Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a383030303a3a2f33332d3438203d3e20323638373038.roa
File:                     323830343a353938383a383030303a3a2f33332d3438203d3e20323638373038.roa (raw, json)
Hash identifier:          BCeDCIeyehPa48X6NTMASYdqkHWle79Jy5cACatq+Y8=
Subject key identifier:   1D:78:50:34:5F:A3:E3:C6:EB:CB:03:19:CF:E7:CA:D3:17:C8:95:CB
Certificate issuer:       /CN=2B013B207B447C9EE8072B59C2CE81A7C93B4F74
Certificate serial:       354D37AE311CF91B40CB5220A9D7A169FE79BA3B
Authority key identifier: 2B:01:3B:20:7B:44:7C:9E:E8:07:2B:59:C2:CE:81:A7:C9:3B:4F:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B013B207B447C9EE8072B59C2CE81A7C93B4F74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a383030303a3a2f33332d3438203d3e20323638373038.roa
Signing time:             Tue 20 Jun 2023 15:22:00 +0000
ROA not before:           Tue 20 Jun 2023 15:17:00 +0000
ROA not after:            Tue 18 Jun 2024 15:22:00 +0000
asID:                     268708
IP address blocks:        2804:5988:8000::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4d:37:ae:31:1c:f9:1b:40:cb:52:20:a9:d7:a1:69:fe:79:ba:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B013B207B447C9EE8072B59C2CE81A7C93B4F74
        Validity
            Not Before: Jun 20 15:17:00 2023 GMT
            Not After : Jun 18 15:22:00 2024 GMT
        Subject: CN=3082010A0282010100A9633BF656EFF8E568B08A8F26D8820ADF8A51CD40B6A304304E26BF91CD43B8CE835717961DE0E734D5539B3146115159DF3A64C8EE977B3E9367B42A7E5FC9C627C557A503560D2864EAF84D538B4B1A60423C6A371C9ED88CB3DC6EECECACEF09D10C61B3F46E86946FDD60A372296AAAEE6FF5A519F6F24596731D176D31C3991E8994C7BF234FDD1845AC0BB6ED08ADD56F3CFD69C66C3555EF827467DF86E699FAAAAD7CDD10642F41685F8B59065D7F4641CC781507D1C29350C1D69D6AE7BB8E44A2E11BB73DBD4A389DBF0F6A0FE6C7AD2857B642C8311B4B096B5D5C628101D58031B0F3F3C111A0FAEF13EAB275A23B1B0DE2D91E86718B3F11530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:3b:f6:56:ef:f8:e5:68:b0:8a:8f:26:d8:
                    82:0a:df:8a:51:cd:40:b6:a3:04:30:4e:26:bf:91:
                    cd:43:b8:ce:83:57:17:96:1d:e0:e7:34:d5:53:9b:
                    31:46:11:51:59:df:3a:64:c8:ee:97:7b:3e:93:67:
                    b4:2a:7e:5f:c9:c6:27:c5:57:a5:03:56:0d:28:64:
                    ea:f8:4d:53:8b:4b:1a:60:42:3c:6a:37:1c:9e:d8:
                    8c:b3:dc:6e:ec:ec:ac:ef:09:d1:0c:61:b3:f4:6e:
                    86:94:6f:dd:60:a3:72:29:6a:aa:ee:6f:f5:a5:19:
                    f6:f2:45:96:73:1d:17:6d:31:c3:99:1e:89:94:c7:
                    bf:23:4f:dd:18:45:ac:0b:b6:ed:08:ad:d5:6f:3c:
                    fd:69:c6:6c:35:55:ef:82:74:67:df:86:e6:99:fa:
                    aa:ad:7c:dd:10:64:2f:41:68:5f:8b:59:06:5d:7f:
                    46:41:cc:78:15:07:d1:c2:93:50:c1:d6:9d:6a:e7:
                    bb:8e:44:a2:e1:1b:b7:3d:bd:4a:38:9d:bf:0f:6a:
                    0f:e6:c7:ad:28:57:b6:42:c8:31:1b:4b:09:6b:5d:
                    5c:62:81:01:d5:80:31:b0:f3:f3:c1:11:a0:fa:ef:
                    13:ea:b2:75:a2:3b:1b:0d:e2:d9:1e:86:71:8b:3f:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:78:50:34:5F:A3:E3:C6:EB:CB:03:19:CF:E7:CA:D3:17:C8:95:CB
            X509v3 Authority Key Identifier:
                keyid:2B:01:3B:20:7B:44:7C:9E:E8:07:2B:59:C2:CE:81:A7:C9:3B:4F:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/2B013B207B447C9EE8072B59C2CE81A7C93B4F74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B013B207B447C9EE8072B59C2CE81A7C93B4F74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/323830343a353938383a383030303a3a2f33332d3438203d3e20323638373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5988:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:3b:f0:1b:52:e9:64:f1:87:b1:86:24:e0:85:a7:2e:4b:
         dd:15:aa:b3:08:80:4a:3b:d9:58:d1:d2:32:1e:11:58:2c:c4:
         15:85:c0:f7:57:05:70:5c:e4:92:22:02:4a:dc:22:ae:ee:56:
         76:0e:ed:1e:9f:c1:d6:ec:a1:ef:89:7b:ea:b5:b9:89:d7:06:
         77:fb:69:f3:74:b0:f2:1f:2a:d0:5e:b7:13:a2:0e:61:f6:7d:
         23:cd:61:2f:24:ef:33:36:f2:92:d4:81:e8:7c:f6:52:5e:a5:
         1c:76:a1:03:88:e1:4c:ca:fb:17:47:a4:3a:15:3a:b2:c0:fd:
         72:ed:cd:7f:92:7d:f3:7a:0a:15:b7:28:59:c1:2c:a4:ba:d8:
         17:60:f3:63:c7:ab:c0:b4:4a:b8:f7:75:2b:c0:0e:a9:ea:d5:
         a0:a4:a1:f0:2f:71:bd:20:d7:e9:b5:fb:10:df:27:29:cf:85:
         0d:13:6e:05:27:3f:46:99:52:70:61:c2:0f:65:8e:9c:72:24:
         6d:e0:31:75:c2:b3:27:e0:f8:d2:6a:89:13:e6:29:fe:40:0c:
         3b:dc:54:3f:ec:8e:be:e8:b1:cc:1c:bf:d4:e7:85:b3:61:15:
         93:53:f0:8c:cc:0e:50:ec:9e:cc:95:af:4a:6c:3a:3c:57:25:
         a4:48:3c:80
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUNU03rjEc+RtAy1Igqdehaf55ujswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwMTNCMjA3QjQ0N0M5RUU4MDcyQjU5QzJDRTgxQTdD
OTNCNEY3NDAeFw0yMzA2MjAxNTE3MDBaFw0yNDA2MTgxNTIyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTk2MzNCRjY1NkVGRjhFNTY4
QjA4QThGMjZEODgyMEFERjhBNTFDRDQwQjZBMzA0MzA0RTI2QkY5MUNENDNCOENF
ODM1NzE3OTYxREUwRTczNEQ1NTM5QjMxNDYxMTUxNTlERjNBNjRDOEVFOTc3QjNF
OTM2N0I0MkE3RTVGQzlDNjI3QzU1N0E1MDM1NjBEMjg2NEVBRjg0RDUzOEI0QjFB
NjA0MjNDNkEzNzFDOUVEODhDQjNEQzZFRUNFQ0FDRUYwOUQxMEM2MUIzRjQ2RTg2
OTQ2RkRENjBBMzcyMjk2QUFBRUU2RkY1QTUxOUY2RjI0NTk2NzMxRDE3NkQzMUMz
OTkxRTg5OTRDN0JGMjM0RkREMTg0NUFDMEJCNkVEMDhBREQ1NkYzQ0ZENjlDNjZD
MzU1NUVGODI3NDY3REY4NkU2OTlGQUFBQUQ3Q0REMTA2NDJGNDE2ODVGOEI1OTA2
NUQ3RjQ2NDFDQzc4MTUwN0QxQzI5MzUwQzFENjlENkFFN0JCOEU0NEEyRTExQkI3
M0RCRDRBMzg5REJGMEY2QTBGRTZDN0FEMjg1N0I2NDJDODMxMUI0QjA5NkI1RDVD
NjI4MTAxRDU4MDMxQjBGM0YzQzExMUEwRkFFRjEzRUFCMjc1QTIzQjFCMERFMkQ5
MUU4NjcxOEIzRjExNTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqWM79lbv+OVosIqPJtiCCt+KUc1AtqMEME4mv5HNQ7jOg1cXlh3g
5zTVU5sxRhFRWd86ZMjul3s+k2e0Kn5fycYnxVelA1YNKGTq+E1Ti0saYEI8ajcc
ntiMs9xu7Oys7wnRDGGz9G6GlG/dYKNyKWqq7m/1pRn28kWWcx0XbTHDmR6JlMe/
I0/dGEWsC7btCK3Vbzz9acZsNVXvgnRn34bmmfqqrXzdEGQvQWhfi1kGXX9GQcx4
FQfRwpNQwdadaue7jkSi4Ru3Pb1KOJ2/D2oP5setKFe2QsgxG0sJa11cYoEB1YAx
sPPzwRGg+u8T6rJ1ojsbDeLZHoZxiz8RUwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FB14UDRfo+PG68sDGc/nytMXyJXLMB8GA1UdIwQYMBaAFCsBOyB7RHye6AcrWcLO
gafJO090MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzkxQ00xTUQ2MVF3RHFK
VXh4TURCVnltRVFZdnpWTGVSNlJ3TUpXdlhNNU10LzAvMkIwMTNCMjA3QjQ0N0M5
RUU4MDcyQjU5QzJDRTgxQTdDOTNCNEY3NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yQjAxM0IyMDdCNDQ3QzlFRTgwNzJCNTlDMkNFODFBN0M5M0I0
Rjc0LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85MUNNMU1ENjFRd0RxSlV4eE1E
QlZ5bUVRWXZ6VkxlUjZSd01KV3ZYTTVNdC8wLzMyMzgzMDM0M2EzNTM5MzgzODNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzNDM4MjAzZDNlMjAzMjM2MzgzNzMwMzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBFmIgDANBgkqhkiG9w0BAQsFAAOCAQEAj4Y78BtS6WTxh7GGJOCF
py5L3RWqswiASjvZWNHSMh4RWCzEFYXA91cFcFzkkiICStwiru5Wdg7tHp/B1uyh
74l76rW5idcGd/tp83Sw8h8q0F63E6IOYfZ9I81hLyTvMzbyktSB6Hz2Ul6lHHah
A4jhTMr7F0ekOhU6ssD9cu3Nf5J983oKFbcoWcEspLrYF2DzY8erwLRKuPd1K8AO
qerVoKSh8C9xvSDX6bX7EN8nKc+FDRNuBSc/RplScGHCD2WOnHIkbeAxdcKzJ+D4
0mqJE+Yp/kAMO9xUP+yOvuixzBy/1OeFs2EVk1PwjMwOUOyezJWvSmw6PFclpEg8
gA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org