Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a663162313a3a2f34382d3438203d3e20323636323136.roa
File:                     323830343a336338303a663162313a3a2f34382d3438203d3e20323636323136.roa (raw, json)
Hash identifier:          5jEskYeWk+WvvdHwDqyJ8h+cJQOhr7KSvlLq3G5ZmHM=
Subject key identifier:   0B:03:D7:01:9E:8B:EC:60:11:10:28:FF:64:15:97:53:8D:05:05:98
Certificate issuer:       /CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
Certificate serial:       1355E2C6655AF67ABF9DE690C0F239C3BCF6F4F0
Authority key identifier: EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a663162313a3a2f34382d3438203d3e20323636323136.roa
Signing time:             Sun 11 Feb 2024 22:56:38 +0000
ROA not before:           Sun 11 Feb 2024 22:51:38 +0000
ROA not after:            Sun 09 Feb 2025 22:56:38 +0000
asID:                     266216
IP address blocks:        2804:3c80:f1b1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:55:e2:c6:65:5a:f6:7a:bf:9d:e6:90:c0:f2:39:c3:bc:f6:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Validity
            Not Before: Feb 11 22:51:38 2024 GMT
            Not After : Feb  9 22:56:38 2025 GMT
        Subject: CN=0B03D7019E8BEC60111028FF641597538D050598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:05:02:26:1d:de:a3:b2:f3:0f:2b:d1:b3:
                    a3:52:b2:8f:c8:b6:15:0e:e6:b7:98:58:86:a8:a9:
                    89:a5:43:24:3f:43:a6:0d:36:4a:e0:c7:cc:3b:2e:
                    e7:99:37:f2:62:01:1c:66:ce:e4:c7:cd:7b:c7:9f:
                    0a:1c:29:89:9c:09:96:0a:74:36:eb:78:b8:c0:5d:
                    01:01:68:de:9a:8c:27:f8:10:62:96:0f:22:34:40:
                    33:5a:e3:d7:11:76:31:5c:63:02:6d:a0:1d:92:28:
                    9b:54:96:3c:bc:b1:52:59:53:84:b8:e3:da:cd:2e:
                    2c:e3:ea:52:03:63:6f:52:7a:bb:fa:35:5a:50:53:
                    b6:15:a9:bf:0f:e9:e6:04:c9:db:a2:ce:51:4e:e6:
                    4b:7e:c7:d9:0e:a2:20:21:94:13:b9:03:e9:f4:ed:
                    bd:f6:ba:43:7b:2d:d1:01:93:57:5f:ef:3e:4b:6d:
                    85:da:48:61:94:04:74:ce:b3:5f:2b:f1:57:10:58:
                    b5:b5:ba:e1:95:80:c9:e6:83:a0:8c:b8:f9:09:f4:
                    66:44:be:cc:9f:00:9d:72:89:d0:b3:2c:a9:77:1f:
                    e5:1e:83:8e:87:09:27:4b:a3:8d:66:bf:ad:18:05:
                    24:05:23:b1:25:4f:63:0b:f7:7e:10:43:a1:0e:d2:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:03:D7:01:9E:8B:EC:60:11:10:28:FF:64:15:97:53:8D:05:05:98
            X509v3 Authority Key Identifier:
                keyid:EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a663162313a3a2f34382d3438203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c80:f1b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:10:7a:64:80:bb:eb:5d:36:56:93:f3:64:72:9d:e8:04:
         0d:9c:2c:18:d4:e4:43:ef:1d:76:f3:5d:2a:7d:8f:aa:84:e9:
         4e:8a:d6:88:77:c5:b4:6d:34:e0:13:12:b2:2f:7d:07:44:c8:
         eb:b1:79:26:93:d1:51:eb:e0:01:ee:4f:8d:b2:4b:f2:94:a2:
         a7:6e:cb:3f:0e:de:b9:8e:61:19:00:7d:91:5d:aa:85:01:3e:
         f5:d4:65:23:e2:26:05:5d:df:8e:ac:93:3b:84:d4:be:a3:3b:
         f0:36:8f:0b:c3:f1:fd:55:0b:4c:e4:d3:07:99:8a:c9:28:9d:
         be:d9:ba:ec:b7:a0:ea:52:e0:5d:be:87:4b:58:1f:6e:24:88:
         33:e6:3a:c6:c4:c2:0a:62:f5:e6:16:39:ad:2b:ff:99:1b:2a:
         40:2a:82:74:bd:0f:38:a7:2e:da:36:3f:48:df:69:1f:e7:50:
         f0:77:fc:b9:2d:c2:db:2c:62:b9:37:24:d4:e4:29:1a:43:27:
         86:d4:bf:dd:35:d4:2d:a6:13:61:39:e0:91:ab:4b:f2:53:11:
         ad:13:4c:3e:0b:fb:24:2c:71:b2:14:54:35:31:38:0f:c4:e3:
         dd:7f:f9:ba:07:99:0d:d1:37:98:10:ce:3d:ec:43:07:ec:ac:
         e1:94:5d:46
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUE1XixmVa9nq/neaQwPI5w7z29PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzQTdCQjgwQ0QzMjYwNENFNDNGRDI3NUZBRjg4N0VC
MzNERjUxMjAeFw0yNDAyMTEyMjUxMzhaFw0yNTAyMDkyMjU2MzhaMDMxMTAvBgNV
BAMTKDBCMDNENzAxOUU4QkVDNjAxMTEwMjhGRjY0MTU5NzUzOEQwNTA1OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaQUCJh3eo7LzDyvRs6NSso/I
thUO5reYWIaoqYmlQyQ/Q6YNNkrgx8w7LueZN/JiARxmzuTHzXvHnwocKYmcCZYK
dDbreLjAXQEBaN6ajCf4EGKWDyI0QDNa49cRdjFcYwJtoB2SKJtUljy8sVJZU4S4
49rNLizj6lIDY29Serv6NVpQU7YVqb8P6eYEyduizlFO5kt+x9kOoiAhlBO5A+n0
7b32ukN7LdEBk1df7z5LbYXaSGGUBHTOs18r8VcQWLW1uuGVgMnmg6CMuPkJ9GZE
vsyfAJ1yidCzLKl3H+Ueg46HCSdLo41mv60YBSQFI7ElT2ML934QQ6EO0mj9AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUCwPXAZ6L7GARECj/ZBWXU40FBZgwHwYDVR0j
BBgwFoAU6jp7uAzTJgTOQ/0nX6+IfrM99RIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2
clYvMC9FQTNBN0JCODBDRDMyNjA0Q0U0M0ZEMjc1RkFGODg3RUIzM0RGNTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBM0E3QkI4MENEMzI2MDRD
RTQzRkQyNzVGQUY4ODdFQjMzREY1MTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuWGQ3bmc1REFLVjc4dG5IVnh3SkFxRExMTGh3dlluVG83RThTRnZUNnJWLzAv
MzIzODMwMzQzYTMzNjMzODMwM2E2NjMxNjIzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjMyMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPIDxsTANBgkqhkiG9w0BAQsF
AAOCAQEAMNQQemSAu+tdNlaT82RynegEDZwsGNTkQ+8ddvNdKn2PqoTpTorWiHfF
tG004BMSsi99B0TI67F5JpPRUevgAe5PjbJL8pSip27LPw7euY5hGQB9kV2qhQE+
9dRlI+ImBV3fjqyTO4TUvqM78DaPC8Px/VULTOTTB5mKySidvtm67Leg6lLgXb6H
S1gfbiSIM+Y6xsTCCmL15hY5rSv/mRsqQCqCdL0POKcu2jY/SN9pH+dQ8Hf8uS3C
2yxiuTck1OQpGkMnhtS/3TXULaYTYTngkatL8lMRrRNMPgv7JCxxshRUNTE4D8Tj
3X/5ugeZDdE3mBDOPexDB+ys4ZRdRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org