Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33342d3334203d3e20323639353538.roa
File:                     323830343a363637303a3a2f33342d3334203d3e20323639353538.roa (raw, json)
Hash identifier:          zpbrBVS+KqIJ4gb6QhwfvsCZKvYAuAvW7IqkxFziBcQ=
Subject key identifier:   8F:DF:03:00:71:56:F4:2E:71:92:1B:32:97:47:11:81:10:6A:5E:5A
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       5E9AB331E31B16E89993B322D8A65C764C794FC7
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33342d3334203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:06 +0000
ROA not before:           Wed 29 Mar 2023 02:25:06 +0000
ROA not after:            Wed 27 Mar 2024 02:30:06 +0000
asID:                     269558
IP address blocks:        2804:6670::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9a:b3:31:e3:1b:16:e8:99:93:b3:22:d8:a6:5c:76:4c:79:4f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:06 2023 GMT
            Not After : Mar 27 02:30:06 2024 GMT
        Subject: CN=8FDF03007156F42E71921B3297471181106A5E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:fa:ef:7c:e1:6f:1b:05:b6:63:15:4c:1d:
                    12:36:73:c2:8d:56:0f:15:1d:fb:26:32:e4:75:06:
                    ee:0e:d8:f3:93:21:07:e3:dd:f0:81:d8:20:cc:de:
                    3c:3d:d0:f1:ca:2f:7b:28:7b:12:b6:10:c8:20:84:
                    14:0e:c0:d6:85:78:7e:d7:96:c2:b4:8a:f5:da:bd:
                    8f:f3:8b:47:60:e8:0d:12:14:96:4d:d1:30:5e:be:
                    61:e5:0e:99:22:7b:f7:fd:5e:c9:c8:5b:d7:7e:ab:
                    a7:58:4b:a8:85:11:23:bc:c3:17:b1:2b:2e:98:42:
                    66:2f:7f:1b:fc:f3:e2:d5:4e:e9:29:d4:93:6b:42:
                    b1:55:99:c7:18:2e:15:5c:1e:7f:c6:af:5e:62:80:
                    1c:fb:58:00:73:e0:83:02:c7:46:d9:5b:00:5a:15:
                    82:76:11:24:e0:a7:3f:6b:22:e0:1a:60:eb:c2:40:
                    4f:74:da:bc:6e:2e:00:52:84:aa:4e:1d:e5:14:b7:
                    2d:d5:56:1f:31:9f:8a:73:b2:bf:cc:0a:b6:4a:50:
                    aa:63:df:2a:cb:d9:58:11:48:4b:c3:4d:99:64:db:
                    e0:4a:3b:cd:aa:03:8a:29:c7:75:81:6e:94:ee:b0:
                    30:a9:c1:90:8a:de:c5:e2:d5:5a:30:6d:af:c4:58:
                    db:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:03:00:71:56:F4:2E:71:92:1B:32:97:47:11:81:10:6A:5E:5A
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/323830343a363637303a3a2f33342d3334203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6670::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:a5:90:50:57:b5:d4:6c:6d:03:a0:ed:f9:9a:54:d3:d8:
         7a:9f:f4:52:ff:72:29:a5:64:5b:3a:c8:cd:22:a8:0d:03:5e:
         70:f2:f8:4a:fc:64:ba:5d:73:a6:78:63:0a:87:dd:88:af:fe:
         cc:09:c2:5f:10:1a:c6:8c:fd:90:72:88:72:23:62:d1:ba:0e:
         22:4f:4d:e6:18:ef:17:94:db:01:d2:3a:b9:26:66:52:8c:60:
         cc:40:98:3b:93:66:05:21:93:5f:ec:89:0d:72:8c:4b:1c:0e:
         49:5c:c5:ea:5a:97:58:3e:ac:69:e7:e1:17:59:81:c7:a7:39:
         d2:c1:1d:65:a5:28:9b:2e:9c:10:70:90:19:44:d9:2c:4c:e0:
         32:e4:c8:23:e9:a9:9e:93:32:a3:9e:08:6d:03:72:44:e9:1b:
         2d:f0:6a:78:5a:68:f6:ec:c8:94:02:9e:94:fb:22:49:ef:8b:
         25:26:a0:d4:2f:2d:02:b6:d8:e4:bc:d5:67:09:36:c4:c9:3f:
         7d:eb:a0:57:68:46:e2:09:41:a3:ec:2e:3c:90:0a:6e:14:b2:
         f6:ea:5b:f2:45:ee:11:02:d3:fc:dd:fd:71:c4:f8:17:be:04:
         a2:3e:a4:31:32:ca:de:a9:82:4b:40:a6:31:6d:da:d0:4f:fb:
         dc:c2:5f:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXpqzMeMbFuiZk7Mi2KZcdkx5T8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNFM0M3NzBFNjBFNzUyNkI4MzQ3NzU1OEY1RTdBRThC
RTk5QjBBQzAeFw0yMzAzMjkwMjI1MDZaFw0yNDAzMjcwMjMwMDZaMDMxMTAvBgNV
BAMTKDhGREYwMzAwNzE1NkY0MkU3MTkyMUIzMjk3NDcxMTgxMTA2QTVFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujfrvfOFvGwW2YxVMHRI2c8KN
Vg8VHfsmMuR1Bu4O2POTIQfj3fCB2CDM3jw90PHKL3soexK2EMgghBQOwNaFeH7X
lsK0ivXavY/zi0dg6A0SFJZN0TBevmHlDpkie/f9XsnIW9d+q6dYS6iFESO8wxex
Ky6YQmYvfxv88+LVTukp1JNrQrFVmccYLhVcHn/Gr15igBz7WABz4IMCx0bZWwBa
FYJ2ESTgpz9rIuAaYOvCQE902rxuLgBShKpOHeUUty3VVh8xn4pzsr/MCrZKUKpj
3yrL2VgRSEvDTZlk2+BKO82qA4opx3WBbpTusDCpwZCK3sXi1Vowba/EWNuVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj98DAHFW9C5xkhsyl0cRgRBqXlowHwYDVR0j
BBgwFoAUvOPHcOYOdSa4NHdVj1566L6ZsKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3diRHRxMVJrV3c0U0xhenNBRk5xVE5BS3g4Y1VydmFrQnVDaVM1VjlR
NlkvMC9CQ0UzQzc3MEU2MEU3NTI2QjgzNDc3NTU4RjVFN0FFOEJFOTlCMEFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDRTNDNzcwRTYwRTc1MjZC
ODM0Nzc1NThGNUU3QUU4QkU5OUIwQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3YkR0cTFSa1d3NFNMYXpzQUZOcVROQUt4OGNVcnZha0J1Q2lTNVY5UTZZLzAv
MzIzODMwMzQzYTM2MzYzNzMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzUzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARmcAAwDQYJKoZIhvcNAQELBQADggEBAGfmpZBQ
V7XUbG0DoO35mlTT2Hqf9FL/cimlZFs6yM0iqA0DXnDy+Er8ZLpdc6Z4YwqH3Yiv
/swJwl8QGsaM/ZByiHIjYtG6DiJPTeYY7xeU2wHSOrkmZlKMYMxAmDuTZgUhk1/s
iQ1yjEscDklcxepal1g+rGnn4RdZgcenOdLBHWWlKJsunBBwkBlE2SxM4DLkyCPp
qZ6TMqOeCG0DckTpGy3wanhaaPbsyJQCnpT7IknviyUmoNQvLQK22OS81WcJNsTJ
P33roFdoRuIJQaPsLjyQCm4UsvbqW/JF7hEC0/zd/XHE+Be+BKI+pDEyyt6pgktA
pjFt2tBP+9zCXwI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org