Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a3a2f33322d3333203d3e20323633333935.roa
File:                     323830343a313539303a3a2f33322d3333203d3e20323633333935.roa (raw, json)
Hash identifier:          JUIeaGGPk+q6cfykvECz6VEefhpOmGAwuOBrTqSpfD0=
Subject key identifier:   F9:81:74:FF:47:B5:C4:71:AA:27:7B:CF:C5:A0:87:D0:AB:A7:1E:6F
Certificate issuer:       /CN=C297D032290ADB0DA80D712D1C9C8B5414068CBA
Certificate serial:       6C149DC6F2EE7836813352722D10563222C60CB8
Authority key identifier: C2:97:D0:32:29:0A:DB:0D:A8:0D:71:2D:1C:9C:8B:54:14:06:8C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a3a2f33322d3333203d3e20323633333935.roa
Signing time:             Sat 09 Mar 2024 06:04:55 +0000
ROA not before:           Sat 09 Mar 2024 05:59:55 +0000
ROA not after:            Sat 08 Mar 2025 06:04:55 +0000
asID:                     263395
IP address blocks:        2804:1590::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:14:9d:c6:f2:ee:78:36:81:33:52:72:2d:10:56:32:22:c6:0c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C297D032290ADB0DA80D712D1C9C8B5414068CBA
        Validity
            Not Before: Mar  9 05:59:55 2024 GMT
            Not After : Mar  8 06:04:55 2025 GMT
        Subject: CN=F98174FF47B5C471AA277BCFC5A087D0ABA71E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:53:6a:63:c8:33:bc:0d:b0:29:bb:3c:25:
                    ad:35:49:b0:27:d3:91:fc:f2:43:09:b3:e2:cd:d0:
                    a0:bc:c0:fc:91:e7:07:5d:45:bc:20:2e:4e:09:b5:
                    0c:55:e7:1b:f7:b8:45:e5:91:5f:e0:d9:e3:fb:62:
                    5b:33:12:bf:40:59:d8:a4:39:db:a4:54:51:c7:94:
                    cd:07:a0:b7:11:73:e7:1b:09:77:1b:a8:71:af:84:
                    e3:40:be:da:30:fd:16:ac:38:65:e5:a4:ca:65:0e:
                    18:e5:96:2a:c4:4d:07:4a:c7:b2:2f:d7:ba:cf:14:
                    43:fd:39:50:cb:9e:99:0f:5b:b7:f5:c9:57:1b:34:
                    f0:a2:38:e6:54:2b:1f:26:d0:5c:0c:c1:68:cd:a4:
                    32:14:04:f6:8c:81:d6:53:ea:a2:08:eb:f8:f4:07:
                    d8:76:7c:83:71:90:c6:62:5a:2f:07:e3:ff:99:42:
                    d0:f9:ec:8f:e7:2d:9d:40:5d:69:97:f7:77:8f:53:
                    3e:ac:16:5d:cc:d8:fb:b1:34:d2:73:bc:c5:95:91:
                    6a:7b:9d:1c:83:92:4a:b2:1f:19:5a:30:40:d2:66:
                    2b:f4:45:4b:cb:47:67:b5:42:ce:5b:a4:eb:59:44:
                    31:49:0d:93:e0:c4:fa:04:a2:3a:86:16:96:81:d5:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:81:74:FF:47:B5:C4:71:AA:27:7B:CF:C5:A0:87:D0:AB:A7:1E:6F
            X509v3 Authority Key Identifier:
                keyid:C2:97:D0:32:29:0A:DB:0D:A8:0D:71:2D:1C:9C:8B:54:14:06:8C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a3a2f33322d3333203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1590::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:11:da:12:01:38:aa:b2:a2:6b:fb:5a:01:05:47:01:38:de:
         f8:fc:a6:a6:89:f7:74:3c:03:38:27:f5:32:20:ab:26:44:0e:
         76:1f:1e:1a:fc:45:27:9a:c7:a2:4b:96:a9:01:51:65:be:cb:
         a1:cc:02:f0:78:a1:fa:2a:ef:4e:c4:d1:14:78:0a:fb:6f:bb:
         4a:3b:be:22:dd:29:1f:0e:34:24:c7:2c:88:bd:79:71:2c:de:
         25:8e:83:38:c6:39:da:70:8a:fe:45:9e:6d:e5:b4:67:4a:7f:
         39:b8:b6:48:93:fa:0a:e9:35:01:51:5a:14:bb:2a:eb:93:1a:
         3f:31:ae:99:15:11:f9:51:96:5e:95:b6:0b:d3:5a:99:1d:ac:
         ed:f0:65:bf:d1:ce:46:57:19:38:39:5d:6e:c3:ee:7a:44:74:
         f7:ea:d9:cc:b5:63:28:e1:41:a2:a6:c5:ff:85:6f:76:96:9e:
         e6:16:04:79:be:80:02:32:e2:49:23:57:1e:b0:3a:6f:0f:56:
         44:1c:38:1c:51:eb:37:39:24:e2:ab:da:84:31:5a:c5:58:33:
         2a:b5:24:e1:89:c5:71:7a:2f:39:cc:32:b4:bd:08:41:73:b7:
         5d:8d:8b:5a:45:c0:ed:61:52:a8:b7:0d:a5:e1:cc:03:89:db:
         6d:84:31:7e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbBSdxvLueDaBM1JyLRBWMiLGDLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5N0QwMzIyOTBBREIwREE4MEQ3MTJEMUM5QzhCNTQx
NDA2OENCQTAeFw0yNDAzMDkwNTU5NTVaFw0yNTAzMDgwNjA0NTVaMDMxMTAvBgNV
BAMTKEY5ODE3NEZGNDdCNUM0NzFBQTI3N0JDRkM1QTA4N0QwQUJBNzFFNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PFNqY8gzvA2wKbs8Ja01SbAn
05H88kMJs+LN0KC8wPyR5wddRbwgLk4JtQxV5xv3uEXlkV/g2eP7YlszEr9AWdik
OdukVFHHlM0HoLcRc+cbCXcbqHGvhONAvtow/RasOGXlpMplDhjllirETQdKx7Iv
17rPFEP9OVDLnpkPW7f1yVcbNPCiOOZUKx8m0FwMwWjNpDIUBPaMgdZT6qII6/j0
B9h2fINxkMZiWi8H4/+ZQtD57I/nLZ1AXWmX93ePUz6sFl3M2PuxNNJzvMWVkWp7
nRyDkkqyHxlaMEDSZiv0RUvLR2e1Qs5bpOtZRDFJDZPgxPoEojqGFpaB1c1tAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+YF0/0e1xHGqJ3vPxaCH0KunHm8wHwYDVR0j
BBgwFoAUwpfQMikK2w2oDXEtHJyLVBQGjLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT
bjQvMC9DMjk3RDAzMjI5MEFEQjBEQTgwRDcxMkQxQzlDOEI1NDE0MDY4Q0JBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyOTdEMDMyMjkwQURCMERB
ODBENzEyRDFDOUM4QjU0MTQwNjhDQkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGb0ZxQng3eFN2U3JqMzJaRjJ6SnRCcUNMaXRFRUdEMng0OVZxZFE1U240LzAv
MzIzODMwMzQzYTMxMzUzOTMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjMz
MzMzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQVkDANBgkqhkiG9w0BAQsFAAOCAQEARBHaEgE4
qrKia/taAQVHATje+Pympon3dDwDOCf1MiCrJkQOdh8eGvxFJ5rHokuWqQFRZb7L
ocwC8Hih+irvTsTRFHgK+2+7Sju+It0pHw40JMcsiL15cSzeJY6DOMY52nCK/kWe
beW0Z0p/Obi2SJP6Cuk1AVFaFLsq65MaPzGumRUR+VGWXpW2C9NamR2s7fBlv9HO
RlcZODldbsPuekR09+rZzLVjKOFBoqbF/4Vvdpae5hYEeb6AAjLiSSNXHrA6bw9W
RBw4HFHrNzkk4qvahDFaxVgzKrUk4YnFcXovOcwytL0IQXO3XY2LWkXA7WFSqLcN
peHMA4nbbYQxfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org