Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3332203d3e203631393432.roa
File:                     323830343a313839383a3a2f33322d3332203d3e203631393432.roa (raw, json)
Hash identifier:          gDUuti+OQmhj6nlSOUg5V7cyp6uK+PBwKP4h5DXynFA=
Subject key identifier:   3E:D2:61:49:6D:E6:F5:B4:E3:2A:31:06:04:FE:AE:66:02:1B:72:29
Certificate issuer:       /CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
Certificate serial:       4434F3CF04F474EBBC52C66A1670C991535410E2
Authority key identifier: F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3332203d3e203631393432.roa
Signing time:             Fri 14 Apr 2023 16:39:27 +0000
ROA not before:           Fri 14 Apr 2023 16:34:27 +0000
ROA not after:            Fri 12 Apr 2024 16:39:27 +0000
asID:                     61942
IP address blocks:        2804:1898::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:34:f3:cf:04:f4:74:eb:bc:52:c6:6a:16:70:c9:91:53:54:10:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11C1CC2AC17600695F88B435DCA3A62798480D8
        Validity
            Not Before: Apr 14 16:34:27 2023 GMT
            Not After : Apr 12 16:39:27 2024 GMT
        Subject: CN=3ED261496DE6F5B4E32A310604FEAE66021B7229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:db:c9:2d:59:76:b7:33:0d:80:df:2b:af:
                    3b:05:90:6b:86:85:ef:79:c4:be:b1:59:e0:7b:f2:
                    49:17:e8:e2:d1:35:a3:4b:26:88:5a:5a:b9:7b:70:
                    48:c8:4e:e3:6e:48:a7:08:50:e5:b4:9e:ac:0a:d1:
                    59:2b:73:ab:99:72:1a:44:ae:89:73:3d:f3:2b:5c:
                    e7:d5:cb:59:48:86:10:64:ba:11:83:ec:14:dd:a7:
                    15:ca:b6:14:12:09:a9:f3:62:3f:c3:47:fe:b4:3d:
                    ad:b9:63:c2:f1:20:41:8f:92:2e:9d:e7:99:3f:13:
                    53:fa:ee:d8:8d:98:d2:d5:e4:b0:72:88:b5:3b:7d:
                    2c:f5:ae:56:b2:25:5f:fb:8e:bb:91:93:8b:32:c0:
                    80:aa:0f:e0:ab:de:45:a0:b2:3a:a2:70:28:2c:b6:
                    7c:a2:a4:b8:29:e6:44:fc:58:a8:1c:8e:5e:74:e3:
                    d6:5b:5c:2d:a4:00:76:de:50:aa:49:88:e9:0f:d4:
                    47:c0:5d:5b:a6:01:c0:c7:44:36:b2:1a:7b:68:cb:
                    2a:91:af:44:1e:04:6d:c6:b0:2a:f2:6e:ad:24:42:
                    5e:a5:39:10:ad:73:73:61:93:a3:f1:7a:de:36:80:
                    4d:1c:8a:d3:2e:bf:d8:a6:5c:d1:dd:1e:32:a3:31:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D2:61:49:6D:E6:F5:B4:E3:2A:31:06:04:FE:AE:66:02:1B:72:29
            X509v3 Authority Key Identifier:
                keyid:F1:1C:1C:C2:AC:17:60:06:95:F8:8B:43:5D:CA:3A:62:79:84:80:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F11C1CC2AC17600695F88B435DCA3A62798480D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3332203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1898::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:bd:a8:cd:68:1d:e2:e1:a4:f1:5f:1f:9f:0f:9e:fe:b8:4f:
         ed:4a:3f:39:13:3e:ec:0e:8c:db:0a:10:d5:d2:42:59:ba:77:
         13:5e:1d:dd:34:2d:b5:64:a5:9c:0a:7a:ea:ba:c3:ef:3d:f7:
         bf:7b:f5:4a:f9:55:d9:7b:a5:4b:0e:ee:eb:d7:08:f6:d5:52:
         e2:32:d2:46:49:31:f8:4d:09:b8:fc:68:52:30:ef:cb:f1:72:
         22:6a:7b:de:e9:18:7b:d5:58:30:47:79:4f:03:54:32:69:d8:
         63:e4:fe:3c:61:c1:11:d0:f5:be:f1:70:24:73:4b:59:71:d0:
         63:25:63:9c:c3:72:d7:97:04:39:6f:b6:a1:e0:b2:ec:b2:16:
         70:ab:0b:74:f5:05:6e:17:75:b4:af:f7:42:61:e6:9a:8f:10:
         bf:6c:e3:c7:21:32:aa:95:6b:e0:f3:f5:45:84:5d:ae:a3:fa:
         cd:8c:2e:2b:98:c8:bb:e7:2d:00:ba:51:60:ee:50:bb:d5:fc:
         22:a0:e4:87:5e:91:9e:81:99:cd:19:bf:02:9d:36:a7:43:43:
         74:14:98:b1:26:67:e3:53:b2:05:ed:ad:a5:46:a1:53:b2:9c:
         60:8e:22:68:fd:3a:c6:3d:3d:e4:3b:c1:35:8a:cd:a3:c1:2e:
         c0:93:0b:17
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIURDTzzwT0dOu8UsZqFnDJkVNUEOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjExQzFDQzJBQzE3NjAwNjk1Rjg4QjQzNURDQTNBNjI3
OTg0ODBEODAeFw0yMzA0MTQxNjM0MjdaFw0yNDA0MTIxNjM5MjdaMDMxMTAvBgNV
BAMTKDNFRDI2MTQ5NkRFNkY1QjRFMzJBMzEwNjA0RkVBRTY2MDIxQjcyMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rdvJLVl2tzMNgN8rrzsFkGuG
he95xL6xWeB78kkX6OLRNaNLJohaWrl7cEjITuNuSKcIUOW0nqwK0Vkrc6uZchpE
rolzPfMrXOfVy1lIhhBkuhGD7BTdpxXKthQSCanzYj/DR/60Pa25Y8LxIEGPki6d
55k/E1P67tiNmNLV5LByiLU7fSz1rlayJV/7jruRk4sywICqD+Cr3kWgsjqicCgs
tnyipLgp5kT8WKgcjl5049ZbXC2kAHbeUKpJiOkP1EfAXVumAcDHRDayGntoyyqR
r0QeBG3GsCrybq0kQl6lORCtc3Nhk6Pxet42gE0citMuv9imXNHdHjKjMfYdAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUPtJhSW3m9bTjKjEGBP6uZgIbcikwHwYDVR0j
BBgwFoAU8RwcwqwXYAaV+ItDXco6YnmEgNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMC9GMTFDMUNDMkFDMTc2MDA2OTVGODhCNDM1RENBM0E2Mjc5ODQ4MEQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxMUMxQ0MyQUMxNzYwMDY5
NUY4OEI0MzVEQ0EzQTYyNzk4NDgwRDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzAv
MzIzODMwMzQzYTMxMzgzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM5
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGJgwDQYJKoZIhvcNAQELBQADggEBAMa9qM1oHeLh
pPFfH58Pnv64T+1KPzkTPuwOjNsKENXSQlm6dxNeHd00LbVkpZwKeuq6w+899797
9Ur5Vdl7pUsO7uvXCPbVUuIy0kZJMfhNCbj8aFIw78vxciJqe97pGHvVWDBHeU8D
VDJp2GPk/jxhwRHQ9b7xcCRzS1lx0GMlY5zDcteXBDlvtqHgsuyyFnCrC3T1BW4X
dbSv90Jh5pqPEL9s48chMqqVa+Dz9UWEXa6j+s2MLiuYyLvnLQC6UWDuULvV/CKg
5IdekZ6Bmc0ZvwKdNqdDQ3QUmLEmZ+NTsgXtraVGoVOynGCOImj9OsY9PeQ7wTWK
zaPBLsCTCxc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org