Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33332d3333203d3e20323635343633.roa
File:                     323830343a333438343a3a2f33332d3333203d3e20323635343633.roa (raw, json)
Hash identifier:          q4YoQw0s49sH00lq0Oxuk492j9XHRQ8vZcLBq/gE0/E=
Subject key identifier:   22:07:F7:D9:82:EF:84:48:13:CB:8F:CE:04:C1:96:22:EE:8C:06:D2
Certificate issuer:       /CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
Certificate serial:       6C7831EEAA241B1F93051982464883A3506AC206
Authority key identifier: A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33332d3333203d3e20323635343633.roa
Signing time:             Tue 24 Oct 2023 14:22:22 +0000
ROA not before:           Tue 24 Oct 2023 14:17:22 +0000
ROA not after:            Tue 22 Oct 2024 14:22:22 +0000
asID:                     265463
IP address blocks:        2804:3484::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:78:31:ee:aa:24:1b:1f:93:05:19:82:46:48:83:a3:50:6a:c2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B23E7D1D8ABF94F67226995E004EA6114115AF
        Validity
            Not Before: Oct 24 14:17:22 2023 GMT
            Not After : Oct 22 14:22:22 2024 GMT
        Subject: CN=2207F7D982EF844813CB8FCE04C19622EE8C06D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:0c:3d:9b:b9:d2:61:9f:c1:6d:16:4e:27:
                    45:10:a5:19:ec:34:47:86:66:5e:92:e6:e9:3d:85:
                    1c:45:a1:c3:9b:83:f9:fc:60:54:b0:95:ca:d3:fe:
                    53:6d:f5:ff:76:14:27:3f:88:b3:07:1d:a6:9c:82:
                    a1:d9:c6:57:d1:a6:41:b3:ac:ed:f2:76:37:5c:ee:
                    a6:03:49:43:0e:6a:f9:ff:06:24:d2:64:a5:1f:42:
                    03:15:80:fc:be:af:1c:3b:64:43:45:59:11:7b:87:
                    9e:de:77:83:5b:ad:9a:a6:f2:c3:6c:ff:c9:e6:e2:
                    2f:6b:f3:64:fb:37:8f:b3:4c:8a:8e:3b:01:5c:e8:
                    27:2d:cb:dd:a2:b2:8b:10:ca:37:f8:16:b3:cf:ec:
                    3c:77:e0:15:81:28:24:2f:41:76:73:60:e0:54:83:
                    e0:03:3c:be:bf:79:75:13:d8:4b:1a:28:ba:f0:e4:
                    dc:4a:2f:6d:85:fa:f1:c4:f4:fb:3b:33:76:9d:88:
                    c4:26:29:dc:01:99:ef:86:02:39:e7:ba:43:0a:4f:
                    c5:fe:e3:b1:9e:1f:5b:52:e3:31:1a:bc:31:b1:01:
                    9c:05:8d:14:5f:fc:78:f2:f8:21:85:d7:a9:8c:53:
                    fd:84:3b:89:a7:53:8d:a3:d4:46:5b:77:78:13:40:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:07:F7:D9:82:EF:84:48:13:CB:8F:CE:04:C1:96:22:EE:8C:06:D2
            X509v3 Authority Key Identifier:
                keyid:A4:B2:3E:7D:1D:8A:BF:94:F6:72:26:99:5E:00:4E:A6:11:41:15:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4B23E7D1D8ABF94F67226995E004EA6114115AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33332d3333203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:39:e4:5a:b4:21:03:e7:cc:97:dc:8f:85:88:10:f5:59:2a:
         b7:f9:1e:ef:10:ad:2d:e4:9d:16:c3:c2:b9:e4:75:5b:86:94:
         56:59:7f:ed:fd:37:af:a9:2a:ea:f3:88:96:db:95:91:76:b8:
         b5:6b:ea:f8:19:4d:61:80:24:14:2f:1f:2b:3d:ad:13:77:07:
         ba:c5:24:8a:a7:20:0f:ad:6f:1a:ba:db:db:95:32:8a:fd:43:
         ca:07:08:e2:8e:1e:1d:97:78:2f:2d:9d:06:3a:6b:e1:39:6e:
         45:cd:e4:cc:40:c4:18:b4:d6:2e:1f:c2:b9:03:18:e0:67:50:
         68:ae:71:a3:5e:66:b9:71:ee:7e:e1:1a:e7:e6:54:93:71:cc:
         67:8d:0c:59:27:00:c0:29:45:c4:d2:d8:96:9e:8b:cf:15:36:
         b6:ba:02:57:42:22:87:a1:48:fe:34:1a:e1:9b:50:ae:58:cf:
         4f:42:3e:76:df:2e:c7:e3:d1:8e:1e:29:5f:f0:9a:7e:90:09:
         bb:df:d6:44:35:42:22:b7:6d:51:50:a7:b5:47:53:ae:50:18:
         22:07:fa:39:46:db:b6:29:68:f2:82:c5:c1:b8:01:75:93:47:
         6d:d7:a0:5d:cd:fc:ee:8c:e5:e2:a4:45:d8:70:2f:b2:a9:31:
         06:75:4a:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbHgx7qokGx+TBRmCRkiDo1BqwgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRCMjNFN0QxRDhBQkY5NEY2NzIyNjk5NUUwMDRFQTYx
MTQxMTVBRjAeFw0yMzEwMjQxNDE3MjJaFw0yNDEwMjIxNDIyMjJaMDMxMTAvBgNV
BAMTKDIyMDdGN0Q5ODJFRjg0NDgxM0NCOEZDRTA0QzE5NjIyRUU4QzA2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKQw9m7nSYZ/BbRZOJ0UQpRns
NEeGZl6S5uk9hRxFocObg/n8YFSwlcrT/lNt9f92FCc/iLMHHaacgqHZxlfRpkGz
rO3ydjdc7qYDSUMOavn/BiTSZKUfQgMVgPy+rxw7ZENFWRF7h57ed4NbrZqm8sNs
/8nm4i9r82T7N4+zTIqOOwFc6Ccty92isosQyjf4FrPP7Dx34BWBKCQvQXZzYOBU
g+ADPL6/eXUT2EsaKLrw5NxKL22F+vHE9Ps7M3adiMQmKdwBme+GAjnnukMKT8X+
47GeH1tS4zEavDGxAZwFjRRf/Hjy+CGF16mMU/2EO4mnU42j1EZbd3gTQPZVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIgf32YLvhEgTy4/OBMGWIu6MBtIwHwYDVR0j
BBgwFoAUpLI+fR2Kv5T2ciaZXgBOphFBFa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNmNDZTbnFGTDNLZ1Z6VVRGdFBTcmJjVzhMUHFkOVVkUEpRYVRSUjd0
dXAvMC9BNEIyM0U3RDFEOEFCRjk0RjY3MjI2OTk1RTAwNEVBNjExNDExNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0QjIzRTdEMUQ4QUJGOTRG
NjcyMjY5OTVFMDA0RUE2MTE0MTE1QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzZjQ2U25xRkwzS2dWelVURnRQU3JiY1c4TFBxZDlVZFBKUWFUUlI3dHVwLzAv
MzIzODMwMzQzYTMzMzQzODM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ0hAAwDQYJKoZIhvcNAQELBQADggEBAHQ55Fq0
IQPnzJfcj4WIEPVZKrf5Hu8QrS3knRbDwrnkdVuGlFZZf+39N6+pKurziJbblZF2
uLVr6vgZTWGAJBQvHys9rRN3B7rFJIqnIA+tbxq629uVMor9Q8oHCOKOHh2XeC8t
nQY6a+E5bkXN5MxAxBi01i4fwrkDGOBnUGiucaNeZrlx7n7hGufmVJNxzGeNDFkn
AMApRcTS2Jaei88VNra6AldCIoehSP40GuGbUK5Yz09CPnbfLsfj0Y4eKV/wmn6Q
Cbvf1kQ1QiK3bVFQp7VHU65QGCIH+jlG27YpaPKCxcG4AXWTR23XoF3N/O6M5eKk
RdhwL7KpMQZ1SiY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org