Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa
File:                     323830343a373131383a3a2f33322d313238203d3e20323730373636.roa (raw, json)
Hash identifier:          N4Icyew9yjZUDf7W1AX6SHZ9pZW2gpauGDW7wSTkhsc=
Subject key identifier:   1E:35:FE:58:2D:15:22:36:59:10:FA:AD:7E:FE:B5:7A:6A:77:E5:09
Certificate issuer:       /CN=CF33C03D5A866AA5996EE873A3F6B035911CFAF4
Certificate serial:       1C5E7736F13CF9DFCE3278F41AD58A797036F7B5
Authority key identifier: CF:33:C0:3D:5A:86:6A:A5:99:6E:E8:73:A3:F6:B0:35:91:1C:FA:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa
Signing time:             Tue 09 Jan 2024 13:27:27 +0000
ROA not before:           Tue 09 Jan 2024 13:22:27 +0000
ROA not after:            Tue 07 Jan 2025 13:27:27 +0000
asID:                     270766
IP address blocks:        2804:7118::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5e:77:36:f1:3c:f9:df:ce:32:78:f4:1a:d5:8a:79:70:36:f7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF33C03D5A866AA5996EE873A3F6B035911CFAF4
        Validity
            Not Before: Jan  9 13:22:27 2024 GMT
            Not After : Jan  7 13:27:27 2025 GMT
        Subject: CN=1E35FE582D1522365910FAAD7EFEB57A6A77E509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:82:9d:d8:9a:38:11:35:75:f6:e7:7e:ed:
                    d2:f7:6c:e8:5f:34:c6:1c:a7:22:e2:75:9d:d6:7f:
                    ac:e7:88:23:61:fc:dc:cf:0d:bf:ee:5f:56:50:b0:
                    2a:af:1b:71:52:1f:a1:1b:e2:4b:56:2d:ba:1f:21:
                    b8:50:42:87:50:4d:d1:12:26:1e:c8:fe:02:6f:d5:
                    75:d8:a9:50:05:98:35:aa:1d:65:1d:80:c6:47:c4:
                    90:c6:fc:6b:14:48:7b:89:3b:2e:57:7e:43:9f:21:
                    7c:e7:de:0d:11:ef:dd:b9:dc:a3:2b:84:d4:29:74:
                    02:85:3d:98:75:28:93:6b:fb:38:16:4a:fa:77:fb:
                    03:ea:1c:43:77:b2:ed:07:bb:f2:e1:bb:a6:43:65:
                    69:a0:06:de:5e:45:0c:a8:57:29:dd:98:55:a7:fd:
                    36:1d:55:8a:63:8a:32:8d:e3:21:0a:9c:15:c5:10:
                    fe:a8:87:b6:3f:e5:a9:77:19:d0:1a:48:76:03:c5:
                    93:62:29:74:82:21:c7:92:0c:ec:6e:a3:9e:05:3d:
                    10:8b:00:17:fb:4a:9f:f6:52:6c:56:90:3f:96:79:
                    20:9f:7d:48:32:e5:d3:5c:d2:1f:42:a1:57:35:8f:
                    88:30:02:37:af:6f:9d:dc:38:ea:0c:73:6a:c8:ef:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:FE:58:2D:15:22:36:59:10:FA:AD:7E:FE:B5:7A:6A:77:E5:09
            X509v3 Authority Key Identifier:
                keyid:CF:33:C0:3D:5A:86:6A:A5:99:6E:E8:73:A3:F6:B0:35:91:1C:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7118::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:45:8a:7e:ac:dc:0c:ed:22:91:2d:0c:f4:53:06:4b:27:
         ef:21:e6:9d:6f:04:f4:9d:4d:0b:c9:0b:80:aa:45:4b:28:99:
         b4:03:3d:58:0b:af:3e:ce:c2:88:98:26:33:ba:36:92:4b:5e:
         3c:31:de:fd:e7:2b:6c:9a:a7:bf:b3:d3:73:27:04:3c:64:6f:
         95:16:2f:6b:58:01:c8:ef:13:52:27:f6:d7:43:33:a6:b6:95:
         44:bc:46:ab:76:bb:ee:1b:37:50:6b:0e:9f:ea:5f:ee:47:6c:
         30:bf:92:9c:60:d2:f9:b7:65:0f:e1:70:b4:39:78:f8:e4:60:
         a2:0c:6e:62:b1:46:9e:d4:00:b6:0b:d5:0e:71:b4:f7:c1:2d:
         12:09:57:75:7e:48:b6:9a:77:cd:d0:fc:64:cc:95:72:90:64:
         87:ca:95:86:b8:43:e9:21:d4:50:e6:f1:70:0e:aa:63:a4:9f:
         d0:62:a5:36:bb:1b:a4:8f:97:90:11:bc:48:4b:33:54:d7:71:
         f9:7f:79:65:fe:da:0f:7f:b9:f6:8a:4f:e7:80:9d:70:ec:84:
         23:61:31:30:79:a6:97:d4:e0:c2:36:ab:73:20:89:ac:63:1e:
         9f:eb:cf:b7:ff:fc:c4:45:04:81:e9:89:4e:c5:67:5b:5b:67:
         f8:04:95:e6
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUHF53NvE8+d/OMnj0GtWKeXA297UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YzM0MwM0Q1QTg2NkFBNTk5NkVFODczQTNGNkIwMzU5
MTFDRkFGNDAeFw0yNDAxMDkxMzIyMjdaFw0yNTAxMDcxMzI3MjdaMDMxMTAvBgNV
BAMTKDFFMzVGRTU4MkQxNTIyMzY1OTEwRkFBRDdFRkVCNTdBNkE3N0U1MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKYKd2Jo4ETV19ud+7dL3bOhf
NMYcpyLidZ3Wf6zniCNh/NzPDb/uX1ZQsCqvG3FSH6Eb4ktWLbofIbhQQodQTdES
Jh7I/gJv1XXYqVAFmDWqHWUdgMZHxJDG/GsUSHuJOy5XfkOfIXzn3g0R79253KMr
hNQpdAKFPZh1KJNr+zgWSvp3+wPqHEN3su0Hu/Lhu6ZDZWmgBt5eRQyoVyndmFWn
/TYdVYpjijKN4yEKnBXFEP6oh7Y/5al3GdAaSHYDxZNiKXSCIceSDOxuo54FPRCL
ABf7Sp/2UmxWkD+WeSCffUgy5dNc0h9CoVc1j4gwAjevb53cOOoMc2rI7x6zAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUHjX+WC0VIjZZEPqtfv61emp35QkwHwYDVR0j
BBgwFoAUzzPAPVqGaqWZbuhzo/awNZEc+vQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1pVFN5UzJkV2NVWm9uRnVpMVpzZ2JTVEpxVHJFNGJjQVk2cFJraHVS
Q2QvMC9DRjMzQzAzRDVBODY2QUE1OTk2RUU4NzNBM0Y2QjAzNTkxMUNGQUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGMzNDMDNENUE4NjZBQTU5
OTZFRTg3M0EzRjZCMDM1OTExQ0ZBRjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNaVRTeVMyZFdjVVpvbkZ1aTFac2diU1RKcVRyRTRiY0FZNnBSa2h1UkNkLzAv
MzIzODMwMzQzYTM3MzEzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNzM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHEYMA0GCSqGSIb3DQEBCwUAA4IBAQBP+EWK
fqzcDO0ikS0M9FMGSyfvIeadbwT0nU0LyQuAqkVLKJm0Az1YC68+zsKImCYzujaS
S148Md795ytsmqe/s9NzJwQ8ZG+VFi9rWAHI7xNSJ/bXQzOmtpVEvEardrvuGzdQ
aw6f6l/uR2wwv5KcYNL5t2UP4XC0OXj45GCiDG5isUae1AC2C9UOcbT3wS0SCVd1
fki2mnfN0PxkzJVykGSHypWGuEPpIdRQ5vFwDqpjpJ/QYqU2uxukj5eQEbxISzNU
13H5f3ll/toPf7n2ik/ngJ1w7IQjYTEweaaX1ODCNqtzIImsYx6f68+3//zERQSB
6YlOxWdbW2f4BJXm
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org