Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa
File:                     323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (raw, json)
Hash identifier:          oUPzBVGNKpgIZpEqbfjIhEnIWvCvO9rmx+dSRCI2tU4=
Subject key identifier:   A7:8D:17:2C:19:36:36:96:F0:70:F1:5C:EC:63:38:C6:D0:43:52:AE
Certificate issuer:       /CN=D63C20563BA26C504096AB105F96D77EB9D755E4
Certificate serial:       52C5812BD4E3FF6523447022D106021E9EB7B260
Authority key identifier: D6:3C:20:56:3B:A2:6C:50:40:96:AB:10:5F:96:D7:7E:B9:D7:55:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63C20563BA26C504096AB105F96D77EB9D755E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa
Signing time:             Fri 05 Jan 2024 18:50:37 +0000
ROA not before:           Fri 05 Jan 2024 18:45:37 +0000
ROA not after:            Fri 03 Jan 2025 18:50:37 +0000
asID:                     267492
IP address blocks:        2804:4250::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c5:81:2b:d4:e3:ff:65:23:44:70:22:d1:06:02:1e:9e:b7:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63C20563BA26C504096AB105F96D77EB9D755E4
        Validity
            Not Before: Jan  5 18:45:37 2024 GMT
            Not After : Jan  3 18:50:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:18:87:e2:8e:12:d8:7c:96:9d:e6:a5:21:
                    ee:68:30:5e:b4:46:27:30:a4:a5:37:e6:5a:6a:35:
                    e9:49:99:ff:92:4b:8d:75:90:65:1a:0c:33:68:7f:
                    8c:ee:07:f7:1f:d5:3d:36:6e:50:37:5e:ab:83:dc:
                    db:4b:4c:c1:62:65:0d:10:1a:ac:02:51:cc:0d:1a:
                    8f:8d:ef:64:31:14:a1:76:71:66:1e:3e:e8:a4:4f:
                    19:31:ad:98:3a:42:57:31:b5:a3:c0:b6:b8:7f:99:
                    4b:ba:20:f2:86:72:b0:57:36:81:a8:8c:12:cd:e5:
                    b5:76:83:0e:44:58:3f:52:0b:eb:3c:6c:34:0e:9b:
                    f8:ba:1a:fb:fd:61:44:38:ba:21:a2:2a:1e:2f:5f:
                    ff:d5:b5:0e:53:fa:03:f3:74:29:8e:05:67:5f:67:
                    b7:24:8c:48:ad:2a:74:e0:43:4f:8a:bd:63:9d:be:
                    bd:14:05:21:f5:17:7d:a2:47:0e:25:05:1c:85:1d:
                    13:44:9f:99:4f:fc:9c:49:54:56:da:e4:89:e1:b0:
                    d7:86:a8:23:8c:04:2c:74:32:c7:09:f9:9c:f1:3a:
                    f3:73:ab:97:49:a1:b9:9e:16:a3:d5:7b:e6:a1:ab:
                    b8:65:08:4a:fe:17:46:96:88:32:fc:78:92:15:da:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8D:17:2C:19:36:36:96:F0:70:F1:5C:EC:63:38:C6:D0:43:52:AE
            X509v3 Authority Key Identifier:
                keyid:D6:3C:20:56:3B:A2:6C:50:40:96:AB:10:5F:96:D7:7E:B9:D7:55:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/D63C20563BA26C504096AB105F96D77EB9D755E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63C20563BA26C504096AB105F96D77EB9D755E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4250::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:8d:59:cc:12:23:19:cc:7d:e9:bc:34:91:02:3e:13:2d:dc:
         e4:67:cd:1d:82:95:d9:e7:78:11:36:bb:d0:e7:f9:aa:e8:11:
         9c:5f:5f:63:6e:0d:dc:69:3c:c5:98:0d:2a:62:db:6e:45:cd:
         5f:ac:82:f4:aa:a1:1f:67:3a:cc:25:44:06:2f:80:4f:c7:d1:
         39:d4:e7:83:b5:8e:03:aa:5f:ab:96:f7:c4:db:64:61:6b:b9:
         86:25:f8:7b:9f:db:1f:04:55:23:06:dc:5e:bd:d7:48:f7:c2:
         38:01:8b:70:ac:2c:47:df:cd:a9:ca:0b:ba:58:63:c5:09:90:
         1b:ab:fd:7b:ae:43:ca:00:8d:cb:ba:f0:fb:8c:a7:09:c3:46:
         40:71:43:ed:52:41:07:81:8f:4f:da:35:19:64:f9:ae:10:60:
         fc:4f:48:a3:7e:5b:2e:6e:7b:d8:a5:6c:4f:5f:0f:db:84:4a:
         a3:7a:56:e5:e3:65:1b:41:ca:b1:a0:a2:d9:e4:a8:5c:19:bf:
         0b:f6:0b:5e:4e:e3:e7:43:37:85:00:e8:b2:9a:71:6b:e8:01:
         fd:a4:99:b5:6b:6c:b3:50:1e:68:bf:ef:db:b9:89:d9:32:dd:
         64:63:64:f8:ae:4d:9d:3c:5f:ca:20:9a:5b:49:69:fa:d6:64:
         b3:e7:81:36
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUUsWBK9Tj/2UjRHAi0QYCHp63smAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzQzIwNTYzQkEyNkM1MDQwOTZBQjEwNUY5NkQ3N0VC
OUQ3NTVFNDAeFw0yNDAxMDUxODQ1MzdaFw0yNTAxMDMxODUwMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NBMzE4ODdFMjhFMTJEODdD
OTY5REU2QTUyMUVFNjgzMDVFQjQ0NjI3MzBBNEE1MzdFNjVBNkEzNUU5NDk5OUZG
OTI0QjhENzU5MDY1MUEwQzMzNjg3RjhDRUUwN0Y3MUZENTNEMzY2RTUwMzc1RUFC
ODNEQ0RCNEI0Q0MxNjI2NTBEMTAxQUFDMDI1MUNDMEQxQThGOERFRjY0MzExNEEx
NzY3MTY2MUUzRUU4QTQ0RjE5MzFBRDk4M0E0MjU3MzFCNUEzQzBCNkI4N0Y5OTRC
QkEyMEYyODY3MkIwNTczNjgxQTg4QzEyQ0RFNUI1NzY4MzBFNDQ1ODNGNTIwQkVC
M0M2QzM0MEU5QkY4QkExQUZCRkQ2MTQ0MzhCQTIxQTIyQTFFMkY1RkZGRDVCNTBF
NTNGQTAzRjM3NDI5OEUwNTY3NUY2N0I3MjQ4QzQ4QUQyQTc0RTA0MzRGOEFCRDYz
OURCRUJEMTQwNTIxRjUxNzdEQTI0NzBFMjUwNTFDODUxRDEzNDQ5Rjk5NEZGQzlD
NDk1NDU2REFFNDg5RTFCMEQ3ODZBODIzOEMwNDJDNzQzMkM3MDlGOTlDRjEzQUYz
NzNBQjk3NDlBMUI5OUUxNkEzRDU3QkU2QTFBQkI4NjUwODRBRkUxNzQ2OTY4ODMy
RkM3ODkyMTVEQTkzMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzKMYh+KOEth8lp3mpSHuaDBetEYnMKSlN+ZaajXpSZn/kkuNdZBl
GgwzaH+M7gf3H9U9Nm5QN16rg9zbS0zBYmUNEBqsAlHMDRqPje9kMRShdnFmHj7o
pE8ZMa2YOkJXMbWjwLa4f5lLuiDyhnKwVzaBqIwSzeW1doMORFg/UgvrPGw0Dpv4
uhr7/WFEOLohoioeL1//1bUOU/oD83QpjgVnX2e3JIxIrSp04ENPir1jnb69FAUh
9Rd9okcOJQUchR0TRJ+ZT/ycSVRW2uSJ4bDXhqgjjAQsdDLHCfmc8Trzc6uXSaG5
nhaj1Xvmoau4ZQhK/hdGlogy/HiSFdqTAQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FKeNFywZNjaW8HDxXOxjOMbQQ1KuMB8GA1UdIwQYMBaAFNY8IFY7omxQQJarEF+W
136511XkMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNiaDlDVm51Y1k3Sldz
ekRHRjhXbjFFYngxeXlkcTJvUHJnemlOdjNXeDV5LzAvRDYzQzIwNTYzQkEyNkM1
MDQwOTZBQjEwNUY5NkQ3N0VCOUQ3NTVFNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENjNDMjA1NjNCQTI2QzUwNDA5NkFCMTA1Rjk2RDc3RUI5RDc1
NUU0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zYmg5Q1ZudWNZN0pXc3pER0Y4
V24xRWJ4MXl5ZHEyb1ByZ3ppTnYzV3g1eS8wLzMyMzgzMDM0M2EzNDMyMzUzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM0MzkzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
QlAwDQYJKoZIhvcNAQELBQADggEBAHqNWcwSIxnMfem8NJECPhMt3ORnzR2Cldnn
eBE2u9Dn+aroEZxfX2NuDdxpPMWYDSpi225FzV+sgvSqoR9nOswlRAYvgE/H0TnU
54O1jgOqX6uW98TbZGFruYYl+Huf2x8EVSMG3F6910j3wjgBi3CsLEffzanKC7pY
Y8UJkBur/XuuQ8oAjcu68PuMpwnDRkBxQ+1SQQeBj0/aNRlk+a4QYPxPSKN+Wy5u
e9ilbE9fD9uESqN6VuXjZRtByrGgotnkqFwZvwv2C15O4+dDN4UA6LKacWvoAf2k
mbVrbLNQHmi/79u5idky3WRjZPiuTZ08X8ogmltJafrWZLPngTY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org