Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/323830343a376231343a343030303a3a2f33342d3334203d3e20323731343039.roa
File:                     323830343a376231343a343030303a3a2f33342d3334203d3e20323731343039.roa (raw, json)
Hash identifier:          6GMa8liSc9+meFQkQAN/JGz0J+K+ve9iNUgcQ5qiLcs=
Subject key identifier:   65:C3:29:8E:7F:BF:6A:C8:BC:45:B5:EB:19:C8:D1:DC:4D:75:C8:AA
Certificate issuer:       /CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
Certificate serial:       298776749A5ADF7B8E833F9AA6A59E31A5504B8F
Authority key identifier: A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/323830343a376231343a343030303a3a2f33342d3334203d3e20323731343039.roa
Signing time:             Mon 22 May 2023 19:19:32 +0000
ROA not before:           Mon 22 May 2023 19:14:32 +0000
ROA not after:            Mon 20 May 2024 19:19:32 +0000
asID:                     271409
IP address blocks:        2804:7b14:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:87:76:74:9a:5a:df:7b:8e:83:3f:9a:a6:a5:9e:31:a5:50:4b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
        Validity
            Not Before: May 22 19:14:32 2023 GMT
            Not After : May 20 19:19:32 2024 GMT
        Subject: CN=65C3298E7FBF6AC8BC45B5EB19C8D1DC4D75C8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:6a:93:64:61:34:e3:1a:48:90:f7:0e:99:
                    10:07:b9:52:f1:09:dd:59:da:17:7a:e1:a4:8a:ab:
                    d0:32:f6:2d:e7:e3:68:0c:4c:fb:d3:48:56:5d:00:
                    01:f2:06:54:1b:39:f5:2c:48:99:e0:7e:37:f9:d0:
                    6d:73:28:ff:35:a3:ca:1f:6f:bd:68:bd:b6:a1:d5:
                    95:1b:df:bb:d0:c4:5b:e8:7e:6f:95:1c:ea:b9:37:
                    12:4c:7c:50:0c:3c:b6:75:3e:da:53:e0:7e:15:4e:
                    d8:f8:f6:f5:27:93:29:4d:25:10:57:94:0a:93:b1:
                    45:d9:bc:1b:fa:31:6a:be:6d:76:e6:12:ad:9d:d9:
                    a3:c1:19:30:2e:39:d9:b0:f7:7e:db:f1:df:4c:89:
                    76:53:ec:25:d3:6b:61:87:03:f5:0f:47:98:18:60:
                    f7:97:00:51:a0:b5:48:4b:f5:66:02:61:08:9d:40:
                    46:13:06:da:bb:77:c7:b1:6f:ac:92:77:83:5c:10:
                    21:78:0a:12:28:76:3a:2a:ee:7d:aa:00:b5:c2:93:
                    6d:c3:bd:f7:49:db:85:c2:99:1f:ef:eb:4c:bd:f9:
                    6e:e6:c0:8e:49:6b:73:b8:4d:d5:66:46:cb:74:6d:
                    52:84:a3:b0:d1:5e:c2:77:6e:93:d0:08:ce:d6:5a:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C3:29:8E:7F:BF:6A:C8:BC:45:B5:EB:19:C8:D1:DC:4D:75:C8:AA
            X509v3 Authority Key Identifier:
                keyid:A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/323830343a376231343a343030303a3a2f33342d3334203d3e20323731343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b14:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         47:ba:af:47:39:59:39:51:81:f7:35:33:86:ed:22:36:cd:d0:
         da:89:9f:21:3d:ab:a1:2a:0b:78:fb:e0:be:5b:4d:00:55:d9:
         0c:76:cb:95:a7:8b:7d:8e:28:96:3a:27:20:bc:f9:b8:6b:16:
         09:e7:13:07:51:b8:f0:a5:9a:0f:70:92:17:6e:76:11:a7:70:
         67:35:1a:c2:9f:7c:09:a4:e7:5c:6f:d6:57:04:76:29:ba:bf:
         e1:06:2c:7c:47:8b:38:8a:5b:4e:86:68:84:f2:1b:b1:22:4f:
         69:70:ef:7f:1d:de:54:13:64:90:bd:3c:48:b9:58:f2:4b:e5:
         50:12:b3:41:0b:68:98:93:47:69:6c:c5:36:2c:ba:a0:53:19:
         31:01:5e:1f:b5:0e:e4:b5:96:a9:2b:1a:41:8d:37:21:f1:20:
         52:87:4c:1a:1b:6d:80:5c:78:a8:14:3a:ba:5e:d9:89:76:66:
         07:a1:1e:80:3c:8e:4c:6a:29:18:f9:ca:c8:21:c2:0e:e7:b6:
         3f:91:12:c0:6a:a9:26:10:f9:6c:2a:68:e1:c9:99:3c:cb:1b:
         3c:49:a7:20:61:9f:52:91:53:ae:f5:b7:5a:f4:59:43:e8:55:
         b8:b0:29:b9:e3:20:09:d4:80:3d:b5:12:44:1a:ea:f9:7d:e2:
         ab:1e:e7:d3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKYd2dJpa33uOgz+apqWeMaVQS48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk1MjRBQ0QzQjEzNDU1RTkyQjg5RkZFREFFNUNERjQ3
RkUxNjNDNTAeFw0yMzA1MjIxOTE0MzJaFw0yNDA1MjAxOTE5MzJaMDMxMTAvBgNV
BAMTKDY1QzMyOThFN0ZCRjZBQzhCQzQ1QjVFQjE5QzhEMURDNEQ3NUM4QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yGqTZGE04xpIkPcOmRAHuVLx
Cd1Z2hd64aSKq9Ay9i3n42gMTPvTSFZdAAHyBlQbOfUsSJngfjf50G1zKP81o8of
b71ovbah1ZUb37vQxFvofm+VHOq5NxJMfFAMPLZ1PtpT4H4VTtj49vUnkylNJRBX
lAqTsUXZvBv6MWq+bXbmEq2d2aPBGTAuOdmw937b8d9MiXZT7CXTa2GHA/UPR5gY
YPeXAFGgtUhL9WYCYQidQEYTBtq7d8exb6ySd4NcECF4ChIodjoq7n2qALXCk23D
vfdJ24XCmR/v60y9+W7mwI5Ja3O4TdVmRst0bVKEo7DRXsJ3bpPQCM7WWuh5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZcMpjn+/asi8RbXrGcjR3E11yKowHwYDVR0j
BBgwFoAUqVJKzTsTRV6SuJ/+2uXN9H/hY8UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTRId2JVTkhtdXdvb1VOdmV4ZE5jTkpHRHRYbjFMa2dueUg1YUdFejVW
Rk4vMC9BOTUyNEFDRDNCMTM0NTVFOTJCODlGRkVEQUU1Q0RGNDdGRTE2M0M1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E5NTI0QUNEM0IxMzQ1NUU5
MkI4OUZGRURBRTVDREY0N0ZFMTYzQzUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E0SHdiVU5IbXV3b29VTnZleGROY05KR0R0WG4xTGtnbnlINWFHRXo1VkZOLzAv
MzIzODMwMzQzYTM3NjIzMTM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTM0MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEexRAMA0GCSqGSIb3DQEBCwUA
A4IBAQBHuq9HOVk5UYH3NTOG7SI2zdDaiZ8hPauhKgt4++C+W00AVdkMdsuVp4t9
jiiWOicgvPm4axYJ5xMHUbjwpZoPcJIXbnYRp3BnNRrCn3wJpOdcb9ZXBHYpur/h
Bix8R4s4iltOhmiE8huxIk9pcO9/Hd5UE2SQvTxIuVjyS+VQErNBC2iYk0dpbMU2
LLqgUxkxAV4ftQ7ktZapKxpBjTch8SBSh0waG22AXHioFDq6XtmJdmYHoR6API5M
aikY+crIIcIO57Y/kRLAaqkmEPlsKmjhyZk8yxs8SacgYZ9SkVOu9bda9FlD6FW4
sCm54yAJ1IA9tRJEGur5feKrHufT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org