Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a383030303a3a2f33342d3334203d3e20323632393432.roa
File:                     323830343a6533383a383030303a3a2f33342d3334203d3e20323632393432.roa (raw, json)
Hash identifier:          RiXuhc6C/ymqtlJ1IsWihgRTcB66zlzEAkSTA0vVqJU=
Subject key identifier:   2D:95:70:09:B4:22:FA:31:C0:16:86:5A:48:FB:F2:0D:00:CE:37:A2
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       441C89E76B23C4A585A7ED9BB625F1EBC51CE149
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a383030303a3a2f33342d3334203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     262942
IP address blocks:        2804:e38:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1c:89:e7:6b:23:c4:a5:85:a7:ed:9b:b6:25:f1:eb:c5:1c:e1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=2D957009B422FA31C016865A48FBF20D00CE37A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:7f:fd:f5:35:b7:a4:ac:46:06:d9:df:72:
                    4a:52:40:e7:45:0d:30:72:4e:60:2a:b7:f2:40:e8:
                    6a:dd:a2:6a:fa:17:45:32:d4:ad:7f:56:1e:5c:e1:
                    f2:77:12:82:7d:95:66:6e:ef:45:46:b2:c1:83:29:
                    6f:51:52:58:88:3f:3c:a4:b5:61:e2:51:69:0e:eb:
                    6e:5f:24:05:cb:90:97:65:5c:3e:19:35:a6:00:fe:
                    00:01:a8:25:90:bb:1b:89:f4:83:8e:92:20:98:fe:
                    e3:f7:f6:ca:f3:20:1a:1f:41:2a:6c:35:34:ea:7c:
                    53:44:6b:7d:1c:be:e1:1d:a6:bb:e0:ac:bc:07:06:
                    d2:f2:b7:ff:66:78:91:9c:25:04:03:57:2f:53:9c:
                    5d:60:8c:a6:5a:6c:4d:d8:85:f0:b7:1a:bc:28:72:
                    e9:20:ca:d7:c1:97:03:50:d2:f2:95:a6:26:26:a4:
                    ee:f9:6e:55:0e:8a:24:55:0f:14:bd:ec:f2:45:87:
                    9f:48:2a:c4:9d:74:ca:28:e4:d9:d8:90:db:02:da:
                    f4:74:8d:11:21:a2:41:21:f3:b1:81:da:1c:2f:0d:
                    bc:b7:c2:71:17:fa:ce:c2:56:6c:9e:ab:8e:d9:44:
                    95:db:be:a3:f3:23:20:23:f5:84:ed:9a:1d:98:58:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:70:09:B4:22:FA:31:C0:16:86:5A:48:FB:F2:0D:00:CE:37:A2
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/323830343a6533383a383030303a3a2f33342d3334203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:9c:91:85:3d:83:67:c0:db:f4:91:ef:b1:81:f6:32:6c:0b:
         1a:38:f3:fa:fb:cb:4a:3f:ea:3f:af:06:f7:0e:06:63:fb:20:
         28:58:48:66:f3:3d:28:92:ad:e9:01:00:ee:93:f4:9e:95:7a:
         f6:38:e8:bd:8b:4b:fb:8e:05:0d:66:d6:e9:70:38:8e:52:6b:
         ba:76:75:1f:f7:93:ee:27:56:2c:e4:05:ac:c5:25:43:e1:34:
         bf:7e:63:e3:df:fc:04:ae:f1:61:7a:75:fd:a7:b2:b4:22:5c:
         bf:e1:79:cc:22:6f:31:08:3a:af:a7:ee:cc:8d:03:84:d9:1c:
         3f:95:3d:2d:22:18:d5:ee:aa:09:d9:a5:2e:35:dd:20:a7:5d:
         8c:7c:bb:ac:38:73:c6:7e:8a:c7:5f:f8:d9:0a:eb:20:65:31:
         83:a0:28:52:63:14:ea:3d:88:6a:1e:80:5c:a1:bf:ab:c7:be:
         4e:98:35:13:a6:c2:3f:dc:c8:25:9e:b4:fe:02:59:3a:cf:73:
         26:d1:d8:5e:dc:e3:68:f6:ea:91:6c:63:d0:2f:7c:da:1a:c2:
         64:4b:d0:b0:bb:fd:42:86:16:99:68:e3:75:8f:60:24:fc:d9:
         d3:b3:4e:b3:df:15:a3:a1:55:0c:94:fe:d5:84:9c:13:b9:84:
         77:58:68:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURByJ52sjxKWFp+2btiXx68Uc4UkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdEMkQ0QjgzMEYyNEQxMzIzRDcwNkVBRUZCNzU5QUM0
N0E1MzA0RjAeFw0yNDA0MDMxODI2MzVaFw0yNTA0MDIxODMxMzVaMDMxMTAvBgNV
BAMTKDJEOTU3MDA5QjQyMkZBMzFDMDE2ODY1QTQ4RkJGMjBEMDBDRTM3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBX/99TW3pKxGBtnfckpSQOdF
DTByTmAqt/JA6Grdomr6F0Uy1K1/Vh5c4fJ3EoJ9lWZu70VGssGDKW9RUliIPzyk
tWHiUWkO625fJAXLkJdlXD4ZNaYA/gABqCWQuxuJ9IOOkiCY/uP39srzIBofQSps
NTTqfFNEa30cvuEdprvgrLwHBtLyt/9meJGcJQQDVy9TnF1gjKZabE3YhfC3Grwo
cukgytfBlwNQ0vKVpiYmpO75blUOiiRVDxS97PJFh59IKsSddMoo5NnYkNsC2vR0
jREhokEh87GB2hwvDby3wnEX+s7CVmyeq47ZRJXbvqPzIyAj9YTtmh2YWCHPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULZVwCbQi+jHAFoZaSPvyDQDON6IwHwYDVR0j
BBgwFoAUx9LUuDDyTRMj1wbq77dZrEelME8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZaNGFqZG9pYVRUNUpaenpHa3phRmpScno1QWFkajJycEcydkdXVlJN
RU0vMS9DN0QyRDRCODMwRjI0RDEzMjNENzA2RUFFRkI3NTlBQzQ3QTUzMDRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3RDJENEI4MzBGMjREMTMy
M0Q3MDZFQUVGQjc1OUFDNDdBNTMwNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWWjRhamRvaWFUVDVKWnp6R2t6YUZqUnJ6NUFhZGoycnBHMnZHV1ZSTUVNLzEv
MzIzODMwMzQzYTY1MzMzODNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzIzOTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA44gDANBgkqhkiG9w0BAQsFAAOC
AQEAiZyRhT2DZ8Db9JHvsYH2MmwLGjjz+vvLSj/qP68G9w4GY/sgKFhIZvM9KJKt
6QEA7pP0npV69jjovYtL+44FDWbW6XA4jlJrunZ1H/eT7idWLOQFrMUlQ+E0v35j
49/8BK7xYXp1/aeytCJcv+F5zCJvMQg6r6fuzI0DhNkcP5U9LSIY1e6qCdmlLjXd
IKddjHy7rDhzxn6Kx1/42QrrIGUxg6AoUmMU6j2Iah6AXKG/q8e+Tpg1E6bCP9zI
JZ60/gJZOs9zJtHYXtzjaPbqkWxj0C982hrCZEvQsLv9QoYWmWjjdY9gJPzZ07NO
s98Vo6FVDJT+1YScE7mEd1hoTA==
-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:29 2024 by rpki-client on console-fra.rpki-client.org