Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/323830343a3866633a3a2f33322d3438203d3e20323633303433.roa
File:                     323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (raw, json)
Hash identifier:          v+ywNa/OoYY4LRNDxxlzPUeeBYmL/0i/dbnc+oMN6JQ=
Subject key identifier:   02:F2:1C:1C:8D:C7:E0:37:FB:CA:1F:EC:21:B9:B1:58:61:0E:43:B9
Certificate issuer:       /CN=003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307
Certificate serial:       1EA473E0A5D1D223361B08FA94E3E0691C21DDBC
Authority key identifier: 00:3A:B6:DC:6A:AD:8C:55:BD:30:8C:A1:AE:1E:E4:84:1E:9D:C3:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/323830343a3866633a3a2f33322d3438203d3e20323633303433.roa
Signing time:             Fri 16 Jun 2023 16:21:20 +0000
ROA not before:           Fri 16 Jun 2023 16:16:20 +0000
ROA not after:            Fri 14 Jun 2024 16:21:20 +0000
asID:                     263043
IP address blocks:        2804:8fc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a4:73:e0:a5:d1:d2:23:36:1b:08:fa:94:e3:e0:69:1c:21:dd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307
        Validity
            Not Before: Jun 16 16:16:20 2023 GMT
            Not After : Jun 14 16:21:20 2024 GMT
        Subject: CN=02F21C1C8DC7E037FBCA1FEC21B9B158610E43B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:50:1b:67:72:2f:95:6e:d0:ed:16:10:80:17:
                    fb:bf:e3:56:5a:ea:b1:b8:3f:72:5d:b0:e1:60:bd:
                    23:2e:95:03:f4:ae:cb:68:b4:b1:17:84:19:af:39:
                    9b:5b:0f:7a:d8:02:69:e2:aa:be:29:67:62:0a:a4:
                    49:db:3a:ac:9c:5f:1e:45:02:40:c9:d9:df:3e:fe:
                    ba:66:5b:fc:ca:e8:55:c4:8d:68:f9:e9:15:e6:03:
                    9e:78:86:d8:23:49:b8:3c:76:6d:40:34:fe:00:e9:
                    cc:ec:33:c9:eb:27:df:cd:6d:b5:cf:68:52:19:42:
                    13:6d:c8:79:4c:75:5d:ae:dd:a6:f6:69:d3:c3:f6:
                    bd:0e:49:cc:5c:8b:b3:2b:73:35:93:fc:a2:36:7c:
                    c0:44:ec:5f:c9:cb:0e:58:69:a8:d2:e4:04:3c:6f:
                    b2:16:e0:1d:60:f0:90:1e:0d:dc:50:94:96:86:9e:
                    da:e1:89:30:e5:c4:80:2c:a4:bd:c7:28:2b:77:7d:
                    b9:48:3f:0d:91:61:f4:8b:92:2c:95:65:6b:3e:ba:
                    3c:cc:e6:0f:3a:0a:c3:d5:10:91:ba:8a:74:c6:a9:
                    a1:91:5d:1b:d0:96:29:48:bc:d9:99:03:8b:dc:99:
                    a0:67:af:80:dd:cd:2b:86:95:ab:d7:07:ee:ab:a9:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F2:1C:1C:8D:C7:E0:37:FB:CA:1F:EC:21:B9:B1:58:61:0E:43:B9
            X509v3 Authority Key Identifier:
                keyid:00:3A:B6:DC:6A:AD:8C:55:BD:30:8C:A1:AE:1E:E4:84:1E:9D:C3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/323830343a3866633a3a2f33322d3438203d3e20323633303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:aa:d1:13:ea:ba:14:66:8c:08:7e:62:04:63:59:c0:af:5f:
         dc:ad:71:80:b6:52:bc:fc:1d:4b:d1:a3:f6:e3:0f:38:01:e6:
         e3:72:06:22:1f:cc:91:e8:a3:65:7b:c7:a1:09:bc:e3:93:90:
         b3:ca:e1:7e:f1:86:55:af:d8:cf:f4:7e:bc:92:26:20:8f:b3:
         2d:86:2d:93:70:e7:c0:05:bf:6d:e8:51:9d:87:87:6a:85:70:
         b8:a0:a8:ca:b1:cc:9e:f4:f3:f6:2c:03:29:1a:3a:52:32:51:
         5f:ea:6d:bd:2c:84:8d:7c:f8:52:df:80:7d:79:24:a6:5e:20:
         60:d8:a0:bb:9f:cd:92:32:6b:09:80:87:14:33:b6:63:3d:a9:
         b0:fe:dd:36:ce:7b:4a:8a:54:ca:58:94:cd:ff:a2:cd:20:29:
         a3:07:0e:ee:16:29:80:b7:9b:71:4b:63:40:8f:c7:b5:33:43:
         3e:89:82:ce:f3:e3:da:28:3c:5c:f6:bb:16:17:50:5e:e5:4c:
         54:fd:8e:b7:30:a6:b6:ea:48:f8:b5:dc:1d:88:ef:50:52:2d:
         5a:f0:52:b1:a5:66:e8:9f:fe:4e:7d:f4:4b:60:f0:e2:25:69:
         e0:18:96:2d:2a:6c:80:20:92:54:74:14:cc:ec:96:8e:0b:be:
         5b:89:f2:76
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUHqRz4KXR0iM2Gwj6lOPgaRwh3bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAzQUI2REM2QUFEOEM1NUJEMzA4Q0ExQUUxRUU0ODQx
RTlEQzMwNzAeFw0yMzA2MTYxNjE2MjBaFw0yNDA2MTQxNjIxMjBaMDMxMTAvBgNV
BAMTKDAyRjIxQzFDOERDN0UwMzdGQkNBMUZFQzIxQjlCMTU4NjEwRTQzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVUBtnci+VbtDtFhCAF/u/41Za
6rG4P3JdsOFgvSMulQP0rstotLEXhBmvOZtbD3rYAmniqr4pZ2IKpEnbOqycXx5F
AkDJ2d8+/rpmW/zK6FXEjWj56RXmA554htgjSbg8dm1ANP4A6czsM8nrJ9/NbbXP
aFIZQhNtyHlMdV2u3ab2adPD9r0OScxci7MrczWT/KI2fMBE7F/Jyw5YaajS5AQ8
b7IW4B1g8JAeDdxQlJaGntrhiTDlxIAspL3HKCt3fblIPw2RYfSLkiyVZWs+ujzM
5g86CsPVEJG6inTGqaGRXRvQlilIvNmZA4vcmaBnr4DdzSuGlavXB+6rqSjfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUAvIcHI3H4Df7yh/sIbmxWGEOQ7kwHwYDVR0j
BBgwFoAUADq23GqtjFW9MIyhrh7khB6dwwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5DM0pZU1Q4ODlyazJyN0RpNldRMXlqSjZ3dFNTQWEyZEp4cXJMYnE4
YlkvMS8wMDNBQjZEQzZBQUQ4QzU1QkQzMDhDQTFBRTFFRTQ4NDFFOURDMzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAwM0FCNkRDNkFBRDhDNTVC
RDMwOENBMUFFMUVFNDg0MUU5REMzMDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuQzNKWVNUODg5cmsycjdEaTZXUTF5ako2d3RTU0FhMmRKeHFyTGJxOGJZLzEv
MzIzODMwMzQzYTM4NjY2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMw
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECPwwDQYJKoZIhvcNAQELBQADggEBAEqq0RPquhRm
jAh+YgRjWcCvX9ytcYC2Urz8HUvRo/bjDzgB5uNyBiIfzJHoo2V7x6EJvOOTkLPK
4X7xhlWv2M/0frySJiCPsy2GLZNw58AFv23oUZ2Hh2qFcLigqMqxzJ708/YsAyka
OlIyUV/qbb0shI18+FLfgH15JKZeIGDYoLufzZIyawmAhxQztmM9qbD+3TbOe0qK
VMpYlM3/os0gKaMHDu4WKYC3m3FLY0CPx7UzQz6Jgs7z49ooPFz2uxYXUF7lTFT9
jrcwprbqSPi13B2I71BSLVrwUrGlZuif/k599Etg8OIlaeAYli0qbIAgklR0FMzs
lo4LvluJ8nY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org