Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a62383a3a2f33322d3438203d3e203533313434.roa
File:                     323830343a62383a3a2f33322d3438203d3e203533313434.roa (raw, json)
Hash identifier:          OGcK42RzG0OG+XvQ3fRjPlTs9aoZwlkU78tDYklKK4M=
Subject key identifier:   60:B7:E9:7B:6B:FE:03:14:1C:F8:42:67:E6:2B:32:75:E5:1E:C8:7F
Certificate issuer:       /CN=7103F4194EF67E55EFBD869E564501095E338AEC
Certificate serial:       1E8B90779EE29F9B12576808C9CB0ECC966307BA
Authority key identifier: 71:03:F4:19:4E:F6:7E:55:EF:BD:86:9E:56:45:01:09:5E:33:8A:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7103F4194EF67E55EFBD869E564501095E338AEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a62383a3a2f33322d3438203d3e203533313434.roa
Signing time:             Sat 14 Aug 2021 20:00:01 +0000
ROA not before:           Sat 14 Aug 2021 19:55:01 +0000
ROA not after:            Sun 14 Aug 2022 20:00:01 +0000
asID:                     53144
IP address blocks:        2804:b8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8b:90:77:9e:e2:9f:9b:12:57:68:08:c9:cb:0e:cc:96:63:07:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7103F4194EF67E55EFBD869E564501095E338AEC
        Validity
            Not Before: Aug 14 19:55:01 2021 GMT
            Not After : Aug 14 20:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:e1:51:62:58:53:a4:00:f9:ed:ac:a0:3e:
                    d9:7f:d1:a7:34:30:d0:50:d5:af:a2:6b:ee:43:a6:
                    71:ec:a7:6f:08:24:9d:d3:bc:9d:b9:34:eb:fb:4b:
                    35:b5:15:f6:48:97:63:d1:c5:4b:26:ea:42:d6:cb:
                    0a:28:51:b8:30:86:4e:41:ad:a9:87:6f:43:04:76:
                    50:36:d1:bf:79:df:70:6a:29:b6:a2:1c:5f:b9:e5:
                    2a:77:dc:99:87:a4:4e:48:19:b7:00:8c:b0:46:96:
                    e1:84:24:81:c4:6e:cb:f9:e9:e3:30:9d:bd:17:94:
                    ca:22:37:de:b0:cf:02:58:1a:1d:b1:82:0b:bd:6a:
                    e5:b3:9b:2d:c5:cb:4a:01:0e:89:3d:e4:33:f3:ac:
                    cb:1b:b2:64:bb:cf:69:e2:07:ce:90:e5:4c:87:2d:
                    ed:b9:46:69:f6:73:61:fb:7b:a2:85:d2:e4:27:fe:
                    79:bc:52:4e:4a:4b:1b:90:56:51:d2:59:ee:0a:ed:
                    58:f5:54:4e:f0:e0:a1:2c:1e:2c:b7:95:50:b4:02:
                    bc:1e:3b:e1:7d:4b:eb:41:ba:f9:8f:57:ce:14:42:
                    99:c5:9e:2e:c9:11:5a:62:8c:d6:22:6b:9d:35:40:
                    a0:7a:fe:e8:01:6b:db:b2:99:91:5e:22:43:b2:62:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B7:E9:7B:6B:FE:03:14:1C:F8:42:67:E6:2B:32:75:E5:1E:C8:7F
            X509v3 Authority Key Identifier:
                keyid:71:03:F4:19:4E:F6:7E:55:EF:BD:86:9E:56:45:01:09:5E:33:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/7103F4194EF67E55EFBD869E564501095E338AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7103F4194EF67E55EFBD869E564501095E338AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a62383a3a2f33322d3438203d3e203533313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:f3:51:4b:51:31:88:f1:d2:5c:e8:a9:0e:8a:84:f6:8e:e7:
         36:ae:96:97:e3:da:06:92:1d:67:f5:e3:df:37:34:7f:46:86:
         32:ef:d8:12:6f:18:7e:d6:93:92:bd:ef:99:bc:a5:e7:ae:cc:
         15:86:c1:f4:12:4f:dd:d5:0d:f7:4f:a0:22:17:92:48:0d:41:
         e4:41:3e:d3:a4:2a:94:d2:19:8b:dd:44:e1:84:7b:e9:3c:19:
         d6:e9:f6:21:87:b6:51:30:53:80:54:79:9f:af:e6:ae:3f:01:
         8a:c2:b0:09:ba:33:8d:e8:a6:30:0d:61:e0:d1:7f:b9:9a:77:
         7d:29:15:3e:61:9c:8d:5d:15:7e:c9:9d:a2:82:8e:1b:85:7d:
         ba:32:11:21:80:7a:81:19:72:3d:7f:28:9e:9b:11:7f:ab:24:
         0f:30:e0:87:30:53:26:81:97:e5:6d:a2:3b:92:b9:16:be:9e:
         aa:62:27:cb:e0:97:80:5f:a7:f7:53:ac:2d:e2:2a:85:55:c3:
         f4:b6:14:5b:1e:32:79:f8:5c:e8:d7:5c:d0:6f:df:05:3d:76:
         6a:71:1a:8a:0c:03:df:4a:71:a1:8a:36:ce:cc:26:46:ee:3c:
         87:a8:e2:ae:c6:07:96:a3:62:92:9e:01:10:b6:a8:61:0f:45:
         93:42:0c:73
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUHouQd57in5sSV2gIycsOzJZjB7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEwM0Y0MTk0RUY2N0U1NUVGQkQ4NjlFNTY0NTAxMDk1
RTMzOEFFQzAeFw0yMTA4MTQxOTU1MDFaFw0yMjA4MTQyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQwREUxNTE2MjU4NTNBNDAw
RjlFREFDQTAzRUQ5N0ZEMUE3MzQzMEQwNTBENUFGQTI2QkVFNDNBNjcxRUNBNzZG
MDgyNDlERDNCQzlEQjkzNEVCRkI0QjM1QjUxNUY2NDg5NzYzRDFDNTRCMjZFQTQy
RDZDQjBBMjg1MUI4MzA4NjRFNDFBREE5ODc2RjQzMDQ3NjUwMzZEMUJGNzlERjcw
NkEyOUI2QTIxQzVGQjlFNTJBNzdEQzk5ODdBNDRFNDgxOUI3MDA4Q0IwNDY5NkUx
ODQyNDgxQzQ2RUNCRjlFOUUzMzA5REJEMTc5NENBMjIzN0RFQjBDRjAyNTgxQTFE
QjE4MjBCQkQ2QUU1QjM5QjJEQzVDQjRBMDEwRTg5M0RFNDMzRjNBQ0NCMUJCMjY0
QkJDRjY5RTIwN0NFOTBFNTRDODcyREVEQjk0NjY5RjY3MzYxRkI3QkEyODVEMkU0
MjdGRTc5QkM1MjRFNEE0QjFCOTA1NjUxRDI1OUVFMEFFRDU4RjU1NDRFRjBFMEEx
MkMxRTJDQjc5NTUwQjQwMkJDMUUzQkUxN0Q0QkVCNDFCQUY5OEY1N0NFMTQ0Mjk5
QzU5RTJFQzkxMTVBNjI4Q0Q2MjI2QjlEMzU0MEEwN0FGRUU4MDE2QkRCQjI5OTkx
NUUyMjQzQjI2MjcyMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvQ3hUWJYU6QA+e2soD7Zf9GnNDDQUNWvomvuQ6Zx7KdvCCSd07yd
uTTr+0s1tRX2SJdj0cVLJupC1ssKKFG4MIZOQa2ph29DBHZQNtG/ed9waim2ohxf
ueUqd9yZh6ROSBm3AIywRpbhhCSBxG7L+enjMJ29F5TKIjfesM8CWBodsYILvWrl
s5stxctKAQ6JPeQz86zLG7Jku89p4gfOkOVMhy3tuUZp9nNh+3uihdLkJ/55vFJO
SksbkFZR0lnuCu1Y9VRO8OChLB4st5VQtAK8HjvhfUvrQbr5j1fOFEKZxZ4uyRFa
YozWImudNUCgev7oAWvbspmRXiJDsmJyNwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FGC36Xtr/gMUHPhCZ+YrMnXlHsh/MB8GA1UdIwQYMBaAFHED9BlO9n5V772GnlZF
AQleM4rsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0duMjhzeG1QdGdFZnFw
YUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzAvNzEwM0Y0MTk0RUY2N0U1
NUVGQkQ4NjlFNTY0NTAxMDk1RTMzOEFFQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83MTAzRjQxOTRFRjY3RTU1RUZCRDg2OUU1NjQ1MDEwOTVFMzM4
QUVDLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HbjI4c3htUHRnRWZxcGFKNkV0
d0Q0cTRLd1lNZFdoNDF6YjF1WkU5YUJDWC8wLzMyMzgzMDM0M2E2MjM4M2EzYTJm
MzMzMjJkMzQzODIwM2QzZTIwMzUzMzMxMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEALgwDQYJ
KoZIhvcNAQELBQADggEBAATzUUtRMYjx0lzoqQ6KhPaO5zaulpfj2gaSHWf14983
NH9GhjLv2BJvGH7Wk5K975m8peeuzBWGwfQST93VDfdPoCIXkkgNQeRBPtOkKpTS
GYvdROGEe+k8Gdbp9iGHtlEwU4BUeZ+v5q4/AYrCsAm6M43opjANYeDRf7mad30p
FT5hnI1dFX7JnaKCjhuFfboyESGAeoEZcj1/KJ6bEX+rJA8w4IcwUyaBl+VtojuS
uRa+nqpiJ8vgl4Bfp/dTrC3iKoVVw/S2FFseMnn4XOjXXNBv3wU9dmpxGooMA99K
caGKNs7MJkbuPIeo4q7GB5ajYpKeARC2qGEPRZNCDHM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org