Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/323830343a346464303a3a2f33322d3334203d3e20323638323231.roa
File:                     323830343a346464303a3a2f33322d3334203d3e20323638323231.roa (raw, json)
Hash identifier:          T8FPEyJvbw8nCIEarj66qfon1HAmqNdv0ZA2vl27V9Y=
Subject key identifier:   8E:58:5A:FF:9C:EA:EF:E5:AF:3F:34:A8:4D:FA:A6:94:3F:D7:A8:F9
Certificate issuer:       /CN=1654602F744B5A09AB43A0DC57F75D95B59E2ED6
Certificate serial:       2F02F089A5EE26F4A542DC451BAF91AFBB241D7E
Authority key identifier: 16:54:60:2F:74:4B:5A:09:AB:43:A0:DC:57:F7:5D:95:B5:9E:2E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/323830343a346464303a3a2f33322d3334203d3e20323638323231.roa
Signing time:             Tue 30 Jan 2024 01:00:00 +0000
ROA not before:           Tue 30 Jan 2024 00:55:00 +0000
ROA not after:            Tue 28 Jan 2025 01:00:00 +0000
asID:                     268221
IP address blocks:        2804:4dd0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:02:f0:89:a5:ee:26:f4:a5:42:dc:45:1b:af:91:af:bb:24:1d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1654602F744B5A09AB43A0DC57F75D95B59E2ED6
        Validity
            Not Before: Jan 30 00:55:00 2024 GMT
            Not After : Jan 28 01:00:00 2025 GMT
        Subject: CN=8E585AFF9CEAEFE5AF3F34A84DFAA6943FD7A8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:74:f4:4c:63:5e:ba:86:34:29:a6:64:71:
                    e8:5a:d6:23:91:a4:3b:26:95:53:6e:3a:60:8e:12:
                    20:94:f2:44:eb:e9:65:8c:3e:41:2a:2d:72:f3:a1:
                    85:52:7b:87:83:b5:e0:b9:d5:10:60:28:6e:0a:63:
                    61:77:5c:e7:1f:f9:a5:5e:e5:a0:60:b3:b6:8b:b7:
                    c1:40:a8:6e:fc:08:0c:87:c6:40:f4:54:aa:a9:df:
                    fc:ef:46:9e:cd:73:33:87:70:9f:9b:0c:c9:46:11:
                    3c:30:ec:fd:52:73:70:ed:28:8d:0a:8e:e7:ba:5f:
                    08:31:57:ca:dc:ab:46:4e:9e:d5:0a:de:44:13:a6:
                    7f:7d:c6:4b:ea:be:bd:a8:10:dc:3c:9b:64:65:c6:
                    ed:11:7f:ca:73:4b:cc:c1:55:2e:0b:20:35:81:4b:
                    68:45:09:65:6f:36:ee:f4:c2:20:e7:10:49:6b:b7:
                    f1:9b:07:45:ec:8f:38:1f:c4:12:f3:f0:42:c0:d8:
                    44:af:c4:61:c9:a1:23:eb:b5:fd:35:b5:7f:7b:2b:
                    50:12:1a:4f:5c:b9:0e:27:70:3a:f7:8b:35:e9:8f:
                    4b:8b:9b:65:58:6e:27:54:80:f3:d2:ea:23:b3:fb:
                    02:50:4e:79:58:45:af:69:cf:de:5f:f5:75:48:14:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:58:5A:FF:9C:EA:EF:E5:AF:3F:34:A8:4D:FA:A6:94:3F:D7:A8:F9
            X509v3 Authority Key Identifier:
                keyid:16:54:60:2F:74:4B:5A:09:AB:43:A0:DC:57:F7:5D:95:B5:9E:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/323830343a346464303a3a2f33322d3334203d3e20323638323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:85:6c:f0:8d:99:72:4f:1d:9c:d9:d4:3f:af:f9:e1:95:f0:
         41:45:c8:34:3e:4a:96:93:de:1c:fc:2a:67:62:db:a6:50:13:
         ee:af:0e:cf:97:b5:34:1c:0a:ab:44:90:d2:33:ca:24:62:06:
         00:66:52:ce:f0:a8:8b:1e:53:3a:70:80:24:ff:0e:b7:34:c0:
         b6:79:20:5f:f8:6e:cb:71:ff:ca:f5:d4:6e:83:bd:c1:3b:38:
         64:df:36:d6:6f:38:0f:73:f9:f4:fc:c6:b2:af:30:d3:ca:a7:
         7e:83:89:b8:7f:80:08:4c:5a:f8:35:81:d6:2d:c6:9a:7e:6b:
         32:b7:0f:2b:95:f2:6d:c6:1b:11:2c:37:c8:b9:45:c4:6d:b9:
         d7:f5:f2:3c:1a:b7:9a:92:fd:7a:4d:36:25:00:ea:13:3d:e3:
         8d:dd:7e:28:cd:fd:73:80:8e:2d:1a:20:d8:c6:84:20:48:72:
         55:a7:8a:73:4b:40:85:d1:f8:47:fb:fb:f9:9a:93:ec:9f:35:
         bd:ad:7b:1a:87:41:99:65:26:38:b3:14:54:9e:f1:1d:89:53:
         25:08:7f:0a:b6:64:d0:78:71:f0:49:94:88:bd:e6:a5:94:6f:
         06:6d:97:12:f8:dc:73:2d:d0:18:71:0a:4b:6f:7e:4a:8a:f9:
         04:29:b9:44
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULwLwiaXuJvSlQtxFG6+Rr7skHX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NDYwMkY3NDRCNUEwOUFCNDNBMERDNTdGNzVEOTVC
NTlFMkVENjAeFw0yNDAxMzAwMDU1MDBaFw0yNTAxMjgwMTAwMDBaMDMxMTAvBgNV
BAMTKDhFNTg1QUZGOUNFQUVGRTVBRjNGMzRBODRERkFBNjk0M0ZEN0E4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mnT0TGNeuoY0KaZkceha1iOR
pDsmlVNuOmCOEiCU8kTr6WWMPkEqLXLzoYVSe4eDteC51RBgKG4KY2F3XOcf+aVe
5aBgs7aLt8FAqG78CAyHxkD0VKqp3/zvRp7NczOHcJ+bDMlGETww7P1Sc3DtKI0K
jue6XwgxV8rcq0ZOntUK3kQTpn99xkvqvr2oENw8m2Rlxu0Rf8pzS8zBVS4LIDWB
S2hFCWVvNu70wiDnEElrt/GbB0XsjzgfxBLz8ELA2ESvxGHJoSPrtf01tX97K1AS
Gk9cuQ4ncDr3izXpj0uLm2VYbidUgPPS6iOz+wJQTnlYRa9pz95f9XVIFEzBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjlha/5zq7+WvPzSoTfqmlD/XqPkwHwYDVR0j
BBgwFoAUFlRgL3RLWgmrQ6DcV/ddlbWeLtYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5oQ1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQ
NU4vMC8xNjU0NjAyRjc0NEI1QTA5QUI0M0EwREM1N0Y3NUQ5NUI1OUUyRUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2NTQ2MDJGNzQ0QjVBMDlB
QjQzQTBEQzU3Rjc1RDk1QjU5RTJFRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOaENYVm9vNG9EeGtGdDFkdnRoN3dLRENGb3VpdTdwand6Znp5a2E1UDVOLzAv
MzIzODMwMzQzYTM0NjQ2NDMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzIzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARN0DANBgkqhkiG9w0BAQsFAAOCAQEAYoVs8I2Z
ck8dnNnUP6/54ZXwQUXIND5KlpPeHPwqZ2LbplAT7q8Oz5e1NBwKq0SQ0jPKJGIG
AGZSzvCoix5TOnCAJP8OtzTAtnkgX/huy3H/yvXUboO9wTs4ZN821m84D3P59PzG
sq8w08qnfoOJuH+ACExa+DWB1i3Gmn5rMrcPK5XybcYbESw3yLlFxG251/XyPBq3
mpL9ek02JQDqEz3jjd1+KM39c4COLRog2MaEIEhyVaeKc0tAhdH4R/v7+ZqT7J81
va17GodBmWUmOLMUVJ7xHYlTJQh/CrZk0Hhx8EmUiL3mpZRvBm2XEvjccy3QGHEK
S29+Sor5BCm5RA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org