Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/323830343a323334383a383030303a3a2f33332d3333203d3e20323634313533.roa
File:                     323830343a323334383a383030303a3a2f33332d3333203d3e20323634313533.roa (raw, json)
Hash identifier:          nuAauqIiXDY59TaELWgT+H8ayirCe2mWmzaGCPnoI44=
Subject key identifier:   B0:F9:6E:70:AC:0E:E0:42:72:5D:63:5D:34:0D:D8:D1:DD:B2:1E:6E
Certificate issuer:       /CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
Certificate serial:       0530D3E9F1BE1019CD2BD32D402A71510D6C1C66
Authority key identifier: 23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/323830343a323334383a383030303a3a2f33332d3333203d3e20323634313533.roa
Signing time:             Tue 21 Feb 2023 01:31:46 +0000
ROA not before:           Tue 21 Feb 2023 01:26:46 +0000
ROA not after:            Tue 20 Feb 2024 01:31:46 +0000
asID:                     264153
IP address blocks:        2804:2348:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:30:d3:e9:f1:be:10:19:cd:2b:d3:2d:40:2a:71:51:0d:6c:1c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
        Validity
            Not Before: Feb 21 01:26:46 2023 GMT
            Not After : Feb 20 01:31:46 2024 GMT
        Subject: CN=B0F96E70AC0EE042725D635D340DD8D1DDB21E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:40:37:ee:f0:b6:bc:09:64:39:2c:ce:6f:
                    cb:92:23:53:7a:d5:f7:d3:a0:c1:e2:f7:8a:64:4f:
                    1b:5f:c6:d1:bc:f7:55:29:cb:0e:ba:d4:0b:82:c9:
                    87:54:2e:36:db:26:0c:90:65:9c:05:0e:08:c1:e7:
                    d4:ef:a4:75:77:d2:3b:98:82:d9:6d:7a:0e:cb:f8:
                    c0:ca:cc:19:b7:4d:0f:51:fc:d7:d8:40:7b:0c:13:
                    df:08:ae:75:a1:6d:dc:7e:fd:b6:0c:cf:a4:cd:cf:
                    41:77:39:af:74:24:81:2c:86:f4:1a:e8:9f:c7:e7:
                    e4:dd:9c:48:88:7d:f8:a2:ad:42:0a:84:8b:20:89:
                    17:11:07:c1:96:aa:91:fb:5f:0b:44:5e:c6:18:a8:
                    06:0c:12:30:60:61:25:7e:7d:6e:ad:07:fa:7b:14:
                    cd:d3:f9:73:e4:ac:ef:cd:36:94:a5:1c:bb:83:34:
                    a9:9b:b7:32:49:98:d5:96:b7:ee:0c:73:40:40:81:
                    23:a2:87:88:fa:49:17:b9:ae:f3:db:5c:30:28:da:
                    4a:d5:53:b9:08:fc:69:5e:73:a3:ff:fb:45:85:ff:
                    5e:b3:4e:aa:dd:4a:98:5e:f9:4e:fc:f5:62:88:13:
                    87:b1:e1:76:c3:3b:fa:38:2b:7f:d1:c8:a0:c1:68:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F9:6E:70:AC:0E:E0:42:72:5D:63:5D:34:0D:D8:D1:DD:B2:1E:6E
            X509v3 Authority Key Identifier:
                keyid:23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/323830343a323334383a383030303a3a2f33332d3333203d3e20323634313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2348:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:74:3c:3b:24:1f:79:ee:ff:57:9d:9d:0c:ef:45:8f:43:37:
         4d:70:41:d4:8c:69:5e:f3:b0:09:61:5a:1c:0e:29:58:c2:e7:
         bf:d2:b8:e0:1d:41:0d:ed:a7:9b:0d:e4:a8:f9:eb:75:4d:07:
         b5:71:28:f7:43:dc:2a:31:82:f7:8f:c3:9f:8f:b5:1c:06:69:
         45:6c:22:ad:4c:65:74:87:20:55:9d:8b:66:22:9f:60:16:b8:
         bc:0b:85:d5:1b:f1:6b:1a:ee:bd:6e:49:7a:df:71:ba:ea:6f:
         20:8b:c2:b9:54:fa:2f:f9:38:87:a9:40:0b:d3:60:21:a1:e3:
         6a:93:82:e0:23:60:f0:c3:62:61:e5:da:3f:3b:ef:34:cc:39:
         1f:45:91:bd:72:74:9d:10:c5:22:a9:5c:25:6f:b3:d4:2b:66:
         05:c1:f2:45:c5:d1:50:51:56:aa:a4:e8:0e:a7:94:83:7f:c2:
         60:87:38:d6:83:d0:a6:0e:3b:4f:e6:8a:b8:3a:fd:bd:4d:87:
         1c:6b:ec:e3:93:5a:ea:9d:6b:ce:5d:b6:52:e4:70:00:de:7a:
         f6:0f:a8:b3:44:5c:e6:66:2f:58:54:ed:8d:72:ce:17:f5:11:
         4d:fa:40:3a:61:29:0f:a5:7a:e7:02:e1:42:0b:09:fe:6a:8f:
         9e:3f:0d:2e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBTDT6fG+EBnNK9MtQCpxUQ1sHGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNGODQ2QTNERDM4MDE5ODFFOTgzN0M0RjMwNjRFQUM5
QTU4RTBGQzAeFw0yMzAyMjEwMTI2NDZaFw0yNDAyMjAwMTMxNDZaMDMxMTAvBgNV
BAMTKEIwRjk2RTcwQUMwRUUwNDI3MjVENjM1RDM0MEREOEQxRERCMjFFNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I0A37vC2vAlkOSzOb8uSI1N6
1ffToMHi94pkTxtfxtG891Upyw661AuCyYdULjbbJgyQZZwFDgjB59TvpHV30juY
gtlteg7L+MDKzBm3TQ9R/NfYQHsME98IrnWhbdx+/bYMz6TNz0F3Oa90JIEshvQa
6J/H5+TdnEiIffiirUIKhIsgiRcRB8GWqpH7XwtEXsYYqAYMEjBgYSV+fW6tB/p7
FM3T+XPkrO/NNpSlHLuDNKmbtzJJmNWWt+4Mc0BAgSOih4j6SRe5rvPbXDAo2krV
U7kI/Glec6P/+0WF/16zTqrdSphe+U789WKIE4ex4XbDO/o4K3/RyKDBaLMjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsPlucKwO4EJyXWNdNA3Y0d2yHm4wHwYDVR0j
BBgwFoAUI/hGo904AZgemDfE8wZOrJpY4PwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZ6VUxzV2FWdzMxc3BWZGdFUjZ1VlFKOEUxZHM3N25ENXRIcnhnbXhN
UUcvMC8yM0Y4NDZBM0REMzgwMTk4MUU5ODM3QzRGMzA2NEVBQzlBNThFMEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIzRjg0NkEzREQzODAxOTgx
RTk4MzdDNEYzMDY0RUFDOUE1OEUwRkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmelVMc1dhVnczMXNwVmRnRVI2dVZRSjhFMWRzNzduRDV0SHJ4Z214TVFHLzAv
MzIzODMwMzQzYTMyMzMzNDM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDMxMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEI0iAMA0GCSqGSIb3DQEBCwUA
A4IBAQBjdDw7JB957v9XnZ0M70WPQzdNcEHUjGle87AJYVocDilYwue/0rjgHUEN
7aebDeSo+et1TQe1cSj3Q9wqMYL3j8Ofj7UcBmlFbCKtTGV0hyBVnYtmIp9gFri8
C4XVG/FrGu69bkl633G66m8gi8K5VPov+TiHqUAL02AhoeNqk4LgI2Dww2Jh5do/
O+80zDkfRZG9cnSdEMUiqVwlb7PUK2YFwfJFxdFQUVaqpOgOp5SDf8JghzjWg9Cm
DjtP5oq4Ov29TYcca+zjk1rqnWvOXbZS5HAA3nr2D6izRFzmZi9YVO2Ncs4X9RFN
+kA6YSkPpXrnAuFCCwn+ao+ePw0u
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org