Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/323830343a6264633a3a2f33322d3634203d3e203532383636.roa
File:                     323830343a6264633a3a2f33322d3634203d3e203532383636.roa (raw, json)
Hash identifier:          Yi3g/6CYZ8gBEJ5HSq3+zrU5j/c6/YX3pamk0XsHHEU=
Subject key identifier:   1E:E4:E6:5A:CA:C6:96:EB:02:DA:8A:46:5E:46:5D:D8:3B:BF:84:49
Certificate issuer:       /CN=72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C
Certificate serial:       35322A184E19A3A3DAB639DD5DF3F52F8DC44B72
Authority key identifier: 72:A2:37:AA:48:92:DB:69:B4:4A:CA:C0:C6:F1:C2:A4:A8:D7:70:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/323830343a6264633a3a2f33322d3634203d3e203532383636.roa
Signing time:             Sun 15 Jan 2023 03:00:01 +0000
ROA not before:           Sun 15 Jan 2023 02:55:01 +0000
ROA not after:            Mon 15 Jan 2024 03:00:01 +0000
asID:                     52866
IP address blocks:        2804:bdc::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:32:2a:18:4e:19:a3:a3:da:b6:39:dd:5d:f3:f5:2f:8d:c4:4b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C
        Validity
            Not Before: Jan 15 02:55:01 2023 GMT
            Not After : Jan 15 03:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:0c:b6:40:08:d4:19:58:a8:b3:a3:45:b2:
                    64:52:65:fa:eb:53:05:0a:84:93:02:37:e8:1a:71:
                    4c:3e:9e:ac:c6:1e:c0:3c:95:16:3e:85:4e:0a:73:
                    1b:21:17:a5:f3:6e:62:f8:0b:f0:59:75:2f:55:85:
                    32:bd:74:f2:69:0e:57:2e:63:3b:3b:88:17:f9:4c:
                    e2:d3:e9:f9:9f:a5:16:8a:87:9c:26:73:eb:4a:66:
                    9f:0f:21:f1:9e:ef:0e:42:97:09:7b:f2:46:27:72:
                    44:d6:cd:03:0e:75:bf:5d:7c:f8:7f:de:69:96:0d:
                    f9:b4:d5:1b:00:f5:e0:af:0e:1f:43:01:2b:a0:96:
                    53:6e:f2:00:d7:19:62:b0:51:d9:a9:01:b0:f5:64:
                    49:35:b2:44:ef:24:43:34:d4:9e:7d:6e:95:c8:52:
                    79:9e:15:de:b4:9b:fe:36:5f:23:cc:73:c2:37:59:
                    33:48:15:42:f8:4f:5f:54:bd:2d:54:33:e7:05:5d:
                    77:aa:7e:fb:38:dd:1a:ca:c7:67:97:00:d2:01:ce:
                    77:f2:d5:89:e3:ff:eb:92:79:ac:5b:1e:c0:56:03:
                    66:1c:7f:86:fd:58:e1:15:1f:c8:cd:7b:48:7b:f5:
                    a3:98:7f:58:58:1a:9f:c7:eb:96:f7:ff:5a:c6:1b:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:E6:5A:CA:C6:96:EB:02:DA:8A:46:5E:46:5D:D8:3B:BF:84:49
            X509v3 Authority Key Identifier:
                keyid:72:A2:37:AA:48:92:DB:69:B4:4A:CA:C0:C6:F1:C2:A4:A8:D7:70:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/323830343a6264633a3a2f33322d3634203d3e203532383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:04:38:8c:99:70:ee:04:52:21:30:16:51:02:2f:3c:28:
         79:89:44:a4:72:64:b4:d9:c2:c3:86:9d:16:25:d9:aa:b5:84:
         8f:34:eb:94:2b:89:0c:65:a7:46:57:e8:88:18:40:df:e4:50:
         42:43:6d:cb:0f:60:e4:df:ee:fd:04:a9:32:66:5b:2a:df:b9:
         ee:a6:14:8d:6b:76:27:9b:3d:3c:f5:5a:16:16:e4:1a:8f:1e:
         47:7b:c0:e9:74:48:9b:5c:c6:a3:f7:d0:17:71:de:35:a5:f6:
         ea:d7:be:10:34:9a:3d:9a:fe:2a:78:db:15:a3:58:27:5a:36:
         af:d2:ac:90:4c:62:a4:23:d4:79:ea:30:e1:29:28:9a:98:71:
         32:ca:37:f1:fc:82:49:f3:8e:e9:25:5d:84:26:f9:5e:6a:f3:
         05:22:d2:8d:fa:ec:c0:ad:25:da:5a:30:17:98:2e:e5:f8:26:
         77:e2:77:34:1d:d4:6e:68:2a:d4:17:ef:bb:c9:dd:60:6e:80:
         da:bb:0f:37:c3:e0:29:64:36:04:16:f6:f2:16:60:f8:d8:c2:
         79:be:0d:4b:e8:08:25:37:f5:1b:da:85:dc:93:78:58:ec:53:
         1a:50:ca:99:76:31:d2:25:af:69:d7:6d:21:ab:87:11:09:68:
         ba:cd:11:f0
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUNTIqGE4Zo6PatjndXfP1L43ES3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJBMjM3QUE0ODkyREI2OUI0NEFDQUMwQzZGMUMyQTRB
OEQ3NzA2QzAeFw0yMzAxMTUwMjU1MDFaFw0yNDAxMTUwMzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzY0NDBDQjY0MDA4RDQxOTU4
QThCM0EzNDVCMjY0NTI2NUZBRUI1MzA1MEE4NDkzMDIzN0U4MUE3MTRDM0U5RUFD
QzYxRUMwM0M5NTE2M0U4NTRFMEE3MzFCMjExN0E1RjM2RTYyRjgwQkYwNTk3NTJG
NTU4NTMyQkQ3NEYyNjkwRTU3MkU2MzNCM0I4ODE3Rjk0Q0UyRDNFOUY5OUZBNTE2
OEE4NzlDMjY3M0VCNEE2NjlGMEYyMUYxOUVFRjBFNDI5NzA5N0JGMjQ2Mjc3MjQ0
RDZDRDAzMEU3NUJGNUQ3Q0Y4N0ZERTY5OTYwREY5QjRENTFCMDBGNUUwQUYwRTFG
NDMwMTJCQTA5NjUzNkVGMjAwRDcxOTYyQjA1MUQ5QTkwMUIwRjU2NDQ5MzVCMjQ0
RUYyNDQzMzRENDlFN0Q2RTk1Qzg1Mjc5OUUxNURFQjQ5QkZFMzY1RjIzQ0M3M0My
Mzc1OTMzNDgxNTQyRjg0RjVGNTRCRDJENTQzM0U3MDU1RDc3QUE3RUZCMzhERDFB
Q0FDNzY3OTcwMEQyMDFDRTc3RjJENTg5RTNGRkVCOTI3OUFDNUIxRUMwNTYwMzY2
MUM3Rjg2RkQ1OEUxMTUxRkM4Q0Q3QjQ4N0JGNUEzOTg3RjU4NTgxQTlGQzdFQjk2
RjdGRjVBQzYxQjU1RDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxkQMtkAI1BlYqLOjRbJkUmX661MFCoSTAjfoGnFMPp6sxh7APJUW
PoVOCnMbIRel825i+AvwWXUvVYUyvXTyaQ5XLmM7O4gX+Uzi0+n5n6UWioecJnPr
SmafDyHxnu8OQpcJe/JGJ3JE1s0DDnW/XXz4f95plg35tNUbAPXgrw4fQwEroJZT
bvIA1xlisFHZqQGw9WRJNbJE7yRDNNSefW6VyFJ5nhXetJv+Nl8jzHPCN1kzSBVC
+E9fVL0tVDPnBV13qn77ON0aysdnlwDSAc538tWJ4//rknmsWx7AVgNmHH+G/Vjh
FR/IzXtIe/WjmH9YWBqfx+uW9/9axhtV2QIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FB7k5lrKxpbrAtqKRl5GXdg7v4RJMB8GA1UdIwQYMBaAFHKiN6pIkttptErKwMbx
wqSo13BsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g0NWk4Zk5vVDJHOXlx
VkpzZW9kMXY4Tm9MdkVUN2dBd2tMM0h5ZzhxMTgyLzAvNzJBMjM3QUE0ODkyREI2
OUI0NEFDQUMwQzZGMUMyQTRBOEQ3NzA2Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83MkEyMzdBQTQ4OTJEQjY5QjQ0QUNBQzBDNkYxQzJBNEE4RDc3
MDZDLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9INDVpOGZOb1QyRzl5cVZKc2Vv
ZDF2OE5vTHZFVDdnQXdrTDNIeWc4cTE4Mi8wLzMyMzgzMDM0M2E2MjY0NjMzYTNh
MmYzMzMyMmQzNjM0MjAzZDNlMjAzNTMyMzgzNjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAQL3DAN
BgkqhkiG9w0BAQsFAAOCAQEAF/IEOIyZcO4EUiEwFlECLzwoeYlEpHJktNnCw4ad
FiXZqrWEjzTrlCuJDGWnRlfoiBhA3+RQQkNtyw9g5N/u/QSpMmZbKt+57qYUjWt2
J5s9PPVaFhbkGo8eR3vA6XRIm1zGo/fQF3HeNaX26te+EDSaPZr+KnjbFaNYJ1o2
r9KskExipCPUeeow4SkomphxMso38fyCSfOO6SVdhCb5XmrzBSLSjfrswK0l2low
F5gu5fgmd+J3NB3Ubmgq1Bfvu8ndYG6A2rsPN8PgKWQ2BBb28hZg+NjCeb4NS+gI
JTf1G9qF3JN4WOxTGlDKmXYx0iWvaddtIauHEQlous0R8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org