Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3830303a3a2f33382d3338203d3e20323633303833.roa
File:                     323830313a62363a3830303a3a2f33382d3338203d3e20323633303833.roa (raw, json)
Hash identifier:          3dO05SZcDve6iq8p4C4H4fpv5YQ8Mp31Cqs3oS3wAc4=
Subject key identifier:   D0:A3:7B:1E:9E:7B:36:E5:FA:EF:B3:B1:F1:68:05:7B:33:25:77:B8
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       7DB9E9E1C29270DD618E4B6240224EFA0A1B1A72
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3830303a3a2f33382d3338203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:44:19 +0000
ROA not before:           Wed 25 Jan 2023 19:39:19 +0000
ROA not after:            Wed 24 Jan 2024 19:44:19 +0000
asID:                     263083
IP address blocks:        2801:b6:800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b9:e9:e1:c2:92:70:dd:61:8e:4b:62:40:22:4e:fa:0a:1b:1a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:39:19 2023 GMT
            Not After : Jan 24 19:44:19 2024 GMT
        Subject: CN=D0A37B1E9E7B36E5FAEFB3B1F168057B332577B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:06:f9:4a:78:21:7b:b8:4c:d1:02:f7:e9:
                    0d:7e:09:43:83:98:9a:9a:7d:ed:7c:30:32:9b:f3:
                    6c:ff:79:1d:da:aa:67:a5:3f:34:5e:12:78:35:a1:
                    c8:0b:76:6f:98:98:d7:a7:b3:bb:3f:a8:a8:11:6c:
                    8d:d3:a5:7e:48:9c:29:57:4c:36:5d:8d:c0:ff:25:
                    86:62:7b:ee:ed:02:e9:90:f4:cf:b6:05:40:5c:73:
                    1d:1e:eb:07:dc:c4:13:ed:e7:e9:8e:1a:87:0d:4a:
                    39:2c:a3:b8:48:86:b8:1d:79:c2:1d:fa:19:d6:f6:
                    71:e4:fc:32:81:9e:8b:df:3d:43:b5:d3:4c:fe:e5:
                    c3:0b:07:4e:8e:1d:b1:6c:92:55:14:02:a8:83:77:
                    48:1d:6b:a1:44:f0:bf:a5:d9:c0:a6:0b:71:49:4b:
                    17:1e:57:6d:6e:57:9a:d5:7d:36:fe:15:7d:00:04:
                    a0:ef:6b:cf:aa:4e:68:31:44:f2:4f:13:ec:c5:aa:
                    b0:4b:e9:29:97:83:62:6f:45:15:49:79:d9:b2:1d:
                    82:d5:84:7e:b5:5d:9a:2c:41:fa:e4:3c:41:3d:ca:
                    00:6a:a6:73:6a:15:44:00:a6:ea:00:84:fe:8c:2b:
                    96:19:34:a3:2e:29:56:dc:74:8f:cb:88:93:c1:4d:
                    69:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:7B:1E:9E:7B:36:E5:FA:EF:B3:B1:F1:68:05:7B:33:25:77:B8
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3830303a3a2f33382d3338203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b6:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         27:d5:70:45:cb:9f:24:10:51:dd:c8:73:b6:25:49:42:26:74:
         5e:5e:d3:f3:0d:f3:f4:17:48:a4:4c:ab:bc:37:76:b6:2a:0b:
         ed:2a:77:61:1b:65:56:e7:0a:09:0c:1f:33:36:c0:9e:9e:f9:
         5b:b7:7e:c6:c3:17:9e:10:e5:c4:a6:d6:e4:5c:14:94:b8:82:
         09:7a:5f:6e:f8:fc:e8:0b:66:67:0f:02:2d:c0:9c:bf:eb:3f:
         1e:f1:14:e0:e0:e9:a6:d2:b4:11:9b:35:ec:b4:5e:4c:cc:7b:
         5e:b5:06:8d:ae:16:ef:1d:b8:c4:cf:c2:20:a3:d8:f2:26:93:
         5e:a8:0d:48:e6:cc:e4:ad:ac:17:ee:59:16:66:f7:9a:6a:ef:
         8c:e4:48:5f:21:68:f8:07:26:77:b4:d8:96:d8:b5:47:62:eb:
         2d:b1:c7:2d:57:b4:4b:fd:1b:75:4d:ab:a8:de:ba:5a:ce:d6:
         18:60:e8:85:65:da:35:1a:e6:4e:a5:98:62:c9:8c:98:d8:45:
         37:6f:2c:ce:98:eb:38:bd:b3:a8:a5:35:30:ff:78:32:39:e5:
         c8:02:a5:14:b7:10:76:d5:4d:93:02:ee:f0:ce:7d:9e:d1:ed:
         0c:7e:69:a5:ab:ef:0e:25:db:bf:4a:eb:8f:f7:2d:72:dd:7f:
         ff:0d:72:77
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUfbnp4cKScN1hjktiQCJO+gobGnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQyRjEwREIyMDNGQUZFMkNEMTcwRTU2MzlEQ0E2QjE3
QjA1NkJBMzAeFw0yMzAxMjUxOTM5MTlaFw0yNDAxMjQxOTQ0MTlaMDMxMTAvBgNV
BAMTKEQwQTM3QjFFOUU3QjM2RTVGQUVGQjNCMUYxNjgwNTdCMzMyNTc3QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWwb5Snghe7hM0QL36Q1+CUOD
mJqafe18MDKb82z/eR3aqmelPzReEng1ocgLdm+YmNens7s/qKgRbI3TpX5InClX
TDZdjcD/JYZie+7tAumQ9M+2BUBccx0e6wfcxBPt5+mOGocNSjkso7hIhrgdecId
+hnW9nHk/DKBnovfPUO100z+5cMLB06OHbFsklUUAqiDd0gda6FE8L+l2cCmC3FJ
SxceV21uV5rVfTb+FX0ABKDva8+qTmgxRPJPE+zFqrBL6SmXg2JvRRVJedmyHYLV
hH61XZosQfrkPEE9ygBqpnNqFUQApuoAhP6MK5YZNKMuKVbcdI/LiJPBTWnVAgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQU0KN7Hp57NuX677Ox8WgFezMld7gwHwYDVR0j
BBgwFoAUFC8Q2yA/r+LNFw5WOdymsXsFa6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt
OWIvMC8xNDJGMTBEQjIwM0ZBRkUyQ0QxNzBFNTYzOURDQTZCMTdCMDU2QkEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0MkYxMERCMjAzRkFGRTJD
RDE3MEU1NjM5RENBNkIxN0IwNTZCQTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzROblo4MmEya0p2Yjlmd2FIZ2pKVm9vYk1WN1duWEs5SEQ0c1B4MVJUbTliLzAv
MzIzODMwMzEzYTYyMzYzYTM4MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNkM2UyMDMy
MzYzMzMwMzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwDgQCAAIwCAMGAigBALYIMA0GCSqGSIb3DQEBCwUAA4IBAQAn
1XBFy58kEFHdyHO2JUlCJnReXtPzDfP0F0ikTKu8N3a2KgvtKndhG2VW5woJDB8z
NsCenvlbt37GwxeeEOXEptbkXBSUuIIJel9u+PzoC2ZnDwItwJy/6z8e8RTg4Omm
0rQRmzXstF5MzHtetQaNrhbvHbjEz8Igo9jyJpNeqA1I5szkrawX7lkWZveaau+M
5EhfIWj4ByZ3tNiW2LVHYustscctV7RL/Rt1Tauo3rpaztYYYOiFZdo1GuZOpZhi
yYyY2EU3byzOmOs4vbOopTUw/3gyOeXIAqUUtxB21U2TAu7wzn2e0e0Mfmmlq+8O
Jdu/SuuP9y1y3X//DXJ3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org