Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa
File:                     323830343a336337303a3a2f33322d3335203d3e20323636323131.roa (raw, json)
Hash identifier:          PAIJzVINQiYfI1GPU8TYbDs5+NqJTe0BFcPHeO/Hh6E=
Subject key identifier:   07:30:9A:78:65:78:88:A7:F4:80:0B:1A:E8:5A:68:B9:18:B1:BD:22
Certificate issuer:       /CN=549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7
Certificate serial:       2671AA0754E3B5F5C81FE7222A11CB503C9EBD1E
Authority key identifier: 54:9A:A4:43:20:EE:70:FF:5F:8C:4D:71:3A:4C:EA:37:28:E4:CC:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa
Signing time:             Tue 10 Oct 2023 21:00:04 +0000
ROA not before:           Tue 10 Oct 2023 20:55:04 +0000
ROA not after:            Tue 08 Oct 2024 21:00:04 +0000
asID:                     266211
IP address blocks:        2804:3c70::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:71:aa:07:54:e3:b5:f5:c8:1f:e7:22:2a:11:cb:50:3c:9e:bd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7
        Validity
            Not Before: Oct 10 20:55:04 2023 GMT
            Not After : Oct  8 21:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8b:dd:26:09:ee:c8:97:89:f7:f6:c0:82:9d:
                    39:e4:1b:40:20:22:81:cb:68:fb:c2:35:d7:c4:54:
                    ff:f5:2e:ad:88:4f:f7:0b:4b:19:aa:61:86:18:ce:
                    87:99:23:20:5e:ed:0d:ae:fc:9d:a1:91:1d:5b:52:
                    c3:f2:5c:8e:f3:08:3f:f4:b5:f9:43:9f:19:25:6c:
                    de:59:46:41:78:e1:b1:24:86:fe:bd:92:58:c8:7e:
                    cf:8d:e2:5e:52:81:05:4b:30:1d:58:5e:96:96:43:
                    10:d0:bb:bf:9a:b2:e8:3d:43:73:73:14:e5:60:bb:
                    11:3b:da:85:59:6b:1d:9c:f1:d0:77:2e:75:88:c0:
                    19:d1:cb:bc:79:54:fd:5a:12:e6:fd:ee:a9:e5:37:
                    15:7a:c3:59:e2:39:3b:69:c0:83:c3:99:b0:fc:c1:
                    78:77:30:8c:e7:e6:a8:ed:74:94:53:c8:97:4b:6c:
                    c0:99:5b:25:61:70:12:f9:35:6b:92:6c:fa:47:44:
                    25:fc:cf:46:4e:cb:fa:cf:72:89:4b:d9:fd:9d:04:
                    dc:72:48:3b:d9:14:15:c0:d9:a2:73:9d:60:d3:9d:
                    7f:9c:5d:6a:5b:7c:0a:f5:fd:f6:9f:31:1b:31:b9:
                    88:99:53:8b:2c:35:09:b8:32:39:05:0d:33:81:b0:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:30:9A:78:65:78:88:A7:F4:80:0B:1A:E8:5A:68:B9:18:B1:BD:22
            X509v3 Authority Key Identifier:
                keyid:54:9A:A4:43:20:EE:70:FF:5F:8C:4D:71:3A:4C:EA:37:28:E4:CC:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:0f:44:1b:16:4e:ea:bb:8a:86:5b:6f:1f:65:c8:b1:59:c8:
         a3:b6:c9:87:eb:70:93:e1:a6:03:be:84:8a:40:6d:de:5e:e9:
         99:aa:e9:3d:30:eb:6b:6f:94:c0:fc:19:12:c7:e2:0d:db:8b:
         6c:a8:02:a9:74:85:d3:72:16:28:08:18:4a:b9:95:1f:11:f1:
         5b:a8:cf:c5:78:08:79:65:fe:90:1d:f1:b0:8a:05:f6:05:cb:
         69:43:86:1d:d9:10:de:e0:4f:79:79:50:f6:5f:89:22:40:76:
         11:f1:e9:2e:1f:72:2f:49:ca:7d:4c:1e:d6:13:f3:01:86:98:
         e7:e1:3d:aa:43:65:ec:c8:d6:0b:8d:fa:ea:a2:aa:b9:e4:fb:
         96:fb:de:72:e2:e3:f0:0b:c3:05:bd:cb:b4:45:43:5d:f3:7d:
         5d:de:bd:32:a3:66:df:3a:10:55:3d:f7:c5:cd:92:64:9a:0e:
         b2:1f:a2:fe:79:57:4f:6e:48:cb:c4:1e:9e:a4:56:e3:26:05:
         c6:48:2c:a2:91:71:4a:be:8d:57:39:73:5d:b6:46:87:40:a8:
         bd:08:16:31:ef:5b:85:8e:99:fb:3e:73:e5:c8:59:63:c6:77:
         70:cf:c2:d4:b6:36:8c:4d:85:e8:a1:54:26:20:e0:41:17:c2:
         57:f6:19:92
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUJnGqB1TjtfXIH+ciKhHLUDyevR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ5QUE0NDMyMEVFNzBGRjVGOEM0RDcxM0E0Q0VBMzcy
OEU0Q0NFNzAeFw0yMzEwMTAyMDU1MDRaFw0yNDEwMDgyMTAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkE4QkREMjYwOUVFQzg5Nzg5
RjdGNkMwODI5RDM5RTQxQjQwMjAyMjgxQ0I2OEZCQzIzNUQ3QzQ1NEZGRjUyRUFE
ODg0RkY3MEI0QjE5QUE2MTg2MThDRTg3OTkyMzIwNUVFRDBEQUVGQzlEQTE5MTFE
NUI1MkMzRjI1QzhFRjMwODNGRjRCNUY5NDM5RjE5MjU2Q0RFNTk0NjQxNzhFMUIx
MjQ4NkZFQkQ5MjU4Qzg3RUNGOERFMjVFNTI4MTA1NEIzMDFENTg1RTk2OTY0MzEw
RDBCQkJGOUFCMkU4M0Q0MzczNzMxNEU1NjBCQjExM0JEQTg1NTk2QjFEOUNGMUQw
NzcyRTc1ODhDMDE5RDFDQkJDNzk1NEZENUExMkU2RkRFRUE5RTUzNzE1N0FDMzU5
RTIzOTNCNjlDMDgzQzM5OUIwRkNDMTc4NzczMDhDRTdFNkE4RUQ3NDk0NTNDODk3
NEI2Q0MwOTk1QjI1NjE3MDEyRjkzNTZCOTI2Q0ZBNDc0NDI1RkNDRjQ2NEVDQkZB
Q0Y3Mjg5NEJEOUZEOUQwNERDNzI0ODNCRDkxNDE1QzBEOUEyNzM5RDYwRDM5RDdG
OUM1RDZBNUI3QzBBRjVGREY2OUYzMTFCMzFCOTg4OTk1MzhCMkMzNTA5QjgzMjM5
MDUwRDMzODFCMDBDODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA+ovdJgnuyJeJ9/bAgp055BtAICKBy2j7wjXXxFT/9S6tiE/3C0sZ
qmGGGM6HmSMgXu0NrvydoZEdW1LD8lyO8wg/9LX5Q58ZJWzeWUZBeOGxJIb+vZJY
yH7PjeJeUoEFSzAdWF6WlkMQ0Lu/mrLoPUNzcxTlYLsRO9qFWWsdnPHQdy51iMAZ
0cu8eVT9WhLm/e6p5TcVesNZ4jk7acCDw5mw/MF4dzCM5+ao7XSUU8iXS2zAmVsl
YXAS+TVrkmz6R0Ql/M9GTsv6z3KJS9n9nQTcckg72RQVwNmic51g051/nF1qW3wK
9f32nzEbMbmImVOLLDUJuDI5BQ0zgbAMgwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FAcwmnhleIin9IALGuhaaLkYsb0iMB8GA1UdIwQYMBaAFFSapEMg7nD/X4xNcTpM
6jco5MznMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FWR0h2M2dmUnlCcnJx
c0ZZSFpXa2VuSGo2WXBtd1cyWmNVWVNTZGNVOXh3LzAvNTQ5QUE0NDMyMEVFNzBG
RjVGOEM0RDcxM0E0Q0VBMzcyOEU0Q0NFNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81NDlBQTQ0MzIwRUU3MEZGNUY4QzRENzEzQTRDRUEzNzI4RTRD
Q0U3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BVkdIdjNnZlJ5QnJycXNGWUha
V2tlbkhqNllwbXdXMlpjVVlTU2RjVTl4dy8wLzMyMzgzMDM0M2EzMzYzMzczMDNh
M2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzNjMyMzEzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
PHAwDQYJKoZIhvcNAQELBQADggEBAI4PRBsWTuq7ioZbbx9lyLFZyKO2yYfrcJPh
pgO+hIpAbd5e6Zmq6T0w62tvlMD8GRLH4g3bi2yoAql0hdNyFigIGEq5lR8R8Vuo
z8V4CHll/pAd8bCKBfYFy2lDhh3ZEN7gT3l5UPZfiSJAdhHx6S4fci9Jyn1MHtYT
8wGGmOfhPapDZezI1guN+uqiqrnk+5b73nLi4/ALwwW9y7RFQ13zfV3evTKjZt86
EFU998XNkmSaDrIfov55V09uSMvEHp6kVuMmBcZILKKRcUq+jVc5c122RodAqL0I
FjHvW4WOmfs+c+XIWWPGd3DPwtS2NoxNheihVCYg4EEXwlf2GZI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org