Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3332203d3e20323634303039.roa
File:                     323830343a323935343a3a2f33322d3332203d3e20323634303039.roa (raw, json)
Hash identifier:          PsdF6kkjNvMl9PIApeJDwxTGNX+Rwopcxb90JfGPTCI=
Subject key identifier:   C3:D7:12:B9:39:40:D6:87:4C:67:13:87:AC:99:75:10:89:D0:3C:15
Certificate issuer:       /CN=E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F
Certificate serial:       60947771D910D3EC5B5CF5101AD864D0B046CBED
Authority key identifier: E2:6E:C6:7B:22:DE:C9:50:EE:3F:C2:2B:A1:28:E6:FA:5C:91:EF:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3332203d3e20323634303039.roa
Signing time:             Tue 11 Apr 2023 10:33:14 +0000
ROA not before:           Tue 11 Apr 2023 10:28:14 +0000
ROA not after:            Tue 09 Apr 2024 10:33:14 +0000
asID:                     264009
IP address blocks:        2804:2954::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:94:77:71:d9:10:d3:ec:5b:5c:f5:10:1a:d8:64:d0:b0:46:cb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F
        Validity
            Not Before: Apr 11 10:28:14 2023 GMT
            Not After : Apr  9 10:33:14 2024 GMT
        Subject: CN=C3D712B93940D6874C671387AC99751089D03C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:f8:85:05:d4:42:2a:52:0b:33:fc:73:f1:
                    12:51:5f:54:a9:f2:17:46:e6:f5:f3:eb:b8:ce:58:
                    c7:b0:6b:c3:60:9f:b8:85:29:d6:45:b1:36:33:c3:
                    b9:e2:5a:e8:8f:d1:38:e2:b5:da:bd:79:58:f1:b4:
                    51:95:94:d7:de:1c:17:87:fe:8b:68:de:4e:58:eb:
                    d9:bc:79:d4:d6:2c:d5:f8:36:e2:7e:05:be:b8:21:
                    2c:15:4d:43:d1:c0:bb:da:40:fe:84:3c:f7:01:5f:
                    aa:48:64:2a:eb:67:4d:07:b0:42:3d:d2:36:63:87:
                    2f:9b:51:8d:14:37:1e:1e:d9:f0:71:d8:b8:6f:5f:
                    d2:4a:dc:24:d2:37:d7:45:fe:dc:bb:19:64:eb:e4:
                    e4:cc:70:5c:a3:df:f5:1d:b5:6f:52:01:02:90:ed:
                    69:ba:01:ba:f1:ec:a3:9b:45:76:ad:e2:2b:98:f4:
                    6b:13:c5:07:82:4f:4f:42:71:bb:df:f5:eb:71:0f:
                    5b:ba:9b:9c:18:b1:b7:0b:83:33:2a:6e:80:6a:34:
                    1a:22:ee:22:e6:9d:78:94:0e:00:99:d5:56:f4:1d:
                    3c:02:6d:c3:7c:b6:38:89:80:01:8b:6f:b4:f8:34:
                    74:e5:07:23:c5:e7:4d:11:4b:e6:74:09:3e:46:98:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D7:12:B9:39:40:D6:87:4C:67:13:87:AC:99:75:10:89:D0:3C:15
            X509v3 Authority Key Identifier:
                keyid:E2:6E:C6:7B:22:DE:C9:50:EE:3F:C2:2B:A1:28:E6:FA:5C:91:EF:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/323830343a323935343a3a2f33322d3332203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2954::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:29:57:e2:aa:ca:ac:fb:ce:57:b3:31:75:cd:00:bb:63:
         27:c2:cd:82:a9:e6:e0:73:a5:1e:45:ab:2b:eb:3e:bd:28:e2:
         53:3d:5a:16:ef:f7:1d:85:de:78:3e:24:fa:98:ce:04:d3:92:
         ba:54:4c:8a:32:00:4f:ad:22:f1:76:60:9f:a7:48:95:4a:49:
         83:24:40:1c:7a:58:da:68:b0:05:81:c0:e3:70:e6:c9:21:8d:
         6d:98:e6:a8:56:eb:53:90:15:c1:ae:0f:48:00:2d:ee:36:0c:
         5a:89:2c:91:dd:6a:ab:b7:52:96:d8:a0:94:00:37:c0:4c:d9:
         4b:39:a3:1b:85:0f:e0:8c:19:fb:4e:77:8e:34:25:01:e6:ad:
         86:a1:7f:26:5d:02:61:6a:30:00:b0:33:f9:f8:40:78:fd:87:
         cc:81:c4:4b:97:01:4c:51:00:95:97:2b:23:f0:02:6d:63:ab:
         f5:e9:36:cf:65:4f:62:80:41:08:32:9f:7a:f9:6c:2c:b2:ef:
         d5:4e:aa:ba:1b:9e:d4:ca:7a:6e:5a:0a:94:94:08:fe:4a:35:
         fa:14:b1:58:a9:37:0c:f9:86:eb:82:18:bc:ca:b9:6e:b5:78:
         40:94:48:5f:b8:6b:55:93:ed:e9:82:ba:63:4a:43:f1:87:9c:
         8a:53:79:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYJR3cdkQ0+xbXPUQGthk0LBGy+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI2RUM2N0IyMkRFQzk1MEVFM0ZDMjJCQTEyOEU2RkE1
QzkxRUYxRjAeFw0yMzA0MTExMDI4MTRaFw0yNDA0MDkxMDMzMTRaMDMxMTAvBgNV
BAMTKEMzRDcxMkI5Mzk0MEQ2ODc0QzY3MTM4N0FDOTk3NTEwODlEMDNDMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+A/iFBdRCKlILM/xz8RJRX1Sp
8hdG5vXz67jOWMewa8Ngn7iFKdZFsTYzw7niWuiP0Tjitdq9eVjxtFGVlNfeHBeH
/oto3k5Y69m8edTWLNX4NuJ+Bb64ISwVTUPRwLvaQP6EPPcBX6pIZCrrZ00HsEI9
0jZjhy+bUY0UNx4e2fBx2LhvX9JK3CTSN9dF/ty7GWTr5OTMcFyj3/UdtW9SAQKQ
7Wm6Abrx7KObRXat4iuY9GsTxQeCT09Ccbvf9etxD1u6m5wYsbcLgzMqboBqNBoi
7iLmnXiUDgCZ1Vb0HTwCbcN8tjiJgAGLb7T4NHTlByPF500RS+Z0CT5GmFR7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUw9cSuTlA1odMZxOHrJl1EInQPBUwHwYDVR0j
BBgwFoAU4m7GeyLeyVDuP8IroSjm+lyR7x8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3
dzMvMC9FMjZFQzY3QjIyREVDOTUwRUUzRkMyMkJBMTI4RTZGQTVDOTFFRjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyNkVDNjdCMjJERUM5NTBF
RTNGQzIyQkExMjhFNkZBNUM5MUVGMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzNGc2b29mWktjVFNVb1c0akwxQ3h4R1dyalZoYllDVzcxNk05aDdLd3czLzAv
MzIzODMwMzQzYTMyMzkzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQpVDANBgkqhkiG9w0BAQsFAAOCAQEAkxwpV+Kq
yqz7zlezMXXNALtjJ8LNgqnm4HOlHkWrK+s+vSjiUz1aFu/3HYXeeD4k+pjOBNOS
ulRMijIAT60i8XZgn6dIlUpJgyRAHHpY2miwBYHA43DmySGNbZjmqFbrU5AVwa4P
SAAt7jYMWokskd1qq7dSltiglAA3wEzZSzmjG4UP4IwZ+053jjQlAeathqF/Jl0C
YWowALAz+fhAeP2HzIHES5cBTFEAlZcrI/ACbWOr9ek2z2VPYoBBCDKfevlsLLLv
1U6quhue1Mp6bloKlJQI/ko1+hSxWKk3DPmG64IYvMq5brV4QJRIX7hrVZPt6YK6
Y0pD8YecilN5Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org