Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33342d3334203d3e20323730373136.roa
File:                     323830343a373034343a3a2f33342d3334203d3e20323730373136.roa (raw, json)
Hash identifier:          IGe/Uk8Cm7u0QnaHYZuGGjwXS+FahcZReHpECO29nls=
Subject key identifier:   ED:3D:21:69:42:96:4A:97:53:2A:69:59:CE:6E:76:F8:61:45:5D:A4
Certificate issuer:       /CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
Certificate serial:       077E6068C790FA45CCA12FA4AEA0A57FECEC1193
Authority key identifier: 2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33342d3334203d3e20323730373136.roa
Signing time:             Sun 19 Sep 2021 23:58:38 +0000
ROA not before:           Sun 19 Sep 2021 23:53:38 +0000
ROA not after:            Sun 18 Sep 2022 23:58:38 +0000
asID:                     270716
IP address blocks:        2804:7044::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7e:60:68:c7:90:fa:45:cc:a1:2f:a4:ae:a0:a5:7f:ec:ec:11:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F014380139A8673C23E2CF9AF6EDAC4216E1059
        Validity
            Not Before: Sep 19 23:53:38 2021 GMT
            Not After : Sep 18 23:58:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:15:fb:0e:a0:71:44:0f:db:f3:a6:cd:5c:
                    e3:de:18:f6:f0:a6:60:52:bf:02:6c:5b:13:1c:18:
                    ad:ef:71:32:7f:ee:1d:55:5e:07:9c:d1:e8:45:b6:
                    6a:bb:8d:0f:f9:8c:e2:1d:55:0c:98:a9:5f:6a:38:
                    2e:98:4d:ce:21:47:d3:9c:8b:f0:05:71:8c:5c:c4:
                    eb:60:40:57:5a:d7:32:f7:87:bf:7f:42:30:85:e6:
                    43:ab:17:72:bc:8b:8f:5b:28:33:67:e0:80:7e:d8:
                    b9:a7:33:e1:fe:bd:73:fa:d6:61:60:12:77:e4:5c:
                    66:2e:9a:2c:92:3c:16:f9:82:9f:d7:ba:55:33:59:
                    77:57:0c:1c:f4:f8:03:68:d0:81:69:6c:38:94:4c:
                    20:91:46:a5:44:e9:eb:e9:04:9f:24:cf:04:2c:79:
                    3e:b7:d6:8a:11:77:66:8a:54:a3:71:6b:74:cf:91:
                    e7:b5:14:75:bb:ab:21:a4:44:14:ec:d2:78:8a:8b:
                    56:64:2d:c6:62:ca:73:95:6f:be:f5:5e:6f:b2:b7:
                    41:49:8f:94:25:54:15:fb:9c:88:14:f4:fc:cd:f9:
                    ef:cb:52:95:f8:e2:a5:0c:f5:04:d8:ae:cd:00:88:
                    e3:f4:5f:0e:3b:a5:14:f4:24:9b:46:80:49:15:02:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3D:21:69:42:96:4A:97:53:2A:69:59:CE:6E:76:F8:61:45:5D:A4
            X509v3 Authority Key Identifier:
                keyid:2F:01:43:80:13:9A:86:73:C2:3E:2C:F9:AF:6E:DA:C4:21:6E:10:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F014380139A8673C23E2CF9AF6EDAC4216E1059.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33342d3334203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:c0:dd:71:d4:5e:38:1b:10:5b:6a:5f:1e:9a:4e:ff:2e:4f:
         de:0d:11:f1:7c:63:98:a5:1c:2b:27:0f:31:ae:42:26:f0:e8:
         b8:f4:a0:be:f8:b8:87:66:99:ff:0e:ab:96:39:3c:4b:61:63:
         df:7f:94:60:ed:d8:36:a9:ea:3f:3d:65:b9:08:bb:1c:8e:b1:
         c0:6d:df:38:fa:05:0c:d9:01:e7:d7:2a:ab:2f:e9:46:9c:53:
         5d:ef:c7:1b:da:77:3f:b3:04:01:18:13:b4:8a:fa:c1:33:6c:
         5e:7e:60:48:c7:8b:e3:b9:6b:d1:b2:19:14:8a:3b:81:14:0a:
         5d:28:61:55:68:f0:9d:bd:92:3b:62:6e:64:5f:1d:9c:ed:32:
         0d:07:b5:b9:63:fe:95:2d:22:c1:b7:7f:37:2d:39:63:81:e3:
         f8:58:6b:08:1e:13:43:10:07:09:9c:41:be:99:38:51:7b:41:
         71:da:52:eb:09:97:ef:66:5f:f0:9c:6e:68:fb:a1:10:ed:8e:
         f6:5f:fb:58:80:44:46:27:ff:b7:ba:fc:40:d5:35:f3:19:8d:
         e1:e0:b4:7e:e4:4e:a6:6c:8c:e2:6b:55:2c:7e:2c:39:36:bb:
         e4:53:4d:8c:73:89:43:a6:05:56:da:37:26:a9:62:fc:ea:fc:
         fe:ac:80:0d
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUB35gaMeQ+kXMoS+krqClf+zsEZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwMTQzODAxMzlBODY3M0MyM0UyQ0Y5QUY2RURBQzQy
MTZFMTA1OTAeFw0yMTA5MTkyMzUzMzhaFw0yMjA5MTgyMzU4MzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q0RTE1RkIwRUEwNzE0NDBG
REJGM0E2Q0Q1Q0UzREUxOEY2RjBBNjYwNTJCRjAyNkM1QjEzMUMxOEFERUY3MTMy
N0ZFRTFENTU1RTA3OUNEMUU4NDVCNjZBQkI4RDBGRjk4Q0UyMUQ1NTBDOThBOTVG
NkEzODJFOTg0RENFMjE0N0QzOUM4QkYwMDU3MThDNUNDNEVCNjA0MDU3NUFENzMy
Rjc4N0JGN0Y0MjMwODVFNjQzQUIxNzcyQkM4QjhGNUIyODMzNjdFMDgwN0VEOEI5
QTczM0UxRkVCRDczRkFENjYxNjAxMjc3RTQ1QzY2MkU5QTJDOTIzQzE2Rjk4MjlG
RDdCQTU1MzM1OTc3NTcwQzFDRjRGODAzNjhEMDgxNjk2QzM4OTQ0QzIwOTE0NkE1
NDRFOUVCRTkwNDlGMjRDRjA0MkM3OTNFQjdENjhBMTE3NzY2OEE1NEEzNzE2Qjc0
Q0Y5MUU3QjUxNDc1QkJBQjIxQTQ0NDE0RUNEMjc4OEE4QjU2NjQyREM2NjJDQTcz
OTU2RkJFRjU1RTZGQjJCNzQxNDk4Rjk0MjU1NDE1RkI5Qzg4MTRGNEZDQ0RGOUVG
Q0I1Mjk1RjhFMkE1MENGNTA0RDhBRUNEMDA4OEUzRjQ1RjBFM0JBNTE0RjQyNDlC
NDY4MDQ5MTUwMjcyQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzU4V+w6gcUQP2/OmzVzj3hj28KZgUr8CbFsTHBit73Eyf+4dVV4H
nNHoRbZqu40P+YziHVUMmKlfajgumE3OIUfTnIvwBXGMXMTrYEBXWtcy94e/f0Iw
heZDqxdyvIuPWygzZ+CAfti5pzPh/r1z+tZhYBJ35FxmLposkjwW+YKf17pVM1l3
Vwwc9PgDaNCBaWw4lEwgkUalROnr6QSfJM8ELHk+t9aKEXdmilSjcWt0z5HntRR1
u6shpEQU7NJ4iotWZC3GYspzlW++9V5vsrdBSY+UJVQV+5yIFPT8zfnvy1KV+OKl
DPUE2K7NAIjj9F8OO6UU9CSbRoBJFQJytwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FO09IWlClkqXUyppWc5udvhhRV2kMB8GA1UdIwQYMBaAFC8BQ4ATmoZzwj4s+a9u
2sQhbhBZMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2dDQxYVIyQkhUQmRR
S2VrQlAxaGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzJGMDE0MzgwMTM5QTg2NzND
MjNFMkNGOUFGNkVEQUM0MjE2RTEwNTkuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvMkYwMTQzODAxMzlBODY3M0MyM0UyQ0Y5QUY2RURBQzQyMTZFMTA1
OS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2dDQxYVIyQkhUQmRRS2VrQlAx
aGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzMyMzgzMDM0M2EzNzMwMzQzNDNhM2Ey
ZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzczMDM3MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEcEQA
MA0GCSqGSIb3DQEBCwUAA4IBAQAiwN1x1F44GxBbal8emk7/Lk/eDRHxfGOYpRwr
Jw8xrkIm8Oi49KC++LiHZpn/DquWOTxLYWPff5Rg7dg2qeo/PWW5CLscjrHAbd84
+gUM2QHn1yqrL+lGnFNd78cb2nc/swQBGBO0ivrBM2xefmBIx4vjuWvRshkUijuB
FApdKGFVaPCdvZI7Ym5kXx2c7TINB7W5Y/6VLSLBt383LTljgeP4WGsIHhNDEAcJ
nEG+mThRe0Fx2lLrCZfvZl/wnG5o+6EQ7Y72X/tYgERGJ/+3uvxA1TXzGY3h4LR+
5E6mbIzia1Usfiw5NrvkU02Mc4lDpgVW2jcmqWL86vz+rIAN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org