Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33342d3334203d3e20323731333039.roa
File:                     323830343a373938303a383030303a3a2f33342d3334203d3e20323731333039.roa (raw, json)
Hash identifier:          5/bUL2yb/fg6UJUji5hqUGHofQkTDv3DE5KIr79a3Jk=
Subject key identifier:   8A:E7:74:01:4B:D2:E6:73:BB:85:D3:31:8F:A7:0E:EB:19:2F:56:20
Certificate issuer:       /CN=443A05DE457DA61030C50B71D655B381CE793C73
Certificate serial:       0213CC3586C6759718181C3190E8825BD5240D4A
Authority key identifier: 44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33342d3334203d3e20323731333039.roa
Signing time:             Mon 11 Mar 2024 17:38:22 +0000
ROA not before:           Mon 11 Mar 2024 17:33:22 +0000
ROA not after:            Mon 10 Mar 2025 17:38:22 +0000
asID:                     271309
IP address blocks:        2804:7980:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:13:cc:35:86:c6:75:97:18:18:1c:31:90:e8:82:5b:d5:24:0d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443A05DE457DA61030C50B71D655B381CE793C73
        Validity
            Not Before: Mar 11 17:33:22 2024 GMT
            Not After : Mar 10 17:38:22 2025 GMT
        Subject: CN=8AE774014BD2E673BB85D3318FA70EEB192F5620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:30:16:06:3f:2b:87:bc:59:98:9f:31:ed:86:
                    5e:f8:49:b5:a4:b1:b6:a2:88:f9:b8:3a:d2:93:cb:
                    63:71:37:46:a1:a3:00:d2:0e:79:12:27:d3:fd:a6:
                    78:f2:94:b6:10:8c:b9:1f:30:c2:47:f7:6c:ca:fa:
                    cd:b3:e6:07:72:be:70:94:aa:eb:ce:03:70:2d:71:
                    c5:38:c0:71:dc:df:10:67:aa:28:0a:03:1c:1d:35:
                    a5:71:a6:b8:f7:fd:0e:d9:4e:f7:37:a2:ba:03:c6:
                    4f:44:9d:99:22:3f:44:3e:3d:bc:7f:2e:52:aa:dc:
                    9c:03:0a:e8:11:7e:44:e4:98:f0:59:d4:7a:5b:41:
                    22:a0:ee:28:51:aa:e0:78:64:63:7a:f4:93:5d:1a:
                    9e:3f:ca:9c:56:00:9f:e4:6a:23:e7:0e:da:9c:77:
                    46:d0:58:3b:4d:ca:fb:41:1a:6a:b1:91:0d:bd:d7:
                    e7:47:46:94:e7:84:da:f8:99:ac:5c:7e:3a:70:1a:
                    5c:ad:48:ab:c3:38:32:15:e7:19:91:d1:7e:1a:93:
                    fc:ec:77:bc:3e:65:b6:c6:86:a7:da:c1:06:75:56:
                    03:9e:e2:61:c9:b9:8c:59:77:56:d6:82:62:f8:07:
                    8e:89:40:39:9c:a0:e1:ff:81:36:8e:32:9b:c0:d0:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E7:74:01:4B:D2:E6:73:BB:85:D3:31:8F:A7:0E:EB:19:2F:56:20
            X509v3 Authority Key Identifier:
                keyid:44:3A:05:DE:45:7D:A6:10:30:C5:0B:71:D6:55:B3:81:CE:79:3C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/443A05DE457DA61030C50B71D655B381CE793C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443A05DE457DA61030C50B71D655B381CE793C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33342d3334203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7980:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:87:17:9f:a4:ae:20:95:32:ca:33:af:7d:05:ae:98:8d:24:
         6e:ba:a4:b6:06:fc:3c:a7:a1:68:f4:9c:13:11:75:5a:8c:2d:
         13:e7:aa:14:51:3c:49:7a:b3:e7:af:4e:f6:0a:68:1e:0e:c2:
         18:3f:45:c7:94:12:9b:41:29:f5:ee:b0:c9:92:47:dc:bf:4e:
         15:1d:92:a7:b4:44:d9:a6:38:5c:93:20:81:56:a2:34:7b:44:
         7a:a2:13:a9:c6:89:6f:a7:6a:fc:e6:88:13:52:6f:a4:7a:f7:
         e5:1c:a1:ae:f8:9b:cf:6a:7a:bf:85:fa:a5:c2:40:db:9a:b8:
         af:4d:ba:70:81:15:b7:86:55:7a:84:56:ed:fb:c3:61:ac:87:
         5f:0c:fc:e1:a4:38:fc:87:a5:eb:01:03:26:2b:a1:1f:59:52:
         f1:35:33:14:71:4b:c7:cb:b8:0f:94:ac:f5:b8:d8:68:5c:fd:
         45:58:59:95:62:04:9f:17:5b:6e:aa:4d:eb:53:7a:85:62:67:
         d9:d7:a0:05:8e:b7:ec:da:d3:47:ca:02:ab:b2:bf:60:50:15:
         3a:81:fa:dc:6e:78:ef:07:74:46:cb:41:9e:ae:2e:c3:25:f6:
         77:eb:10:6d:86:a4:5d:36:fb:d6:bf:29:79:1e:a5:91:fb:3f:
         55:a8:24:35
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAhPMNYbGdZcYGBwxkOiCW9UkDUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzQTA1REU0NTdEQTYxMDMwQzUwQjcxRDY1NUIzODFD
RTc5M0M3MzAeFw0yNDAzMTExNzMzMjJaFw0yNTAzMTAxNzM4MjJaMDMxMTAvBgNV
BAMTKDhBRTc3NDAxNEJEMkU2NzNCQjg1RDMzMThGQTcwRUVCMTkyRjU2MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeMBYGPyuHvFmYnzHthl74SbWk
sbaiiPm4OtKTy2NxN0ahowDSDnkSJ9P9pnjylLYQjLkfMMJH92zK+s2z5gdyvnCU
quvOA3AtccU4wHHc3xBnqigKAxwdNaVxprj3/Q7ZTvc3oroDxk9EnZkiP0Q+Pbx/
LlKq3JwDCugRfkTkmPBZ1HpbQSKg7ihRquB4ZGN69JNdGp4/ypxWAJ/kaiPnDtqc
d0bQWDtNyvtBGmqxkQ291+dHRpTnhNr4maxcfjpwGlytSKvDODIV5xmR0X4ak/zs
d7w+ZbbGhqfawQZ1VgOe4mHJuYxZd1bWgmL4B46JQDmcoOH/gTaOMpvA0BSHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUiud0AUvS5nO7hdMxj6cO6xkvViAwHwYDVR0j
BBgwFoAURDoF3kV9phAwxQtx1lWzgc55PHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFQyWUJtYVR6enhFR2VRQ1BHdzRpczhjc2RLSDlvN3NORXBCd290Nk1u
YmYvMC80NDNBMDVERTQ1N0RBNjEwMzBDNTBCNzFENjU1QjM4MUNFNzkzQzczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0M0EwNURFNDU3REE2MTAz
MEM1MEI3MUQ2NTVCMzgxQ0U3OTNDNzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUMllCbWFUenp4RUdlUUNQR3c0aXM4Y3NkS0g5bzdzTkVwQndvdDZNbmJmLzAv
MzIzODMwMzQzYTM3MzkzODMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMzMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEeYCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCChxefpK4glTLKM699Ba6YjSRuuqS2Bvw8p6Fo9JwTEXVajC0T56oUUTxJ
erPnr072CmgeDsIYP0XHlBKbQSn17rDJkkfcv04VHZKntETZpjhckyCBVqI0e0R6
ohOpxolvp2r85ogTUm+kevflHKGu+JvPanq/hfqlwkDbmrivTbpwgRW3hlV6hFbt
+8NhrIdfDPzhpDj8h6XrAQMmK6EfWVLxNTMUcUvHy7gPlKz1uNhoXP1FWFmVYgSf
F1tuqk3rU3qFYmfZ16AFjrfs2tNHygKrsr9gUBU6gfrcbnjvB3RGy0Geri7DJfZ3
6xBthqRdNvvWvyl5HqWR+z9VqCQ1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org