d8:1d:74:16:cb:0c:08:
                    35:73:59:15:17:76:7d:71:6a:81:f6:53:df:5a:ae:
                    f5:cd:6e:be:c0:d5:c5:6c:69:65:24:22:18:e6:88:
                    99:2c:c3:bf:84:67:13:9b:5e:ef:6b:a4:3d:73:84:
                    0c:55:d5:0f:41:65:26:45:29:c9:dc:58:dd:b5:ab:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FA:66:77:78:7D:2E:10:DC:3E:68:E0:69:C2:E2:75:59:07:5A:22
            X509v3 Authority Key Identifier:
                keyid:08:D2:14:D8:7C:37:89:6C:9B:D4:27:BB:BE:F3:FE:F6:72:73:A8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/08D214D87C37896C9BD427BBBEF3FEF67273A810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08D214D87C37896C9BD427BBBEF3FEF67273A810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/323830343a373330343a323030303a3a2f33352d3335203d3e20323730383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7304:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         92:81:3c:8d:d5:53:b3:44:2c:6e:52:18:aa:af:65:a7:58:02:
         8f:2c:bb:67:52:9e:e7:c4:da:91:20:a7:d2:5f:4b:57:96:da:
         e9:8b:58:34:d2:e2:87:60:22:ec:28:10:09:3b:d9:5d:36:46:
         80:9c:b2:98:d0:a9:15:8f:62:27:50:91:bc:a7:a5:e6:0b:2a:
         f9:60:a4:97:a6:8d:47:26:f2:14:13:d5:be:b2:ad:56:e9:07:
         45:a0:c6:d0:7c:9f:95:b1:e0:7e:cc:af:5c:2b:3f:a7:8e:3b:
         f9:fc:76:bc:40:34:05:36:22:6c:9e:64:6f:0f:c1:dd:fc:c9:
         00:9b:33:c0:e2:a1:58:7b:89:1c:95:1d:41:a7:3a:c6:b1:d5:
         f1:1f:b1:03:ef:4e:7a:73:2c:af:90:47:c9:74:1f:bb:b5:01:
         4a:f2:de:d0:6e:c5:19:82:1f:d3:ae:d2:2d:7f:04:06:9e:4d:
         d4:1e:89:21:3c:62:f2:52:bb:a9:f5:18:32:0f:5e:95:d5:dd:
         02:3a:1c:0b:b9:4a:12:9e:59:78:5e:d3:fd:77:5b:cd:44:00:
         f7:bd:d1:ee:9c:7f:22:41:9f:5e:23:e8:ab:8d:e2:6d:24:50:
         cf:18:0d:ea:ed:65:1b:dd:66:b6:f1:c6:29:5e:fa:3c:52:f3:
         c1:d5:5e:7f
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUF9KcUy7bo9iDXDPoPn4y47RzyLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEMjE0RDg3QzM3ODk2QzlCRDQyN0JCQkVGM0ZFRjY3
MjczQTgxMDAeFw0yMjAzMTIxMjM3MDBaFw0yMzAzMTExMjQyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUVENDM4Qzc4QkY1OUM0OUQ2
MDhGODVCMzlCRjQ0QjI3Qjc2OTQwQ0FCM0IxOTdBNDlFMkNBODcyRkM1RTQxRkE1
NEQ5OTZCMjMxRDAzNTg1NDI1QUZCRjE5MDdDRjFENkMxQ0JCM0ZEQjE1NDM3NTU1
NzYxMTc1M0Q0RDY3ODczRUE2NzU3OTRCMEVGNUM5RjAzM0IyM0FFQjM3OUU5OUQ4
Rjk3OTYxMEJERTg3ODZERkQzRUI5OURGQ0E0NThCOTUxQTFENEI2Njc3QjhDRDkw
N0Q0MjhEMTFGRUY4NjdFNDhCMzFERDFFRkUwRDRCNkZFQzA5MDdCMUQ0RTczRTgz
REJDRjcwMzAwM0UwMTdCODRCQzgzMTcyNDg3RkY1MjcxQzY2MUI0QTlFNTczMjA0
QjEyNUIxRjZBOEEwNThFMTE1RTY3N0JDREI0MzE4OEIyRjZEQ0UyMDc4OUVGQ0Q2
ODQyNjlEOTk2QTc4RjdEQTMwRTFEODFENzQxNkNCMEMwODM1NzM1OTE1MTc3NjdE
NzE2QTgxRjY1M0RGNUFBRUY1Q0Q2RUJFQzBENUM1NkM2OTY1MjQyMjE4RTY4ODk5
MkNDM0JGODQ2NzEzOUI1RUVGNkJBNDNENzM4NDBDNTVENTBGNDE2NTI2NDUyOUM5
REM1OEREQjVBQjk2QTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArtQ4x4v1nEnWCPhbOb9Esnt2lAyrOxl6SeLKhy/F5B+lTZlrIx0D
WFQlr78ZB88dbBy7P9sVQ3VVdhF1PU1nhz6mdXlLDvXJ8DOyOus3npnY+XlhC96H
ht/T65nfykWLlRodS2Z3uM2QfUKNEf74Z+SLMd0e/g1Lb+wJB7HU5z6D289wMAPg
F7hLyDFySH/1JxxmG0qeVzIEsSWx9qigWOEV5ne820MYiy9tziB4nvzWhCadmWp4
99ow4dgddBbLDAg1c1kVF3Z9cWqB9lPfWq71zW6+wNXFbGllJCIY5oiZLMO/hGcT
m17va6Q9c4QMVdUPQWUmRSnJ3FjdtauWpwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCv6Znd4fS4Q3D5o4GnC4nVZB1oiMB8GA1UdIwQYMBaAFAjSFNh8N4lsm9Qnu77z
/vZyc6gQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZMTURSSlNjdlZLeDJp
c2dmcEV5WXM0VXFkZ3F4aFRyOFJqdDdMWXN0WVRQLzAvMDhEMjE0RDg3QzM3ODk2
QzlCRDQyN0JCQkVGM0ZFRjY3MjczQTgxMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wOEQyMTREODdDMzc4OTZDOUJENDI3QkJCRUYzRkVGNjcyNzNB
ODEwLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GTE1EUkpTY3ZWS3gyaXNnZnBF
eVlzNFVxZGdxeGhUcjhSanQ3TFlzdFlUUC8wLzMyMzgzMDM0M2EzNzMzMzAzNDNh
MzIzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM3MzAzODM5MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUoBHMEIDANBgkqhkiG9w0BAQsFAAOCAQEAkoE8jdVTs0QsblIYqq9l
p1gCjyy7Z1Ke58TakSCn0l9LV5ba6YtYNNLih2Ai7CgQCTvZXTZGgJyymNCpFY9i
J1CRvKel5gsq+WCkl6aNRybyFBPVvrKtVukHRaDG0HyflbHgfsyvXCs/p447+fx2
vEA0BTYibJ5kbw/B3fzJAJszwOKhWHuJHJUdQac6xrHV8R+xA+9OenMsr5BHyXQf
u7UBSvLe0G7FGYIf067SLX8EBp5N1B6JITxi8lK7qfUYMg9eldXdAjocC7lKEp5Z
eF7T/XdbzUQA973R7px/IkGfXiPoq43ibSRQzxgN6u1lG91mtvHGKV76PFLzwdVe
fw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org