Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313530303a3a2f34302d3430203d3e20323634303235.roa
File:                     323830343a323939633a313530303a3a2f34302d3430203d3e20323634303235.roa (raw, json)
Hash identifier:          JNxVhpYQGoaO1OJS26LqrNDkG1OsrnoayDNp73O9PJs=
Subject key identifier:   6A:D5:DC:72:F0:EC:95:01:51:A6:43:3F:7F:C4:16:4A:A4:C7:3D:9C
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       04C9899C420ED2C7D6677D901AA6219BE2775374
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313530303a3a2f34302d3430203d3e20323634303235.roa
Signing time:             Mon 11 Mar 2024 12:33:04 +0000
ROA not before:           Mon 11 Mar 2024 12:28:04 +0000
ROA not after:            Mon 10 Mar 2025 12:33:04 +0000
asID:                     264025
IP address blocks:        2804:299c:1500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c9:89:9c:42:0e:d2:c7:d6:67:7d:90:1a:a6:21:9b:e2:77:53:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar 11 12:28:04 2024 GMT
            Not After : Mar 10 12:33:04 2025 GMT
        Subject: CN=6AD5DC72F0EC950151A6433F7FC4164AA4C73D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:7f:8d:62:3a:02:f1:ad:e5:95:69:77:c0:
                    44:a8:af:b5:47:a9:6d:5a:33:71:96:e3:46:e2:9b:
                    a1:f0:8b:fe:65:50:5a:83:09:82:29:5a:5c:7c:70:
                    34:19:48:a0:2f:96:2b:96:e0:90:e6:d1:4a:a4:01:
                    c5:ea:43:0a:23:18:59:29:41:11:5a:0b:70:02:62:
                    b2:2d:cc:d5:31:c0:c1:ab:02:b6:b5:11:21:5f:2c:
                    ec:72:8f:c2:3d:26:22:d6:d3:d9:85:15:34:4e:84:
                    36:97:bf:72:0d:dd:4a:84:8a:04:17:13:d5:49:95:
                    e1:ce:87:c5:08:94:47:ec:b4:17:da:6a:a1:2d:6a:
                    ee:f5:68:6b:e5:8a:ad:8c:75:4c:7c:fa:f5:27:f2:
                    8a:17:01:2c:bd:e8:62:09:f5:fe:d4:3e:09:36:2e:
                    fc:52:21:38:5d:64:11:82:b3:d2:a7:a4:ce:25:ea:
                    69:81:95:40:1d:96:e6:41:73:88:c2:32:e5:f5:3c:
                    d3:de:a2:23:f9:ec:33:96:00:1e:60:98:db:6e:e0:
                    4d:e9:e5:9a:a2:95:90:aa:a7:f2:ab:fb:1a:8d:b5:
                    6f:8d:40:66:c8:96:18:bb:47:3f:8b:9f:aa:74:23:
                    aa:da:db:18:6b:38:8c:7e:bc:82:97:fe:1f:53:3f:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D5:DC:72:F0:EC:95:01:51:A6:43:3F:7F:C4:16:4A:A4:C7:3D:9C
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313530303a3a2f34302d3430203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:1f:25:e5:dd:eb:95:2a:fe:93:7d:2b:99:b8:0a:7c:82:30:
         5b:07:5e:7f:da:ea:25:b7:72:5d:f3:18:dd:63:9d:4c:5a:81:
         53:98:46:b0:00:06:31:83:14:f3:ad:3b:9f:7b:ff:e6:40:b2:
         d0:2e:a5:b8:a0:ee:97:de:c2:7f:20:e5:6c:1c:9f:33:9d:28:
         ba:4c:86:08:70:11:19:80:73:f9:de:5c:79:76:ca:e8:5a:9f:
         c0:7c:f3:cb:0b:fa:fc:70:76:10:49:04:99:d5:75:73:b6:05:
         f6:0e:5d:a6:02:0b:f5:f6:f6:e8:d3:4c:66:cc:b0:ac:4b:7c:
         4e:e4:19:4d:7d:c2:18:aa:a1:f4:55:93:a8:ad:b4:08:b5:f8:
         36:c0:8a:10:5c:a9:bc:d7:cc:d6:c8:38:7a:2c:f1:22:47:65:
         0b:2a:87:1a:16:85:b5:98:33:03:ce:fb:41:3d:81:ea:c6:7d:
         67:e8:4b:a5:ac:93:93:60:4e:c9:a4:39:3a:67:f7:0a:2c:41:
         b7:33:75:18:a0:7d:92:34:e3:14:93:29:d9:d7:0c:be:18:a9:
         a3:a0:f4:09:3c:74:30:98:35:fd:ea:08:0f:9a:25:30:b8:7a:
         d9:ca:dd:f2:db:dc:37:c1:e9:fb:d2:fc:d2:d8:9f:9b:b1:f8:
         bf:b1:c1:db
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBMmJnEIO0sfWZ32QGqYhm+J3U3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI3Q0EyRUE0RjczOEYwMTM3RTUwQjIyQkFEOTU3QzVF
NkY1QUEwNDAeFw0yNDAzMTExMjI4MDRaFw0yNTAzMTAxMjMzMDRaMDMxMTAvBgNV
BAMTKDZBRDVEQzcyRjBFQzk1MDE1MUE2NDMzRjdGQzQxNjRBQTRDNzNEOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSX+NYjoC8a3llWl3wESor7VH
qW1aM3GW40bim6Hwi/5lUFqDCYIpWlx8cDQZSKAvliuW4JDm0UqkAcXqQwojGFkp
QRFaC3ACYrItzNUxwMGrAra1ESFfLOxyj8I9JiLW09mFFTROhDaXv3IN3UqEigQX
E9VJleHOh8UIlEfstBfaaqEtau71aGvliq2MdUx8+vUn8ooXASy96GIJ9f7UPgk2
LvxSIThdZBGCs9KnpM4l6mmBlUAdluZBc4jCMuX1PNPeoiP57DOWAB5gmNtu4E3p
5ZqilZCqp/Kr+xqNtW+NQGbIlhi7Rz+Ln6p0I6ra2xhrOIx+vIKX/h9TP0NtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUatXccvDslQFRpkM/f8QWSqTHPZwwHwYDVR0j
BBgwFoAUEnyi6k9zjwE35QsiutlXxeb1qgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC8xMjdDQTJFQTRGNzM4RjAxMzdFNTBCMjJCQUQ5NTdDNUU2RjVBQTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyN0NBMkVBNEY3MzhGMDEz
N0U1MEIyMkJBRDk1N0M1RTZGNUFBMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzIzODMwMzQzYTMyMzkzOTYzM2EzMTM1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEKZwVMA0GCSqGSIb3DQEBCwUA
A4IBAQCXHyXl3euVKv6TfSuZuAp8gjBbB15/2uolt3Jd8xjdY51MWoFTmEawAAYx
gxTzrTufe//mQLLQLqW4oO6X3sJ/IOVsHJ8znSi6TIYIcBEZgHP53lx5dsroWp/A
fPPLC/r8cHYQSQSZ1XVztgX2Dl2mAgv19vbo00xmzLCsS3xO5BlNfcIYqqH0VZOo
rbQItfg2wIoQXKm818zWyDh6LPEiR2ULKocaFoW1mDMDzvtBPYHqxn1n6EulrJOT
YE7JpDk6Z/cKLEG3M3UYoH2SNOMUkynZ1wy+GKmjoPQJPHQwmDX96ggPmiUwuHrZ
yt3y29w3wen70vzS2J+bsfi/scHb
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org