Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2pPnEK2zxnTMYuEfgazaezcsPekuGi5psYNCp6dnfnb/0/323830343a376666633a3a2f33322d3334203d3e20323731373232.roa
File:                     323830343a376666633a3a2f33322d3334203d3e20323731373232.roa (raw, json)
Hash identifier:          iMknvGfXW5aZEL3rc26yiXaUWdM6frqvq0b+/bHv08Y=
Subject key identifier:   C9:F9:8E:A7:85:A8:A4:09:50:83:D2:36:AE:6D:9A:B0:82:0A:C7:2E
Certificate issuer:       /CN=C24E23FF8CE13F6A745EE0CC11C1F0C37B4A6478
Certificate serial:       44B8E7C09996695AE9A6A6E8594C21A1B9537AED
Authority key identifier: C2:4E:23:FF:8C:E1:3F:6A:74:5E:E0:CC:11:C1:F0:C3:7B:4A:64:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C24E23FF8CE13F6A745EE0CC11C1F0C37B4A6478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2pPnEK2zxnTMYuEfgazaezcsPekuGi5psYNCp6dnfnb/0/323830343a376666633a3a2f33322d3334203d3e20323731373232.roa
Signing time:             Mon 29 May 2023 16:00:00 +0000
ROA not before:           Mon 29 May 2023 15:55:00 +0000
ROA not after:            Mon 27 May 2024 16:00:00 +0000
asID:                     271722
IP address blocks:        2804:7ffc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b8:e7:c0:99:96:69:5a:e9:a6:a6:e8:59:4c:21:a1:b9:53:7a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C24E23FF8CE13F6A745EE0CC11C1F0C37B4A6478
        Validity
            Not Before: May 29 15:55:00 2023 GMT
            Not After : May 27 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:47:70:0f:90:a1:5f:6f:b3:aa:56:d6:9f:
                    95:f2:eb:98:80:4d:b8:11:50:c9:b1:f2:54:3e:56:
                    81:e5:2b:bf:be:cc:66:57:37:00:52:b4:fa:4f:b2:
                    65:b6:4f:6a:86:6b:41:85:93:07:7a:1e:f6:3c:92:
                    4b:9a:45:ed:99:df:1b:9f:04:f3:e6:97:15:d1:eb:
                    5e:38:a1:8b:81:9f:f2:cb:cd:29:6b:e5:ba:e1:31:
                    77:27:46:1d:f0:a3:d5:5c:ea:33:45:27:01:94:ca:
                    b0:a6:51:bd:54:93:dd:62:15:de:27:54:27:0d:cb:
                    f4:3d:f9:76:8d:12:ea:d1:ab:a2:60:b6:fd:a0:70:
                    fe:e7:60:90:35:f5:95:1f:0f:06:78:86:e1:2f:f8:
                    8f:f1:1f:b2:b1:e2:55:ea:35:86:b4:44:90:30:5a:
                    8c:3b:b7:f5:78:4e:e8:5f:cf:0a:9e:43:6d:d6:97:
                    03:bc:66:a3:8e:e0:fd:e5:a6:0f:00:03:24:d1:49:
                    f5:bc:f5:41:dc:a0:df:06:88:b0:41:61:65:40:ad:
                    bf:bf:8e:a3:0e:a3:be:b4:cb:40:e3:f5:f4:e3:f7:
                    61:70:db:2e:99:80:7d:27:bd:38:78:15:64:43:b3:
                    cc:4e:6a:a3:db:61:44:38:0b:1d:fc:20:80:29:3e:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F9:8E:A7:85:A8:A4:09:50:83:D2:36:AE:6D:9A:B0:82:0A:C7:2E
            X509v3 Authority Key Identifier:
                keyid:C2:4E:23:FF:8C:E1:3F:6A:74:5E:E0:CC:11:C1:F0:C3:7B:4A:64:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2pPnEK2zxnTMYuEfgazaezcsPekuGi5psYNCp6dnfnb/0/C24E23FF8CE13F6A745EE0CC11C1F0C37B4A6478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C24E23FF8CE13F6A745EE0CC11C1F0C37B4A6478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2pPnEK2zxnTMYuEfgazaezcsPekuGi5psYNCp6dnfnb/0/323830343a376666633a3a2f33322d3334203d3e20323731373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ffc::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:2f:34:e4:08:4c:76:b8:a4:7c:2a:14:e7:bb:ad:61:7f:
         18:8f:96:6d:29:86:79:dc:f8:61:6c:54:c4:da:6b:62:f6:74:
         35:a5:48:43:48:c0:c4:12:92:29:60:b4:9d:fe:31:24:7d:7f:
         88:82:2b:a8:b0:07:69:06:e3:50:e8:89:8b:c4:43:16:7f:6d:
         77:76:09:fc:f1:f0:7a:44:a0:03:00:6b:19:b8:f9:7d:ef:f9:
         6d:0f:d7:55:b8:a4:84:46:c6:ae:b1:c9:01:30:03:9a:3e:08:
         82:2b:9f:90:9c:a2:a2:db:ae:f9:f8:8b:e9:61:43:c1:9f:93:
         74:3a:30:73:13:6c:e3:79:35:18:3e:74:7d:4b:15:32:df:cf:
         a7:24:d8:30:20:90:0b:e8:63:98:8b:22:e5:bd:c5:0c:8d:7e:
         13:a3:25:f1:dd:b3:dd:4a:be:4e:e2:98:0c:11:d3:ed:f2:31:
         c2:c2:d7:a8:43:42:25:be:d7:3b:d5:d5:46:53:be:89:f0:df:
         17:c2:b3:8e:2b:29:89:32:66:82:7f:31:c4:f7:07:74:df:79:
         bd:b1:c9:d0:6f:d6:6c:5e:1e:e1:dd:e1:f5:4f:77:ad:2c:13:
         89:6c:a9:8b:4e:07:aa:fd:1c:16:c1:ed:36:7a:f0:19:7b:8b:
         0d:33:f6:90
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIURLjnwJmWaVrppqboWUwhoblTeu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI0RTIzRkY4Q0UxM0Y2QTc0NUVFMENDMTFDMUYwQzM3
QjRBNjQ3ODAeFw0yMzA1MjkxNTU1MDBaFw0yNDA1MjcxNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VBRjQ3NzAwRjkwQTE1RjZG
QjNBQTU2RDY5Rjk1RjJFQjk4ODA0REI4MTE1MEM5QjFGMjU0M0U1NjgxRTUyQkJG
QkVDQzY2NTczNzAwNTJCNEZBNEZCMjY1QjY0RjZBODY2QjQxODU5MzA3N0ExRUY2
M0M5MjRCOUE0NUVEOTlERjFCOUYwNEYzRTY5NzE1RDFFQjVFMzhBMThCODE5RkYy
Q0JDRDI5NkJFNUJBRTEzMTc3Mjc0NjFERjBBM0Q1NUNFQTMzNDUyNzAxOTRDQUIw
QTY1MUJENTQ5M0RENjIxNURFMjc1NDI3MERDQkY0M0RGOTc2OEQxMkVBRDFBQkEy
NjBCNkZEQTA3MEZFRTc2MDkwMzVGNTk1MUYwRjA2Nzg4NkUxMkZGODhGRjExRkIy
QjFFMjU1RUEzNTg2QjQ0NDkwMzA1QThDM0JCN0Y1Nzg0RUU4NUZDRjBBOUU0MzZE
RDY5NzAzQkM2NkEzOEVFMEZERTVBNjBGMDAwMzI0RDE0OUY1QkNGNTQxRENBMERG
MDY4OEIwNDE2MTY1NDBBREJGQkY4RUEzMEVBM0JFQjRDQjQwRTNGNUY0RTNGNzYx
NzBEQjJFOTk4MDdEMjdCRDM4NzgxNTY0NDNCM0NDNEU2QUEzREI2MTQ0MzgwQjFE
RkMyMDgwMjkzRTAyRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzq9HcA+QoV9vs6pW1p+V8uuYgE24EVDJsfJUPlaB5Su/vsxmVzcA
UrT6T7Jltk9qhmtBhZMHeh72PJJLmkXtmd8bnwTz5pcV0eteOKGLgZ/yy80pa+W6
4TF3J0Yd8KPVXOozRScBlMqwplG9VJPdYhXeJ1QnDcv0Pfl2jRLq0auiYLb9oHD+
52CQNfWVHw8GeIbhL/iP8R+yseJV6jWGtESQMFqMO7f1eE7oX88KnkNt1pcDvGaj
juD95aYPAAMk0Un1vPVB3KDfBoiwQWFlQK2/v46jDqO+tMtA4/X04/dhcNsumYB9
J704eBVkQ7PMTmqj22FEOAsd/CCAKT4C0QIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FMn5jqeFqKQJUIPSNq5tmrCCCscuMB8GA1UdIwQYMBaAFMJOI/+M4T9qdF7gzBHB
8MN7SmR4MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0cycFBuRUsyenhuVE1Z
dUVmZ2F6YWV6Y3NQZWt1R2k1cHNZTkNwNmRuZm5iLzAvQzI0RTIzRkY4Q0UxM0Y2
QTc0NUVFMENDMTFDMUYwQzM3QjRBNjQ3OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DMjRFMjNGRjhDRTEzRjZBNzQ1RUUwQ0MxMUMxRjBDMzdCNEE2
NDc4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HMnBQbkVLMnp4blRNWXVFZmdh
emFlemNzUGVrdUdpNXBzWU5DcDZkbmZuYi8wLzMyMzgzMDM0M2EzNzY2NjY2MzNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzczMTM3MzIzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
f/wwDQYJKoZIhvcNAQELBQADggEBADXWLzTkCEx2uKR8KhTnu61hfxiPlm0phnnc
+GFsVMTaa2L2dDWlSENIwMQSkilgtJ3+MSR9f4iCK6iwB2kG41DoiYvEQxZ/bXd2
Cfzx8HpEoAMAaxm4+X3v+W0P11W4pIRGxq6xyQEwA5o+CIIrn5CcoqLbrvn4i+lh
Q8Gfk3Q6MHMTbON5NRg+dH1LFTLfz6ck2DAgkAvoY5iLIuW9xQyNfhOjJfHds91K
vk7imAwR0+3yMcLC16hDQiW+1zvV1UZTvonw3xfCs44rKYkyZoJ/McT3B3Tfeb2x
ydBv1mxeHuHd4fVPd60sE4lsqYtOB6r9HBbB7TZ68Bl7iw0z9pA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org