Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/323830343a316263633a3a2f33322d3332203d3e203631373531.roa
File:                     323830343a316263633a3a2f33322d3332203d3e203631373531.roa (raw, json)
Hash identifier:          APUxZHfx+TxeuqpUhbKoBuwcXuu1iouUKgDBnlHDXqw=
Subject key identifier:   43:84:B0:B9:54:34:3E:E1:F1:22:A2:D7:46:28:BD:F2:93:86:62:C6
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       7CBE92B5F9FA9195E7AE11697250FD823E535A0B
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/323830343a316263633a3a2f33322d3332203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:38:45 +0000
ROA not before:           Fri 15 Sep 2023 20:33:45 +0000
ROA not after:            Fri 13 Sep 2024 20:38:45 +0000
asID:                     61751
IP address blocks:        2804:1bcc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:be:92:b5:f9:fa:91:95:e7:ae:11:69:72:50:fd:82:3e:53:5a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:33:45 2023 GMT
            Not After : Sep 13 20:38:45 2024 GMT
        Subject: CN=4384B0B954343EE1F122A2D74628BDF2938662C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:75:2b:cf:24:04:c4:82:82:8b:1d:24:c0:88:
                    b6:47:62:50:55:76:04:d0:af:6b:bc:2c:d8:d5:ee:
                    8b:35:dc:cd:dc:27:75:f4:cd:a9:45:08:a0:c2:69:
                    60:7c:ec:ab:53:f5:bd:ca:3e:43:79:bc:a3:98:58:
                    88:a3:4c:b7:a2:2f:dd:0e:a3:69:ae:d4:9d:7e:70:
                    7f:ed:44:97:67:b2:54:ea:e6:dd:6f:a6:41:29:b5:
                    c7:77:a4:f5:06:43:57:a8:c4:da:d1:28:cd:c7:f5:
                    cc:e4:64:3e:3d:25:55:01:73:49:d4:d8:56:15:b7:
                    ef:29:9a:1e:19:96:91:ab:ed:ab:7e:ec:42:6f:27:
                    41:a4:f0:c6:3c:7d:f0:9b:4e:44:9a:d9:87:6a:87:
                    0d:2c:73:e6:3b:a9:07:e5:30:3d:04:81:ee:22:39:
                    0a:02:7b:f8:a2:9f:38:6b:f0:40:1b:d8:d5:68:b6:
                    92:1f:e2:5d:db:90:4f:86:f7:f3:76:59:71:ed:1b:
                    6d:02:eb:0a:35:10:91:e7:3d:53:ae:d4:59:36:a1:
                    75:8c:86:8f:89:b3:c5:7a:97:88:b8:2a:47:44:7f:
                    ea:c5:86:bb:59:7b:9c:39:a4:fb:3a:21:18:33:74:
                    44:ee:54:85:5d:3b:9f:71:38:54:f3:e6:e1:e9:17:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:84:B0:B9:54:34:3E:E1:F1:22:A2:D7:46:28:BD:F2:93:86:62:C6
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/323830343a316263633a3a2f33322d3332203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:b2:fe:f4:9d:b9:c5:fa:08:06:87:0c:c2:7d:4d:e5:63:
         dc:25:4f:6e:d5:9b:c7:88:21:b8:f1:8c:22:ec:8c:95:f3:2d:
         66:9a:b9:f0:68:79:cf:62:0b:c9:98:3e:30:4e:43:c7:59:c6:
         39:59:a6:80:ca:c8:a4:09:9c:71:6e:00:96:ff:59:3e:35:9d:
         7e:22:ba:94:92:d4:52:bb:61:bb:f4:33:7b:d6:09:ba:d8:6c:
         51:a4:c9:70:b7:3c:ef:6f:ff:c3:f0:69:e2:52:71:04:ce:51:
         82:45:4f:76:f0:f7:b1:da:68:91:f6:7b:5e:20:e4:b1:d4:c5:
         52:1a:97:8d:4e:41:b0:cc:27:24:b0:88:0d:bf:04:2f:68:7a:
         b8:d1:79:53:94:f5:ab:27:8a:a9:66:26:90:a5:4e:16:3f:cc:
         ad:3a:80:ea:d6:c7:94:67:e6:8f:f3:e8:3d:c7:05:84:d0:ca:
         26:4f:45:e3:f6:dc:4c:3d:8c:93:9f:54:32:7b:c1:a1:ad:20:
         df:dc:60:e7:92:cb:af:88:3f:a5:d1:a1:1e:24:43:e5:bf:9d:
         07:26:a0:ce:bb:2d:6e:3b:3a:61:46:b7:26:db:a0:e2:92:69:
         b3:15:96:c8:b3:5f:f7:5e:4a:bb:ef:e8:e3:c3:ac:6d:12:ad:
         ae:ed:3a:0d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfL6Stfn6kZXnrhFpclD9gj5TWgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IyRDg3MEQ0RDkwODgzNkUzNzhFRDdCMUYyQ0M2RTJG
RUZFNTAzMjAeFw0yMzA5MTUyMDMzNDVaFw0yNDA5MTMyMDM4NDVaMDMxMTAvBgNV
BAMTKDQzODRCMEI5NTQzNDNFRTFGMTIyQTJENzQ2MjhCREYyOTM4NjYyQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdSvPJATEgoKLHSTAiLZHYlBV
dgTQr2u8LNjV7os13M3cJ3X0zalFCKDCaWB87KtT9b3KPkN5vKOYWIijTLeiL90O
o2mu1J1+cH/tRJdnslTq5t1vpkEptcd3pPUGQ1eoxNrRKM3H9czkZD49JVUBc0nU
2FYVt+8pmh4ZlpGr7at+7EJvJ0Gk8MY8ffCbTkSa2Ydqhw0sc+Y7qQflMD0Ege4i
OQoCe/iinzhr8EAb2NVotpIf4l3bkE+G9/N2WXHtG20C6wo1EJHnPVOu1Fk2oXWM
ho+Js8V6l4i4KkdEf+rFhrtZe5w5pPs6IRgzdETuVIVdO59xOFTz5uHpF7zXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUQ4SwuVQ0PuHxIqLXRii98pOGYsYwHwYDVR0j
BBgwFoAUyy2HDU2QiDbjeO17HyzG4v7+UDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZa
UFMvMC9DQjJEODcwRDREOTA4ODM2RTM3OEVEN0IxRjJDQzZFMkZFRkU1MDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCMkQ4NzBENEQ5MDg4MzZF
Mzc4RUQ3QjFGMkNDNkUyRkVGRTUwMzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc0QTNNUEN3WDdKTDNqUUs5cjVkR0FpSHVvOVZTTWpLVE41TmdxazZ2WlBTLzAv
MzIzODMwMzQzYTMxNjI2MzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEG8wwDQYJKoZIhvcNAQELBQADggEBAFPXsv70nbnF
+ggGhwzCfU3lY9wlT27Vm8eIIbjxjCLsjJXzLWaaufBoec9iC8mYPjBOQ8dZxjlZ
poDKyKQJnHFuAJb/WT41nX4iupSS1FK7Ybv0M3vWCbrYbFGkyXC3PO9v/8PwaeJS
cQTOUYJFT3bw97HaaJH2e14g5LHUxVIal41OQbDMJySwiA2/BC9oerjReVOU9asn
iqlmJpClThY/zK06gOrWx5Rn5o/z6D3HBYTQyiZPReP23Ew9jJOfVDJ7waGtIN/c
YOeSy6+IP6XRoR4kQ+W/nQcmoM67LW47OmFGtybboOKSabMVlsizX/deSrvv6OPD
rG0Sra7tOg0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-ams.rpki-client.org