Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3730303a3a2f34302d3430203d3e20323637303230.roa
File:                     323830343a343665633a3730303a3a2f34302d3430203d3e20323637303230.roa (raw, json)
Hash identifier:          BqgevJ34uXAWYrPxQm1a8e2pL/UZLcI+pAHdJ5raBNU=
Subject key identifier:   8D:87:2E:2B:9E:D4:02:FD:47:9F:B2:59:F8:81:E2:F0:7F:31:97:F9
Certificate issuer:       /CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
Certificate serial:       1F509BD09AD12D489C2232D48BEA9472B9B1505D
Authority key identifier: CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3730303a3a2f34302d3430203d3e20323637303230.roa
Signing time:             Thu 08 Sep 2022 19:50:36 +0000
ROA not before:           Thu 08 Sep 2022 19:45:36 +0000
ROA not after:            Thu 07 Sep 2023 19:50:36 +0000
asID:                     267020
IP address blocks:        2804:46ec:700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:50:9b:d0:9a:d1:2d:48:9c:22:32:d4:8b:ea:94:72:b9:b1:50:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
        Validity
            Not Before: Sep  8 19:45:36 2022 GMT
            Not After : Sep  7 19:50:36 2023 GMT
        Subject: CN=8D872E2B9ED402FD479FB259F881E2F07F3197F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:42:88:c0:85:0b:fd:f4:9d:ac:67:59:23:
                    6d:a3:db:42:b6:bc:a3:ce:f6:36:ee:68:e2:c9:5e:
                    c5:b8:d2:84:9d:4a:aa:ea:3e:74:4b:93:36:98:8f:
                    7b:91:38:77:47:44:e9:a9:d1:8b:36:f2:c1:3c:20:
                    af:90:4f:05:f7:eb:1a:5e:f0:3e:e6:23:43:9c:73:
                    66:21:9a:0c:e0:5d:c0:1c:5b:67:79:78:9b:a2:2f:
                    2f:c7:4b:56:c0:4f:7b:86:0b:15:9c:94:86:20:5a:
                    d8:03:8b:22:8d:b2:a8:0f:09:ee:96:51:6f:79:a5:
                    5e:c1:e7:47:25:9d:37:29:e2:c1:97:53:32:df:ee:
                    63:f2:99:5d:d0:a3:b1:a0:1e:ce:7c:2b:e2:96:99:
                    50:1b:67:9c:76:27:ab:03:b1:0c:6b:4b:b0:32:8f:
                    15:f0:2f:c6:b2:4d:8d:e9:e5:ff:a5:2d:ce:38:38:
                    70:a7:68:bc:a4:96:6f:6a:a4:61:56:21:ab:36:8a:
                    74:92:11:f9:35:cc:0d:df:4b:54:86:fc:22:f3:52:
                    1d:15:a8:68:95:0a:6b:2e:07:e6:57:ea:5a:0d:72:
                    e0:34:2d:e3:99:09:3d:c2:b9:50:d5:65:69:8f:d6:
                    48:1f:9d:bc:ea:23:d2:09:63:d0:c5:f1:7c:14:5f:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:87:2E:2B:9E:D4:02:FD:47:9F:B2:59:F8:81:E2:F0:7F:31:97:F9
            X509v3 Authority Key Identifier:
                keyid:CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a3730303a3a2f34302d3430203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46ec:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:39:65:7c:86:d1:15:cb:5b:39:f0:74:91:d6:c0:ec:29:c3:
         76:26:45:7f:fd:86:59:f5:1c:48:67:0e:ee:17:1e:81:5b:4b:
         5a:dd:99:80:d4:db:45:46:30:20:9c:90:0b:2f:fe:80:b6:87:
         01:e3:60:ac:8f:73:46:69:a1:31:2e:34:3f:4e:eb:00:2c:92:
         35:15:ce:d5:73:5c:4a:e3:ee:a9:b5:e1:db:64:ca:07:a8:6c:
         2c:ad:91:6a:27:17:f5:7f:51:0f:8a:9f:91:14:ff:8c:05:77:
         06:d5:6e:5a:2b:a1:1a:44:67:29:9e:0f:9e:4e:63:c8:85:49:
         17:9d:ef:ae:6a:f9:17:b1:65:82:d2:3c:4c:a3:e3:2d:41:4d:
         88:30:a1:8c:c9:1d:6c:6d:80:d4:41:f4:ab:37:cf:bf:64:1b:
         10:51:51:0a:d3:ac:11:d7:7c:0a:47:ed:c2:53:fc:5c:99:13:
         88:1a:bc:ba:da:58:b0:76:e2:1d:05:a9:50:af:8f:ff:08:e6:
         24:f3:65:72:58:0a:14:24:7a:39:53:c7:07:b1:c1:0e:55:86:
         15:be:c3:18:a6:e8:16:07:97:73:6e:4d:55:ef:cf:f1:f6:88:
         81:6d:dd:39:88:d9:dc:a1:a6:3b:eb:72:28:47:ce:b8:97:a6:
         0f:57:df:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH1Cb0JrRLUicIjLUi+qUcrmxUF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2NzIwRTA5NkUyQjNCNTg3NURFRjFGNjVGNkQ5N0ZC
QjU2NTYyMzAeFw0yMjA5MDgxOTQ1MzZaFw0yMzA5MDcxOTUwMzZaMDMxMTAvBgNV
BAMTKDhEODcyRTJCOUVENDAyRkQ0NzlGQjI1OUY4ODFFMkYwN0YzMTk3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/kKIwIUL/fSdrGdZI22j20K2
vKPO9jbuaOLJXsW40oSdSqrqPnRLkzaYj3uROHdHROmp0Ys28sE8IK+QTwX36xpe
8D7mI0Occ2YhmgzgXcAcW2d5eJuiLy/HS1bAT3uGCxWclIYgWtgDiyKNsqgPCe6W
UW95pV7B50clnTcp4sGXUzLf7mPymV3Qo7GgHs58K+KWmVAbZ5x2J6sDsQxrS7Ay
jxXwL8ayTY3p5f+lLc44OHCnaLyklm9qpGFWIas2inSSEfk1zA3fS1SG/CLzUh0V
qGiVCmsuB+ZX6loNcuA0LeOZCT3CuVDVZWmP1kgfnbzqI9IJY9DF8XwUX2OhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjYcuK57UAv1Hn7JZ+IHi8H8xl/kwHwYDVR0j
BBgwFoAUzWcg4Jbis7WHXe8fZfbZf7tWViMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzlt
OEgvMC9DRDY3MjBFMDk2RTJCM0I1ODc1REVGMUY2NUY2RDk3RkJCNTY1NjIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENjcyMEUwOTZFMkIzQjU4
NzVERUYxRjY1RjZEOTdGQkI1NjU2MjMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMTEttVnRKeWFNSFo2b0FTUEI5VWsybW9TNUdtaldha1J2djVEcUM5bThILzAv
MzIzODMwMzQzYTM0MzY2NTYzM2EzNzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzczMDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBEbsBzANBgkqhkiG9w0BAQsFAAOC
AQEAUDllfIbRFctbOfB0kdbA7CnDdiZFf/2GWfUcSGcO7hcegVtLWt2ZgNTbRUYw
IJyQCy/+gLaHAeNgrI9zRmmhMS40P07rACySNRXO1XNcSuPuqbXh22TKB6hsLK2R
aicX9X9RD4qfkRT/jAV3BtVuWiuhGkRnKZ4Pnk5jyIVJF53vrmr5F7FlgtI8TKPj
LUFNiDChjMkdbG2A1EH0qzfPv2QbEFFRCtOsEdd8CkftwlP8XJkTiBq8utpYsHbi
HQWpUK+P/wjmJPNlclgKFCR6OVPHB7HBDlWGFb7DGKboFgeXc25NVe/P8faIgW3d
OYjZ3KGmO+tyKEfOuJemD1ffJw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org