Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/323830343a346234303a3a2f33322d313238203d3e20323637323933.roa
File:                     323830343a346234303a3a2f33322d313238203d3e20323637323933.roa (raw, json)
Hash identifier:          8gAFmxljp4fLQtQGiqJ9eQbvlq24N9ibU1s+QATlzVM=
Subject key identifier:   07:29:16:72:2B:1B:70:DC:6C:15:E6:81:DC:95:89:BE:48:34:1D:02
Certificate issuer:       /CN=4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9
Certificate serial:       2E5CC69BB7532B31CC72BF914B32F832DFD10D58
Authority key identifier: 4D:2B:9B:62:6E:48:13:E1:FF:30:8E:EC:A3:0C:10:E7:D9:2C:5E:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/323830343a346234303a3a2f33322d313238203d3e20323637323933.roa
Signing time:             Fri 09 Jun 2023 20:16:26 +0000
ROA not before:           Fri 09 Jun 2023 20:11:26 +0000
ROA not after:            Fri 07 Jun 2024 20:16:26 +0000
asID:                     267293
IP address blocks:        2804:4b40::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5c:c6:9b:b7:53:2b:31:cc:72:bf:91:4b:32:f8:32:df:d1:0d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9
        Validity
            Not Before: Jun  9 20:11:26 2023 GMT
            Not After : Jun  7 20:16:26 2024 GMT
        Subject: CN=072916722B1B70DC6C15E681DC9589BE48341D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1a:e1:99:31:34:68:25:81:35:c6:ac:6e:ce:
                    4d:17:ba:82:3d:72:49:25:2c:6f:f0:87:27:0b:1c:
                    3d:8f:55:17:a3:7f:74:43:be:6f:a9:58:60:1f:4f:
                    b2:53:b8:21:94:91:b9:0f:57:dc:b0:ed:f1:ad:32:
                    f2:69:8e:f9:eb:58:b0:bf:60:95:0a:69:c0:2f:54:
                    81:ae:d0:31:54:e8:8a:44:f3:d9:6b:70:94:43:dd:
                    28:e3:24:26:47:0c:3d:a8:e1:2f:c3:40:75:53:e4:
                    77:5c:2c:ce:c9:b9:12:93:d5:19:f2:98:8d:2e:42:
                    ac:0c:97:ac:2f:38:7f:c7:54:10:97:cc:13:57:87:
                    1f:56:5d:59:0f:a7:6c:c5:2e:dd:50:cc:c5:d0:9c:
                    5c:72:8a:dd:60:80:fa:95:26:41:4d:be:e5:67:fc:
                    63:6b:d6:a1:7c:90:ef:0f:ef:18:b8:5e:02:06:05:
                    e5:61:e8:2f:f1:ca:87:ac:29:64:2e:61:af:82:20:
                    91:27:27:e1:b8:db:67:01:26:36:5a:ba:26:0f:8c:
                    c6:1a:5b:0f:2f:c3:f9:d5:17:a7:7f:6b:38:3c:df:
                    5e:53:62:a1:c5:2c:98:2b:f9:2d:c4:d7:9d:ce:05:
                    4f:62:91:7c:7c:cf:ee:7b:1b:5d:d2:11:9c:fb:e8:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:29:16:72:2B:1B:70:DC:6C:15:E6:81:DC:95:89:BE:48:34:1D:02
            X509v3 Authority Key Identifier:
                keyid:4D:2B:9B:62:6E:48:13:E1:FF:30:8E:EC:A3:0C:10:E7:D9:2C:5E:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/323830343a346234303a3a2f33322d313238203d3e20323637323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:66:b8:b6:27:68:fb:95:b6:95:b0:17:2a:67:6b:2f:e0:
         90:8a:35:34:31:4e:f6:e5:3e:b6:7d:52:3a:4f:b9:2d:0c:c2:
         da:36:f1:46:69:b4:14:ae:87:e4:19:bc:3c:1c:64:d2:65:77:
         a7:89:df:54:25:67:84:dd:80:cf:4b:96:3b:81:42:cc:48:93:
         f4:07:4f:c5:6a:e4:96:2b:07:82:87:69:ff:1e:2e:09:07:b2:
         30:a8:9b:e3:a8:9f:ed:79:08:ee:b0:67:d9:18:01:0e:d6:42:
         3b:cf:4a:f9:c5:10:a1:50:71:95:b8:0d:60:de:f3:0f:db:c4:
         94:7d:8b:e8:a3:eb:7c:d9:b4:17:95:81:d7:63:63:f1:e1:15:
         a5:1d:d8:4a:66:46:de:7f:5e:c3:b8:14:28:2c:02:63:fc:29:
         bc:4f:3d:d6:36:35:05:3a:a5:74:44:0f:02:66:14:f4:fa:32:
         36:e5:e7:37:56:9a:82:a6:b1:8a:a0:f2:18:5f:9c:c3:d1:30:
         ee:b2:18:57:02:a1:05:46:8b:62:1b:b2:16:6b:4e:ed:36:c9:
         42:35:d6:5f:62:31:5f:cd:01:5a:d7:90:29:57:63:c8:ee:1b:
         b0:94:c3:12:83:7e:83:bf:13:63:d8:84:ec:ae:9d:6a:bc:0b:
         3d:6b:b3:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULlzGm7dTKzHMcr+RSzL4Mt/RDVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQyQjlCNjI2RTQ4MTNFMUZGMzA4RUVDQTMwQzEwRTdE
OTJDNUVBOTAeFw0yMzA2MDkyMDExMjZaFw0yNDA2MDcyMDE2MjZaMDMxMTAvBgNV
BAMTKDA3MjkxNjcyMkIxQjcwREM2QzE1RTY4MURDOTU4OUJFNDgzNDFEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGuGZMTRoJYE1xqxuzk0XuoI9
ckklLG/whycLHD2PVRejf3RDvm+pWGAfT7JTuCGUkbkPV9yw7fGtMvJpjvnrWLC/
YJUKacAvVIGu0DFU6IpE89lrcJRD3SjjJCZHDD2o4S/DQHVT5HdcLM7JuRKT1Rny
mI0uQqwMl6wvOH/HVBCXzBNXhx9WXVkPp2zFLt1QzMXQnFxyit1ggPqVJkFNvuVn
/GNr1qF8kO8P7xi4XgIGBeVh6C/xyoesKWQuYa+CIJEnJ+G422cBJjZauiYPjMYa
Ww8vw/nVF6d/azg8315TYqHFLJgr+S3E153OBU9ikXx8z+57G13SEZz76FNLAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUBykWcisbcNxsFeaB3JWJvkg0HQIwHwYDVR0j
BBgwFoAUTSubYm5IE+H/MI7sowwQ59ksXqkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXUxaHBzemg4M2Vjb2ZDN1FzUGdMRkZxTW8yZHpER3k5bzF4NE15cTlY
UDMvMC80RDJCOUI2MjZFNDgxM0UxRkYzMDhFRUNBMzBDMTBFN0Q5MkM1RUE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREMkI5QjYyNkU0ODEzRTFG
RjMwOEVFQ0EzMEMxMEU3RDkyQzVFQTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl1MWhwc3poODNlY29mQzdRc1BnTEZGcU1vMmR6REd5OW8xeDRNeXE5WFAzLzAv
MzIzODMwMzQzYTM0NjIzNDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEtAMA0GCSqGSIb3DQEBCwUAA4IBAQAF+2a4
tido+5W2lbAXKmdrL+CQijU0MU725T62fVI6T7ktDMLaNvFGabQUrofkGbw8HGTS
ZXenid9UJWeE3YDPS5Y7gULMSJP0B0/FauSWKweCh2n/Hi4JB7IwqJvjqJ/teQju
sGfZGAEO1kI7z0r5xRChUHGVuA1g3vMP28SUfYvoo+t82bQXlYHXY2Px4RWlHdhK
Zkbef17DuBQoLAJj/Cm8Tz3WNjUFOqV0RA8CZhT0+jI25ec3VpqCprGKoPIYX5zD
0TDushhXAqEFRotiG7IWa07tNslCNdZfYjFfzQFa15ApV2PI7huwlMMSg36DvxNj
2ITsrp1qvAs9a7N7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org