Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f3430203d3e20323637303637.roa
File:                     323830343a343761343a3a2f3430203d3e20323637303637.roa (raw, json)
Hash identifier:          ybU8lWBkVMdQcf+fZFTTMDE6HWEE5LrvIfOZDxcOg5s=
Subject key identifier:   8D:D8:A0:3D:5B:2D:B8:1D:E1:75:94:13:74:B7:A4:B6:11:5D:15:EC
Certificate issuer:       /CN=ABE2B87282296266F69CE04223629CFC8BFD6354
Certificate serial:       5434C8ACE7BC8B13C86044679ACDB3929FA831D5
Authority key identifier: AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f3430203d3e20323637303637.roa
Signing time:             Thu 02 Dec 2021 18:00:01 +0000
ROA not before:           Thu 02 Dec 2021 17:55:01 +0000
ROA not after:            Fri 02 Dec 2022 18:00:01 +0000
asID:                     267067
IP address blocks:        2804:47a4::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:34:c8:ac:e7:bc:8b:13:c8:60:44:67:9a:cd:b3:92:9f:a8:31:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE2B87282296266F69CE04223629CFC8BFD6354
        Validity
            Not Before: Dec  2 17:55:01 2021 GMT
            Not After : Dec  2 18:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ff:16:8a:ae:d3:6e:ee:2b:60:70:99:11:e3:
                    5b:54:f2:d3:66:1e:8b:31:0a:fe:c6:35:61:ca:0f:
                    1c:b8:dd:49:3d:34:66:44:aa:c3:9f:3a:9e:9e:fe:
                    32:11:8e:ba:5c:f1:b7:02:fd:4a:92:40:19:49:50:
                    d3:5a:61:8b:ef:68:d7:d1:17:02:14:33:28:a5:72:
                    76:de:21:70:e0:c9:97:dc:72:04:a1:16:a0:84:3e:
                    c0:5b:df:68:aa:4b:34:04:7f:a5:c3:d9:7a:47:15:
                    42:34:55:0e:31:97:d7:2d:86:f5:a0:c9:4a:0c:ed:
                    a7:44:9e:be:10:44:49:58:d1:ba:73:82:19:a2:29:
                    d3:ca:a8:77:47:c6:37:ad:24:f6:64:f1:92:99:51:
                    98:b1:cb:df:b5:05:70:c2:07:b8:df:07:2d:d1:ea:
                    1c:c6:6c:84:42:df:0e:fa:cb:78:a7:84:ca:21:4f:
                    5d:f0:6b:22:6c:8e:2e:1a:ef:5f:de:58:c2:bf:49:
                    db:65:fa:62:bf:53:e4:03:18:97:5d:3a:2d:a4:f1:
                    6e:b8:12:13:57:8a:e3:0b:8b:61:0d:79:08:9d:5d:
                    8e:e9:6f:45:04:89:dc:2b:f7:2d:a3:a6:f9:e7:22:
                    e7:c6:5f:92:26:ac:ff:7d:5d:6a:66:fa:f3:c4:49:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:A0:3D:5B:2D:B8:1D:E1:75:94:13:74:B7:A4:B6:11:5D:15:EC
            X509v3 Authority Key Identifier:
                keyid:AB:E2:B8:72:82:29:62:66:F6:9C:E0:42:23:62:9C:FC:8B:FD:63:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/ABE2B87282296266F69CE04223629CFC8BFD6354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABE2B87282296266F69CE04223629CFC8BFD6354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f3430203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:2c:5b:44:d1:f1:09:0e:b6:c7:f2:b0:d9:13:f1:75:a2:
         d4:fa:4d:02:95:70:13:c6:6e:1d:3a:e9:77:5f:4b:86:35:c7:
         b6:a1:53:b9:48:43:42:e4:6c:b2:65:37:27:8e:3c:df:60:8a:
         fe:3f:74:82:61:e5:e1:02:fe:da:cc:69:44:88:e7:be:4b:ad:
         3a:2c:59:83:ba:fe:c1:da:a7:32:c8:fb:28:6e:82:17:a5:ee:
         be:03:e5:6c:5e:df:70:eb:06:b1:f1:80:e3:c0:4b:86:f4:ea:
         00:3a:35:db:bd:86:2e:81:24:c3:53:90:7a:c7:f8:79:ba:24:
         42:03:05:96:93:74:22:ab:cc:6c:15:3d:4d:da:0c:de:8d:e6:
         7e:ec:4b:2d:75:eb:9e:2e:b4:bc:60:60:b8:82:8e:a8:5f:83:
         d4:80:ce:b5:67:1d:61:eb:61:a1:d6:bc:6f:7e:89:8b:70:46:
         bc:ed:a8:1f:d9:60:95:df:42:19:85:6f:f0:38:32:60:e2:6e:
         0e:64:67:36:35:ca:66:2c:80:f7:29:06:f5:91:fe:45:43:46:
         7d:2a:9a:13:01:1a:cf:3b:3d:5c:4c:60:66:54:2a:30:ce:4c:
         4a:30:26:7d:ef:c6:e0:20:3e:3e:fc:a9:7a:8a:1c:1f:b1:3c:
         38:28:25:21
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUVDTIrOe8ixPIYERnms2zkp+oMdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJFMkI4NzI4MjI5NjI2NkY2OUNFMDQyMjM2MjlDRkM4
QkZENjM1NDAeFw0yMTEyMDIxNzU1MDFaFw0yMjEyMDIxODAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkNGRjE2OEFBRUQzNkVFRTJC
NjA3MDk5MTFFMzVCNTRGMkQzNjYxRThCMzEwQUZFQzYzNTYxQ0EwRjFDQjhERDQ5
M0QzNDY2NDRBQUMzOUYzQTlFOUVGRTMyMTE4RUJBNUNGMUI3MDJGRDRBOTI0MDE5
NDk1MEQzNUE2MThCRUY2OEQ3RDExNzAyMTQzMzI4QTU3Mjc2REUyMTcwRTBDOTk3
REM3MjA0QTExNkEwODQzRUMwNUJERjY4QUE0QjM0MDQ3RkE1QzNEOTdBNDcxNTQy
MzQ1NTBFMzE5N0Q3MkQ4NkY1QTBDOTRBMENFREE3NDQ5RUJFMTA0NDQ5NThEMUJB
NzM4MjE5QTIyOUQzQ0FBODc3NDdDNjM3QUQyNEY2NjRGMTkyOTk1MTk4QjFDQkRG
QjUwNTcwQzIwN0I4REYwNzJERDFFQTFDQzY2Qzg0NDJERjBFRkFDQjc4QTc4NENB
MjE0RjVERjA2QjIyNkM4RTJFMUFFRjVGREU1OEMyQkY0OURCNjVGQTYyQkY1M0U0
MDMxODk3NUQzQTJEQTRGMTZFQjgxMjEzNTc4QUUzMEI4QjYxMEQ3OTA4OUQ1RDhF
RTk2RjQ1MDQ4OURDMkJGNzJEQTNBNkY5RTcyMkU3QzY1RjkyMjZBQ0ZGN0Q1RDZB
NjZGQUYzQzQ0OTQ5QUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA/P8Wiq7Tbu4rYHCZEeNbVPLTZh6LMQr+xjVhyg8cuN1JPTRmRKrD
nzqenv4yEY66XPG3Av1KkkAZSVDTWmGL72jX0RcCFDMopXJ23iFw4MmX3HIEoRag
hD7AW99oqks0BH+lw9l6RxVCNFUOMZfXLYb1oMlKDO2nRJ6+EERJWNG6c4IZoinT
yqh3R8Y3rST2ZPGSmVGYscvftQVwwge43wct0eocxmyEQt8O+st4p4TKIU9d8Gsi
bI4uGu9f3ljCv0nbZfpiv1PkAxiXXTotpPFuuBITV4rjC4thDXkInV2O6W9FBInc
K/cto6b55yLnxl+SJqz/fV1qZvrzxElJrQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FI3YoD1bLbgd4XWUE3S3pLYRXRXsMB8GA1UdIwQYMBaAFKviuHKCKWJm9pzgQiNi
nPyL/WNUMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hxYXRHa0Y0UURQNlNl
dDdVY2JYbkdHajJUa2VoREJaMjRMR2lhTEFiZHp1LzAvQUJFMkI4NzI4MjI5NjI2
NkY2OUNFMDQyMjM2MjlDRkM4QkZENjM1NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQkUyQjg3MjgyMjk2MjY2RjY5Q0UwNDIyMzYyOUNGQzhCRkQ2
MzU0LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcWF0R2tGNFFEUDZTZXQ3VWNi
WG5HR2oyVGtlaERCWjI0TEdpYUxBYmR6dS8wLzMyMzgzMDM0M2EzNDM3NjEzNDNh
M2EyZjM0MzAyMDNkM2UyMDMyMzYzNzMwMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgER6QAMA0G
CSqGSIb3DQEBCwUAA4IBAQCKJixbRNHxCQ62x/Kw2RPxdaLU+k0ClXATxm4dOul3
X0uGNce2oVO5SENC5GyyZTcnjjzfYIr+P3SCYeXhAv7azGlEiOe+S606LFmDuv7B
2qcyyPsoboIXpe6+A+VsXt9w6wax8YDjwEuG9OoAOjXbvYYugSTDU5B6x/h5uiRC
AwWWk3Qiq8xsFT1N2gzejeZ+7EstdeueLrS8YGC4go6oX4PUgM61Zx1h62Gh1rxv
fomLcEa87agf2WCV30IZhW/wODJg4m4OZGc2NcpmLID3KQb1kf5FQ0Z9KpoTARrP
Oz1cTGBmVCowzkxKMCZ978bgID4+/Kl6ihwfsTw4KCUh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org