Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa
File:                     323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa (raw, json)
Hash identifier:          eLqz+obrUGj/FRcg7iUhQtP5BpUBblFaI11laJPqh9Q=
Subject key identifier:   2D:A9:70:A8:D4:81:A2:CA:65:92:E1:24:06:5D:CC:CA:00:49:5E:05
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       08968E79F844D1C28B9D47D7CE99924085A567D2
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:46 +0000
ROA not before:           Thu 04 Apr 2024 05:58:46 +0000
ROA not after:            Thu 03 Apr 2025 06:03:46 +0000
asID:                     265010
IP address blocks:        2804:3160:7000::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:96:8e:79:f8:44:d1:c2:8b:9d:47:d7:ce:99:92:40:85:a5:67:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:46 2024 GMT
            Not After : Apr  3 06:03:46 2025 GMT
        Subject: CN=2DA970A8D481A2CA6592E124065DCCCA00495E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:af:a6:ac:48:69:7c:16:da:1c:c9:b7:cd:
                    a8:99:78:99:c3:15:e0:6f:e5:18:95:68:07:1e:37:
                    0f:f0:0f:c5:d3:39:64:9c:34:8e:fd:67:5a:31:9f:
                    e7:a3:14:32:74:7b:fe:8c:1f:bf:56:43:63:16:f3:
                    a5:05:47:45:53:d0:c0:2e:4e:4d:90:80:b9:4e:9d:
                    ac:b1:ec:b0:ac:48:94:42:73:45:14:0a:ff:36:04:
                    86:1b:36:fd:e5:3c:43:1a:68:a5:4f:14:88:79:70:
                    42:bf:cd:ed:7b:71:f2:e9:51:0d:58:68:0f:45:ed:
                    26:e0:70:94:83:f8:9f:d1:d0:38:d5:ad:c0:f0:ce:
                    a2:3b:49:07:29:47:3a:ed:f3:be:aa:fe:28:18:e8:
                    aa:90:d0:fd:05:9e:5f:80:44:7e:ed:d2:32:56:8e:
                    c1:ae:df:48:9b:08:d3:bc:83:0f:f0:6f:92:25:06:
                    b1:76:b6:89:90:1f:93:86:d4:49:8f:1a:20:a7:56:
                    3b:02:a8:7a:ca:ad:f0:38:fa:25:00:fb:d5:e5:7d:
                    ad:15:b1:6b:d6:b2:7c:6a:7a:87:54:b8:90:6a:5d:
                    55:d8:38:85:44:f9:ee:9d:2a:35:a8:58:54:d6:bf:
                    9d:86:dc:00:3a:d0:92:1c:1f:64:30:9b:f1:27:68:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:70:A8:D4:81:A2:CA:65:92:E1:24:06:5D:CC:CA:00:49:5E:05
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7000::/46

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:69:3a:6b:26:31:20:c3:d5:c1:90:ae:8c:0d:f5:3f:f2:
         d4:5c:b7:cc:b6:54:be:d2:9f:5c:5a:5e:f1:86:81:2e:b9:82:
         34:af:2d:8f:d6:05:be:95:5e:fd:4f:7f:bc:2c:06:a2:53:35:
         a3:fe:d9:24:92:03:9f:ea:7c:aa:e9:23:74:5e:55:4c:5c:5b:
         d8:b6:21:13:91:a5:4c:bc:e9:9f:b4:a3:e9:98:41:60:bc:f8:
         60:02:56:1d:6d:b3:d9:70:fd:87:af:da:8d:49:2e:e8:a1:dc:
         10:07:99:5f:06:fd:e6:60:da:88:e0:48:45:dd:23:c1:a4:13:
         fe:9d:29:d9:dd:01:c1:ed:cb:46:0f:15:47:57:bb:58:1e:53:
         37:3f:62:45:3b:b0:1b:bf:ae:13:3b:9a:42:57:53:c0:30:ef:
         cf:bd:ce:3b:87:81:d5:66:fe:55:b2:90:9c:19:27:2c:e9:98:
         ec:ba:72:40:ff:5b:b0:b6:e2:03:be:14:37:2b:a8:d9:73:93:
         21:c6:43:40:05:6e:b6:cf:e4:86:9a:22:47:60:fb:ea:b9:47:
         b7:a9:40:8e:4d:d2:a5:c1:11:60:27:45:67:65:e4:b0:d2:5e:
         93:df:60:ca:41:0d:8b:b9:39:8d:b9:b4:46:43:a5:1a:b3:81:
         b4:1e:88:2b
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUCJaOefhE0cKLnUfXzpmSQIWlZ9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg3RjM5NTU0M0I1RDE1QzlDNDI1MjNFOTZCODQyQ0U2
MURENEI5MDAeFw0yNDA0MDQwNTU4NDZaFw0yNTA0MDMwNjAzNDZaMDMxMTAvBgNV
BAMTKDJEQTk3MEE4RDQ4MUEyQ0E2NTkyRTEyNDA2NURDQ0NBMDA0OTVFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQK+mrEhpfBbaHMm3zaiZeJnD
FeBv5RiVaAceNw/wD8XTOWScNI79Z1oxn+ejFDJ0e/6MH79WQ2MW86UFR0VT0MAu
Tk2QgLlOnayx7LCsSJRCc0UUCv82BIYbNv3lPEMaaKVPFIh5cEK/ze17cfLpUQ1Y
aA9F7SbgcJSD+J/R0DjVrcDwzqI7SQcpRzrt876q/igY6KqQ0P0Fnl+ARH7t0jJW
jsGu30ibCNO8gw/wb5IlBrF2tomQH5OG1EmPGiCnVjsCqHrKrfA4+iUA+9Xlfa0V
sWvWsnxqeodUuJBqXVXYOIVE+e6dKjWoWFTWv52G3AA60JIcH2Qwm/EnaMm1AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQULalwqNSBosplkuEkBl3MygBJXgUwHwYDVR0j
BBgwFoAUaH85VUO10VycQlI+lrhCzmHdS5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMS82ODdGMzk1NTQzQjVEMTVDOUM0MjUyM0U5NkI4NDJDRTYxREQ0QjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0YzOTU1NDNCNUQxNUM5
QzQyNTIzRTk2Qjg0MkNFNjFERDRCOTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzEv
MzIzODMwMzQzYTMzMzEzNjMwM2EzNzMwMzAzMDNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDMyMzYzNTMwMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEMWBwADANBgkqhkiG9w0BAQsF
AAOCAQEAli1pOmsmMSDD1cGQrowN9T/y1Fy3zLZUvtKfXFpe8YaBLrmCNK8tj9YF
vpVe/U9/vCwGolM1o/7ZJJIDn+p8qukjdF5VTFxb2LYhE5GlTLzpn7Sj6ZhBYLz4
YAJWHW2z2XD9h6/ajUku6KHcEAeZXwb95mDaiOBIRd0jwaQT/p0p2d0Bwe3LRg8V
R1e7WB5TNz9iRTuwG7+uEzuaQldTwDDvz73OO4eB1Wb+VbKQnBknLOmY7LpyQP9b
sLbiA74UNyuo2XOTIcZDQAVuts/khpoiR2D76rlHt6lAjk3SpcERYCdFZ2XksNJe
k99gykENi7k5jbm0RkOlGrOBtB6IKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org