Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3630303a3a2f34302d3430203d3e20323635313831.roa
File:                     323830343a326264633a3630303a3a2f34302d3430203d3e20323635313831.roa (raw, json)
Hash identifier:          Fl5c9RaUx62SccZGSQs944cfKc+36ZvfxQz+BytRdLY=
Subject key identifier:   D6:DA:5B:91:E0:E2:3E:09:22:8D:B1:88:85:3B:5F:2B:05:F5:4B:FA
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       3437082A96F2BC5CB6C64855870ABCBE84BDBB1F
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3630303a3a2f34302d3430203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:15:47 +0000
ROA not before:           Fri 02 Feb 2024 00:10:47 +0000
ROA not after:            Fri 31 Jan 2025 00:15:47 +0000
asID:                     265181
IP address blocks:        2804:2bdc:600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:37:08:2a:96:f2:bc:5c:b6:c6:48:55:87:0a:bc:be:84:bd:bb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:10:47 2024 GMT
            Not After : Jan 31 00:15:47 2025 GMT
        Subject: CN=D6DA5B91E0E23E09228DB188853B5F2B05F54BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:76:f5:3d:07:b0:30:46:22:28:89:a1:a9:
                    56:11:6f:19:5c:7f:57:0b:c5:5b:d5:b6:b5:6f:ea:
                    91:a0:4f:a4:ca:65:3c:2f:a1:8f:21:0f:ce:a1:03:
                    76:99:04:ff:ee:ce:23:4e:ac:9c:95:35:88:e5:b7:
                    f3:77:2d:c1:a3:ec:a8:5b:55:96:4c:3e:f0:80:d4:
                    4d:67:c8:ef:15:c3:f3:e6:26:79:db:d0:b9:bd:1e:
                    59:bc:29:4e:00:30:07:b5:06:76:c4:6e:7b:66:cc:
                    1a:0d:39:72:cb:73:13:e7:cd:df:47:e8:37:07:71:
                    bf:0c:f3:50:05:b2:36:f7:4a:80:cd:3f:cd:80:a3:
                    ab:ab:fe:92:1e:3e:7d:ae:e6:89:a4:92:51:72:0d:
                    4f:ce:57:30:9f:e2:e5:4e:2e:05:fc:a7:93:2f:33:
                    35:18:e2:fa:c3:a7:48:e2:e0:5b:8d:00:4e:3b:48:
                    44:e4:b5:28:0d:23:c0:27:f5:88:26:0b:2b:ed:0c:
                    e5:9b:6a:7b:ee:59:ff:07:91:da:73:b5:dd:ac:c2:
                    80:ed:88:4c:ee:f6:84:ac:56:6a:e4:7d:0b:47:4d:
                    fe:56:4e:c9:26:e3:f6:c1:98:5f:43:fa:c2:13:53:
                    a9:e5:d9:58:61:09:82:40:ab:f1:01:ba:75:5d:4b:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DA:5B:91:E0:E2:3E:09:22:8D:B1:88:85:3B:5F:2B:05:F5:4B:FA
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3630303a3a2f34302d3430203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:44:34:29:ce:77:2b:2c:db:00:15:26:4f:dc:87:04:9b:7c:
         5b:3c:f9:c0:b7:cb:93:16:d5:94:5f:6f:e9:cc:66:6e:07:3d:
         93:63:44:e1:ed:80:eb:d3:9d:29:ad:e5:18:92:9b:2f:33:f0:
         69:58:4e:c6:ac:9e:56:47:85:4d:f1:20:77:a9:6e:52:34:01:
         53:90:35:de:ba:22:97:bf:18:c8:84:20:96:da:db:ca:e9:da:
         c3:84:f4:1e:8e:7d:f5:c3:0f:10:e4:a9:d2:e5:95:74:6a:78:
         0e:9d:ec:bc:11:6b:c3:1b:c3:1d:b3:8f:02:86:19:10:57:cd:
         53:29:3b:05:a2:70:0e:11:93:d6:86:bb:19:e3:d0:ce:f8:db:
         86:8f:6c:c5:0c:28:16:61:e8:f1:3d:97:80:a4:8a:f4:30:57:
         3a:6f:c0:5a:8c:df:71:ad:ab:9c:ed:07:d0:08:3a:1f:7a:bf:
         dd:79:e3:94:13:c6:a6:50:04:e0:5f:70:b0:51:65:e6:e2:f6:
         df:e0:bc:08:b4:eb:65:a6:33:6a:1c:a5:04:a2:29:46:f2:8a:
         97:19:8f:72:5a:15:69:ea:5f:d6:35:fe:8b:5e:ac:21:8a:fe:
         13:28:8e:a4:78:b5:bd:00:b3:9b:8f:44:70:aa:a3:38:44:2a:
         06:65:0b:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNDcIKpbyvFy2xkhVhwq8voS9ux8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYyMjIzQkNBNDRENEU2QUJDRjg2QjBGQUExNzM0QzAz
N0IxMTQ0NTAeFw0yNDAyMDIwMDEwNDdaFw0yNTAxMzEwMDE1NDdaMDMxMTAvBgNV
BAMTKEQ2REE1QjkxRTBFMjNFMDkyMjhEQjE4ODg1M0I1RjJCMDVGNTRCRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxN3b1PQewMEYiKImhqVYRbxlc
f1cLxVvVtrVv6pGgT6TKZTwvoY8hD86hA3aZBP/uziNOrJyVNYjlt/N3LcGj7Khb
VZZMPvCA1E1nyO8Vw/PmJnnb0Lm9Hlm8KU4AMAe1BnbEbntmzBoNOXLLcxPnzd9H
6DcHcb8M81AFsjb3SoDNP82Ao6ur/pIePn2u5omkklFyDU/OVzCf4uVOLgX8p5Mv
MzUY4vrDp0ji4FuNAE47SETktSgNI8An9YgmCyvtDOWbanvuWf8Hkdpztd2swoDt
iEzu9oSsVmrkfQtHTf5WTskm4/bBmF9D+sITU6nl2VhhCYJAq/EBunVdS0c7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1tpbkeDiPgkijbGIhTtfKwX1S/owHwYDVR0j
BBgwFoAU1iIjvKRNTmq8+GsPqhc0wDexFEUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtoNG9Ma2RDS2JLYXE1Z3VrTWhLZFR3c21pb1JHdjVKTWNUWnN0U0x5
d3cvMC9ENjIyMjNCQ0E0NEQ0RTZBQkNGODZCMEZBQTE3MzRDMDM3QjExNDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2MjIyM0JDQTQ0RDRFNkFC
Q0Y4NkIwRkFBMTczNEMwMzdCMTE0NDUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhraDRvTGtkQ0tiS2FxNWd1a01oS2RUd3NtaW9SR3Y1Sk1jVFpzdFNMeXd3LzAv
MzIzODMwMzQzYTMyNjI2NDYzM2EzNjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzUzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCvcBjANBgkqhkiG9w0BAQsFAAOC
AQEAeEQ0Kc53KyzbABUmT9yHBJt8Wzz5wLfLkxbVlF9v6cxmbgc9k2NE4e2A69Od
Ka3lGJKbLzPwaVhOxqyeVkeFTfEgd6luUjQBU5A13roil78YyIQgltrbyunaw4T0
Ho599cMPEOSp0uWVdGp4Dp3svBFrwxvDHbOPAoYZEFfNUyk7BaJwDhGT1oa7GePQ
zvjbho9sxQwoFmHo8T2XgKSK9DBXOm/AWozfca2rnO0H0Ag6H3q/3XnjlBPGplAE
4F9wsFFl5uL23+C8CLTrZaYzahylBKIpRvKKlxmPcloVaepf1jX+i16sIYr+EyiO
pHi1vQCzm49EcKqjOEQqBmULVw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org