Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/323830343a336565383a3a2f33322d3332203d3e20323636363238.roa
File:                     323830343a336565383a3a2f33322d3332203d3e20323636363238.roa (raw, json)
Hash identifier:          44aigJwrKc+rJsFST4pSZklaBXl6SlNzo4dna2z5CTw=
Subject key identifier:   D3:13:12:12:7C:34:91:2E:B3:89:CE:88:97:66:EB:04:25:B1:9A:19
Certificate issuer:       /CN=B96B0A6083B862C27D011654CF18FB16A3C983B7
Certificate serial:       02B5221B3C45BBF1047F20F11452640F61D3F499
Authority key identifier: B9:6B:0A:60:83:B8:62:C2:7D:01:16:54:CF:18:FB:16:A3:C9:83:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/323830343a336565383a3a2f33322d3332203d3e20323636363238.roa
Signing time:             Thu 18 Jan 2024 16:00:00 +0000
ROA not before:           Thu 18 Jan 2024 15:55:00 +0000
ROA not after:            Thu 16 Jan 2025 16:00:00 +0000
asID:                     266628
IP address blocks:        2804:3ee8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b5:22:1b:3c:45:bb:f1:04:7f:20:f1:14:52:64:0f:61:d3:f4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B0A6083B862C27D011654CF18FB16A3C983B7
        Validity
            Not Before: Jan 18 15:55:00 2024 GMT
            Not After : Jan 16 16:00:00 2025 GMT
        Subject: CN=D31312127C34912EB389CE889766EB0425B19A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:57:72:92:2e:f0:43:18:94:54:54:82:eb:
                    51:ba:bf:9c:68:28:9c:7f:9e:74:4c:43:f1:9e:47:
                    1d:ab:6c:5c:e9:85:5a:89:ff:6f:8d:cd:4c:58:c8:
                    85:60:72:09:7d:e8:28:ce:f9:de:9c:d3:1f:8f:01:
                    c4:02:ae:0f:9a:c4:91:c1:51:5e:7a:ba:69:81:a1:
                    cb:94:01:66:ba:ee:78:1a:fc:e7:10:a9:0c:58:62:
                    77:63:4e:fa:ce:9c:92:c9:dd:43:b1:c6:4c:96:34:
                    ce:85:df:15:22:d9:cd:30:42:0e:c9:2b:12:92:42:
                    d3:dc:70:07:cc:cf:ac:c2:60:8d:e4:2b:19:dd:67:
                    10:e0:00:b1:a1:38:e5:96:73:a6:33:81:62:97:da:
                    f7:2d:83:25:1c:80:55:37:af:41:88:3f:f8:3c:a8:
                    8a:91:d2:06:ee:2c:bb:74:56:6d:f0:83:b6:5b:cc:
                    63:e5:60:87:b0:5d:e1:de:99:75:b9:81:ac:4c:7f:
                    ec:df:2c:66:c3:aa:d9:05:f9:21:87:f0:79:84:b0:
                    1f:f7:e2:1d:fd:a1:5d:31:58:2c:81:04:d6:05:68:
                    97:86:b2:60:b0:99:bf:72:35:c2:98:bd:a5:6b:82:
                    0b:0e:9d:a7:26:00:3c:a3:0f:66:f5:08:30:b1:6a:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:12:12:7C:34:91:2E:B3:89:CE:88:97:66:EB:04:25:B1:9A:19
            X509v3 Authority Key Identifier:
                keyid:B9:6B:0A:60:83:B8:62:C2:7D:01:16:54:CF:18:FB:16:A3:C9:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/323830343a336565383a3a2f33322d3332203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ee8::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:2f:c6:59:3b:9b:1d:18:b4:1f:b9:e0:a9:55:e2:08:f4:06:
         42:28:14:ae:39:2e:5a:77:91:97:f9:e2:6c:d1:52:54:7d:5b:
         25:5d:d8:93:cb:d6:e0:40:13:70:ec:16:5e:de:41:ca:15:9c:
         4f:12:5d:bf:85:ce:6f:5d:2c:f7:b1:a4:e6:aa:83:e0:a4:ea:
         a9:20:69:82:c0:ee:25:6b:37:e5:ae:d0:6a:26:2d:c3:90:96:
         25:dc:9d:c9:bd:cf:83:5d:c8:77:e9:bb:0f:5c:0b:70:2e:7f:
         99:98:69:af:d8:ce:78:7e:8f:2e:04:bf:dd:b1:86:d4:7f:08:
         8b:5f:01:35:a4:91:be:d3:b4:17:92:40:79:5e:11:d3:76:e6:
         c3:ee:9b:e6:9c:50:86:89:a5:24:91:86:74:0d:96:06:7c:95:
         a5:8d:df:81:19:8e:ad:f4:0f:f0:a9:87:59:29:81:cb:3f:fb:
         82:d4:9f:ec:07:14:ab:1d:12:51:66:fa:38:48:81:38:ff:e6:
         2f:20:e6:2b:a5:aa:8b:34:5f:db:bf:94:6b:e0:fc:2d:85:6a:
         9c:ad:58:0c:66:20:e9:59:2d:85:37:2a:bb:27:b8:5c:33:58:
         b4:57:9c:bb:2c:31:7a:a8:30:cb:9d:82:ba:24:cc:41:ec:ba:
         dd:48:9e:01
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUArUiGzxFu/EEfyDxFFJkD2HT9JkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2QjBBNjA4M0I4NjJDMjdEMDExNjU0Q0YxOEZCMTZB
M0M5ODNCNzAeFw0yNDAxMTgxNTU1MDBaFw0yNTAxMTYxNjAwMDBaMDMxMTAvBgNV
BAMTKEQzMTMxMjEyN0MzNDkxMkVCMzg5Q0U4ODk3NjZFQjA0MjVCMTlBMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+01dyki7wQxiUVFSC61G6v5xo
KJx/nnRMQ/GeRx2rbFzphVqJ/2+NzUxYyIVgcgl96CjO+d6c0x+PAcQCrg+axJHB
UV56ummBocuUAWa67nga/OcQqQxYYndjTvrOnJLJ3UOxxkyWNM6F3xUi2c0wQg7J
KxKSQtPccAfMz6zCYI3kKxndZxDgALGhOOWWc6YzgWKX2vctgyUcgFU3r0GIP/g8
qIqR0gbuLLt0Vm3wg7ZbzGPlYIewXeHemXW5gaxMf+zfLGbDqtkF+SGH8HmEsB/3
4h39oV0xWCyBBNYFaJeGsmCwmb9yNcKYvaVrggsOnacmADyjD2b1CDCxaom3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0xMSEnw0kS6zic6Il2brBCWxmhkwHwYDVR0j
BBgwFoAUuWsKYIO4YsJ9ARZUzxj7FqPJg7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VmNXNtQzkxZDN2YW94MnoxTHc3djJUVVNEZjVLN2JrZ2d2RXpGNE5l
UEEvMC9COTZCMEE2MDgzQjg2MkMyN0QwMTE2NTRDRjE4RkIxNkEzQzk4M0I3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5NkIwQTYwODNCODYyQzI3
RDAxMTY1NENGMThGQjE2QTNDOTgzQjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd1ZjVzbUM5MWQzdmFveDJ6MUx3N3YyVFVTRGY1Szdia2dndkV6RjROZVBBLzAv
MzIzODMwMzQzYTMzNjU2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzYzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+6DANBgkqhkiG9w0BAQsFAAOCAQEAIC/GWTub
HRi0H7ngqVXiCPQGQigUrjkuWneRl/nibNFSVH1bJV3Yk8vW4EATcOwWXt5ByhWc
TxJdv4XOb10s97Gk5qqD4KTqqSBpgsDuJWs35a7QaiYtw5CWJdydyb3Pg13Id+m7
D1wLcC5/mZhpr9jOeH6PLgS/3bGG1H8Ii18BNaSRvtO0F5JAeV4R03bmw+6b5pxQ
homlJJGGdA2WBnyVpY3fgRmOrfQP8KmHWSmByz/7gtSf7AcUqx0SUWb6OEiBOP/m
LyDmK6WqizRf27+Ua+D8LYVqnK1YDGYg6VkthTcquye4XDNYtFecuywxeqgwy52C
uiTMQey63UieAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org