Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/323830343a326331303a383030303a3a2f33332d3333203d3e20323635313932.roa
File:                     323830343a326331303a383030303a3a2f33332d3333203d3e20323635313932.roa (raw, json)
Hash identifier:          sIf4touaTCvvaqZ1nvmt2T8AI1Otxy7whHYfDNSXdao=
Subject key identifier:   DC:B8:01:F3:A7:65:52:E7:DC:F1:BF:3C:45:60:01:34:C1:84:0D:A9
Certificate issuer:       /CN=9CDEE6CF6519966891D6D812879D24B89912ACB2
Certificate serial:       6C377DCCE1138BB0B683261DF6CF8251C8201A44
Authority key identifier: 9C:DE:E6:CF:65:19:96:68:91:D6:D8:12:87:9D:24:B8:99:12:AC:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/323830343a326331303a383030303a3a2f33332d3333203d3e20323635313932.roa
Signing time:             Thu 04 Apr 2024 20:58:55 +0000
ROA not before:           Thu 04 Apr 2024 20:53:55 +0000
ROA not after:            Thu 03 Apr 2025 20:58:55 +0000
asID:                     265192
IP address blocks:        2804:2c10:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:37:7d:cc:e1:13:8b:b0:b6:83:26:1d:f6:cf:82:51:c8:20:1a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDEE6CF6519966891D6D812879D24B89912ACB2
        Validity
            Not Before: Apr  4 20:53:55 2024 GMT
            Not After : Apr  3 20:58:55 2025 GMT
        Subject: CN=DCB801F3A76552E7DCF1BF3C45600134C1840DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:94:61:2e:1c:b1:c6:0d:c6:9b:c9:aa:73:
                    bc:e6:39:55:7c:21:62:fe:e9:57:b5:92:f8:fb:ec:
                    1b:1a:47:bb:80:39:08:9e:22:c0:34:b4:5b:fd:de:
                    ac:62:4f:3e:1a:8b:83:c7:94:44:52:11:63:45:08:
                    ac:ec:aa:0e:46:72:e9:9b:f4:5a:d5:65:82:10:a7:
                    da:39:32:fe:dd:95:3b:e0:62:e8:88:56:93:21:ee:
                    16:ed:34:3b:47:7e:02:d3:3b:39:43:48:f0:22:8e:
                    7b:bb:0b:f1:49:b1:80:b9:64:be:2b:ad:91:f9:a6:
                    bb:31:7f:b3:0b:98:4d:46:88:3d:8b:f7:0f:56:be:
                    4d:cf:41:24:c8:33:09:76:a6:53:b7:45:9d:73:b8:
                    68:a2:5c:bc:d3:4d:16:ab:f6:41:ff:e7:93:d9:2d:
                    0a:8f:df:35:2d:06:c6:c1:3b:32:ec:a0:ed:82:c0:
                    07:e1:a4:88:01:4a:ba:5b:83:02:a8:71:4f:74:fc:
                    8d:82:68:84:c2:d9:7e:2a:01:bb:da:b1:28:c2:33:
                    bb:91:68:1a:a4:49:2f:a3:94:03:5a:76:f6:16:16:
                    ba:8a:26:61:ed:b1:75:cb:26:8f:7a:54:c9:fd:9d:
                    1f:f0:81:fc:d4:26:e6:fe:96:4d:2f:cf:04:6c:35:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B8:01:F3:A7:65:52:E7:DC:F1:BF:3C:45:60:01:34:C1:84:0D:A9
            X509v3 Authority Key Identifier:
                keyid:9C:DE:E6:CF:65:19:96:68:91:D6:D8:12:87:9D:24:B8:99:12:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/323830343a326331303a383030303a3a2f33332d3333203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:78:6a:77:2a:f0:8d:9d:a1:a4:78:92:78:29:16:be:ed:
         fe:5d:8b:03:a5:5f:c0:c5:1c:d0:5f:4c:b0:ad:d9:e9:90:72:
         b3:46:d5:be:7d:97:4e:bc:7f:93:dd:06:b0:a4:9c:27:b3:95:
         bc:82:cc:0c:5f:35:3b:ec:4b:af:3c:20:b7:8b:10:c5:c8:95:
         ed:72:83:43:64:78:41:03:24:70:53:9b:02:7b:05:28:0f:86:
         6c:44:59:fc:93:2b:24:68:0f:2d:bf:df:f9:04:93:94:f2:97:
         ac:18:48:fa:32:8f:f6:62:93:7b:23:f1:71:14:e4:26:10:03:
         2b:97:e6:34:11:cd:cb:6f:a8:83:6f:a0:d9:7f:a1:dc:3e:a0:
         29:5f:44:70:52:a5:8c:12:80:cd:f3:a6:3c:82:22:f6:b2:6c:
         94:02:9c:2c:d1:69:1d:9a:22:72:f0:ce:64:80:24:42:a7:b6:
         59:94:d2:28:c7:6d:28:3f:bd:bc:9e:18:e6:76:89:c5:fe:7d:
         69:f2:6b:ff:9a:e9:a1:90:9b:08:5c:ce:4f:67:bc:4c:c4:15:
         d0:fd:4b:b2:10:16:47:4c:68:26:ed:0e:1d:01:0c:57:9c:d3:
         0a:d8:98:d0:34:ee:07:cf:4d:70:54:3d:83:a4:dc:03:b3:bc:
         76:80:60:56
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbDd9zOETi7C2gyYd9s+CUcggGkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNERUU2Q0Y2NTE5OTY2ODkxRDZEODEyODc5RDI0Qjg5
OTEyQUNCMjAeFw0yNDA0MDQyMDUzNTVaFw0yNTA0MDMyMDU4NTVaMDMxMTAvBgNV
BAMTKERDQjgwMUYzQTc2NTUyRTdEQ0YxQkYzQzQ1NjAwMTM0QzE4NDBEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttZRhLhyxxg3Gm8mqc7zmOVV8
IWL+6Ve1kvj77BsaR7uAOQieIsA0tFv93qxiTz4ai4PHlERSEWNFCKzsqg5Gcumb
9FrVZYIQp9o5Mv7dlTvgYuiIVpMh7hbtNDtHfgLTOzlDSPAijnu7C/FJsYC5ZL4r
rZH5prsxf7MLmE1GiD2L9w9Wvk3PQSTIMwl2plO3RZ1zuGiiXLzTTRar9kH/55PZ
LQqP3zUtBsbBOzLsoO2CwAfhpIgBSrpbgwKocU90/I2CaITC2X4qAbvasSjCM7uR
aBqkSS+jlANadvYWFrqKJmHtsXXLJo96VMn9nR/wgfzUJub+lk0vzwRsNS71AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3LgB86dlUufc8b88RWABNMGEDakwHwYDVR0j
BBgwFoAUnN7mz2UZlmiR1tgSh50kuJkSrLIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQThyeThBSm1iMU12Z0pORGRuR3RZRXBBdXJ5ZkdoaVRQVUJ3VFNMUWZr
V24vMS85Q0RFRTZDRjY1MTk5NjY4OTFENkQ4MTI4NzlEMjRCODk5MTJBQ0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDREVFNkNGNjUxOTk2Njg5
MUQ2RDgxMjg3OUQyNEI4OTkxMkFDQjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E4cnk4QUptYjFNdmdKTkRkbkd0WUVwQXVyeWZHaGlUUFVCd1RTTFFma1duLzEv
MzIzODMwMzQzYTMyNjMzMTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTMxMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygELBCAMA0GCSqGSIb3DQEBCwUA
A4IBAQARq3hqdyrwjZ2hpHiSeCkWvu3+XYsDpV/AxRzQX0ywrdnpkHKzRtW+fZdO
vH+T3QawpJwns5W8gswMXzU77EuvPCC3ixDFyJXtcoNDZHhBAyRwU5sCewUoD4Zs
RFn8kyskaA8tv9/5BJOU8pesGEj6Mo/2YpN7I/FxFOQmEAMrl+Y0Ec3Lb6iDb6DZ
f6HcPqApX0RwUqWMEoDN86Y8giL2smyUApws0WkdmiJy8M5kgCRCp7ZZlNIox20o
P728nhjmdonF/n1p8mv/mumhkJsIXM5PZ7xMxBXQ/UuyEBZHTGgm7Q4dAQxXnNMK
2JjQNO4Hz01wVD2DpNwDs7x2gGBW
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org