Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33322d3334203d3e20323731343737.roa
File:                     323830343a376332303a3a2f33322d3334203d3e20323731343737.roa (raw, json)
Hash identifier:          t5k9JDhaqiPVsjjq75MXAKK5NWkwkTQDr3xKV0tII6g=
Subject key identifier:   BF:C5:51:44:13:A6:19:6E:23:8D:B6:A2:F2:C5:6B:C2:19:0E:C1:57
Certificate issuer:       /CN=68235CC657BB7DC560D9EA8315F9350D9821462A
Certificate serial:       6128FC871A4416D37F929BA39B66257BCB54C11F
Authority key identifier: 68:23:5C:C6:57:BB:7D:C5:60:D9:EA:83:15:F9:35:0D:98:21:46:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68235CC657BB7DC560D9EA8315F9350D9821462A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33322d3334203d3e20323731343737.roa
Signing time:             Wed 13 Mar 2024 12:45:55 +0000
ROA not before:           Wed 13 Mar 2024 12:40:55 +0000
ROA not after:            Wed 12 Mar 2025 12:45:55 +0000
asID:                     271477
IP address blocks:        2804:7c20::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:28:fc:87:1a:44:16:d3:7f:92:9b:a3:9b:66:25:7b:cb:54:c1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68235CC657BB7DC560D9EA8315F9350D9821462A
        Validity
            Not Before: Mar 13 12:40:55 2024 GMT
            Not After : Mar 12 12:45:55 2025 GMT
        Subject: CN=BFC5514413A6196E238DB6A2F2C56BC2190EC157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:1a:3e:5c:ab:c9:1e:17:cf:f0:fc:83:70:
                    b4:51:5e:5f:95:74:4e:9b:88:4d:2f:e1:76:32:97:
                    52:e6:5c:75:1d:a4:ee:f2:61:68:9b:fc:46:52:04:
                    af:bf:e1:68:15:08:78:c1:c6:26:21:d2:79:d7:7e:
                    55:87:b3:a6:87:8e:da:3b:41:d8:36:de:63:e8:ce:
                    34:f9:e8:ad:4f:64:ef:8e:29:47:d7:31:43:3b:f1:
                    61:fc:41:f0:0a:1c:ff:23:0e:2c:f4:23:0b:86:6e:
                    6a:f2:39:a8:60:d5:15:87:a5:07:c0:7c:ec:cc:7b:
                    33:45:b3:79:c1:0b:5f:c8:d3:ae:10:b6:95:65:49:
                    32:ea:2b:fa:44:6f:9f:54:7a:69:d2:74:4c:03:95:
                    69:18:b8:c4:cd:0e:d3:5b:45:be:73:9c:0d:f1:23:
                    b5:06:db:20:ab:0e:7f:c3:9b:b0:67:e8:03:57:cf:
                    23:9e:04:33:db:7e:41:05:5b:ef:f6:9b:f4:ca:af:
                    0e:77:22:5f:f6:0a:64:4c:2b:92:45:51:10:b4:49:
                    57:8c:41:bb:84:a3:9c:5e:0b:1c:91:24:56:6c:56:
                    3d:fa:e2:54:18:ed:27:d5:5d:ac:e5:c1:00:2a:a0:
                    67:d5:07:fc:0f:ad:05:1a:5a:84:de:0c:19:10:e1:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:51:44:13:A6:19:6E:23:8D:B6:A2:F2:C5:6B:C2:19:0E:C1:57
            X509v3 Authority Key Identifier:
                keyid:68:23:5C:C6:57:BB:7D:C5:60:D9:EA:83:15:F9:35:0D:98:21:46:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/68235CC657BB7DC560D9EA8315F9350D9821462A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68235CC657BB7DC560D9EA8315F9350D9821462A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33322d3334203d3e20323731343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:ab:4c:6b:5b:79:75:c3:de:46:a4:2a:b5:fd:3c:00:ad:
         5e:b5:46:77:c2:79:3c:b7:b4:71:98:38:4d:84:d5:24:57:55:
         5b:3d:67:4b:45:d9:e0:1b:2d:ec:82:27:4d:12:c5:f8:5c:10:
         72:cc:23:f1:1f:31:82:dd:f7:19:24:5a:60:32:e6:73:1e:b0:
         e5:fb:fc:23:12:fc:9c:b4:24:90:3f:31:16:43:65:10:8e:32:
         7f:82:83:9c:11:b3:a9:0a:2f:75:bf:c5:0c:50:88:96:61:71:
         8e:5e:91:c7:f4:a3:9e:07:ae:d0:38:48:1c:7c:81:81:10:24:
         46:31:9a:c6:cb:a8:0e:12:c5:79:ad:3a:3b:89:db:be:c2:b5:
         d4:3a:e6:9e:61:57:c9:b0:c3:ef:c9:5b:70:6a:b7:12:a8:9a:
         f2:03:c1:e4:da:cb:c4:7f:e4:82:32:86:a2:66:7f:a2:3d:98:
         92:4d:fa:cd:2c:20:75:b2:36:96:d4:e5:fd:ee:f0:3a:d3:95:
         68:1f:52:13:db:45:a6:9b:7d:22:7b:5d:df:30:a7:b3:d9:db:
         c0:eb:4a:a8:b2:7b:f3:9b:d7:5b:af:de:b1:17:44:9b:67:78:
         83:f4:f6:98:ad:40:f0:09:64:ec:4c:66:97:cc:f3:11:5b:08:
         75:bc:0b:fc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYSj8hxpEFtN/kpujm2Yle8tUwR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgyMzVDQzY1N0JCN0RDNTYwRDlFQTgzMTVGOTM1MEQ5
ODIxNDYyQTAeFw0yNDAzMTMxMjQwNTVaFw0yNTAzMTIxMjQ1NTVaMDMxMTAvBgNV
BAMTKEJGQzU1MTQ0MTNBNjE5NkUyMzhEQjZBMkYyQzU2QkMyMTkwRUMxNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPRo+XKvJHhfP8PyDcLRRXl+V
dE6biE0v4XYyl1LmXHUdpO7yYWib/EZSBK+/4WgVCHjBxiYh0nnXflWHs6aHjto7
Qdg23mPozjT56K1PZO+OKUfXMUM78WH8QfAKHP8jDiz0IwuGbmryOahg1RWHpQfA
fOzMezNFs3nBC1/I064QtpVlSTLqK/pEb59UemnSdEwDlWkYuMTNDtNbRb5znA3x
I7UG2yCrDn/Dm7Bn6ANXzyOeBDPbfkEFW+/2m/TKrw53Il/2CmRMK5JFURC0SVeM
QbuEo5xeCxyRJFZsVj364lQY7SfVXazlwQAqoGfVB/wPrQUaWoTeDBkQ4eY3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUv8VRRBOmGW4jjbai8sVrwhkOwVcwHwYDVR0j
BBgwFoAUaCNcxle7fcVg2eqDFfk1DZghRiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdXSmZXZ0d3QzY2M2JlNVBBV1pkRUo4dG43S3kyN3BtTFg0NFNIMUtR
UVYvMC82ODIzNUNDNjU3QkI3REM1NjBEOUVBODMxNUY5MzUwRDk4MjE0NjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY4MjM1Q0M2NTdCQjdEQzU2
MEQ5RUE4MzE1RjkzNTBEOTgyMTQ2MkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3V0pmV2dHd0M2NjNiZTVQQVdaZEVKOHRuN0t5MjdwbUxYNDRTSDFLUVFWLzAv
MzIzODMwMzQzYTM3NjMzMjMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMx
MzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR8IDANBgkqhkiG9w0BAQsFAAOCAQEAhM2rTGtb
eXXD3kakKrX9PACtXrVGd8J5PLe0cZg4TYTVJFdVWz1nS0XZ4Bst7IInTRLF+FwQ
cswj8R8xgt33GSRaYDLmcx6w5fv8IxL8nLQkkD8xFkNlEI4yf4KDnBGzqQovdb/F
DFCIlmFxjl6Rx/Sjngeu0DhIHHyBgRAkRjGaxsuoDhLFea06O4nbvsK11DrmnmFX
ybDD78lbcGq3Eqia8gPB5NrLxH/kgjKGomZ/oj2Ykk36zSwgdbI2ltTl/e7wOtOV
aB9SE9tFppt9Intd3zCns9nbwOtKqLJ785vXW6/esRdEm2d4g/T2mK1A8Alk7Exm
l8zzEVsIdbwL/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org