Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d313238203d3e20323731353534.roa
File:                     323830343a376435343a3a2f33322d313238203d3e20323731353534.roa (raw, json)
Hash identifier:          qZIxpVwtn0K9qdqF2wfHWRXbsTA9GkLCbUN4Kq9ku1s=
Subject key identifier:   0B:1E:B9:C9:D3:70:D7:5A:13:32:5C:4B:A3:F7:F9:7B:94:8F:CD:49
Certificate issuer:       /CN=880E36F20E1CF18198A5E42E120A8559F1C6F060
Certificate serial:       3E9335A87B043D4DBF619D7A2DC694D0840CF416
Authority key identifier: 88:0E:36:F2:0E:1C:F1:81:98:A5:E4:2E:12:0A:85:59:F1:C6:F0:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d313238203d3e20323731353534.roa
Signing time:             Mon 11 Mar 2024 14:34:00 +0000
ROA not before:           Mon 11 Mar 2024 14:29:00 +0000
ROA not after:            Mon 10 Mar 2025 14:34:00 +0000
asID:                     271554
IP address blocks:        2804:7d54::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:93:35:a8:7b:04:3d:4d:bf:61:9d:7a:2d:c6:94:d0:84:0c:f4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=880E36F20E1CF18198A5E42E120A8559F1C6F060
        Validity
            Not Before: Mar 11 14:29:00 2024 GMT
            Not After : Mar 10 14:34:00 2025 GMT
        Subject: CN=0B1EB9C9D370D75A13325C4BA3F7F97B948FCD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:78:ea:45:24:af:55:c5:73:6a:f2:e5:53:
                    e5:28:31:a3:89:e5:7a:e1:37:9f:58:63:80:36:e4:
                    55:c7:e0:3d:a5:5c:08:37:12:7a:e9:3e:4f:a8:62:
                    ab:4a:7f:08:da:58:b8:0b:de:4c:5c:94:60:03:d7:
                    be:ce:11:f2:1d:d0:c3:56:46:04:70:e6:53:88:f8:
                    2f:0a:67:31:00:47:d9:9f:8b:49:65:97:7b:14:e1:
                    d9:b5:04:af:f4:6e:b9:ad:a0:bb:fd:df:de:e1:e9:
                    81:ff:e2:a4:d6:de:54:ef:8a:40:7c:a5:92:d7:f9:
                    32:74:5b:a5:68:05:34:99:22:03:1f:c0:48:3c:35:
                    0d:6d:a1:a0:10:79:f1:db:b9:97:6e:91:46:bf:20:
                    36:f5:68:3b:13:60:8d:ad:93:f8:c8:9c:c9:a2:2c:
                    20:4f:e9:fa:ac:cd:e6:e7:96:a3:3c:4f:d0:ac:7a:
                    69:17:cd:87:8b:0c:b7:2e:b7:7f:de:50:e0:18:e1:
                    88:f8:79:83:7c:15:aa:0e:3d:6f:8b:ad:f6:e6:56:
                    e0:ea:14:34:9b:99:c2:d4:e0:e9:3d:d0:fc:a1:46:
                    b0:5e:06:ab:e0:6c:15:cf:19:57:3c:22:2d:2c:71:
                    9d:4b:57:6d:84:2a:61:7a:ac:c5:c9:9f:5b:9c:12:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1E:B9:C9:D3:70:D7:5A:13:32:5C:4B:A3:F7:F9:7B:94:8F:CD:49
            X509v3 Authority Key Identifier:
                keyid:88:0E:36:F2:0E:1C:F1:81:98:A5:E4:2E:12:0A:85:59:F1:C6:F0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d313238203d3e20323731353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:6e:8b:a0:4e:8c:11:a9:3a:bd:39:cf:05:02:55:af:74:
         22:cf:a6:0b:9b:f7:d5:21:50:61:c2:81:4b:70:29:f9:8b:6e:
         c6:6b:29:5a:60:25:ab:44:12:b9:5c:96:bd:f7:df:4b:ac:ed:
         a4:34:d1:13:06:3f:7c:0c:b7:06:20:f4:d0:87:0f:9f:2d:cb:
         53:aa:43:66:b7:03:27:16:a0:32:75:d3:5d:ae:ce:f9:0c:9b:
         a5:bf:4d:1e:aa:79:52:9a:03:ac:20:f1:8a:aa:66:ad:9e:8f:
         2b:31:5a:cc:00:25:ec:bc:b3:dc:56:6f:5c:8b:ea:fb:fd:9e:
         cc:e3:42:ed:1b:2d:c5:dd:7e:23:8c:80:92:43:25:56:d9:84:
         b2:6b:e5:c3:69:a1:28:57:6d:8f:7e:b3:8c:67:ee:9b:59:90:
         ea:2e:eb:92:8a:68:8e:06:76:9b:ad:c7:b1:b6:aa:4f:83:f1:
         54:b3:58:5c:ab:c5:10:03:5d:cc:47:fa:51:11:f2:96:46:60:
         c9:06:89:42:44:1e:0f:eb:b6:ce:82:e7:54:87:4e:d5:34:7d:
         31:fa:f1:31:92:d0:29:0f:3f:0d:3c:e5:5b:ab:02:88:a4:8e:
         62:4a:4c:af:5f:d9:18:b4:18:09:10:24:63:32:9f:a5:2b:23:
         f9:16:c2:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPpM1qHsEPU2/YZ16LcaU0IQM9BYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgwRTM2RjIwRTFDRjE4MTk4QTVFNDJFMTIwQTg1NTlG
MUM2RjA2MDAeFw0yNDAzMTExNDI5MDBaFw0yNTAzMTAxNDM0MDBaMDMxMTAvBgNV
BAMTKDBCMUVCOUM5RDM3MEQ3NUExMzMyNUM0QkEzRjdGOTdCOTQ4RkNENDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUXjqRSSvVcVzavLlU+UoMaOJ
5XrhN59YY4A25FXH4D2lXAg3EnrpPk+oYqtKfwjaWLgL3kxclGAD177OEfId0MNW
RgRw5lOI+C8KZzEAR9mfi0lll3sU4dm1BK/0brmtoLv9397h6YH/4qTW3lTvikB8
pZLX+TJ0W6VoBTSZIgMfwEg8NQ1toaAQefHbuZdukUa/IDb1aDsTYI2tk/jInMmi
LCBP6fqszebnlqM8T9CsemkXzYeLDLcut3/eUOAY4Yj4eYN8FaoOPW+LrfbmVuDq
FDSbmcLU4Ok90PyhRrBeBqvgbBXPGVc8Ii0scZ1LV22EKmF6rMXJn1ucEqV3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCx65ydNw11oTMlxLo/f5e5SPzUkwHwYDVR0j
BBgwFoAUiA428g4c8YGYpeQuEgqFWfHG8GAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9CQVIxcGJRUENqNUtOYnFOcEpoWUFmWDJYM3NpbUdKeWN4YlRCbXVHWXZT
LzAvODgwRTM2RjIwRTFDRjE4MTk4QTVFNDJFMTIwQTg1NTlGMUM2RjA2MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84ODBFMzZGMjBFMUNGMTgxOThB
NUU0MkUxMjBBODU1OUYxQzZGMDYwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9C
QVIxcGJRUENqNUtOYnFOcEpoWUFmWDJYM3NpbUdKeWN4YlRCbXVHWXZTLzAvMzIz
ODMwMzQzYTM3NjQzNTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzEz
NTM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBH1UMA0GCSqGSIb3DQEBCwUAA4IBAQBw426LoE6M
Eak6vTnPBQJVr3Qiz6YLm/fVIVBhwoFLcCn5i27GaylaYCWrRBK5XJa9999LrO2k
NNETBj98DLcGIPTQhw+fLctTqkNmtwMnFqAyddNdrs75DJulv00eqnlSmgOsIPGK
qmatno8rMVrMACXsvLPcVm9ci+r7/Z7M40LtGy3F3X4jjICSQyVW2YSya+XDaaEo
V22PfrOMZ+6bWZDqLuuSimiOBnabrcextqpPg/FUs1hcq8UQA13MR/pREfKWRmDJ
BolCRB4P67bOgudUh07VNH0x+vExktApDz8NPOVbqwKIpI5iSkyvX9kYtBgJECRj
Mp+lKyP5FsJg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org