Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/323830343a346535383a383030303a3a2f33332d3333203d3e20323638323535.roa
File:                     323830343a346535383a383030303a3a2f33332d3333203d3e20323638323535.roa (raw, json)
Hash identifier:          5rt6W3lNHqk6nalPbGQG5nIVZtq9VlM+5YYZ6NbNNZU=
Subject key identifier:   27:38:C9:9B:C8:07:05:D1:B0:D6:95:FD:1C:C7:A8:CE:80:CD:1C:0B
Certificate issuer:       /CN=B7EACE5FCD839D3B7EB07701983C797BF744943B
Certificate serial:       76BE9E1B7E9A9C0E57874FC0C4ADD7C3685E23E2
Authority key identifier: B7:EA:CE:5F:CD:83:9D:3B:7E:B0:77:01:98:3C:79:7B:F7:44:94:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/323830343a346535383a383030303a3a2f33332d3333203d3e20323638323535.roa
Signing time:             Mon 03 Apr 2023 10:57:45 +0000
ROA not before:           Mon 03 Apr 2023 10:52:45 +0000
ROA not after:            Mon 01 Apr 2024 10:57:45 +0000
asID:                     268255
IP address blocks:        2804:4e58:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:be:9e:1b:7e:9a:9c:0e:57:87:4f:c0:c4:ad:d7:c3:68:5e:23:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7EACE5FCD839D3B7EB07701983C797BF744943B
        Validity
            Not Before: Apr  3 10:52:45 2023 GMT
            Not After : Apr  1 10:57:45 2024 GMT
        Subject: CN=2738C99BC80705D1B0D695FD1CC7A8CE80CD1C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:b3:dc:6b:3d:d7:5e:24:39:2c:6a:df:06:
                    98:14:0e:8c:77:6d:04:11:0b:6f:36:d3:9f:0b:92:
                    7a:fd:98:eb:1b:78:78:d6:7a:03:20:33:2c:38:65:
                    29:1a:0c:e8:fd:9a:6b:87:47:f3:e8:bc:bd:e3:c9:
                    45:eb:05:42:76:93:f4:ae:7e:a8:fb:f3:4d:5d:d7:
                    42:91:f9:3f:64:ce:fd:e2:66:d0:de:da:59:89:7c:
                    62:b0:d7:97:20:29:40:c0:07:c8:c7:13:b8:7a:82:
                    ba:6f:91:8a:eb:f6:9c:87:01:c5:eb:cf:c1:33:26:
                    fb:4f:1b:ac:ad:c1:a5:50:24:cc:92:df:a6:4f:d2:
                    1e:98:9b:b9:c2:68:4f:d7:d8:b9:de:e3:29:65:ce:
                    b9:59:2c:52:f8:0f:8d:36:19:8e:70:ac:9e:a2:05:
                    b2:9b:7a:61:30:cc:b8:32:44:1c:a9:3a:50:f8:79:
                    c4:ea:c2:48:3e:be:a4:e5:40:72:b2:11:e4:90:76:
                    09:08:c1:c7:ca:8d:ab:a0:55:8f:08:91:f6:31:b4:
                    b7:7c:0f:d4:22:2e:af:b3:08:56:6e:7d:09:b8:da:
                    79:ac:59:15:cb:c4:00:ec:e0:5d:60:71:41:02:17:
                    49:e2:04:5a:cd:a0:54:e9:fc:70:52:2c:79:31:a2:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:38:C9:9B:C8:07:05:D1:B0:D6:95:FD:1C:C7:A8:CE:80:CD:1C:0B
            X509v3 Authority Key Identifier:
                keyid:B7:EA:CE:5F:CD:83:9D:3B:7E:B0:77:01:98:3C:79:7B:F7:44:94:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/323830343a346535383a383030303a3a2f33332d3333203d3e20323638323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e58:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:0a:09:b8:f1:a3:6c:7f:35:f1:e1:20:81:27:17:b8:18:
         9b:0e:5d:71:51:49:da:06:49:06:19:c6:37:c2:1e:1e:26:16:
         a4:cb:a9:c6:9d:a2:4c:36:e1:84:24:eb:61:fc:5e:59:0e:a1:
         67:c2:69:c9:9f:12:b2:6e:0f:5f:1b:ca:87:36:52:5c:9c:4f:
         f4:cc:44:b8:40:9f:19:6f:3b:28:60:20:3a:82:2d:a3:62:30:
         51:17:fe:fe:23:05:00:e0:8c:a2:cb:df:62:27:e3:1a:5d:7c:
         38:cb:62:46:15:b4:1e:1c:16:81:1c:b7:cc:fe:21:d3:17:70:
         dc:c0:52:d8:1e:2c:4d:c8:7a:29:4d:48:a1:67:00:87:ff:42:
         95:6f:66:b7:70:6f:e4:66:11:09:97:ed:e4:67:37:8c:23:7e:
         ff:c8:a3:52:cb:4e:c2:59:6e:29:92:a6:20:4f:5e:6b:c2:15:
         58:be:1f:d1:71:de:36:fb:b5:a4:87:9d:9f:0d:37:6b:7d:52:
         f6:33:88:75:68:e6:6c:67:85:4c:d5:fb:4c:35:50:d7:db:e4:
         52:f7:2e:9c:5b:14:da:d9:e4:48:7e:05:90:c2:f3:19:0d:7a:
         ea:4b:67:2a:e0:63:1c:c9:93:d5:21:48:ce:6f:1f:96:b7:fe:
         9f:cf:ce:e6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdr6eG36anA5Xh0/AxK3Xw2heI+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFQUNFNUZDRDgzOUQzQjdFQjA3NzAxOTgzQzc5N0JG
NzQ0OTQzQjAeFw0yMzA0MDMxMDUyNDVaFw0yNDA0MDExMDU3NDVaMDMxMTAvBgNV
BAMTKDI3MzhDOTlCQzgwNzA1RDFCMEQ2OTVGRDFDQzdBOENFODBDRDFDMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBALPcaz3XXiQ5LGrfBpgUDox3
bQQRC282058Lknr9mOsbeHjWegMgMyw4ZSkaDOj9mmuHR/PovL3jyUXrBUJ2k/Su
fqj7801d10KR+T9kzv3iZtDe2lmJfGKw15cgKUDAB8jHE7h6grpvkYrr9pyHAcXr
z8EzJvtPG6ytwaVQJMyS36ZP0h6Ym7nCaE/X2Lne4yllzrlZLFL4D402GY5wrJ6i
BbKbemEwzLgyRBypOlD4ecTqwkg+vqTlQHKyEeSQdgkIwcfKjaugVY8IkfYxtLd8
D9QiLq+zCFZufQm42nmsWRXLxADs4F1gcUECF0niBFrNoFTp/HBSLHkxooMFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJzjJm8gHBdGw1pX9HMeozoDNHAswHwYDVR0j
BBgwFoAUt+rOX82DnTt+sHcBmDx5e/dElDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGtpRnJNUVA2Z2UxRk5iVFNnSHpRODJvazNxMlNnVUczS3VzWndzM2RC
RVMvMC9CN0VBQ0U1RkNEODM5RDNCN0VCMDc3MDE5ODNDNzk3QkY3NDQ5NDNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3RUFDRTVGQ0Q4MzlEM0I3
RUIwNzcwMTk4M0M3OTdCRjc0NDk0M0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRraUZyTVFQNmdlMUZOYlRTZ0h6UTgyb2szcTJTZ1VHM0t1c1p3czNkQkVTLzAv
MzIzODMwMzQzYTM0NjUzNTM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODMyMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETliAMA0GCSqGSIb3DQEBCwUA
A4IBAQAP+goJuPGjbH818eEggScXuBibDl1xUUnaBkkGGcY3wh4eJhaky6nGnaJM
NuGEJOth/F5ZDqFnwmnJnxKybg9fG8qHNlJcnE/0zES4QJ8ZbzsoYCA6gi2jYjBR
F/7+IwUA4Iyiy99iJ+MaXXw4y2JGFbQeHBaBHLfM/iHTF3DcwFLYHixNyHopTUih
ZwCH/0KVb2a3cG/kZhEJl+3kZzeMI37/yKNSy07CWW4pkqYgT15rwhVYvh/Rcd42
+7Wkh52fDTdrfVL2M4h1aOZsZ4VM1ftMNVDX2+RS9y6cWxTa2eRIfgWQwvMZDXrq
S2cq4GMcyZPVIUjObx+Wt/6fz87m
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org