Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a613a3a2f34382d3438203d3e20323638353736.roa
File:                     323830343a353335303a613a3a2f34382d3438203d3e20323638353736.roa (raw, json)
Hash identifier:          yyV8klExaJ/05PLsZ10i3pLoPzADKEOxNoTkV8VBr7w=
Subject key identifier:   D8:51:4D:A5:9B:99:CE:4F:10:76:30:50:2E:2A:D1:D1:30:E1:AF:62
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       0D98B15D4FC6DB51E41ED877B99C6BE68D77387D
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a613a3a2f34382d3438203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 14:00:00 +0000
ROA not before:           Fri 28 Apr 2023 13:55:00 +0000
ROA not after:            Fri 26 Apr 2024 14:00:00 +0000
asID:                     268576
IP address blocks:        2804:5350:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:98:b1:5d:4f:c6:db:51:e4:1e:d8:77:b9:9c:6b:e6:8d:77:38:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 13:55:00 2023 GMT
            Not After : Apr 26 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6e:7b:dc:a9:76:f0:ed:c3:e3:53:ed:52:44:
                    82:92:e3:72:d3:cc:fa:73:d5:19:ca:3b:7b:15:3a:
                    8a:4f:af:95:26:d0:19:36:37:ce:a7:32:fc:93:b1:
                    a4:5c:0a:2a:4c:30:b4:bb:40:92:4e:1d:c0:87:20:
                    38:18:c6:42:c6:64:0e:a6:8f:a4:21:f6:6e:2b:0b:
                    c9:e0:6e:3f:57:70:04:27:08:2a:89:ba:3d:7a:ac:
                    ca:4f:10:8a:7e:ea:1b:8e:c9:6f:fe:b0:0e:8d:02:
                    d5:1d:ec:3b:d6:52:a4:4d:17:a7:9d:26:5c:95:f1:
                    81:4c:b2:f0:28:da:60:fd:9d:57:bf:ad:63:d7:7e:
                    d0:8c:33:f1:5c:92:74:80:95:b7:0b:de:43:37:6b:
                    ee:49:a8:9c:de:33:09:99:34:75:55:97:9d:96:f0:
                    f0:a8:76:4b:ca:cc:a4:72:49:af:d6:41:b3:58:bf:
                    09:8e:e6:3b:28:dd:70:dd:a4:19:c8:c4:18:a8:0c:
                    4c:6c:3b:1d:bb:ad:4e:a0:e9:0d:0f:de:b1:b0:87:
                    47:94:0e:91:71:13:f3:46:e6:52:b7:1d:95:6e:6f:
                    27:72:27:e9:b2:f8:54:41:23:4a:b6:6d:4e:c9:b2:
                    a1:fc:6d:a9:32:f7:aa:2e:67:d3:be:75:29:b9:67:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:51:4D:A5:9B:99:CE:4F:10:76:30:50:2E:2A:D1:D1:30:E1:AF:62
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a613a3a2f34382d3438203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:35:7a:c7:8f:d3:82:1d:26:81:86:05:9e:78:a3:b4:18:6b:
         48:ed:f5:e0:2e:d8:a9:af:fc:41:c2:2a:06:54:a5:32:ba:81:
         61:b9:ea:94:9f:99:ac:51:f8:49:1e:a8:b6:47:31:82:b6:14:
         4c:ed:9b:3d:2b:19:b7:92:38:f2:d1:16:70:4c:cd:e6:55:10:
         90:a0:43:7c:c3:56:e5:d7:1b:a7:91:fc:b4:4c:97:2d:ab:98:
         45:c7:9c:4f:fc:67:97:0f:16:89:bc:f8:68:19:68:26:24:85:
         f0:30:2a:e9:3d:a9:41:45:bf:69:bc:3c:77:c9:d3:c3:32:e7:
         49:94:b5:cb:34:fd:83:35:27:bc:32:24:a2:78:fa:e3:47:ff:
         12:33:6d:b0:f5:56:e7:23:b5:22:ba:63:55:7a:1d:44:27:41:
         ed:97:84:84:e9:6e:07:07:f4:f1:a6:14:a8:e5:e3:fd:ce:9c:
         b9:42:6c:ce:32:d1:64:22:0d:44:07:a3:81:14:ca:13:3f:99:
         e7:71:05:7a:e8:89:52:9e:e3:68:78:79:a7:d3:92:3b:e1:0a:
         95:f8:8e:4c:57:0a:bb:90:ef:95:8d:7b:d1:41:0e:9f:01:33:
         fb:26:dd:0d:42:98:c2:5f:fa:c1:8a:d7:85:d4:b9:7d:f7:bb:
         3f:19:4f:9e
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUDZixXU/G21HkHth3uZxr5o13OH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJENTI1NkUwNjM3M0NGRTAzRDg5RUI3ODY1RkZDRDcw
ODZGNkVCNjAeFw0yMzA0MjgxMzU1MDBaFw0yNDA0MjYxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjE2RTdCRENBOTc2RjBFREMz
RTM1M0VENTI0NDgyOTJFMzcyRDNDQ0ZBNzNENTE5Q0EzQjdCMTUzQThBNEZBRjk1
MjZEMDE5MzYzN0NFQTczMkZDOTNCMUE0NUMwQTJBNEMzMEI0QkI0MDkyNEUxREMw
ODcyMDM4MThDNjQyQzY2NDBFQTY4RkE0MjFGNjZFMkIwQkM5RTA2RTNGNTc3MDA0
MjcwODJBODlCQTNEN0FBQ0NBNEYxMDhBN0VFQTFCOEVDOTZGRkVCMDBFOEQwMkQ1
MURFQzNCRDY1MkE0NEQxN0E3OUQyNjVDOTVGMTgxNENCMkYwMjhEQTYwRkQ5RDU3
QkZBRDYzRDc3RUQwOEMzM0YxNUM5Mjc0ODA5NUI3MEJERTQzMzc2QkVFNDlBODlD
REUzMzA5OTkzNDc1NTU5NzlEOTZGMEYwQTg3NjRCQ0FDQ0E0NzI0OUFGRDY0MUIz
NThCRjA5OEVFNjNCMjhERDcwRERBNDE5QzhDNDE4QTgwQzRDNkMzQjFEQkJBRDRF
QTBFOTBEMEZERUIxQjA4NzQ3OTQwRTkxNzExM0YzNDZFNjUyQjcxRDk1NkU2RjI3
NzIyN0U5QjJGODU0NDEyMzRBQjY2RDRFQzlCMkExRkM2REE5MzJGN0FBMkU2N0Qz
QkU3NTI5Qjk2Nzc3MTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8W573Kl28O3D41PtUkSCkuNy08z6c9UZyjt7FTqKT6+VJtAZNjfO
pzL8k7GkXAoqTDC0u0CSTh3AhyA4GMZCxmQOpo+kIfZuKwvJ4G4/V3AEJwgqibo9
eqzKTxCKfuobjslv/rAOjQLVHew71lKkTRennSZclfGBTLLwKNpg/Z1Xv61j137Q
jDPxXJJ0gJW3C95DN2vuSaic3jMJmTR1VZedlvDwqHZLysykckmv1kGzWL8JjuY7
KN1w3aQZyMQYqAxMbDsdu61OoOkND96xsIdHlA6RcRPzRuZStx2Vbm8ncifpsvhU
QSNKtm1OybKh/G2pMveqLmfTvnUpuWd3EwIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FNhRTaWbmc5PEHYwUC4q0dEw4a9iMB8GA1UdIwQYMBaAFGvVJW4GNzz+A9iet4Zf
/NcIb262MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlHSDdMb2duWHd5ZzZn
dkg1QnlHVmNEQjRkRDd4N1h6UlJQaDJQblhFdkVkLzAvNkJENTI1NkUwNjM3M0NG
RTAzRDg5RUI3ODY1RkZDRDcwODZGNkVCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82QkQ1MjU2RTA2MzczQ0ZFMDNEODlFQjc4NjVGRkNENzA4NkY2
RUI2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85R0g3TG9nblh3eWc2Z3ZINUJ5
R1ZjREI0ZEQ3eDdYelJSUGgyUG5YRXZFZC8wLzMyMzgzMDM0M2EzNTMzMzUzMDNh
NjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzgzNTM3MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBFNQAAowDQYJKoZIhvcNAQELBQADggEBANA1eseP04IdJoGGBZ54o7QYa0jt
9eAu2Kmv/EHCKgZUpTK6gWG56pSfmaxR+EkeqLZHMYK2FEztmz0rGbeSOPLRFnBM
zeZVEJCgQ3zDVuXXG6eR/LRMly2rmEXHnE/8Z5cPFom8+GgZaCYkhfAwKuk9qUFF
v2m8PHfJ08My50mUtcs0/YM1J7wyJKJ4+uNH/xIzbbD1VucjtSK6Y1V6HUQnQe2X
hITpbgcH9PGmFKjl4/3OnLlCbM4y0WQiDUQHo4EUyhM/medxBXroiVKe42h4eafT
kjvhCpX4jkxXCruQ75WNe9FBDp8BM/sm3Q1CmMJf+sGK14XUuX33uz8ZT54=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org