Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33332d3333203d3e20323638353935.roa
File:                     323830343a353339633a3a2f33332d3333203d3e20323638353935.roa (raw, json)
Hash identifier:          DHNkM7yD6GIKnnEM+wDH1el2eFAf38Y7/e2+F2ySnXA=
Subject key identifier:   49:B1:E8:D5:87:B6:6A:BE:22:4D:36:91:16:6F:B6:4A:BF:4A:9D:10
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       15B075BC9BDC901D7F2B78E7190ADBAD247E73F0
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33332d3333203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:36:21 +0000
ROA not before:           Mon 22 Aug 2022 21:31:21 +0000
ROA not after:            Mon 21 Aug 2023 21:36:21 +0000
asID:                     268595
IP address blocks:        2804:539c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b0:75:bc:9b:dc:90:1d:7f:2b:78:e7:19:0a:db:ad:24:7e:73:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:31:21 2022 GMT
            Not After : Aug 21 21:36:21 2023 GMT
        Subject: CN=49B1E8D587B66ABE224D3691166FB64ABF4A9D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:42:39:d1:40:9b:9f:66:6c:ec:cc:2c:9b:
                    02:ff:a5:de:f7:f4:3e:70:6f:eb:4b:5f:ff:fb:4a:
                    ce:a4:34:c8:34:aa:44:d7:f1:4d:e9:bd:cf:6b:69:
                    9f:92:5f:50:96:3c:0c:5c:26:d5:1b:1c:5c:c1:03:
                    6f:c0:31:83:67:ce:f0:4a:12:e0:d1:e8:36:ef:3d:
                    33:6a:08:80:75:85:d7:d1:2c:05:5f:ee:e3:a7:5e:
                    f0:82:15:33:42:25:ef:89:66:dc:13:29:80:7a:bc:
                    49:03:2a:34:9c:df:5b:21:7d:39:a5:16:d2:67:3a:
                    bd:02:3a:37:40:da:15:84:7a:aa:14:c9:90:e0:15:
                    69:22:48:93:e6:a3:10:7a:cc:01:f7:b2:f4:90:9a:
                    4b:34:39:16:97:31:1b:22:5b:aa:5d:1f:31:a6:e4:
                    45:97:85:b9:59:55:d2:bf:b6:e9:af:05:27:01:4a:
                    70:f0:c0:6d:2d:4e:74:96:75:38:73:9c:bc:80:6b:
                    de:df:29:c6:82:9b:f3:48:a4:2e:2e:f7:ad:30:fa:
                    c3:c2:ca:c9:c0:b3:6f:83:93:a3:cf:60:41:95:db:
                    12:16:09:4f:6c:2c:52:16:de:6e:39:14:61:3f:6d:
                    f3:8b:8e:37:5f:a4:62:63:91:30:ca:da:12:f2:9c:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:E8:D5:87:B6:6A:BE:22:4D:36:91:16:6F:B6:4A:BF:4A:9D:10
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33332d3333203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:539c::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:2c:3a:5d:2f:b0:4d:fa:7b:62:3e:ee:0f:6e:f2:03:58:c2:
         c8:6f:89:12:f0:25:9d:fb:90:23:6a:60:4b:5a:2c:af:42:f9:
         dc:b0:85:c5:33:a2:75:5c:07:00:34:f7:67:8e:8f:c4:af:61:
         09:a9:66:4a:95:a5:9b:b7:d9:fb:67:73:2f:03:57:cd:9b:3e:
         eb:6c:ba:f7:20:96:51:4c:29:0a:83:1c:14:02:4d:71:0d:1b:
         d9:c4:44:01:16:00:3e:82:04:28:cf:28:22:f0:de:f7:0f:8e:
         2d:5b:12:57:5c:30:6c:6b:02:08:48:b9:96:1a:dc:56:0a:3c:
         0f:41:6e:b4:fa:bc:a3:f4:dd:6b:23:7d:04:db:14:ea:58:62:
         d1:b5:a3:6e:07:fd:2b:68:9e:1a:e1:0c:b1:54:52:97:45:0a:
         a2:b7:e6:76:29:26:b9:01:bb:05:31:c2:38:a8:32:69:d5:28:
         f1:01:11:78:25:b9:a0:b0:12:30:3a:f0:87:97:d5:c5:c0:fe:
         9c:29:c8:da:9c:92:46:f9:5c:d3:fb:99:fc:20:1c:49:f4:0b:
         a6:c9:35:75:8a:df:8d:55:04:1b:5a:0f:75:f8:b2:58:ab:0d:
         01:e4:d7:42:54:7a:0c:97:71:9f:c1:2b:5c:d9:b2:28:cb:99:
         2e:df:e4:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFbB1vJvckB1/K3jnGQrbrSR+c/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlBMDNENjA3NjcwNkJFRERENUZGMjFGNjg1NTIxREY3
OEIwRTJBQTAeFw0yMjA4MjIyMTMxMjFaFw0yMzA4MjEyMTM2MjFaMDMxMTAvBgNV
BAMTKDQ5QjFFOEQ1ODdCNjZBQkUyMjREMzY5MTE2NkZCNjRBQkY0QTlEMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW80I50UCbn2Zs7MwsmwL/pd73
9D5wb+tLX//7Ss6kNMg0qkTX8U3pvc9raZ+SX1CWPAxcJtUbHFzBA2/AMYNnzvBK
EuDR6DbvPTNqCIB1hdfRLAVf7uOnXvCCFTNCJe+JZtwTKYB6vEkDKjSc31shfTml
FtJnOr0COjdA2hWEeqoUyZDgFWkiSJPmoxB6zAH3svSQmks0ORaXMRsiW6pdHzGm
5EWXhblZVdK/tumvBScBSnDwwG0tTnSWdThznLyAa97fKcaCm/NIpC4u960w+sPC
ysnAs2+Dk6PPYEGV2xIWCU9sLFIW3m45FGE/bfOLjjdfpGJjkTDK2hLynCZrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSbHo1Ye2ar4iTTaRFm+2Sr9KnRAwHwYDVR0j
BBgwFoAU2aA9YHZwa+3dX/IfaFUh33iw4qowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlBjeWRodDFNSlVpc1FBeVdkZEZpNWhCVXRCS2hHZFhHSzlyRE5ZdHVG
TTQvMC9EOUEwM0Q2MDc2NzA2QkVEREQ1RkYyMUY2ODU1MjFERjc4QjBFMkFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5QTAzRDYwNzY3MDZCRURE
RDVGRjIxRjY4NTUyMURGNzhCMEUyQUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQY3lkaHQxTUpVaXNRQXlXZGRGaTVoQlV0QktoR2RYR0s5ckROWXR1Rk00LzAv
MzIzODMwMzQzYTM1MzMzOTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARTnAAwDQYJKoZIhvcNAQELBQADggEBAJgsOl0v
sE36e2I+7g9u8gNYwshviRLwJZ37kCNqYEtaLK9C+dywhcUzonVcBwA092eOj8Sv
YQmpZkqVpZu32ftncy8DV82bPutsuvcgllFMKQqDHBQCTXENG9nERAEWAD6CBCjP
KCLw3vcPji1bEldcMGxrAghIuZYa3FYKPA9BbrT6vKP03WsjfQTbFOpYYtG1o24H
/StonhrhDLFUUpdFCqK35nYpJrkBuwUxwjioMmnVKPEBEXgluaCwEjA68IeX1cXA
/pwpyNqckkb5XNP7mfwgHEn0C6bJNXWK341VBBtaD3X4slirDQHk10JUegyXcZ/B
K1zZsijLmS7f5Ck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org