Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37633a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37633a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          xFOob9vKjsF/GRxVER+4/E17b/aEQ8xGrRO3R/Xs/i0=
Subject key identifier:   25:7B:1D:B7:D4:77:FB:BB:32:78:A8:B2:AA:A7:4C:58:E1:D8:27:8D
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       37D0D2F637E383FB8B42D26C7C5143188D3D169B
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37633a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     262713
IP address blocks:        2804:640:7c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d0:d2:f6:37:e3:83:fb:8b:42:d2:6c:7c:51:43:18:8d:3d:16:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:99:2f:32:40:48:3d:2c:f8:9d:92:ed:a1:
                    1f:08:16:ea:54:16:ec:a7:dd:97:c6:3b:73:14:69:
                    2b:7f:21:6e:32:25:29:dd:f3:ac:7d:0f:db:6b:52:
                    b1:da:a6:b4:b3:80:d8:fe:d4:e0:65:b9:eb:b8:cc:
                    fe:93:c0:32:52:b9:a1:69:d8:8f:a7:40:e6:24:30:
                    b1:38:9d:e7:a6:86:02:98:e9:96:54:2d:38:05:04:
                    04:55:d6:b6:99:fe:4f:87:1c:08:7b:01:ed:d1:54:
                    99:6b:f0:86:03:89:0f:25:85:91:a2:ae:a1:fc:91:
                    e8:75:2a:54:fd:81:e2:32:a0:6f:71:0c:3c:5a:8f:
                    a3:94:87:d4:0d:74:37:02:a7:11:7b:db:f6:4f:67:
                    18:25:0f:b5:b4:76:4d:6c:db:b6:1b:2e:98:51:22:
                    95:4a:b2:95:16:12:a3:1a:16:86:ba:32:51:c7:89:
                    90:cc:2e:8d:aa:e6:21:cd:1b:c4:2a:02:07:32:03:
                    41:b8:df:3a:cc:08:e9:a6:3d:76:90:bf:30:e0:87:
                    7e:fc:09:b5:b6:86:e8:a6:d2:0f:f3:15:ec:a1:02:
                    c0:b7:f2:72:3e:9b:38:ec:b0:2d:98:f9:6d:f3:79:
                    a4:2e:5d:df:06:35:c1:c1:42:15:2d:d6:e5:51:66:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7B:1D:B7:D4:77:FB:BB:32:78:A8:B2:AA:A7:4C:58:E1:D8:27:8D
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37633a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7c::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:9d:31:f1:ba:21:52:ca:7f:c6:99:58:b8:a0:55:db:fd:0b:
         7e:69:f5:bc:48:12:ed:fe:3e:12:0b:63:83:05:e3:c5:cf:14:
         6b:da:c2:54:3f:91:43:91:ea:c5:02:ad:2b:69:87:60:0c:04:
         86:f4:ec:e8:85:96:50:27:5b:be:ff:a8:61:84:e3:6e:28:e8:
         6c:6a:44:53:c7:3e:4e:20:cb:05:47:16:a2:96:30:93:a7:59:
         92:68:c2:7a:8e:ed:e2:f4:8c:c2:a9:ea:31:ea:42:52:a3:57:
         d5:80:90:59:f3:e7:96:75:61:c6:e0:13:9c:f5:32:dc:51:8d:
         f2:6f:07:bb:41:91:78:e0:37:e1:48:c8:94:2f:bc:47:61:3d:
         e7:88:8b:6c:f7:0f:c6:68:3f:3d:3c:84:08:bf:98:70:78:02:
         46:bf:1b:97:6a:aa:f4:bb:a7:06:14:b0:39:3b:29:4a:0d:66:
         78:a5:78:8d:c8:30:70:7a:a3:1d:46:4b:6d:14:cf:c3:81:d1:
         2e:d5:11:a0:ed:9c:1b:5c:34:69:d3:a8:21:5b:b1:b6:2b:ef:
         be:32:36:b8:7e:93:7a:40:34:ee:4a:71:8e:ac:fd:0d:02:04:
         8f:90:e8:11:56:41:b1:e1:13:b2:d0:98:d4:42:d8:87:01:24:
         7e:b6:a9:f8
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUN9DS9jfjg/uLQtJsfFFDGI09FpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMENBOTgwOTFEQTg2QjNFNkQxOEZEMjA3RjFGQjY1
ODg1MjQ2MzAeFw0yNDA0MDMxODI1NDlaFw0yNTA0MDIxODMwNDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREYxRjk5MkYzMjQwNDgzRDJD
Rjg5RDkyRURBMTFGMDgxNkVBNTQxNkVDQTdERDk3QzYzQjczMTQ2OTJCN0YyMTZF
MzIyNTI5RERGM0FDN0QwRkRCNkI1MkIxREFBNkI0QjM4MEQ4RkVENEUwNjVCOUVC
QjhDQ0ZFOTNDMDMyNTJCOUExNjlEODhGQTc0MEU2MjQzMEIxMzg5REU3QTY4NjAy
OThFOTk2NTQyRDM4MDUwNDA0NTVENkI2OTlGRTRGODcxQzA4N0IwMUVERDE1NDk5
NkJGMDg2MDM4OTBGMjU4NTkxQTJBRUExRkM5MUU4NzUyQTU0RkQ4MUUyMzJBMDZG
NzEwQzNDNUE4RkEzOTQ4N0Q0MEQ3NDM3MDJBNzExN0JEQkY2NEY2NzE4MjUwRkI1
QjQ3NjRENkNEQkI2MUIyRTk4NTEyMjk1NEFCMjk1MTYxMkEzMUExNjg2QkEzMjUx
Qzc4OTkwQ0MyRThEQUFFNjIxQ0QxQkM0MkEwMjA3MzIwMzQxQjhERjNBQ0MwOEU5
QTYzRDc2OTBCRjMwRTA4NzdFRkMwOUI1QjY4NkU4QTZEMjBGRjMxNUVDQTEwMkMw
QjdGMjcyM0U5QjM4RUNCMDJEOThGOTZERjM3OUE0MkU1RERGMDYzNUMxQzE0MjE1
MkRENkU1NTE2NkJGQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3x+ZLzJASD0s+J2S7aEfCBbqVBbsp92XxjtzFGkrfyFuMiUp3fOs
fQ/ba1Kx2qa0s4DY/tTgZbnruMz+k8AyUrmhadiPp0DmJDCxOJ3npoYCmOmWVC04
BQQEVda2mf5PhxwIewHt0VSZa/CGA4kPJYWRoq6h/JHodSpU/YHiMqBvcQw8Wo+j
lIfUDXQ3AqcRe9v2T2cYJQ+1tHZNbNu2Gy6YUSKVSrKVFhKjGhaGujJRx4mQzC6N
quYhzRvEKgIHMgNBuN86zAjppj12kL8w4Id+/Am1toboptIP8xXsoQLAt/JyPps4
7LAtmPlt83mkLl3fBjXBwUIVLdblUWa/vwIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FCV7HbfUd/u7MniosqqnTFjh2CeNMB8GA1UdIwQYMBaAFD8wypgJHahrPm0Y/SB/
H7ZYhSRjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzEvM0YzMENBOTgwOTFEQTg2
QjNFNkQxOEZEMjA3RjFGQjY1ODg1MjQ2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRjMwQ0E5ODA5MURBODZCM0U2RDE4RkQyMDdGMUZCNjU4ODUy
NDYzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8xLzMyMzgzMDM0M2EzNjM0MzAzYTM3
NjMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzNzMxMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBAZAAHwwDQYJKoZIhvcNAQELBQADggEBAIedMfG6IVLKf8aZWLigVdv9C35p
9bxIEu3+PhILY4MF48XPFGvawlQ/kUOR6sUCrStph2AMBIb07OiFllAnW77/qGGE
424o6GxqRFPHPk4gywVHFqKWMJOnWZJownqO7eL0jMKp6jHqQlKjV9WAkFnz55Z1
YcbgE5z1MtxRjfJvB7tBkXjgN+FIyJQvvEdhPeeIi2z3D8ZoPz08hAi/mHB4Aka/
G5dqqvS7pwYUsDk7KUoNZnileI3IMHB6ox1GS20Uz8OB0S7VEaDtnBtcNGnTqCFb
sbYr774yNrh+k3pANO5KcY6s/Q0CBI+Q6BFWQbHhE7LQmNRC2IcBJH62qfg=
-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org