Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/0/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa
File:                     323830343a373461343a3a2f33322d3334203d3e20323730393934.roa (raw, json)
Hash identifier:          9OszWkZAZin23SFgcTmcs1gopgvx/NyGUoTqmi1e3ao=
Subject key identifier:   2C:12:D8:5A:C2:24:31:E2:93:16:65:63:17:8C:D3:EF:D6:F1:A4:DA
Certificate issuer:       /CN=A1830908DD3CD0E29BC047F438C65F6BB6BF700B
Certificate serial:       08BF713F5F71795425285577EC62B9FDAD07192A
Authority key identifier: A1:83:09:08:DD:3C:D0:E2:9B:C0:47:F4:38:C6:5F:6B:B6:BF:70:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1830908DD3CD0E29BC047F438C65F6BB6BF700B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/0/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa
Signing time:             Thu 08 Feb 2024 13:00:00 +0000
ROA not before:           Thu 08 Feb 2024 12:55:00 +0000
ROA not after:            Thu 06 Feb 2025 13:00:00 +0000
asID:                     270994
IP address blocks:        2804:74a4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bf:71:3f:5f:71:79:54:25:28:55:77:ec:62:b9:fd:ad:07:19:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1830908DD3CD0E29BC047F438C65F6BB6BF700B
        Validity
            Not Before: Feb  8 12:55:00 2024 GMT
            Not After : Feb  6 13:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:21:6b:bf:20:0a:bb:ee:c0:9e:68:f5:db:
                    1e:68:d5:6b:de:4d:89:be:7e:84:67:4e:10:15:47:
                    47:d9:a7:31:76:6f:5a:92:bf:9a:02:90:69:5e:0e:
                    be:8b:17:b1:11:63:e4:a5:b0:0d:74:35:e5:ab:72:
                    df:cc:3e:5e:d1:39:30:43:20:8c:17:fb:5e:c8:fc:
                    e4:c0:b3:67:4f:47:d2:0d:d0:94:87:ef:83:b5:61:
                    36:09:3e:a6:be:29:12:c8:f4:f1:ff:c6:f3:db:99:
                    82:8e:cc:b9:d3:9b:49:3e:3b:bd:0b:ca:46:9e:b2:
                    b1:e8:e0:13:96:df:9d:80:08:86:b7:1f:42:28:75:
                    93:e4:65:89:6f:4e:fd:06:8e:13:05:ac:0c:97:8d:
                    de:35:74:8c:25:92:db:0f:11:5b:3a:7a:93:15:8d:
                    7e:3c:dd:7d:9a:85:20:55:91:a1:7c:81:8a:eb:51:
                    d6:12:fd:d2:23:66:b0:31:c6:27:2d:94:e0:7a:9b:
                    88:e7:99:d7:68:dd:db:8b:bc:40:8f:0c:c5:8a:0f:
                    55:e5:30:31:96:6a:be:1b:24:8f:15:a0:c6:97:33:
                    74:e2:44:73:e9:96:d2:29:5d:5f:35:eb:71:a6:ec:
                    bd:8a:37:e6:34:b4:6c:f6:04:45:9e:8c:e2:a3:75:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:12:D8:5A:C2:24:31:E2:93:16:65:63:17:8C:D3:EF:D6:F1:A4:DA
            X509v3 Authority Key Identifier:
                keyid:A1:83:09:08:DD:3C:D0:E2:9B:C0:47:F4:38:C6:5F:6B:B6:BF:70:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/0/A1830908DD3CD0E29BC047F438C65F6BB6BF700B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1830908DD3CD0E29BC047F438C65F6BB6BF700B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/0/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:b6:a1:9b:db:50:5d:c6:19:0d:06:66:5a:a2:85:da:03:be:
         bd:36:fa:8c:1a:3f:e6:0a:0f:83:49:1f:08:3b:7d:b0:82:f5:
         5f:1a:cf:21:3d:31:cc:54:7f:0e:a3:73:53:1b:3f:ae:66:28:
         aa:42:ab:4e:ec:e0:62:af:03:11:81:1d:a9:b9:77:7f:4c:05:
         41:4f:54:1c:cd:fe:5a:0b:15:43:e3:5e:25:0d:39:40:7d:ec:
         e6:3e:54:f0:eb:ee:38:18:63:6e:ed:cd:20:c1:d9:15:cf:bf:
         d9:65:ba:f0:88:a3:0a:62:d8:65:bb:bf:46:b2:4c:4d:e0:5a:
         0f:c6:88:f7:e7:4b:b8:24:ee:fc:a0:d2:1f:5d:8f:3d:79:a7:
         75:9f:d0:da:79:2c:ac:50:6a:4c:ec:dc:ea:c5:21:8d:50:3d:
         1d:96:f0:d6:c4:9a:b1:8e:0a:d0:79:6d:c4:84:f6:ee:fc:23:
         99:08:25:81:ef:4c:a3:8a:d4:1e:28:85:f5:d1:76:93:2f:97:
         ca:d1:c7:b5:83:2f:40:14:ef:de:b9:db:8f:23:0f:da:1c:36:
         18:03:58:90:a3:8b:c4:02:ff:de:ff:fe:ba:78:38:c8:15:73:
         ba:6e:ba:dd:a0:98:53:dd:45:71:be:9c:94:9f:c3:87:f1:b8:
         21:37:ba:20
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUCL9xP19xeVQlKFV37GK5/a0HGSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE4MzA5MDhERDNDRDBFMjlCQzA0N0Y0MzhDNjVGNkJC
NkJGNzAwQjAeFw0yNDAyMDgxMjU1MDBaFw0yNTAyMDYxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjFCOTIxNkJCRjIwMEFCQkVF
QzA5RTY4RjVEQjFFNjhENTZCREU0RDg5QkU3RTg0Njc0RTEwMTU0NzQ3RDlBNzMx
NzY2RjVBOTJCRjlBMDI5MDY5NUUwRUJFOEIxN0IxMTE2M0U0QTVCMDBENzQzNUU1
QUI3MkRGQ0MzRTVFRDEzOTMwNDMyMDhDMTdGQjVFQzhGQ0U0QzBCMzY3NEY0N0Qy
MEREMDk0ODdFRjgzQjU2MTM2MDkzRUE2QkUyOTEyQzhGNEYxRkZDNkYzREI5OTgy
OEVDQ0I5RDM5QjQ5M0UzQkJEMEJDQTQ2OUVCMkIxRThFMDEzOTZERjlEODAwODg2
QjcxRjQyMjg3NTkzRTQ2NTg5NkY0RUZEMDY4RTEzMDVBQzBDOTc4RERFMzU3NDhD
MjU5MkRCMEYxMTVCM0E3QTkzMTU4RDdFM0NERDdEOUE4NTIwNTU5MUExN0M4MThB
RUI1MUQ2MTJGREQyMjM2NkIwMzFDNjI3MkQ5NEUwN0E5Qjg4RTc5OUQ3NjhERERC
OEJCQzQwOEYwQ0M1OEEwRjU1RTUzMDMxOTY2QUJFMUIyNDhGMTVBMEM2OTczMzc0
RTI0NDczRTk5NkQyMjk1RDVGMzVFQjcxQTZFQ0JEOEEzN0U2MzRCNDZDRjYwNDQ1
OUU4Q0UyQTM3NTdFQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsbkha78gCrvuwJ5o9dseaNVr3k2Jvn6EZ04QFUdH2acxdm9akr+a
ApBpXg6+ixexEWPkpbANdDXlq3LfzD5e0TkwQyCMF/teyPzkwLNnT0fSDdCUh++D
tWE2CT6mvikSyPTx/8bz25mCjsy505tJPju9C8pGnrKx6OATlt+dgAiGtx9CKHWT
5GWJb079Bo4TBawMl43eNXSMJZLbDxFbOnqTFY1+PN19moUgVZGhfIGK61HWEv3S
I2awMcYnLZTgepuI55nXaN3bi7xAjwzFig9V5TAxlmq+GySPFaDGlzN04kRz6ZbS
KV1fNetxpuy9ijfmNLRs9gRFnozio3V+rwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FCwS2FrCJDHikxZlYxeM0+/W8aTaMB8GA1UdIwQYMBaAFKGDCQjdPNDim8BH9DjG
X2u2v3ALMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZZbks3TEU1V2lLRkM3
Y2Vobk41dGFMUWNqQ0h2dWhvWG9KQlBpd3BCWmI5LzAvQTE4MzA5MDhERDNDRDBF
MjlCQzA0N0Y0MzhDNjVGNkJCNkJGNzAwQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BMTgzMDkwOEREM0NEMEUyOUJDMDQ3RjQzOEM2NUY2QkI2QkY3
MDBCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GWW5LN0xFNVdpS0ZDN2NlaG5O
NXRhTFFjakNIdnVob1hvSkJQaXdwQlpiOS8wLzMyMzgzMDM0M2EzNzM0NjEzNDNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMDM5MzkzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
dKQwDQYJKoZIhvcNAQELBQADggEBAGu2oZvbUF3GGQ0GZlqihdoDvr02+owaP+YK
D4NJHwg7fbCC9V8azyE9McxUfw6jc1MbP65mKKpCq07s4GKvAxGBHam5d39MBUFP
VBzN/loLFUPjXiUNOUB97OY+VPDr7jgYY27tzSDB2RXPv9lluvCIowpi2GW7v0ay
TE3gWg/GiPfnS7gk7vyg0h9djz15p3Wf0Np5LKxQakzs3OrFIY1QPR2W8NbEmrGO
CtB5bcSE9u78I5kIJYHvTKOK1B4ohfXRdpMvl8rRx7WDL0AU7965248jD9ocNhgD
WJCji8QC/97//rp4OMgVc7puut2gmFPdRXG+nJSfw4fxuCE3uiA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org