Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a3a2f33352d3335203d3e20323636303736.roa
File:                     323830343a336133303a3a2f33352d3335203d3e20323636303736.roa (raw, json)
Hash identifier:          F2a06O6MUfBUYn66PBkI8OcibEz5ToM/sZnusSRcCHY=
Subject key identifier:   F8:F6:AF:FC:6D:F0:B4:3C:B3:E2:DC:A6:9E:D4:CD:82:36:DC:15:37
Certificate issuer:       /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial:       378BDEC5652A3DE307773AC75DBF79FB4EE2942A
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a3a2f33352d3335203d3e20323636303736.roa
Signing time:             Mon 03 Apr 2023 18:50:35 +0000
ROA not before:           Mon 03 Apr 2023 18:45:35 +0000
ROA not after:            Mon 01 Apr 2024 18:50:35 +0000
asID:                     266076
IP address blocks:        2804:3a30::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8b:de:c5:65:2a:3d:e3:07:77:3a:c7:5d:bf:79:fb:4e:e2:94:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
        Validity
            Not Before: Apr  3 18:45:35 2023 GMT
            Not After : Apr  1 18:50:35 2024 GMT
        Subject: CN=F8F6AFFC6DF0B43CB3E2DCA69ED4CD8236DC1537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:db:00:04:59:da:fe:81:ac:b8:dc:b7:3b:
                    26:da:89:0c:2d:44:ac:f3:ee:e7:09:64:f8:d9:16:
                    06:56:6c:e7:97:f8:bf:5f:85:34:f2:33:d7:4d:e9:
                    7c:46:2b:4c:2b:a6:d6:2d:7a:75:39:10:64:6f:d0:
                    84:f8:36:50:ef:c6:47:2a:1a:3c:b4:38:5f:56:1c:
                    43:99:cd:85:93:fe:c6:a6:52:13:96:1e:0c:00:6c:
                    ee:a8:d7:29:2c:b9:0d:36:ce:15:2f:bb:ae:d7:e9:
                    6f:e3:cf:3d:e4:46:9b:d1:6a:cd:b0:ca:60:ef:2d:
                    b1:88:f8:46:42:db:32:16:9a:98:c7:53:80:60:bf:
                    8b:90:9e:86:bd:fa:9c:3f:d8:41:b3:cb:f4:37:3f:
                    d8:3e:25:6d:f6:34:f5:2e:ad:a6:ae:1a:d8:c8:89:
                    fd:ed:7e:89:5b:f1:4c:9f:ee:7c:76:ff:7d:97:32:
                    d9:e9:18:36:97:9f:12:07:ab:2d:da:e0:38:19:15:
                    37:c2:39:bb:2c:77:0c:6b:3e:06:44:09:7f:ab:c5:
                    34:1c:dc:4c:e2:dc:9a:54:88:1b:8e:14:d5:55:bb:
                    c8:79:8a:fd:b0:aa:76:27:3c:32:6f:3d:bd:8f:be:
                    d0:3d:4d:6a:0a:a4:9c:41:24:95:0b:06:d7:fb:4b:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:AF:FC:6D:F0:B4:3C:B3:E2:DC:A6:9E:D4:CD:82:36:DC:15:37
            X509v3 Authority Key Identifier:
                keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/323830343a336133303a3a2f33352d3335203d3e20323636303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a30::/35

    Signature Algorithm: sha256WithRSAEncryption
         ee:8a:8c:e9:02:87:8e:23:d3:3d:0a:70:16:7c:97:70:3e:51:
         3d:ec:b0:39:20:42:5f:5d:ef:64:04:1d:f5:3d:3b:fc:0d:83:
         ca:ef:bc:8e:47:81:6b:19:8f:7d:3a:cb:3d:8e:f7:7a:e4:31:
         0e:53:e4:34:4d:8f:19:6a:23:02:25:ff:7e:6a:a5:c8:3f:05:
         f9:15:ab:81:19:ce:2f:c5:88:4f:a4:74:11:2e:a8:01:89:7c:
         22:d6:71:f3:d9:55:7c:3d:3e:08:fc:7e:d4:93:15:50:07:fc:
         8d:dd:58:1f:ef:c5:d2:62:61:59:ce:91:b3:8d:99:12:e5:1e:
         64:a5:30:00:d9:c7:8b:ab:f0:b2:a7:dc:3d:1d:5d:a4:c3:9e:
         94:ef:6c:3e:45:9f:c3:ce:5b:36:37:6d:fa:7f:9e:3c:9e:10:
         4f:a8:05:7a:82:a7:72:38:2d:de:f7:b0:75:0d:a1:b0:7a:f7:
         b6:86:89:e4:01:64:18:c4:ea:31:1d:45:68:f6:10:3b:91:df:
         53:f3:d6:09:57:4a:89:13:79:63:df:7c:0b:17:92:a7:99:d6:
         58:27:87:ee:f6:78:b6:8a:7e:61:bb:b3:df:2b:01:48:a8:e9:
         58:07:3b:da:0f:9f:86:1f:85:a4:dd:69:96:13:8e:36:d9:fc:
         1f:04:6d:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN4vexWUqPeMHdzrHXb95+07ilCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwMUU0NzQ5MjQ4NEZEOENFODNGMTcwNzBFRkQ3MjUy
QjE0Q0REMDAeFw0yMzA0MDMxODQ1MzVaFw0yNDA0MDExODUwMzVaMDMxMTAvBgNV
BAMTKEY4RjZBRkZDNkRGMEI0M0NCM0UyRENBNjlFRDRDRDgyMzZEQzE1MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosdsABFna/oGsuNy3OybaiQwt
RKzz7ucJZPjZFgZWbOeX+L9fhTTyM9dN6XxGK0wrptYtenU5EGRv0IT4NlDvxkcq
Gjy0OF9WHEOZzYWT/samUhOWHgwAbO6o1yksuQ02zhUvu67X6W/jzz3kRpvRas2w
ymDvLbGI+EZC2zIWmpjHU4Bgv4uQnoa9+pw/2EGzy/Q3P9g+JW32NPUuraauGtjI
if3tfolb8Uyf7nx2/32XMtnpGDaXnxIHqy3a4DgZFTfCObssdwxrPgZECX+rxTQc
3Ezi3JpUiBuOFNVVu8h5iv2wqnYnPDJvPb2PvtA9TWoKpJxBJJULBtf7S6TBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+Pav/G3wtDyz4tymntTNgjbcFTcwHwYDVR0j
BBgwFoAUNQHkdJJIT9jOg/FwcO/XJSsUzdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMktlczc0dG5Ta1k5dG91V296RmpnY1FSN1JtTGgxejh4cnBiSGY5YlRH
dkIvMC8zNTAxRTQ3NDkyNDg0RkQ4Q0U4M0YxNzA3MEVGRDcyNTJCMTRDREQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1MDFFNDc0OTI0ODRGRDhD
RTgzRjE3MDcwRUZENzI1MkIxNENERDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJLZXM3NHRuU2tZOXRvdVdvekZqZ2NRUjdSbUxoMXo4eHJwYkhmOWJUR3ZCLzAv
MzIzODMwMzQzYTMzNjEzMzMwM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjM2
MzAzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYFKAQ6MAAwDQYJKoZIhvcNAQELBQADggEBAO6KjOkC
h44j0z0KcBZ8l3A+UT3ssDkgQl9d72QEHfU9O/wNg8rvvI5HgWsZj306yz2O93rk
MQ5T5DRNjxlqIwIl/35qpcg/BfkVq4EZzi/FiE+kdBEuqAGJfCLWcfPZVXw9Pgj8
ftSTFVAH/I3dWB/vxdJiYVnOkbONmRLlHmSlMADZx4ur8LKn3D0dXaTDnpTvbD5F
n8POWzY3bfp/njyeEE+oBXqCp3I4Ld73sHUNobB697aGieQBZBjE6jEdRWj2EDuR
31Pz1glXSokTeWPffAsXkqeZ1lgnh+72eLaKfmG7s98rAUio6VgHO9oPn4YfhaTd
aZYTjjbZ/B8EbRg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org