Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa
File:                     323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa (raw, json)
Hash identifier:          iygxjZ5Le7uzXiyKSQ7fMiCUbQeap0IsLrncmJ6Wf/0=
Subject key identifier:   06:1F:FD:F4:DC:94:4E:D9:11:D3:97:59:87:28:AA:A9:26:40:7F:A1
Certificate issuer:       /CN=28857FFB1C89717722FA38DFF8D836C0ED8999DF
Certificate serial:       71A3D7A1CE30609E44A26707C7B8F7B0AB4A9BBB
Authority key identifier: 28:85:7F:FB:1C:89:71:77:22:FA:38:DF:F8:D8:36:C0:ED:89:99:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa
Signing time:             Tue 16 May 2023 03:00:01 +0000
ROA not before:           Tue 16 May 2023 02:55:01 +0000
ROA not after:            Tue 14 May 2024 03:00:01 +0000
asID:                     272242
IP address blocks:        2804:8424:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a3:d7:a1:ce:30:60:9e:44:a2:67:07:c7:b8:f7:b0:ab:4a:9b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28857FFB1C89717722FA38DFF8D836C0ED8999DF
        Validity
            Not Before: May 16 02:55:01 2023 GMT
            Not After : May 14 03:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:aa:9c:f1:bf:e9:20:5e:24:b5:00:18:07:
                    83:8b:b8:16:c1:14:4a:c3:03:e9:46:68:a4:35:a7:
                    98:87:ee:80:ec:39:fa:cc:ed:5c:70:e1:07:64:f5:
                    d6:f8:b9:b2:03:a4:6c:83:f6:d7:b0:7e:46:3c:d2:
                    e7:28:93:29:df:5f:46:4d:d4:31:78:ed:4c:74:61:
                    3f:34:2b:76:1d:1b:4f:20:ac:b0:17:a0:94:7f:30:
                    30:11:66:47:66:26:f1:3f:fb:f8:d8:04:36:3e:20:
                    8c:5b:7e:9f:93:d6:f4:37:2b:f9:7b:22:fd:e1:e1:
                    f7:6f:b6:f7:94:dd:9b:19:f5:f9:de:be:01:b3:fe:
                    33:80:4e:b9:92:26:ca:72:f6:a7:04:4d:8b:c5:d9:
                    0b:18:52:3d:af:82:49:f0:46:b7:fd:f0:5f:28:5d:
                    c8:29:a7:ce:ed:81:44:56:2a:f3:28:4b:13:13:f8:
                    ed:a5:c9:f7:2b:23:5d:6e:be:3c:9f:82:d0:61:71:
                    86:a4:f5:11:15:4b:a7:6f:2f:f8:8a:b1:83:32:4c:
                    cf:19:fc:88:b7:4d:85:68:4a:62:bc:4e:b9:95:6b:
                    5c:a0:9d:52:62:fd:83:d8:15:86:a1:77:02:69:38:
                    07:f6:75:3b:d1:21:f6:61:64:7a:ed:d2:2c:b9:0c:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1F:FD:F4:DC:94:4E:D9:11:D3:97:59:87:28:AA:A9:26:40:7F:A1
            X509v3 Authority Key Identifier:
                keyid:28:85:7F:FB:1C:89:71:77:22:FA:38:DF:F8:D8:36:C0:ED:89:99:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/323830343a383432343a343030303a3a2f34302d3430203d3e20323732323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8424:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:68:30:0a:5e:72:ca:50:c0:e2:78:1c:c7:e6:ff:15:27:5f:
         8e:9d:e8:71:55:45:61:d4:e2:23:32:1c:cf:3c:90:41:ac:ab:
         c8:54:e3:c0:39:e2:b8:b9:1f:dd:b8:cf:34:41:42:f7:c3:f0:
         44:66:43:06:4f:f1:bc:b1:01:55:af:c8:f1:15:fa:bc:6e:a9:
         15:f4:89:ec:81:55:6b:c8:4e:1f:21:ea:14:63:8b:b2:b5:9a:
         db:e2:ea:01:7a:55:f2:4b:00:13:fb:7d:90:79:37:4f:40:87:
         19:11:87:cc:1e:26:a8:ea:22:24:c1:ae:f7:08:f3:88:0b:bb:
         5b:84:d6:ca:41:ad:32:0e:36:ea:af:6c:13:90:9b:16:48:b0:
         c6:1f:be:05:3d:b5:78:71:ec:5e:cb:c2:a0:f7:6a:df:7f:dc:
         8b:c0:46:66:45:b6:cb:dd:66:65:30:d3:93:f2:40:33:7e:7e:
         65:b8:10:b5:e2:dc:fe:0a:d4:09:bc:1e:e3:90:f1:e3:f8:aa:
         4f:b8:76:e3:22:5d:e5:3c:13:34:a3:cb:27:b5:25:5c:75:78:
         36:5b:b7:94:56:7f:1d:25:c4:fd:e2:59:8d:c7:ba:b9:d8:a5:
         1c:e5:16:71:17:df:f4:5d:15:05:07:ed:d0:f9:8f:ff:6e:d6:
         8a:1f:ed:77
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUcaPXoc4wYJ5EomcHx7j3sKtKm7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg4NTdGRkIxQzg5NzE3NzIyRkEzOERGRjhEODM2QzBF
RDg5OTlERjAeFw0yMzA1MTYwMjU1MDFaFw0yNDA1MTQwMzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk4MUFBOUNGMUJGRTkyMDVF
MjRCNTAwMTgwNzgzOEJCODE2QzExNDRBQzMwM0U5NDY2OEE0MzVBNzk4ODdFRTgw
RUMzOUZBQ0NFRDVDNzBFMTA3NjRGNUQ2RjhCOUIyMDNBNDZDODNGNkQ3QjA3RTQ2
M0NEMkU3Mjg5MzI5REY1RjQ2NERENDMxNzhFRDRDNzQ2MTNGMzQyQjc2MUQxQjRG
MjBBQ0IwMTdBMDk0N0YzMDMwMTE2NjQ3NjYyNkYxM0ZGQkY4RDgwNDM2M0UyMDhD
NUI3RTlGOTNENkY0MzcyQkY5N0IyMkZERTFFMUY3NkZCNkY3OTRERDlCMTlGNUY5
REVCRTAxQjNGRTMzODA0RUI5OTIyNkNBNzJGNkE3MDQ0RDhCQzVEOTBCMTg1MjNE
QUY4MjQ5RjA0NkI3RkRGMDVGMjg1REM4MjlBN0NFRUQ4MTQ0NTYyQUYzMjg0QjEz
MTNGOEVEQTVDOUY3MkIyMzVENkVCRTNDOUY4MkQwNjE3MTg2QTRGNTExMTU0QkE3
NkYyRkY4OEFCMTgzMzI0Q0NGMTlGQzg4Qjc0RDg1Njg0QTYyQkM0RUI5OTU2QjVD
QTA5RDUyNjJGRDgzRDgxNTg2QTE3NzAyNjkzODA3RjY3NTNCRDEyMUY2NjE2NDdB
RUREMjJDQjkwQ0RFNUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyYGqnPG/6SBeJLUAGAeDi7gWwRRKwwPpRmikNaeYh+6A7Dn6zO1c
cOEHZPXW+LmyA6Rsg/bXsH5GPNLnKJMp319GTdQxeO1MdGE/NCt2HRtPIKywF6CU
fzAwEWZHZibxP/v42AQ2PiCMW36fk9b0Nyv5eyL94eH3b7b3lN2bGfX53r4Bs/4z
gE65kibKcvanBE2LxdkLGFI9r4JJ8Ea3/fBfKF3IKafO7YFEVirzKEsTE/jtpcn3
KyNdbr48n4LQYXGGpPURFUunby/4irGDMkzPGfyIt02FaEpivE65lWtcoJ1SYv2D
2BWGoXcCaTgH9nU70SH2YWR67dIsuQzeWwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FAYf/fTclE7ZEdOXWYcoqqkmQH+hMB8GA1UdIwQYMBaAFCiFf/sciXF3Ivo43/jY
NsDtiZnfMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNxc1cyV2hwVHM2eEQx
RHJQNEZ4ZjJZZWU1b3RHZnc0N3RIaUdxRU1IZWdyLzAvMjg4NTdGRkIxQzg5NzE3
NzIyRkEzOERGRjhEODM2QzBFRDg5OTlERi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yODg1N0ZGQjFDODk3MTc3MjJGQTM4REZGOEQ4MzZDMEVEODk5
OURGLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zcXNXMldocFRzNnhEMURyUDRG
eGYyWWVlNW90R2Z3NDd0SGlHcUVNSGVnci8wLzMyMzgzMDM0M2EzODM0MzIzNDNh
MzQzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzMjM0MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBIQkQDANBgkqhkiG9w0BAQsFAAOCAQEAvWgwCl5yylDA4ngcx+b/
FSdfjp3ocVVFYdTiIzIczzyQQayryFTjwDniuLkf3bjPNEFC98PwRGZDBk/xvLEB
Va/I8RX6vG6pFfSJ7IFVa8hOHyHqFGOLsrWa2+LqAXpV8ksAE/t9kHk3T0CHGRGH
zB4mqOoiJMGu9wjziAu7W4TWykGtMg426q9sE5CbFkiwxh++BT21eHHsXsvCoPdq
33/ci8BGZkW2y91mZTDTk/JAM35+ZbgQteLc/grUCbwe45Dx4/iqT7h24yJd5TwT
NKPLJ7UlXHV4Nlu3lFZ/HSXE/eJZjce6udilHOUWcRff9F0VBQft0PmP/27Wih/t
dw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org