Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33322d3332203d3e20323632373938.roa
File:                     323830343a3234303a3a2f33322d3332203d3e20323632373938.roa (raw, json)
Hash identifier:          D+ojG2Dbue/VzQ79Ahab06BEFZH87GsUCd50V4v9EoA=
Subject key identifier:   8D:F5:69:73:23:47:C3:56:1B:9A:24:A9:13:7D:E6:BF:AB:FA:39:82
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       6F9FD9949B6D11328B0809298D005F3D9388E1F7
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33322d3332203d3e20323632373938.roa
Signing time:             Tue 16 May 2023 12:26:36 +0000
ROA not before:           Tue 16 May 2023 12:21:36 +0000
ROA not after:            Tue 14 May 2024 12:26:36 +0000
asID:                     262798
IP address blocks:        2804:240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9f:d9:94:9b:6d:11:32:8b:08:09:29:8d:00:5f:3d:93:88:e1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 16 12:21:36 2023 GMT
            Not After : May 14 12:26:36 2024 GMT
        Subject: CN=8DF569732347C3561B9A24A9137DE6BFABFA3982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:57:85:9b:5d:37:d5:a2:dd:37:de:d6:d4:
                    68:73:56:08:b9:2d:70:6b:fc:92:f0:d7:5d:04:89:
                    2f:24:77:46:b7:63:fe:c3:0d:af:aa:89:a5:8d:01:
                    ed:57:b6:eb:a4:1c:47:ee:dd:71:a6:72:ea:21:1b:
                    e4:99:8e:62:02:80:85:d8:da:07:c3:81:ca:f7:f5:
                    6e:25:ae:f8:52:ed:2f:7e:a9:7f:cf:52:8b:7b:9a:
                    0c:2b:fa:c1:94:e2:d4:39:8b:41:ae:12:c1:3f:a5:
                    34:13:4e:c6:92:66:3e:1a:77:86:ec:63:cd:45:61:
                    fa:a3:d6:36:0a:75:ce:02:75:be:93:ca:19:d9:3d:
                    fd:8b:0f:d9:07:8d:28:ad:09:d2:ff:dd:eb:78:3d:
                    73:38:a6:2a:89:cb:5d:eb:a7:64:45:a4:38:a4:d2:
                    a8:67:44:94:fe:1b:50:67:58:ca:ce:4f:48:59:85:
                    24:9e:a6:42:1e:ec:e7:04:d2:2e:12:a9:8a:fa:7a:
                    7f:e8:18:68:39:05:fc:72:79:97:02:f9:1f:f7:c5:
                    50:14:d2:97:c2:19:77:2f:7b:3e:d2:bb:9c:bc:bc:
                    04:30:5d:57:c5:b7:86:7a:6c:1e:66:a1:4f:26:5e:
                    74:24:64:15:08:77:8b:59:cb:ce:3f:66:28:5c:8b:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F5:69:73:23:47:C3:56:1B:9A:24:A9:13:7D:E6:BF:AB:FA:39:82
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33322d3332203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:14:3f:4d:e0:90:a9:45:18:f5:ac:e0:01:3c:58:69:91:98:
         1f:6c:b7:eb:da:8a:25:d4:78:a3:83:f3:ce:5f:74:5d:a0:28:
         e7:a4:2c:8a:56:25:ea:ec:85:7b:cb:ca:13:da:b7:a7:c7:ee:
         7e:81:af:a4:c5:d9:6d:0c:4f:d5:ea:e2:3d:f7:9f:f9:75:1c:
         8c:a0:3e:0f:7c:5a:15:94:ab:97:44:40:d3:42:b6:16:54:6c:
         34:0d:1e:9c:9e:67:7b:11:30:94:14:ab:66:71:81:cc:12:fc:
         b4:6b:74:8a:ab:ea:b7:b8:33:55:45:f8:19:36:52:ff:3c:28:
         1c:79:02:8f:88:c3:cc:ea:8a:97:bb:48:cc:0f:10:96:12:e7:
         95:7e:96:98:e7:d9:1c:62:8f:3d:f3:4c:2c:59:2c:e4:43:49:
         58:06:21:b8:a3:4a:61:ee:74:b8:aa:2e:0d:ed:c5:d0:ff:b3:
         77:39:52:22:68:1d:4c:8f:77:b8:7e:a1:0c:9c:c8:f9:2d:de:
         a8:ae:30:21:5d:a3:14:7f:f1:3f:17:e6:bf:ae:b1:5f:ef:ba:
         32:d3:b4:6d:88:2f:bf:65:90:2c:10:9c:e6:0e:d2:63:09:cc:
         fb:f6:cd:f3:f7:e6:8e:e9:3d:7e:70:5b:57:5c:43:00:32:9c:
         39:8c:6b:0e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUb5/ZlJttETKLCAkpjQBfPZOI4fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJFMTJCMzFGN0E3M0MwNUI1M0JFMjA4MDk3RDcxMzI5
NkZBQzUyNzAeFw0yMzA1MTYxMjIxMzZaFw0yNDA1MTQxMjI2MzZaMDMxMTAvBgNV
BAMTKDhERjU2OTczMjM0N0MzNTYxQjlBMjRBOTEzN0RFNkJGQUJGQTM5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/1eFm1031aLdN97W1GhzVgi5
LXBr/JLw110EiS8kd0a3Y/7DDa+qiaWNAe1XtuukHEfu3XGmcuohG+SZjmICgIXY
2gfDgcr39W4lrvhS7S9+qX/PUot7mgwr+sGU4tQ5i0GuEsE/pTQTTsaSZj4ad4bs
Y81FYfqj1jYKdc4Cdb6TyhnZPf2LD9kHjSitCdL/3et4PXM4piqJy13rp2RFpDik
0qhnRJT+G1BnWMrOT0hZhSSepkIe7OcE0i4SqYr6en/oGGg5BfxyeZcC+R/3xVAU
0pfCGXcvez7Su5y8vAQwXVfFt4Z6bB5moU8mXnQkZBUId4tZy84/Zihci9W/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUjfVpcyNHw1YbmiSpE33mv6v6OYIwHwYDVR0j
BBgwFoAUi+ErMfenPAW1O+IICX1xMpb6xScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMC84QkUxMkIzMUY3QTczQzA1QjUzQkUyMDgwOTdENzEzMjk2RkFDNTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCRTEyQjMxRjdBNzNDMDVC
NTNCRTIwODA5N0Q3MTMyOTZGQUM1MjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzAv
MzIzODMwMzQzYTMyMzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM3
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAkAwDQYJKoZIhvcNAQELBQADggEBAHIUP03gkKlF
GPWs4AE8WGmRmB9st+vaiiXUeKOD885fdF2gKOekLIpWJershXvLyhPat6fH7n6B
r6TF2W0MT9Xq4j33n/l1HIygPg98WhWUq5dEQNNCthZUbDQNHpyeZ3sRMJQUq2Zx
gcwS/LRrdIqr6re4M1VF+Bk2Uv88KBx5Ao+Iw8zqipe7SMwPEJYS55V+lpjn2Rxi
jz3zTCxZLORDSVgGIbijSmHudLiqLg3txdD/s3c5UiJoHUyPd7h+oQycyPkt3qiu
MCFdoxR/8T8X5r+usV/vujLTtG2IL79lkCwQnOYO0mMJzPv2zfP35o7pPX5wW1dc
QwAynDmMaw4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org