Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a3a2f33362d3336203d3e20323639313238.roa
File:                     323830343a356664633a3a2f33362d3336203d3e20323639313238.roa (raw, json)
Hash identifier:          4xxtFHygTLRcXwSbAzVck79IoGmv4Lp63GPCT7hIMRw=
Subject key identifier:   F3:5F:6B:B6:0E:01:2E:21:9C:23:45:1C:21:0D:53:FF:BE:4A:41:BB
Certificate issuer:       /CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
Certificate serial:       3C881959FE698DBB187FF544C34BD805BD2C5FBB
Authority key identifier: BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a3a2f33362d3336203d3e20323639313238.roa
Signing time:             Thu 24 Aug 2023 22:00:44 +0000
ROA not before:           Thu 24 Aug 2023 21:55:44 +0000
ROA not after:            Thu 22 Aug 2024 22:00:44 +0000
asID:                     269128
IP address blocks:        2804:5fdc::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:88:19:59:fe:69:8d:bb:18:7f:f5:44:c3:4b:d8:05:bd:2c:5f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
        Validity
            Not Before: Aug 24 21:55:44 2023 GMT
            Not After : Aug 22 22:00:44 2024 GMT
        Subject: CN=F35F6BB60E012E219C23451C210D53FFBE4A41BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:e6:be:2c:d3:ec:96:81:0b:03:93:15:eb:
                    8a:3b:b9:7e:9a:7b:37:cd:98:d6:d0:c4:88:7b:5d:
                    7b:d7:ae:d5:9b:d6:be:e7:fb:45:be:c5:a0:46:89:
                    50:d0:9d:a7:da:82:68:0a:57:c8:08:8c:59:32:19:
                    b2:46:65:4d:96:a0:ed:05:25:4d:80:6e:35:e0:ed:
                    70:dc:48:30:c2:34:ad:9d:21:3c:4a:be:da:bf:f0:
                    5c:59:51:6c:60:f0:ec:1a:ec:fa:d1:33:2c:55:01:
                    b5:15:9e:bd:bb:ff:4e:17:20:a7:70:b7:1e:fd:60:
                    9e:a4:1e:0b:95:40:08:15:a0:00:3e:5a:3d:00:f6:
                    d4:da:c6:6d:3b:61:9e:95:6b:c0:6d:02:53:ee:f3:
                    68:4d:39:9d:4b:84:14:ab:74:b6:c3:6e:86:d5:d1:
                    c5:ba:22:ba:02:e4:12:1e:99:50:02:37:5f:43:d6:
                    34:81:cc:3a:94:3f:66:f7:c1:e9:ac:69:a4:84:ee:
                    24:89:dc:ef:5f:76:d9:3a:a6:d9:e9:8e:d5:5a:c9:
                    13:a1:60:eb:0f:07:15:9b:36:a5:d9:a5:ac:83:17:
                    23:b7:46:35:f1:24:ab:1e:4b:e5:cf:fb:4e:96:28:
                    6d:92:14:38:18:3f:cd:70:a7:03:a7:e7:f7:b6:0a:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:6B:B6:0E:01:2E:21:9C:23:45:1C:21:0D:53:FF:BE:4A:41:BB
            X509v3 Authority Key Identifier:
                keyid:BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a3a2f33362d3336203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fdc::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:26:6d:a2:c4:43:18:b2:5b:d7:71:1d:c7:90:06:db:32:dc:
         d1:37:ce:d1:73:a6:46:4b:c1:26:c5:08:3a:88:ec:70:b8:d2:
         a2:7c:5b:ec:ca:d5:cd:bc:14:47:d4:fc:2b:88:d9:71:7c:be:
         f2:87:c9:cf:7e:06:1f:59:7e:d7:65:d3:1b:fe:65:8f:f6:af:
         af:60:f7:6d:01:de:5a:ea:e7:5f:f9:3a:80:44:f6:55:62:65:
         12:37:6a:09:e4:71:b8:fb:45:b0:a7:44:ab:52:1c:c9:a4:87:
         0f:af:60:bd:6c:19:d4:42:51:d3:a1:02:68:fb:ad:64:3b:ea:
         80:2a:80:7b:9b:2f:ec:e1:33:17:e9:f1:8a:a0:24:e8:b4:17:
         0d:8f:a3:b1:5f:6d:0a:c5:88:9f:b9:4e:81:ac:61:c2:50:bc:
         16:59:ea:4d:6d:88:a0:25:40:80:fc:11:00:92:3b:f0:77:48:
         3a:63:d3:f6:30:15:fa:05:dc:37:aa:4f:7e:82:8d:f1:6d:29:
         8b:00:a5:0f:7c:4f:86:11:67:1e:1b:9d:b3:dd:d5:ba:a7:3b:
         15:ba:ba:18:8a:85:13:9e:36:59:1c:21:e0:ac:8b:82:b9:c1:
         7d:68:85:85:0a:8b:d4:87:50:1a:8d:65:d0:ee:09:40:a1:ea:
         31:33:6b:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPIgZWf5pjbsYf/VEw0vYBb0sX7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY3QTU4QTY0OUZENDMyMURBN0FEQUE2M0UyQ0ZDRTdB
MzEzMDJDQzAeFw0yMzA4MjQyMTU1NDRaFw0yNDA4MjIyMjAwNDRaMDMxMTAvBgNV
BAMTKEYzNUY2QkI2MEUwMTJFMjE5QzIzNDUxQzIxMEQ1M0ZGQkU0QTQxQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Jua+LNPsloELA5MV64o7uX6a
ezfNmNbQxIh7XXvXrtWb1r7n+0W+xaBGiVDQnafagmgKV8gIjFkyGbJGZU2WoO0F
JU2AbjXg7XDcSDDCNK2dITxKvtq/8FxZUWxg8Owa7PrRMyxVAbUVnr27/04XIKdw
tx79YJ6kHguVQAgVoAA+Wj0A9tTaxm07YZ6Va8BtAlPu82hNOZ1LhBSrdLbDbobV
0cW6IroC5BIemVACN19D1jSBzDqUP2b3wemsaaSE7iSJ3O9fdtk6ptnpjtVayROh
YOsPBxWbNqXZpayDFyO3RjXxJKseS+XP+06WKG2SFDgYP81wpwOn5/e2CuJNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU819rtg4BLiGcI0UcIQ1T/75KQbswHwYDVR0j
BBgwFoAUv3pYpkn9QyHaetqmPiz856MTAswwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWR2amg3YVhGM1ZMbjY4NHByWHhaRzFjcTRnUXc2Skpwc2FndXdLMUdq
a3EvMC9CRjdBNThBNjQ5RkQ0MzIxREE3QURBQTYzRTJDRkNFN0EzMTMwMkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGN0E1OEE2NDlGRDQzMjFE
QTdBREFBNjNFMkNGQ0U3QTMxMzAyQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkdmpoN2FYRjNWTG42ODRwclh4WkcxY3E0Z1F3NkpKcHNhZ3V3SzFHamtxLzAv
MzIzODMwMzQzYTM1NjY2NDYzM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM5
MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARf3AAwDQYJKoZIhvcNAQELBQADggEBAEkmbaLE
QxiyW9dxHceQBtsy3NE3ztFzpkZLwSbFCDqI7HC40qJ8W+zK1c28FEfU/CuI2XF8
vvKHyc9+Bh9Zftdl0xv+ZY/2r69g920B3lrq51/5OoBE9lViZRI3agnkcbj7RbCn
RKtSHMmkhw+vYL1sGdRCUdOhAmj7rWQ76oAqgHubL+zhMxfp8YqgJOi0Fw2Po7Ff
bQrFiJ+5ToGsYcJQvBZZ6k1tiKAlQID8EQCSO/B3SDpj0/YwFfoF3DeqT36CjfFt
KYsApQ98T4YRZx4bnbPd1bqnOxW6uhiKhROeNlkcIeCsi4K5wX1ohYUKi9SHUBqN
ZdDuCUCh6jEza18=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org