Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33342d3334203d3e20323636353530.roa
File:                     323830343a336462633a3a2f33342d3334203d3e20323636353530.roa (raw, json)
Hash identifier:          WDhKOhvwa3E4jgzIChCjbLB2EvztkuWTNXzxsBQpUyc=
Subject key identifier:   42:E4:D5:00:C7:59:74:3C:FB:50:71:CF:A1:22:9E:13:70:D5:F1:B0
Certificate issuer:       /CN=6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30
Certificate serial:       7CE0CE79CF4827D9A093EA7381187EA6B1A5151D
Authority key identifier: 6E:A9:F6:7C:0E:EB:67:E4:E0:B2:9F:78:F1:1A:B5:CB:1D:DB:4A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33342d3334203d3e20323636353530.roa
Signing time:             Wed 14 Jul 2021 17:54:09 +0000
ROA not before:           Wed 14 Jul 2021 17:49:09 +0000
ROA not after:            Wed 13 Jul 2022 17:54:09 +0000
asID:                     266550
IP address blocks:        2804:3dbc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e0:ce:79:cf:48:27:d9:a0:93:ea:73:81:18:7e:a6:b1:a5:15:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30
        Validity
            Not Before: Jul 14 17:49:09 2021 GMT
            Not After : Jul 13 17:54:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:db:05:fe:aa:bc:1d:c4:fc:ba:12:5a:8e:
                    99:5b:52:c8:d5:78:1c:2e:2e:2b:c7:ae:f4:05:58:
                    1a:3b:05:b5:53:ca:d0:3b:01:af:0e:2e:e0:09:6e:
                    a5:ac:df:4f:39:54:a3:49:f5:88:64:f8:8c:2d:29:
                    b2:66:d7:97:fa:19:ad:9a:8b:45:5a:2d:28:66:60:
                    4c:4b:1c:70:fe:e7:14:cc:2c:f2:66:fb:72:6c:2f:
                    c4:bc:d3:5b:2c:d8:4d:09:d3:d5:89:e1:61:38:b9:
                    b2:9c:95:83:8a:74:8d:6e:ae:b5:48:95:e7:d9:00:
                    c8:ed:f6:74:58:51:a9:ca:be:43:df:91:d0:68:74:
                    1f:29:da:02:bd:1c:ed:b2:e5:04:bc:46:dc:96:d0:
                    7e:5d:ad:84:e0:eb:8d:f2:5e:1a:9a:ce:f2:fb:2a:
                    e7:21:31:57:62:22:6b:de:03:4c:0e:f5:9e:a0:a7:
                    9f:17:bf:78:6b:fc:2e:3c:f7:8e:5d:ea:f9:0c:c8:
                    dd:a3:89:f5:54:2b:06:50:2f:29:93:ce:f2:19:a5:
                    3d:8a:25:f4:10:e1:c6:48:e7:dd:be:8b:92:3a:4b:
                    d3:93:d9:66:13:76:76:87:dd:0b:da:7c:61:8c:ca:
                    d4:7e:cc:dd:69:b2:03:58:bc:b2:4f:71:95:04:38:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E4:D5:00:C7:59:74:3C:FB:50:71:CF:A1:22:9E:13:70:D5:F1:B0
            X509v3 Authority Key Identifier:
                keyid:6E:A9:F6:7C:0E:EB:67:E4:E0:B2:9F:78:F1:1A:B5:CB:1D:DB:4A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33342d3334203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dbc::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:8d:f6:6d:60:79:68:3e:ff:30:6b:57:3b:6d:16:86:79:c6:
         9a:ae:80:13:cd:34:07:98:78:1e:8e:b7:90:02:d4:69:fa:37:
         41:2b:c6:bd:e2:80:9d:e9:13:34:a2:7f:61:80:34:3f:51:6c:
         5f:e5:44:89:d0:67:d4:04:c3:0f:e9:9d:c2:7b:07:04:51:3c:
         d3:1d:f5:27:16:68:e4:e7:ee:62:78:d5:cb:61:0f:06:c9:47:
         12:d9:a3:12:2b:09:a1:78:f3:92:b1:f2:08:ea:9e:d6:f3:69:
         9c:d7:b3:0e:c2:e7:38:f5:c5:70:35:70:73:68:58:07:57:0e:
         a2:93:99:3f:dd:5d:f6:68:b5:6c:ce:3c:0d:e1:a0:2e:98:84:
         e8:63:48:b6:ea:79:a7:5f:b8:54:18:ec:86:38:53:76:2e:f0:
         49:a7:db:a7:7e:8c:fb:7c:44:34:b2:58:cf:a3:9d:c6:f9:91:
         24:1a:df:aa:25:6d:bb:25:5a:f7:dd:a4:f3:32:0d:c9:e1:2f:
         81:b2:fc:0c:9f:7a:76:f5:1c:ef:45:d5:16:cc:ff:08:c2:c0:
         96:71:19:80:b5:cb:d1:b8:ac:ae:44:e8:31:a4:8e:0c:69:17:
         c4:e4:c6:6a:a2:4c:4d:e9:13:19:e2:25:28:4c:0b:bc:36:73:
         d3:53:25:41
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUfODOec9IJ9mgk+pzgRh+prGlFR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVBOUY2N0MwRUVCNjdFNEUwQjI5Rjc4RjExQUI1Q0Ix
RERCNEEzMDAeFw0yMTA3MTQxNzQ5MDlaFw0yMjA3MTMxNzU0MDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDM0NERCMDVGRUFBQkMxREM0
RkNCQTEyNUE4RTk5NUI1MkM4RDU3ODFDMkUyRTJCQzdBRUY0MDU1ODFBM0IwNUI1
NTNDQUQwM0IwMUFGMEUyRUUwMDk2RUE1QUNERjRGMzk1NEEzNDlGNTg4NjRGODhD
MkQyOUIyNjZENzk3RkExOUFEOUE4QjQ1NUEyRDI4NjY2MDRDNEIxQzcwRkVFNzE0
Q0MyQ0YyNjZGQjcyNkMyRkM0QkNEMzVCMkNEODREMDlEM0Q1ODlFMTYxMzhCOUIy
OUM5NTgzOEE3NDhENkVBRUI1NDg5NUU3RDkwMEM4RURGNjc0NTg1MUE5Q0FCRTQz
REY5MUQwNjg3NDFGMjlEQTAyQkQxQ0VEQjJFNTA0QkM0NkRDOTZEMDdFNURBRDg0
RTBFQjhERjI1RTFBOUFDRUYyRkIyQUU3MjEzMTU3NjIyMjZCREUwMzRDMEVGNTlF
QTBBNzlGMTdCRjc4NkJGQzJFM0NGNzhFNURFQUY5MENDOEREQTM4OUY1NTQyQjA2
NTAyRjI5OTNDRUYyMTlBNTNEOEEyNUY0MTBFMUM2NDhFN0REQkU4QjkyM0E0QkQz
OTNEOTY2MTM3Njc2ODdERDBCREE3QzYxOENDQUQ0N0VDQ0RENjlCMjAzNThCQ0Iy
NEY3MTk1MDQzODk0NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA00TbBf6qvB3E/LoSWo6ZW1LI1XgcLi4rx670BVgaOwW1U8rQOwGv
Di7gCW6lrN9POVSjSfWIZPiMLSmyZteX+hmtmotFWi0oZmBMSxxw/ucUzCzyZvty
bC/EvNNbLNhNCdPVieFhOLmynJWDinSNbq61SJXn2QDI7fZ0WFGpyr5D35HQaHQf
KdoCvRztsuUEvEbcltB+Xa2E4OuN8l4ams7y+yrnITFXYiJr3gNMDvWeoKefF794
a/wuPPeOXer5DMjdo4n1VCsGUC8pk87yGaU9iiX0EOHGSOfdvouSOkvTk9lmE3Z2
h90L2nxhjMrUfszdabIDWLyyT3GVBDiUQwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FELk1QDHWXQ8+1Bxz6EinhNw1fGwMB8GA1UdIwQYMBaAFG6p9nwO62fk4LKfePEa
tcsd20owMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veG54UDF2dGd5d1N6cHVp
NWR3a1VzZUhucmNoNVJjaU55MmhlQkF2YVNrMS8wLzZFQTlGNjdDMEVFQjY3RTRF
MEIyOUY3OEYxMUFCNUNCMUREQjRBMzAuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvNkVBOUY2N0MwRUVCNjdFNEUwQjI5Rjc4RjExQUI1Q0IxRERCNEEz
MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8veG54UDF2dGd5d1N6cHVpNWR3a1Vz
ZUhucmNoNVJjaU55MmhlQkF2YVNrMS8wLzMyMzgzMDM0M2EzMzY0NjI2MzNhM2Ey
ZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzNjM1MzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEPbwA
MA0GCSqGSIb3DQEBCwUAA4IBAQAJjfZtYHloPv8wa1c7bRaGecaaroATzTQHmHge
jreQAtRp+jdBK8a94oCd6RM0on9hgDQ/UWxf5USJ0GfUBMMP6Z3CewcEUTzTHfUn
Fmjk5+5ieNXLYQ8GyUcS2aMSKwmhePOSsfII6p7W82mc17MOwuc49cVwNXBzaFgH
Vw6ik5k/3V32aLVszjwN4aAumIToY0i26nmnX7hUGOyGOFN2LvBJp9unfoz7fEQ0
sljPo53G+ZEkGt+qJW27JVr33aTzMg3J4S+BsvwMn3p29RzvRdUWzP8IwsCWcRmA
tcvRuKyuROgxpI4MaRfE5MZqokxN6RMZ4iUoTAu8NnPTUyVB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org