Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a313030303a3a2f33362d3336203d3e20323634323238.roa
File:                     323830343a323438383a313030303a3a2f33362d3336203d3e20323634323238.roa (raw, json)
Hash identifier:          jgu2Jv8xHLXPfcvzGHTXERHL7213RJ/Cjln9fzdfJMs=
Subject key identifier:   43:4C:F0:58:14:77:92:BE:4D:7E:12:F1:46:86:31:C7:69:48:67:8D
Certificate issuer:       /CN=318D4DCFA494762EAD6051048B9A3488DEA4BE40
Certificate serial:       04B337A9080CE3830DF86CD7E314A37C0F300245
Authority key identifier: 31:8D:4D:CF:A4:94:76:2E:AD:60:51:04:8B:9A:34:88:DE:A4:BE:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D4DCFA494762EAD6051048B9A3488DEA4BE40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a313030303a3a2f33362d3336203d3e20323634323238.roa
Signing time:             Mon 17 Oct 2022 20:40:11 +0000
ROA not before:           Mon 17 Oct 2022 20:35:11 +0000
ROA not after:            Mon 16 Oct 2023 20:40:11 +0000
asID:                     264228
IP address blocks:        2804:2488:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b3:37:a9:08:0c:e3:83:0d:f8:6c:d7:e3:14:a3:7c:0f:30:02:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318D4DCFA494762EAD6051048B9A3488DEA4BE40
        Validity
            Not Before: Oct 17 20:35:11 2022 GMT
            Not After : Oct 16 20:40:11 2023 GMT
        Subject: CN=434CF058147792BE4D7E12F1468631C76948678D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:75:c9:8b:ec:08:08:fb:7d:37:e6:a8:32:
                    51:27:d1:38:25:6a:41:9a:33:42:e9:16:6f:d7:bd:
                    af:5f:94:be:93:f5:d0:d6:4d:05:c0:63:d3:7d:66:
                    65:a7:66:4c:30:92:05:fa:23:9d:58:78:70:eb:4c:
                    7e:34:88:bd:5f:52:f1:39:e4:8e:dc:ba:ce:45:98:
                    3e:a7:55:50:09:b3:be:41:75:99:5f:14:4e:a3:1b:
                    ce:78:c5:84:07:21:6a:f1:46:4f:74:66:3a:3e:39:
                    85:bb:2e:14:77:64:62:46:13:ff:f3:89:71:61:65:
                    1c:dc:ef:76:59:03:81:30:86:99:07:79:d4:cd:b1:
                    48:c5:80:18:36:f4:9c:fe:d3:2d:3b:63:9b:a0:97:
                    f0:bb:b6:78:59:0a:20:fa:52:d5:fd:3c:7e:1a:79:
                    17:88:29:34:ea:7a:77:f3:7f:22:54:f8:6e:9f:89:
                    85:86:8d:4f:3d:dc:d1:89:77:6f:8d:e5:48:40:1f:
                    6d:ee:d8:1e:73:03:69:03:25:8f:da:56:f4:84:75:
                    e2:35:d7:3c:60:53:f3:de:9a:dc:f2:47:6f:09:77:
                    50:db:6e:c3:17:89:5a:5e:f3:a0:48:7d:bc:d4:b1:
                    a1:89:78:ec:8c:75:e6:a5:00:4d:65:b4:ff:93:98:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4C:F0:58:14:77:92:BE:4D:7E:12:F1:46:86:31:C7:69:48:67:8D
            X509v3 Authority Key Identifier:
                keyid:31:8D:4D:CF:A4:94:76:2E:AD:60:51:04:8B:9A:34:88:DE:A4:BE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/318D4DCFA494762EAD6051048B9A3488DEA4BE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318D4DCFA494762EAD6051048B9A3488DEA4BE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/323830343a323438383a313030303a3a2f33362d3336203d3e20323634323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2488:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a5:ea:8b:23:e1:9c:ff:55:f7:03:66:0a:54:86:be:f9:2c:88:
         d4:e6:7f:8c:25:20:76:0c:90:9a:0d:8a:f1:dd:b6:02:97:ce:
         32:66:53:9f:e9:9f:cc:c9:b3:0e:94:54:48:c1:1b:7b:6a:aa:
         ec:5b:a5:9a:fe:07:f8:3d:3d:e9:d6:00:4f:c4:a8:3c:95:2c:
         11:c9:82:68:3e:2e:e2:e3:3e:30:a2:ad:75:49:d7:6c:7f:d1:
         01:41:23:69:eb:8d:0d:73:c2:28:cb:68:ef:da:fe:c0:77:0b:
         03:b1:d2:82:4d:f1:1b:2f:f0:88:25:ae:d9:43:e4:d3:91:7e:
         f4:7d:c5:a9:99:05:d4:c6:0a:0c:99:9a:d0:ff:b1:a1:c9:64:
         70:35:1b:3b:39:2f:ed:a3:e0:fc:8a:a9:bc:ba:e6:e8:85:8b:
         be:6a:80:98:09:f6:79:cf:8c:23:60:5a:e6:69:db:9e:ac:c3:
         af:93:3d:05:16:8e:93:f8:8e:9a:a6:5c:68:29:fe:87:d9:ce:
         0b:59:f4:c1:7d:db:45:bb:7f:c9:97:ae:2e:a5:ea:17:d9:46:
         c2:05:81:64:49:75:a5:e3:d0:d6:33:ac:dc:eb:c2:bb:58:3b:
         83:12:cc:08:47:ed:3f:1a:d8:52:a9:3f:fe:77:14:60:31:71:
         5d:ac:3a:4f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBLM3qQgM44MN+GzX4xSjfA8wAkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE4RDREQ0ZBNDk0NzYyRUFENjA1MTA0OEI5QTM0ODhE
RUE0QkU0MDAeFw0yMjEwMTcyMDM1MTFaFw0yMzEwMTYyMDQwMTFaMDMxMTAvBgNV
BAMTKDQzNENGMDU4MTQ3NzkyQkU0RDdFMTJGMTQ2ODYzMUM3Njk0ODY3OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnknXJi+wICPt9N+aoMlEn0Tgl
akGaM0LpFm/Xva9flL6T9dDWTQXAY9N9ZmWnZkwwkgX6I51YeHDrTH40iL1fUvE5
5I7cus5FmD6nVVAJs75BdZlfFE6jG854xYQHIWrxRk90Zjo+OYW7LhR3ZGJGE//z
iXFhZRzc73ZZA4EwhpkHedTNsUjFgBg29Jz+0y07Y5ugl/C7tnhZCiD6UtX9PH4a
eReIKTTqenfzfyJU+G6fiYWGjU893NGJd2+N5UhAH23u2B5zA2kDJY/aVvSEdeI1
1zxgU/PemtzyR28Jd1DbbsMXiVpe86BIfbzUsaGJeOyMdealAE1ltP+TmIbTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ0zwWBR3kr5NfhLxRoYxx2lIZ40wHwYDVR0j
BBgwFoAUMY1Nz6SUdi6tYFEEi5o0iN6kvkAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJDMmI0cFJWU2dFcXZjYXVHUGUzRW84OWU1RDV3ejJQeW43NjR3TEFu
S0YvMS8zMThENERDRkE0OTQ3NjJFQUQ2MDUxMDQ4QjlBMzQ4OERFQTRCRTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMxOEQ0RENGQTQ5NDc2MkVB
RDYwNTEwNDhCOUEzNDg4REVBNEJFNDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyQzJiNHBSVlNnRXF2Y2F1R1BlM0VvODllNUQ1d3oyUHluNzY0d0xBbktGLzEv
MzIzODMwMzQzYTMyMzQzODM4M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJIgQMA0GCSqGSIb3DQEBCwUA
A4IBAQCl6osj4Zz/VfcDZgpUhr75LIjU5n+MJSB2DJCaDYrx3bYCl84yZlOf6Z/M
ybMOlFRIwRt7aqrsW6Wa/gf4PT3p1gBPxKg8lSwRyYJoPi7i4z4woq11Sddsf9EB
QSNp640Nc8Ioy2jv2v7AdwsDsdKCTfEbL/CIJa7ZQ+TTkX70fcWpmQXUxgoMmZrQ
/7GhyWRwNRs7OS/to+D8iqm8uubohYu+aoCYCfZ5z4wjYFrmaduerMOvkz0FFo6T
+I6aplxoKf6H2c4LWfTBfdtFu3/Jl64upeoX2UbCBYFkSXWl49DWM6zc68K7WDuD
EswIR+0/GthSqT/+dxRgMXFdrDpP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org