Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/0/323830343a366662343a3a2f33322d3335203d3e20323730363738.roa
File:                     323830343a366662343a3a2f33322d3335203d3e20323730363738.roa (raw, json)
Hash identifier:          MiTA2dEwVpXG4b9vaxswQSCKdVwvFTsYx/dQoylc9iI=
Subject key identifier:   38:65:82:4E:A3:B3:7B:C5:FC:20:FC:56:3A:00:4A:00:D8:D1:3B:B8
Certificate issuer:       /CN=4FC3763A4D924A1628C3C67EB3305A128CECEC8D
Certificate serial:       054732D2BE63E230FCF7FFFAEAD261D9659275CF
Authority key identifier: 4F:C3:76:3A:4D:92:4A:16:28:C3:C6:7E:B3:30:5A:12:8C:EC:EC:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FC3763A4D924A1628C3C67EB3305A128CECEC8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/0/323830343a366662343a3a2f33322d3335203d3e20323730363738.roa
Signing time:             Tue 10 Oct 2023 21:00:03 +0000
ROA not before:           Tue 10 Oct 2023 20:55:03 +0000
ROA not after:            Tue 08 Oct 2024 21:00:03 +0000
asID:                     270678
IP address blocks:        2804:6fb4::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:47:32:d2:be:63:e2:30:fc:f7:ff:fa:ea:d2:61:d9:65:92:75:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FC3763A4D924A1628C3C67EB3305A128CECEC8D
        Validity
            Not Before: Oct 10 20:55:03 2023 GMT
            Not After : Oct  8 21:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:88:30:5a:a5:20:0d:7f:43:4d:11:02:8c:
                    f6:3b:84:d0:f4:62:cd:b5:d5:36:39:9b:04:ef:8a:
                    cc:9b:df:85:10:74:69:fd:2e:1b:72:e9:ec:51:3d:
                    24:d8:9c:a7:71:61:8f:03:57:e4:8c:30:96:56:4a:
                    72:e7:28:f9:8e:15:b8:fb:00:d5:3c:88:ea:1d:38:
                    7f:97:48:23:87:8e:a2:06:3b:17:9c:8c:3c:c2:40:
                    f2:4f:c7:33:3e:d9:37:2d:3f:3a:38:d0:0d:9a:64:
                    76:af:f5:34:e5:f6:85:1c:9e:fb:d7:2b:43:13:68:
                    1e:fe:ce:f1:dd:f4:e1:85:f1:67:46:82:14:3b:5b:
                    78:ac:3b:c0:f4:2b:8e:dc:09:a4:97:48:c2:f5:15:
                    2a:b7:04:a5:ea:2d:6b:1f:e3:9c:c7:a2:31:4d:ec:
                    a8:00:23:5f:ed:43:c1:04:ec:a8:53:a1:05:9d:1e:
                    30:32:7c:f4:ba:9e:19:94:7f:6b:37:a8:0b:fb:26:
                    4a:8d:76:cf:dd:17:ad:09:fe:2d:fb:fb:ed:47:ad:
                    f7:a4:13:b2:29:d6:90:2d:a1:8d:af:fb:e0:e3:3d:
                    9b:7c:0c:18:b8:68:34:9d:87:ae:f2:a1:ac:86:4e:
                    0e:ad:69:ed:97:61:58:e7:e1:64:1d:c5:a7:7e:f4:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:65:82:4E:A3:B3:7B:C5:FC:20:FC:56:3A:00:4A:00:D8:D1:3B:B8
            X509v3 Authority Key Identifier:
                keyid:4F:C3:76:3A:4D:92:4A:16:28:C3:C6:7E:B3:30:5A:12:8C:EC:EC:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/0/4FC3763A4D924A1628C3C67EB3305A128CECEC8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FC3763A4D924A1628C3C67EB3305A128CECEC8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/0/323830343a366662343a3a2f33322d3335203d3e20323730363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:47:72:a6:d7:64:14:e5:2a:db:f1:e9:71:9d:d1:8e:5b:78:
         87:b8:39:cd:a5:10:ef:9e:ef:87:0a:74:c2:9b:fa:73:a4:a9:
         76:42:bb:c3:37:8a:17:ed:d5:b1:1a:19:9b:cd:1a:6c:2d:16:
         93:90:c4:4b:b7:96:d5:7f:9f:c0:27:76:0f:b3:5c:95:7e:cb:
         22:35:a1:af:f3:9b:b5:25:c5:0b:4b:04:52:cd:3a:4b:4e:bb:
         5c:41:a0:d3:87:71:96:0b:1c:16:72:0a:2f:08:a2:99:7a:a0:
         21:00:0c:b9:fb:22:37:fc:4a:ac:da:58:0a:bb:3b:ff:7e:8e:
         91:01:a8:08:37:eb:e4:49:68:f1:e3:c6:aa:88:a3:f7:d2:cf:
         4c:6f:b3:39:91:c3:00:e1:94:43:0c:f8:ff:65:a3:d6:a5:93:
         89:5c:3e:79:3a:41:51:be:a4:b4:f9:c2:37:21:f8:9d:1b:40:
         b6:2b:29:e5:bb:56:96:d2:40:56:e2:33:fb:6e:3f:89:99:45:
         53:22:d8:02:4c:61:15:e4:2a:e3:bc:34:0c:51:92:04:de:e1:
         49:80:b6:bf:19:e3:35:f5:c8:1e:fa:a9:d8:9b:c9:ce:c7:a3:
         23:4a:2c:35:7c:4f:ae:ab:d5:48:5c:39:9d:84:a8:e1:cb:ad:
         4b:48:0e:b0
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUBUcy0r5j4jD89//66tJh2WWSdc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZDMzc2M0E0RDkyNEExNjI4QzNDNjdFQjMzMDVBMTI4
Q0VDRUM4RDAeFw0yMzEwMTAyMDU1MDNaFw0yNDEwMDgyMTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjkyNDg4MzA1QUE1MjAwRDdG
NDM0RDExMDI4Q0Y2M0I4NEQwRjQ2MkNEQjVENTM2Mzk5QjA0RUY4QUNDOUJERjg1
MTA3NDY5RkQyRTFCNzJFOUVDNTEzRDI0RDg5Q0E3NzE2MThGMDM1N0U0OEMzMDk2
NTY0QTcyRTcyOEY5OEUxNUI4RkIwMEQ1M0M4OEVBMUQzODdGOTc0ODIzODc4RUEy
MDYzQjE3OUM4QzNDQzI0MEYyNEZDNzMzM0VEOTM3MkQzRjNBMzhEMDBEOUE2NDc2
QUZGNTM0RTVGNjg1MUM5RUZCRDcyQjQzMTM2ODFFRkVDRUYxRERGNEUxODVGMTY3
NDY4MjE0M0I1Qjc4QUMzQkMwRjQyQjhFREMwOUE0OTc0OEMyRjUxNTJBQjcwNEE1
RUEyRDZCMUZFMzlDQzdBMjMxNERFQ0E4MDAyMzVGRUQ0M0MxMDRFQ0E4NTNBMTA1
OUQxRTMwMzI3Q0Y0QkE5RTE5OTQ3RjZCMzdBODBCRkIyNjRBOEQ3NkNGREQxN0FE
MDlGRTJERkJGQkVENDdBREY3QTQxM0IyMjlENjkwMkRBMThEQUZGQkUwRTMzRDlC
N0MwQzE4Qjg2ODM0OUQ4N0FFRjJBMUFDODY0RTBFQUQ2OUVEOTc2MTU4RTdFMTY0
MURDNUE3N0VGNDEwRDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuSSIMFqlIA1/Q00RAoz2O4TQ9GLNtdU2OZsE74rMm9+FEHRp/S4b
cunsUT0k2JyncWGPA1fkjDCWVkpy5yj5jhW4+wDVPIjqHTh/l0gjh46iBjsXnIw8
wkDyT8czPtk3LT86ONANmmR2r/U05faFHJ771ytDE2ge/s7x3fThhfFnRoIUO1t4
rDvA9CuO3Amkl0jC9RUqtwSl6i1rH+Ocx6IxTeyoACNf7UPBBOyoU6EFnR4wMnz0
up4ZlH9rN6gL+yZKjXbP3RetCf4t+/vtR633pBOyKdaQLaGNr/vg4z2bfAwYuGg0
nYeu8qGshk4OrWntl2FY5+FkHcWnfvQQ1wIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FDhlgk6js3vF/CD8VjoASgDY0Tu4MB8GA1UdIwQYMBaAFE/DdjpNkkoWKMPGfrMw
WhKM7OyNMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcEVFaUNTd3RyanlZdjlt
akVtazJpUGR3TWhQN212VHpWYmt3RFA5V1JTby8wLzRGQzM3NjNBNEQ5MjRBMTYy
OEMzQzY3RUIzMzA1QTEyOENFQ0VDOEQuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvNEZDMzc2M0E0RDkyNEExNjI4QzNDNjdFQjMzMDVBMTI4Q0VDRUM4
RC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vcEVFaUNTd3RyanlZdjltakVtazJp
UGR3TWhQN212VHpWYmt3RFA5V1JTby8wLzMyMzgzMDM0M2EzNjY2NjIzNDNhM2Ey
ZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzczMDM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEb7Qw
DQYJKoZIhvcNAQELBQADggEBAB9HcqbXZBTlKtvx6XGd0Y5beIe4Oc2lEO+e74cK
dMKb+nOkqXZCu8M3ihft1bEaGZvNGmwtFpOQxEu3ltV/n8Andg+zXJV+yyI1oa/z
m7UlxQtLBFLNOktOu1xBoNOHcZYLHBZyCi8Iopl6oCEADLn7Ijf8SqzaWAq7O/9+
jpEBqAg36+RJaPHjxqqIo/fSz0xvszmRwwDhlEMM+P9lo9alk4lcPnk6QVG+pLT5
wjch+J0bQLYrKeW7VpbSQFbiM/tuP4mZRVMi2AJMYRXkKuO8NAxRkgTe4UmAtr8Z
4zX1yB76qdibyc7HoyNKLDV8T66r1UhcOZ2EqOHLrUtIDrA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org