Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a3a2f33332d3333203d3e203631353839.roa
File:                     323830343a343866303a3a2f33332d3333203d3e203631353839.roa (raw, json)
Hash identifier:          T+d5F+yXebcbJ/32fqNwaGop0g9izsJPqvjYZvbN2/0=
Subject key identifier:   99:EF:D3:16:66:50:40:05:94:AC:1B:E8:97:4A:AD:DE:9E:74:34:14
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       01ACD1C73951420A9CC89A507F3D781F5F5A2794
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a3a2f33332d3333203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:29:30 +0000
ROA not before:           Tue 21 Mar 2023 13:24:30 +0000
ROA not after:            Tue 19 Mar 2024 13:29:30 +0000
asID:                     61589
IP address blocks:        2804:48f0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:d1:c7:39:51:42:0a:9c:c8:9a:50:7f:3d:78:1f:5f:5a:27:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:24:30 2023 GMT
            Not After : Mar 19 13:29:30 2024 GMT
        Subject: CN=99EFD3166650400594AC1BE8974AADDE9E743414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:50:0f:08:74:97:83:76:51:46:bb:ee:70:
                    a6:03:68:ce:77:4a:57:1b:ff:e2:12:39:04:f3:bb:
                    ee:c5:5c:31:ab:81:b1:92:9a:e7:b4:79:c0:45:dd:
                    09:28:57:eb:94:c7:ed:c4:e5:cd:6a:33:59:2f:e5:
                    c2:4c:fa:48:17:7c:8f:63:b6:31:5b:40:95:4c:84:
                    2e:d8:70:74:a4:2c:94:b6:98:1f:8c:37:73:76:78:
                    51:27:2a:f9:ca:7b:a4:66:27:57:ea:bd:f5:27:34:
                    a8:2f:2c:58:ff:ab:e8:83:0f:70:70:1e:73:72:00:
                    98:0e:92:17:5a:d0:91:bf:2d:9b:cb:e7:4a:83:fc:
                    48:64:57:69:37:a4:a0:d6:9d:bb:71:c7:73:3d:ac:
                    4e:95:bb:44:45:03:05:fc:2e:00:5e:18:f7:fc:a7:
                    35:0a:37:76:9a:97:33:23:f2:b4:64:39:5e:68:a5:
                    ef:45:bd:b1:3d:0e:df:c1:46:60:39:ca:a1:00:54:
                    95:a5:4d:e3:75:c9:df:0d:d7:40:10:aa:f2:fb:be:
                    61:ea:41:64:41:15:72:34:34:dc:1a:af:1b:75:04:
                    dd:7a:9e:4a:38:e4:da:92:2f:33:36:81:7e:dc:e7:
                    63:6b:3b:c4:b1:4c:0f:c3:06:f3:4b:a3:32:f1:f6:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EF:D3:16:66:50:40:05:94:AC:1B:E8:97:4A:AD:DE:9E:74:34:14
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a3a2f33332d3333203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:de:64:2c:73:cf:d2:d1:0b:09:97:5c:90:b6:09:5e:1d:9f:
         ff:6a:73:8c:d4:a9:48:3a:81:ee:0c:78:a7:0c:e4:6c:70:a7:
         f9:8a:57:cf:c6:ba:f4:f5:d3:93:ae:55:cd:38:e4:cb:f6:7a:
         2c:80:94:69:22:98:c9:fc:a6:8e:3f:1a:e0:bd:57:cb:f7:ac:
         14:c8:0a:d8:e5:53:f6:bd:bc:1e:1d:3d:d3:41:a3:c6:1a:fc:
         a5:df:b7:a9:e0:40:8a:c7:c3:b4:ec:2e:c9:be:3c:46:c2:d8:
         6f:fa:57:15:c1:84:21:3f:4c:c9:26:f4:e7:e5:65:c8:ff:c8:
         33:7f:80:e6:3e:69:a3:57:de:39:83:b1:a9:95:f0:75:49:9d:
         5e:f1:ec:27:0d:42:e0:02:14:97:d8:ea:66:5e:bf:f1:e1:28:
         4e:79:18:ee:e0:df:c0:31:56:08:48:d9:9d:a8:99:82:97:d4:
         d1:b4:85:c4:9d:2a:a7:19:9c:58:49:0e:61:f1:6c:8d:5f:65:
         e3:ad:a9:ef:79:80:df:e4:ad:ca:69:83:f8:fa:c4:7f:dc:ae:
         78:6f:a8:cb:ee:31:b7:bc:0f:5f:81:14:ee:f6:fc:4f:75:95:
         1c:c8:13:81:8b:a2:97:97:3b:42:78:25:54:72:7a:c4:85:5f:
         44:fe:49:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAazRxzlRQgqcyJpQfz14H19aJ5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0RkRCQkU0NzQzRTVENTZCOEExNzdGQkYyRTMyNTFG
NDJEOTJFOTAeFw0yMzAzMjExMzI0MzBaFw0yNDAzMTkxMzI5MzBaMDMxMTAvBgNV
BAMTKDk5RUZEMzE2NjY1MDQwMDU5NEFDMUJFODk3NEFBRERFOUU3NDM0MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvVAPCHSXg3ZRRrvucKYDaM53
Slcb/+ISOQTzu+7FXDGrgbGSmue0ecBF3QkoV+uUx+3E5c1qM1kv5cJM+kgXfI9j
tjFbQJVMhC7YcHSkLJS2mB+MN3N2eFEnKvnKe6RmJ1fqvfUnNKgvLFj/q+iDD3Bw
HnNyAJgOkhda0JG/LZvL50qD/EhkV2k3pKDWnbtxx3M9rE6Vu0RFAwX8LgBeGPf8
pzUKN3aalzMj8rRkOV5ope9FvbE9Dt/BRmA5yqEAVJWlTeN1yd8N10AQqvL7vmHq
QWRBFXI0NNwarxt1BN16nko45NqSLzM2gX7c52NrO8SxTA/DBvNLozLx9iZ3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUme/TFmZQQAWUrBvol0qt3p50NBQwHwYDVR0j
BBgwFoAUZE/bvkdD5dVrihd/vy4yUfQtkukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHFpYktIZkRmTWZ0UUp0eWl4Y3FOUWY1ZmlvdUR1ZjRiZmhaNHVzUUhj
RzQvMC82NDRGREJCRTQ3NDNFNUQ1NkI4QTE3N0ZCRjJFMzI1MUY0MkQ5MkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0NEZEQkJFNDc0M0U1RDU2
QjhBMTc3RkJGMkUzMjUxRjQyRDkyRTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxaWJLSGZEZk1mdFFKdHlpeGNxTlFmNWZpb3VEdWY0YmZoWjR1c1FIY0c0LzAv
MzIzODMwMzQzYTM0Mzg2NjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzYzMTM1
MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygESPAAMA0GCSqGSIb3DQEBCwUAA4IBAQCG3mQsc8/S
0QsJl1yQtgleHZ//anOM1KlIOoHuDHinDORscKf5ilfPxrr09dOTrlXNOOTL9nos
gJRpIpjJ/KaOPxrgvVfL96wUyArY5VP2vbweHT3TQaPGGvyl37ep4ECKx8O07C7J
vjxGwthv+lcVwYQhP0zJJvTn5WXI/8gzf4DmPmmjV945g7GplfB1SZ1e8ewnDULg
AhSX2OpmXr/x4ShOeRju4N/AMVYISNmdqJmCl9TRtIXEnSqnGZxYSQ5h8WyNX2Xj
ranveYDf5K3KaYP4+sR/3K54b6jL7jG3vA9fgRTu9vxPdZUcyBOBi6KXlztCeCVU
cnrEhV9E/kmp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org