Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa
File:                     323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa (raw, json)
Hash identifier:          jKoe1LHgq2hwWoFR7gZWw6vZCcZJxa8Tms7Z3MAA3iU=
Subject key identifier:   7B:A4:D8:89:44:55:A0:6E:85:FF:AF:B8:16:5D:C5:FA:EE:EF:C9:9C
Certificate issuer:       /CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
Certificate serial:       7ABB85C8731091C12F92B0A804AD958C329CB46C
Authority key identifier: 97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa
Signing time:             Fri 09 Feb 2024 19:00:01 +0000
ROA not before:           Fri 09 Feb 2024 18:55:01 +0000
ROA not after:            Fri 07 Feb 2025 19:00:01 +0000
asID:                     269195
IP address blocks:        2804:60d8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bb:85:c8:73:10:91:c1:2f:92:b0:a8:04:ad:95:8c:32:9c:b4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
        Validity
            Not Before: Feb  9 18:55:01 2024 GMT
            Not After : Feb  7 19:00:01 2025 GMT
        Subject: CN=7BA4D8894455A06E85FFAFB8165DC5FAEEEFC99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:43:db:e6:0e:2f:52:e5:d0:ff:d6:67:79:2f:
                    ce:54:88:ad:fb:78:6c:a1:01:bc:d1:63:df:76:39:
                    da:72:cf:25:2c:8b:44:76:22:85:c2:e8:05:63:76:
                    85:a0:e4:20:ce:82:d9:07:ef:4a:ff:31:0b:35:a3:
                    b5:45:82:ff:9b:7b:3f:77:c1:d1:7d:06:03:63:dd:
                    40:af:99:d1:4e:7c:8e:b4:17:0b:1d:f2:0b:4f:1e:
                    9d:a2:23:ad:82:86:4f:26:2a:ad:c5:d1:c2:ff:57:
                    06:92:94:cd:60:32:a1:28:82:73:cd:ae:4e:0b:b6:
                    ec:30:13:52:7a:42:29:8d:0c:b7:a9:e1:f6:a8:07:
                    43:5c:2f:9b:3d:26:37:65:03:67:a0:d4:4f:45:77:
                    2b:4a:22:a5:23:28:7b:98:7a:bf:77:10:1d:cc:d9:
                    84:ec:42:95:b2:26:52:d4:87:8d:d9:0c:80:b6:dd:
                    0b:8c:7b:1e:c4:27:ff:f8:16:03:8a:83:64:04:99:
                    12:d5:e9:9f:4e:7b:20:eb:b8:c7:3d:23:6e:0a:05:
                    a0:9a:07:19:f0:e4:9c:7e:53:56:56:c4:c8:bf:4a:
                    cf:f5:2a:a8:97:22:59:4b:38:26:6c:c0:51:ab:e8:
                    fc:e9:c8:9f:95:6d:18:04:7c:cc:84:fa:e2:f1:1b:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:D8:89:44:55:A0:6E:85:FF:AF:B8:16:5D:C5:FA:EE:EF:C9:9C
            X509v3 Authority Key Identifier:
                keyid:97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:6e:b3:b3:ec:f5:fb:14:64:d6:95:4a:24:29:f9:91:40:
         48:e7:4a:13:d3:f7:c2:ab:5a:07:f3:81:03:c1:2a:06:55:c6:
         51:8f:1e:91:15:09:0c:a4:a1:7a:ce:96:fa:66:06:6e:4c:82:
         f6:ea:26:63:9d:41:9e:a3:0b:4d:62:50:05:7a:d9:6a:fa:5e:
         a7:71:79:2d:cc:ec:13:b1:54:2e:22:c5:ef:e4:ad:6b:4c:d1:
         57:47:29:5f:6c:51:46:8d:0b:52:36:ca:21:09:a6:be:ac:e2:
         4f:de:69:a4:d3:c9:c3:70:fa:9b:aa:49:de:6d:6f:ae:d4:e1:
         9d:13:be:c0:da:8e:ca:3a:41:9a:63:91:19:1f:a6:63:36:37:
         fb:c5:95:3f:f0:27:9e:5c:33:c6:4e:13:0e:76:b3:20:27:6c:
         66:ba:6a:e6:7b:fd:4e:3a:41:fd:e1:6f:08:20:cf:50:15:e0:
         3a:d0:d6:a5:b8:eb:58:d3:1b:89:11:31:4a:6b:31:2a:0e:15:
         0a:5b:60:68:a5:5a:3d:fd:5b:5b:a3:51:88:8a:8c:b6:a0:29:
         7a:61:0a:ae:ce:a5:51:58:e0:a2:1b:f2:f3:e0:80:d5:66:68:
         6f:ed:d6:b2:1c:d9:4e:37:03:ad:aa:4e:fa:b4:ae:dd:7d:82:
         d5:cb:f9:b9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeruFyHMQkcEvkrCoBK2VjDKctGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5OUIxNzBDRTA1ODhEREE0NzVDNDJEMEZCNTc2NUFC
NjlBQjY0OTAeFw0yNDAyMDkxODU1MDFaFw0yNTAyMDcxOTAwMDFaMDMxMTAvBgNV
BAMTKDdCQTREODg5NDQ1NUEwNkU4NUZGQUZCODE2NURDNUZBRUVFRkM5OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQ9vmDi9S5dD/1md5L85UiK37
eGyhAbzRY992OdpyzyUsi0R2IoXC6AVjdoWg5CDOgtkH70r/MQs1o7VFgv+bez93
wdF9BgNj3UCvmdFOfI60Fwsd8gtPHp2iI62Chk8mKq3F0cL/VwaSlM1gMqEognPN
rk4LtuwwE1J6QimNDLep4faoB0NcL5s9JjdlA2eg1E9FdytKIqUjKHuYer93EB3M
2YTsQpWyJlLUh43ZDIC23QuMex7EJ//4FgOKg2QEmRLV6Z9OeyDruMc9I24KBaCa
Bxnw5Jx+U1ZWxMi/Ss/1KqiXIllLOCZswFGr6PzpyJ+VbRgEfMyE+uLxG/wdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUe6TYiURVoG6F/6+4Fl3F+u7vyZwwHwYDVR0j
BBgwFoAUl5mxcM4FiN2kdcQtD7V2WraatkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOURBUWQyeTNHZ2FpOFJKRXNMZnRGdHJVYTladkdyeTM5Rk1WWVFQSGtu
TG4vMC85Nzk5QjE3MENFMDU4OEREQTQ3NUM0MkQwRkI1NzY1QUI2OUFCNjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3OTlCMTcwQ0UwNTg4RERB
NDc1QzQyRDBGQjU3NjVBQjY5QUI2NDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlEQVFkMnkzR2dhaThSSkVzTGZ0RnRyVWE5WnZHcnkzOUZNVllRUEhrbkxuLzAv
MzIzODMwMzQzYTM2MzA2NDM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMxMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEYNiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCKx26zs+z1+xRk1pVKJCn5kUBI50oT0/fCq1oH84EDwSoGVcZRjx6RFQkM
pKF6zpb6ZgZuTIL26iZjnUGeowtNYlAFetlq+l6ncXktzOwTsVQuIsXv5K1rTNFX
RylfbFFGjQtSNsohCaa+rOJP3mmk08nDcPqbqknebW+u1OGdE77A2o7KOkGaY5EZ
H6ZjNjf7xZU/8CeeXDPGThMOdrMgJ2xmumrme/1OOkH94W8IIM9QFeA60NaluOtY
0xuJETFKazEqDhUKW2BopVo9/Vtbo1GIioy2oCl6YQquzqVRWOCiG/Lz4IDVZmhv
7dayHNlONwOtqk76tK7dfYLVy/m5
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org