Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          0B2qzZ8umOWnqy/ZUSheOyNmKpw5EttDzkmSbD1uU/0=
Subject key identifier:   E7:0D:B5:F5:3B:50:1F:E0:D1:44:E2:B2:32:C2:E6:CB:82:C3:4B:31
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       16AFDF5C9D4DDA38F8AF39518FF8C1608E641769
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:45 +0000
ROA not before:           Thu 04 Apr 2024 05:58:45 +0000
ROA not after:            Thu 03 Apr 2025 06:03:45 +0000
asID:                     265010
IP address blocks:        2804:3160:7003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:af:df:5c:9d:4d:da:38:f8:af:39:51:8f:f8:c1:60:8e:64:17:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:45 2024 GMT
            Not After : Apr  3 06:03:45 2025 GMT
        Subject: CN=E70DB5F53B501FE0D144E2B232C2E6CB82C34B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:2f:b8:0f:b6:95:ed:24:00:64:5f:54:a7:
                    48:6e:d6:6f:6b:7e:75:a2:93:ff:f9:1e:c2:ad:a1:
                    89:3b:d2:c3:e4:90:4e:12:2c:9f:39:88:e6:ea:34:
                    5b:e4:53:e6:57:56:dc:7a:bb:51:ca:66:b0:34:bf:
                    fb:2c:73:0c:b6:9d:86:19:43:5e:30:bb:a2:7d:63:
                    41:b3:6c:2d:bf:a5:7f:a8:93:fe:60:d2:61:16:9c:
                    6e:f8:6d:dc:f2:71:38:d1:5f:30:fc:f7:f5:cf:7d:
                    0c:93:b7:4d:d3:d3:c6:f8:3f:3d:5d:1f:24:04:3a:
                    fa:34:f3:8d:5f:f2:60:b6:54:32:57:1f:b9:28:b0:
                    c1:bb:4c:d6:e3:83:00:ab:16:87:6d:3d:9c:07:00:
                    d0:c2:37:95:25:9a:25:95:60:8f:5d:de:16:68:1b:
                    ea:e9:9a:8c:44:38:a6:d8:3a:d1:b5:60:ad:3b:56:
                    e2:35:26:8c:93:78:52:5c:c6:5d:40:84:b8:34:25:
                    9d:fd:1b:c2:3c:d9:fd:e6:b2:00:4e:98:66:cb:6c:
                    4e:9e:ee:99:b4:f3:29:f4:60:d9:ec:25:4e:92:1c:
                    2d:c3:bb:6b:7d:ff:5e:76:12:d6:8d:e8:92:b8:96:
                    61:81:c2:0e:78:78:ab:48:61:f0:fd:e3:c0:0b:6d:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0D:B5:F5:3B:50:1F:E0:D1:44:E2:B2:32:C2:E6:CB:82:C3:4B:31
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:34:84:21:0c:eb:6a:13:0f:37:6d:9f:9a:60:d4:f5:d3:2e:
         ed:c4:02:52:80:05:dd:b0:1c:a1:14:7a:15:63:db:81:4d:cd:
         fa:5f:b7:3e:db:74:12:4e:6e:07:b9:58:fe:34:2e:97:66:19:
         82:95:81:06:97:f2:5e:ca:83:35:a7:83:5f:80:6d:b4:a3:2a:
         a2:5f:41:50:fd:77:6a:f8:7b:de:a3:b1:28:f7:fc:75:b5:2f:
         45:b3:43:51:68:14:83:77:d6:ea:f5:f8:a1:d7:9c:6d:0b:4c:
         79:df:c8:23:fb:f3:ab:86:48:dd:46:17:db:d6:b7:66:74:ad:
         89:9d:21:b4:dc:53:16:cf:0a:b5:bd:79:d2:e0:5c:cd:14:19:
         6b:a8:4e:fe:57:42:21:59:fe:ab:98:7f:25:83:0a:3e:cc:62:
         96:e1:bb:13:33:d9:58:97:46:83:7a:cc:05:c6:59:24:da:a0:
         31:42:99:26:57:08:e9:4f:33:13:b8:5d:6d:6f:68:df:4e:58:
         03:40:05:97:70:98:0f:94:35:5b:c1:fe:e4:58:ae:4f:c3:bc:
         b1:ad:fa:36:bf:c0:88:08:cb:4f:90:68:3a:55:30:75:a5:0e:
         11:6f:21:2e:4b:48:52:18:88:67:73:85:d7:6d:6a:08:5b:33:
         3b:08:7e:b5
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUFq/fXJ1N2jj4rzlRj/jBYI5kF2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg3RjM5NTU0M0I1RDE1QzlDNDI1MjNFOTZCODQyQ0U2
MURENEI5MDAeFw0yNDA0MDQwNTU4NDVaFw0yNTA0MDMwNjAzNDVaMDMxMTAvBgNV
BAMTKEU3MERCNUY1M0I1MDFGRTBEMTQ0RTJCMjMyQzJFNkNCODJDMzRCMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIy+4D7aV7SQAZF9Up0hu1m9r
fnWik//5HsKtoYk70sPkkE4SLJ85iObqNFvkU+ZXVtx6u1HKZrA0v/sscwy2nYYZ
Q14wu6J9Y0GzbC2/pX+ok/5g0mEWnG74bdzycTjRXzD89/XPfQyTt03T08b4Pz1d
HyQEOvo0841f8mC2VDJXH7kosMG7TNbjgwCrFodtPZwHANDCN5UlmiWVYI9d3hZo
G+rpmoxEOKbYOtG1YK07VuI1JoyTeFJcxl1AhLg0JZ39G8I82f3msgBOmGbLbE6e
7pm08yn0YNnsJU6SHC3Du2t9/152EtaN6JK4lmGBwg54eKtIYfD948ALbfzfAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU5w219TtQH+DRROKyMsLmy4LDSzEwHwYDVR0j
BBgwFoAUaH85VUO10VycQlI+lrhCzmHdS5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMS82ODdGMzk1NTQzQjVEMTVDOUM0MjUyM0U5NkI4NDJDRTYxREQ0QjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0YzOTU1NDNCNUQxNUM5
QzQyNTIzRTk2Qjg0MkNFNjFERDRCOTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzEv
MzIzODMwMzQzYTMzMzEzNjMwM2EzNzMwMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNTMwMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMWBwAzANBgkqhkiG9w0BAQsF
AAOCAQEAIzSEIQzrahMPN22fmmDU9dMu7cQCUoAF3bAcoRR6FWPbgU3N+l+3Ptt0
Ek5uB7lY/jQul2YZgpWBBpfyXsqDNaeDX4BttKMqol9BUP13avh73qOxKPf8dbUv
RbNDUWgUg3fW6vX4odecbQtMed/II/vzq4ZI3UYX29a3ZnStiZ0htNxTFs8Ktb15
0uBczRQZa6hO/ldCIVn+q5h/JYMKPsxiluG7EzPZWJdGg3rMBcZZJNqgMUKZJlcI
6U8zE7hdbW9o305YA0AFl3CYD5Q1W8H+5FiuT8O8sa36Nr/AiAjLT5BoOlUwdaUO
EW8hLktIUhiIZ3OF121qCFszOwh+tQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org