Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          3aMOAgd7O/JWD1gANOsRv38c4XsjbgkCZiAV1xFRmWM=
Subject key identifier:   F8:79:48:11:52:D7:1B:9F:8E:FB:A4:6A:5A:C9:63:6F:72:DA:EA:3C
Certificate issuer:       /CN=812F40E71D80FE4BFD25317690177877E6E7806D
Certificate serial:       589649FAF0E16969524579ED08DF9C4BE13BC87F
Authority key identifier: 81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Tue 26 Sep 2023 15:00:02 +0000
ROA not before:           Tue 26 Sep 2023 14:55:02 +0000
ROA not after:            Tue 24 Sep 2024 15:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:96:49:fa:f0:e1:69:69:52:45:79:ed:08:df:9c:4b:e1:3b:c8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Validity
            Not Before: Sep 26 14:55:02 2023 GMT
            Not After : Sep 24 15:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:fc:84:80:e0:59:4b:fb:a1:f5:2a:53:55:
                    4d:cc:1a:99:5d:18:9b:33:4a:01:e4:06:58:a5:1f:
                    9c:c1:fa:31:b3:d4:0c:94:0a:75:3b:f6:96:a3:90:
                    c7:26:e7:3f:b6:39:cc:42:7b:f4:c0:f0:53:5c:46:
                    d7:19:84:79:ab:01:25:25:07:80:b8:fb:fa:a7:97:
                    b3:c6:53:80:bb:c5:7b:b8:d8:b7:ec:f1:6a:ae:c3:
                    00:74:1b:5d:f6:57:67:d1:9e:73:12:17:50:74:70:
                    cc:a1:89:b8:3c:1d:d9:c8:24:93:f1:f4:8e:fa:4f:
                    b2:9b:5b:f1:57:35:32:f6:08:44:f0:6d:b7:75:8e:
                    ae:41:9f:37:4b:33:4d:d4:0e:5d:9a:50:9b:49:fd:
                    26:43:e1:35:3f:bc:3e:6f:02:c6:47:b8:51:ce:be:
                    c7:e2:ff:d7:40:82:a3:ab:3d:de:39:77:10:54:6f:
                    78:c5:ba:54:26:52:e1:ce:6a:4f:cc:ca:9e:6a:9a:
                    64:29:01:96:bd:9b:b2:e9:a9:55:be:eb:d2:b5:db:
                    a0:7b:9b:c9:b1:ff:28:9f:58:bd:68:e8:c5:07:f7:
                    18:7a:95:95:ad:31:7c:1a:c4:38:6c:17:f6:8d:bb:
                    20:54:ad:e7:86:b5:60:66:c9:53:ab:fb:28:5c:08:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:79:48:11:52:D7:1B:9F:8E:FB:A4:6A:5A:C9:63:6F:72:DA:EA:3C
            X509v3 Authority Key Identifier:
                keyid:81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/323830343a336430343a393030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:62:c9:c4:bf:40:86:66:36:e9:5c:26:65:47:5d:74:fc:45:
         a2:43:7c:a3:fe:56:67:32:d0:31:62:1d:0e:23:90:bf:a3:53:
         de:cb:10:03:f0:02:49:dc:69:7b:7d:63:b7:7c:39:ce:11:c5:
         93:de:c0:d0:8d:c9:51:a4:d1:e5:e1:11:04:42:08:ae:77:05:
         1f:2f:d4:57:12:a4:fb:7e:6e:b1:35:ca:5e:a1:5b:47:cf:04:
         39:f3:44:3e:03:0a:15:ab:fb:d9:45:d2:90:5c:fb:be:48:64:
         cf:da:41:52:3a:c8:b8:be:d3:5b:2b:2f:e9:f2:22:a5:47:c7:
         2a:d1:27:b1:bd:f3:c5:54:ae:2a:9c:de:76:a2:70:04:0c:ab:
         48:ac:fb:a4:ae:87:67:8d:83:f1:8f:bf:8c:29:27:30:07:41:
         56:1b:a7:4a:c0:93:8d:9a:61:14:d0:d4:16:05:15:00:55:42:
         03:81:3f:e8:09:37:30:29:ae:c0:b3:bd:7a:05:56:15:77:70:
         22:65:c2:2a:85:b5:e1:cd:7d:7f:87:b4:7d:f9:5c:77:37:3a:
         2c:1f:85:95:73:2e:f6:29:b9:91:e8:4f:d8:27:ec:2b:76:5a:
         eb:2d:f0:f2:dc:5d:6f:31:04:4e:94:77:d4:93:74:76:19:27:
         39:c4:6e:52
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUWJZJ+vDhaWlSRXntCN+cS+E7yH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEyRjQwRTcxRDgwRkU0QkZEMjUzMTc2OTAxNzc4NzdF
NkU3ODA2RDAeFw0yMzA5MjYxNDU1MDJaFw0yNDA5MjQxNTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjYxNEZDODQ4MEUwNTk0QkZC
QTFGNTJBNTM1NTREQ0MxQTk5NUQxODlCMzM0QTAxRTQwNjU4QTUxRjlDQzFGQTMx
QjNENDBDOTQwQTc1M0JGNjk2QTM5MEM3MjZFNzNGQjYzOUNDNDI3QkY0QzBGMDUz
NUM0NkQ3MTk4NDc5QUIwMTI1MjUwNzgwQjhGQkZBQTc5N0IzQzY1MzgwQkJDNTdC
QjhEOEI3RUNGMTZBQUVDMzAwNzQxQjVERjY1NzY3RDE5RTczMTIxNzUwNzQ3MEND
QTE4OUI4M0MxREQ5QzgyNDkzRjFGNDhFRkE0RkIyOUI1QkYxNTczNTMyRjYwODQ0
RjA2REI3NzU4RUFFNDE5RjM3NEIzMzRERDQwRTVEOUE1MDlCNDlGRDI2NDNFMTM1
M0ZCQzNFNkYwMkM2NDdCODUxQ0VCRUM3RTJGRkQ3NDA4MkEzQUIzRERFMzk3NzEw
NTQ2Rjc4QzVCQTU0MjY1MkUxQ0U2QTRGQ0NDQTlFNkE5QTY0MjkwMTk2QkQ5QkIy
RTlBOTU1QkVFQkQyQjVEQkEwN0I5QkM5QjFGRjI4OUY1OEJENjhFOEM1MDdGNzE4
N0E5NTk1QUQzMTdDMUFDNDM4NkMxN0Y2OERCQjIwNTRBREU3ODZCNTYwNjZDOTUz
QUJGQjI4NUMwODNFQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAthT8hIDgWUv7ofUqU1VNzBqZXRibM0oB5AZYpR+cwfoxs9QMlAp1
O/aWo5DHJuc/tjnMQnv0wPBTXEbXGYR5qwElJQeAuPv6p5ezxlOAu8V7uNi37PFq
rsMAdBtd9ldn0Z5zEhdQdHDMoYm4PB3ZyCST8fSO+k+ym1vxVzUy9ghE8G23dY6u
QZ83SzNN1A5dmlCbSf0mQ+E1P7w+bwLGR7hRzr7H4v/XQIKjqz3eOXcQVG94xbpU
JlLhzmpPzMqeappkKQGWvZuy6alVvuvStduge5vJsf8on1i9aOjFB/cYepWVrTF8
GsQ4bBf2jbsgVK3nhrVgZslTq/soXAg+rwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FPh5SBFS1xufjvukalrJY29y2uo8MB8GA1UdIwQYMBaAFIEvQOcdgP5L/SUxdpAX
eHfm54BtMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzAvODEyRjQwRTcxRDgwRkU0
QkZEMjUzMTc2OTAxNzc4NzdFNkU3ODA2RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MTJGNDBFNzFEODBGRTRCRkQyNTMxNzY5MDE3Nzg3N0U2RTc4
MDZELmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8wLzMyMzgzMDM0M2EzMzY0MzAzNDNh
MzkzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBD0EkDANBgkqhkiG9w0BAQsFAAOCAQEAdGLJxL9AhmY26VwmZUdd
dPxFokN8o/5WZzLQMWIdDiOQv6NT3ssQA/ACSdxpe31jt3w5zhHFk97A0I3JUaTR
5eERBEIIrncFHy/UVxKk+35usTXKXqFbR88EOfNEPgMKFav72UXSkFz7vkhkz9pB
UjrIuL7TWysv6fIipUfHKtEnsb3zxVSuKpzedqJwBAyrSKz7pK6HZ42D8Y+/jCkn
MAdBVhunSsCTjZphFNDUFgUVAFVCA4E/6Ak3MCmuwLO9egVWFXdwImXCKoW14c19
f4e0fflcdzc6LB+FlXMu9im5kehP2CfsK3Za6y3w8txdbzEETpR31JN0dhknOcRu
Ug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org