Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa
File:                     323830343a326230303a3a2f33322d3438203d3e20323635313330.roa (raw, json)
Hash identifier:          qrEgNnb8zyrI3qMYSL9RYWtm4E0TrWASg0Ol4nF0m6s=
Subject key identifier:   AA:52:3C:EB:5D:23:EB:01:A6:54:2D:46:5A:53:CF:29:38:C7:3A:15
Certificate issuer:       /CN=9723508999E6E6042E07B57FC49918FDD5C8CDDC
Certificate serial:       38A354C4BE2D70741B870DACA2643E925306387A
Authority key identifier: 97:23:50:89:99:E6:E6:04:2E:07:B5:7F:C4:99:18:FD:D5:C8:CD:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa
Signing time:             Tue 22 Aug 2023 15:25:38 +0000
ROA not before:           Tue 22 Aug 2023 15:20:38 +0000
ROA not after:            Tue 20 Aug 2024 15:25:38 +0000
asID:                     265130
IP address blocks:        2804:2b00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a3:54:c4:be:2d:70:74:1b:87:0d:ac:a2:64:3e:92:53:06:38:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9723508999E6E6042E07B57FC49918FDD5C8CDDC
        Validity
            Not Before: Aug 22 15:20:38 2023 GMT
            Not After : Aug 20 15:25:38 2024 GMT
        Subject: CN=AA523CEB5D23EB01A6542D465A53CF2938C73A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:96:84:ca:76:d2:e0:cf:22:b0:47:6c:61:
                    c9:86:bd:05:a9:63:02:a2:71:23:df:08:eb:e1:85:
                    c1:3c:43:88:ed:d4:8c:71:a4:38:11:b6:8c:bc:72:
                    f0:69:8d:e5:d8:07:a9:8c:d9:ef:cb:9c:aa:d3:d8:
                    3b:c3:96:3e:3d:d7:48:4e:72:06:c7:d2:90:a6:d4:
                    ff:4a:48:78:ae:4d:c9:81:f4:b8:36:2a:3a:c0:d8:
                    6a:be:d4:08:63:44:3c:eb:3c:73:37:0e:41:3a:5a:
                    d9:7d:d6:7a:ed:61:0e:15:36:61:31:c9:db:c4:cd:
                    66:47:2f:7f:47:41:54:17:c0:a6:54:fc:6b:50:54:
                    f5:73:43:e0:55:d7:14:9e:c8:8d:ed:35:6b:d3:78:
                    e5:cb:83:7a:d4:65:04:2e:be:a7:1c:3d:b0:bf:26:
                    f6:cb:27:f1:22:65:54:65:b9:2e:a2:2e:d3:fc:d7:
                    d4:13:6c:26:75:11:db:94:31:cb:d1:ac:99:cc:e6:
                    93:6f:e6:a4:77:a9:f8:91:a5:e8:d8:20:ab:85:43:
                    76:91:8b:80:b6:ff:85:8c:77:8d:fb:8b:3e:2b:3f:
                    bc:a0:19:15:4e:8d:51:bd:ea:bc:21:66:85:79:6b:
                    ad:9f:e5:af:57:d7:d0:bf:12:4d:50:31:e2:58:41:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:52:3C:EB:5D:23:EB:01:A6:54:2D:46:5A:53:CF:29:38:C7:3A:15
            X509v3 Authority Key Identifier:
                keyid:97:23:50:89:99:E6:E6:04:2E:07:B5:7F:C4:99:18:FD:D5:C8:CD:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/323830343a326230303a3a2f33322d3438203d3e20323635313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:be:0e:22:ed:6d:23:37:2d:ed:be:ab:7d:74:f8:31:94:53:
         1e:dc:f9:a3:fd:20:77:57:4b:0e:5a:f4:2f:e8:7f:e4:02:b2:
         1d:20:f6:f4:a6:0d:72:ed:ee:48:d3:1c:97:a8:a0:82:30:a9:
         7a:87:32:7b:22:fa:2e:7e:bd:5b:47:c1:0b:fc:b9:1f:75:89:
         4a:38:cf:ad:20:9e:55:31:4c:90:fa:c7:51:e7:e9:47:ad:20:
         49:22:9c:da:99:30:61:ea:16:c8:2b:02:26:46:d4:5b:00:fa:
         9e:6e:17:4b:28:fe:11:0d:2c:24:17:c7:2d:41:89:76:d3:bc:
         86:20:5e:6b:76:15:4e:9a:38:d5:47:04:7d:90:0b:fd:c4:85:
         3c:02:e0:63:00:8d:e3:4c:06:48:4b:c9:bc:96:ff:86:e2:cf:
         a7:75:f3:a8:99:d5:5c:f5:1f:45:a5:cb:a2:f4:32:70:b5:4d:
         25:57:a6:86:b1:4f:c9:5f:59:da:a4:99:6b:7f:ec:24:5d:85:
         95:97:98:71:18:29:e5:2f:64:01:27:57:5c:ac:32:aa:ce:45:
         25:a2:59:45:1b:82:8b:d5:1c:e4:78:63:08:a7:47:3a:d1:89:
         df:01:f8:7e:dd:93:f6:68:e6:f3:a2:7c:e0:e9:b6:b1:01:8b:
         f1:c2:d3:8d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOKNUxL4tcHQbhw2somQ+klMGOHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcyMzUwODk5OUU2RTYwNDJFMDdCNTdGQzQ5OTE4RkRE
NUM4Q0REQzAeFw0yMzA4MjIxNTIwMzhaFw0yNDA4MjAxNTI1MzhaMDMxMTAvBgNV
BAMTKEFBNTIzQ0VCNUQyM0VCMDFBNjU0MkQ0NjVBNTNDRjI5MzhDNzNBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIJaEynbS4M8isEdsYcmGvQWp
YwKicSPfCOvhhcE8Q4jt1IxxpDgRtoy8cvBpjeXYB6mM2e/LnKrT2DvDlj4910hO
cgbH0pCm1P9KSHiuTcmB9Lg2KjrA2Gq+1AhjRDzrPHM3DkE6Wtl91nrtYQ4VNmEx
ydvEzWZHL39HQVQXwKZU/GtQVPVzQ+BV1xSeyI3tNWvTeOXLg3rUZQQuvqccPbC/
JvbLJ/EiZVRluS6iLtP819QTbCZ1EduUMcvRrJnM5pNv5qR3qfiRpejYIKuFQ3aR
i4C2/4WMd437iz4rP7ygGRVOjVG96rwhZoV5a62f5a9X19C/Ek1QMeJYQXvJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUqlI8610j6wGmVC1GWlPPKTjHOhUwHwYDVR0j
BBgwFoAUlyNQiZnm5gQuB7V/xJkY/dXIzdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERkMnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1
eHcvMC85NzIzNTA4OTk5RTZFNjA0MkUwN0I1N0ZDNDk5MThGREQ1QzhDRERDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MjM1MDg5OTlFNkU2MDQy
RTA3QjU3RkM0OTkxOEZERDVDOENEREMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhEZDJ5YWZRRURSeUxTbkVoWHdoNkNtU1l3QnVKRTVxMzV6S0RWQm1ZNXh3LzAv
MzIzODMwMzQzYTMyNjIzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQrADANBgkqhkiG9w0BAQsFAAOCAQEAEr4OIu1t
Izct7b6rfXT4MZRTHtz5o/0gd1dLDlr0L+h/5AKyHSD29KYNcu3uSNMcl6iggjCp
eocyeyL6Ln69W0fBC/y5H3WJSjjPrSCeVTFMkPrHUefpR60gSSKc2pkwYeoWyCsC
JkbUWwD6nm4XSyj+EQ0sJBfHLUGJdtO8hiBea3YVTpo41UcEfZAL/cSFPALgYwCN
40wGSEvJvJb/huLPp3XzqJnVXPUfRaXLovQycLVNJVemhrFPyV9Z2qSZa3/sJF2F
lZeYcRgp5S9kASdXXKwyqs5FJaJZRRuCi9Uc5HhjCKdHOtGJ3wH4ft2T9mjm86J8
4Om2sQGL8cLTjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org