Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383330303a3a2f34302d3430203d3e20323639323032.roa
File:                     323830343a363066343a383330303a3a2f34302d3430203d3e20323639323032.roa (raw, json)
Hash identifier:          sOTIvqNOmxqzqnVfl8Ydl3cjc1RHYltRLxfdqbKhaS0=
Subject key identifier:   C3:2C:C2:8D:9F:B5:03:CA:49:73:B9:8B:9F:23:12:06:75:FE:AC:A2
Certificate issuer:       /CN=0E53B69644D25C8C2F97BD8686E0389E08280508
Certificate serial:       7106FE1B8CB55C7CA3056ED198E69D0A935D0779
Authority key identifier: 0E:53:B6:96:44:D2:5C:8C:2F:97:BD:86:86:E0:38:9E:08:28:05:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E53B69644D25C8C2F97BD8686E0389E08280508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383330303a3a2f34302d3430203d3e20323639323032.roa
Signing time:             Sun 28 May 2023 13:14:38 +0000
ROA not before:           Sun 28 May 2023 13:09:38 +0000
ROA not after:            Sun 26 May 2024 13:14:38 +0000
asID:                     269202
IP address blocks:        2804:60f4:8300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:06:fe:1b:8c:b5:5c:7c:a3:05:6e:d1:98:e6:9d:0a:93:5d:07:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E53B69644D25C8C2F97BD8686E0389E08280508
        Validity
            Not Before: May 28 13:09:38 2023 GMT
            Not After : May 26 13:14:38 2024 GMT
        Subject: CN=C32CC28D9FB503CA4973B98B9F23120675FEACA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:66:d5:59:88:3e:69:4f:e6:d3:3d:63:72:
                    df:6d:5a:f7:df:a7:f9:a9:dd:49:be:b0:b8:d6:67:
                    19:db:df:29:a7:11:81:f4:19:66:92:d2:ed:07:a8:
                    0f:c4:42:f1:2c:d2:e0:a0:6a:c3:94:22:20:3c:1a:
                    f4:4d:92:74:d6:7f:fe:f0:0e:9a:94:0e:7c:ab:71:
                    ea:22:06:40:fb:08:de:fa:15:2a:a2:e6:d6:4f:fd:
                    43:2f:9d:b4:a1:25:48:1d:1d:8d:df:5f:06:de:96:
                    ce:d0:54:c7:b9:4e:7e:32:00:44:d2:8b:1d:13:28:
                    f2:16:b2:de:f0:8c:83:ed:94:e4:99:92:01:d9:60:
                    df:8b:7f:e3:95:06:01:64:5d:97:62:03:18:ea:dd:
                    6d:66:dc:90:2d:ac:cc:7e:06:33:26:8e:de:23:36:
                    03:dd:6a:36:bf:43:97:7b:f1:a3:4b:84:3e:76:bc:
                    16:f8:5a:83:60:17:7d:6e:a5:00:69:0e:40:ba:a8:
                    fd:9f:e3:74:bd:d6:9c:2b:03:71:8a:f8:51:3c:21:
                    24:b4:7a:15:11:d1:5e:4b:a7:8e:d5:d2:d3:ac:72:
                    2e:66:3a:17:fb:cb:e2:86:50:73:b8:de:d1:40:ac:
                    ea:7f:e1:f9:5c:40:3b:62:bb:67:8c:c5:7f:3c:4e:
                    e9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2C:C2:8D:9F:B5:03:CA:49:73:B9:8B:9F:23:12:06:75:FE:AC:A2
            X509v3 Authority Key Identifier:
                keyid:0E:53:B6:96:44:D2:5C:8C:2F:97:BD:86:86:E0:38:9E:08:28:05:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/0E53B69644D25C8C2F97BD8686E0389E08280508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E53B69644D25C8C2F97BD8686E0389E08280508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383330303a3a2f34302d3430203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:6c:1b:bd:2f:bb:90:c4:58:90:33:e6:33:e8:e0:5d:e9:
         f8:2b:26:e1:93:ab:1b:81:37:be:29:e0:26:ae:18:6c:5a:43:
         2b:b6:a9:3d:1c:36:e4:23:d4:af:fd:6a:d6:9f:18:bd:0e:ac:
         23:d1:d8:79:61:74:94:39:1e:33:26:64:f3:e0:b2:9f:05:17:
         ca:ed:5d:9b:14:bc:dd:e8:6c:de:43:ed:21:42:85:7e:81:8d:
         5f:34:50:f1:21:60:0b:38:ad:61:6a:a1:a4:77:50:0e:c4:9f:
         58:8a:ae:13:57:2d:0c:07:de:0b:31:f9:d1:11:f5:d7:d6:5e:
         79:12:d8:fb:9f:87:6d:94:ea:ce:88:b6:a9:fe:e7:bb:f0:9c:
         b7:de:fa:f8:4c:af:19:4f:47:6b:b5:f8:b3:b4:93:72:37:5e:
         24:25:03:2e:60:8a:f8:20:78:82:23:41:d2:f8:34:d1:da:76:
         21:00:a0:55:75:df:c1:e7:1f:44:dd:2c:42:f6:a2:e4:5d:43:
         2d:ab:1f:9c:c2:6c:fd:80:80:73:f4:c3:f1:6e:1e:49:13:82:
         93:8f:eb:9d:28:4b:02:78:f7:92:32:fd:9d:53:b9:a1:cf:1d:
         48:9b:e1:60:2c:03:a5:0c:c1:5e:e9:92:71:2c:25:c2:bd:ec:
         d2:7a:37:a7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcQb+G4y1XHyjBW7RmOadCpNdB3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU1M0I2OTY0NEQyNUM4QzJGOTdCRDg2ODZFMDM4OUUw
ODI4MDUwODAeFw0yMzA1MjgxMzA5MzhaFw0yNDA1MjYxMzE0MzhaMDMxMTAvBgNV
BAMTKEMzMkNDMjhEOUZCNTAzQ0E0OTczQjk4QjlGMjMxMjA2NzVGRUFDQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgmbVWYg+aU/m0z1jct9tWvff
p/mp3Um+sLjWZxnb3ymnEYH0GWaS0u0HqA/EQvEs0uCgasOUIiA8GvRNknTWf/7w
DpqUDnyrceoiBkD7CN76FSqi5tZP/UMvnbShJUgdHY3fXwbels7QVMe5Tn4yAETS
ix0TKPIWst7wjIPtlOSZkgHZYN+Lf+OVBgFkXZdiAxjq3W1m3JAtrMx+BjMmjt4j
NgPdaja/Q5d78aNLhD52vBb4WoNgF31upQBpDkC6qP2f43S91pwrA3GK+FE8ISS0
ehUR0V5Lp47V0tOsci5mOhf7y+KGUHO43tFArOp/4flcQDtiu2eMxX88Tul/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwyzCjZ+1A8pJc7mLnyMSBnX+rKIwHwYDVR0j
BBgwFoAUDlO2lkTSXIwvl72GhuA4nggoBQgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0tUaXBDUWhIQUtFVWJEakNxM1NQV3FIUG1vUzhyWHhkVDdhUjVnU0hn
NmEvMC8wRTUzQjY5NjQ0RDI1QzhDMkY5N0JEODY4NkUwMzg5RTA4MjgwNTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBFNTNCNjk2NDREMjVDOEMy
Rjk3QkQ4Njg2RTAzODlFMDgyODA1MDguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLVGlwQ1FoSEFLRVViRGpDcTNTUFdxSFBtb1M4clh4ZFQ3YVI1Z1NIZzZhLzAv
MzIzODMwMzQzYTM2MzA2NjM0M2EzODMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzOTMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEYPSDMA0GCSqGSIb3DQEBCwUA
A4IBAQBDrWwbvS+7kMRYkDPmM+jgXen4Kybhk6sbgTe+KeAmrhhsWkMrtqk9HDbk
I9Sv/WrWnxi9Dqwj0dh5YXSUOR4zJmTz4LKfBRfK7V2bFLzd6GzeQ+0hQoV+gY1f
NFDxIWALOK1haqGkd1AOxJ9Yiq4TVy0MB94LMfnREfXX1l55Etj7n4dtlOrOiLap
/ue78Jy33vr4TK8ZT0drtfiztJNyN14kJQMuYIr4IHiCI0HS+DTR2nYhAKBVdd/B
5x9E3SxC9qLkXUMtqx+cwmz9gIBz9MPxbh5JE4KTj+udKEsCePeSMv2dU7mhzx1I
m+FgLAOlDMFe6ZJxLCXCvezSejen
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org