Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/323830343a356134343a3a2f33322d3438203d3e20323638373631.roa
File:                     323830343a356134343a3a2f33322d3438203d3e20323638373631.roa (raw, json)
Hash identifier:          Cw0k8vyPrfeAaTqnkfkl2gHVFZVyxrY4FyHx9ilodSI=
Subject key identifier:   FD:5C:CB:3F:B4:61:B4:47:B2:C7:3F:D1:AF:5C:AD:31:C6:66:D3:A8
Certificate issuer:       /CN=C37CB2BE57C03AF3294ACFADE9632534F0696AAD
Certificate serial:       3EA4378EF1965C283BDFF614B78FE2E4D0D01DFA
Authority key identifier: C3:7C:B2:BE:57:C0:3A:F3:29:4A:CF:AD:E9:63:25:34:F0:69:6A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/323830343a356134343a3a2f33322d3438203d3e20323638373631.roa
Signing time:             Thu 15 Feb 2024 12:38:12 +0000
ROA not before:           Thu 15 Feb 2024 12:33:12 +0000
ROA not after:            Thu 13 Feb 2025 12:38:12 +0000
asID:                     268761
IP address blocks:        2804:5a44::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a4:37:8e:f1:96:5c:28:3b:df:f6:14:b7:8f:e2:e4:d0:d0:1d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37CB2BE57C03AF3294ACFADE9632534F0696AAD
        Validity
            Not Before: Feb 15 12:33:12 2024 GMT
            Not After : Feb 13 12:38:12 2025 GMT
        Subject: CN=FD5CCB3FB461B447B2C73FD1AF5CAD31C666D3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:9b:3a:75:33:37:64:1e:54:f0:cc:a2:11:
                    a4:48:5b:eb:a0:de:75:d6:11:b9:40:a0:c1:9b:a4:
                    69:3b:0e:99:1a:2a:74:4d:8a:3c:5b:30:5a:76:01:
                    35:cd:8b:dd:a7:b0:b6:23:a7:2c:67:47:fe:b4:86:
                    f6:7f:f4:12:cc:19:3a:fe:be:10:6c:99:4f:5a:f4:
                    ef:3b:61:2e:aa:31:ff:78:55:a1:b1:18:74:b7:43:
                    23:bf:38:2c:31:7d:da:8c:bc:1c:8a:8e:8a:94:47:
                    72:d4:c6:4b:44:94:12:0f:f3:cb:1f:a8:63:7a:6a:
                    22:a6:e0:16:fa:0f:76:7b:5f:28:89:38:8c:2b:9f:
                    b8:1e:ef:3f:d2:47:99:6d:48:63:86:d0:fa:7b:32:
                    62:7c:75:94:ed:fc:b1:c7:83:81:4b:79:82:f3:aa:
                    6f:7b:2a:60:20:c5:0f:ed:09:d3:15:59:07:9e:f9:
                    68:e8:0f:23:42:a5:62:0a:23:e8:2c:f6:77:5e:65:
                    c9:14:cd:ec:e4:63:5d:54:00:05:62:8b:eb:c9:c5:
                    5c:90:57:7c:fc:0a:d5:92:8b:96:7c:5c:30:64:70:
                    7f:67:a3:c7:81:a4:0a:7a:23:6e:59:76:53:c0:93:
                    12:32:c2:a0:9a:65:de:7e:45:12:b0:60:19:01:0a:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:CB:3F:B4:61:B4:47:B2:C7:3F:D1:AF:5C:AD:31:C6:66:D3:A8
            X509v3 Authority Key Identifier:
                keyid:C3:7C:B2:BE:57:C0:3A:F3:29:4A:CF:AD:E9:63:25:34:F0:69:6A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/323830343a356134343a3a2f33322d3438203d3e20323638373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a44::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:63:a5:2b:d6:2a:d9:f4:d1:64:54:40:8a:f1:e4:58:1a:26:
         e6:e1:f7:d4:24:8c:95:c1:1e:47:de:03:37:a1:20:76:e4:71:
         e6:96:3d:cd:a5:15:ea:46:95:b6:6e:cf:49:cf:1f:15:1e:e0:
         67:27:a6:02:13:c3:b7:7a:40:c2:a2:c9:79:fc:92:55:c0:23:
         c9:de:52:dc:88:ba:5a:56:5d:6d:5a:d1:8b:31:0c:48:19:2a:
         7c:3c:ce:24:73:8d:58:c2:81:ee:b6:eb:ea:d4:3f:3e:e1:d1:
         91:a5:43:c9:31:79:5c:19:bd:5a:80:b5:ba:14:fc:e7:ac:c3:
         0b:48:6b:ed:de:a7:cc:dd:d9:56:bc:63:52:79:88:1c:16:1a:
         72:f2:20:59:d9:0d:a0:b2:ca:84:9d:fd:40:d0:06:d6:63:2b:
         54:c0:84:6f:52:1d:0a:58:52:30:9d:c1:e0:35:1c:26:cb:de:
         84:ae:35:5c:69:ac:f2:dc:ca:bc:d9:0e:00:22:83:89:27:84:
         35:74:65:fe:5a:d3:c0:12:7d:03:b6:a4:d2:3e:c3:52:c3:08:
         c0:04:a4:ea:cc:58:26:5f:b9:bd:1a:08:18:07:a9:3c:ef:5f:
         a4:ee:dc:b9:6e:f5:07:3b:be:8b:c3:d5:f7:0f:5d:a9:da:cf:
         d1:69:93:69
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPqQ3jvGWXCg73/YUt4/i5NDQHfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3Q0IyQkU1N0MwM0FGMzI5NEFDRkFERTk2MzI1MzRG
MDY5NkFBRDAeFw0yNDAyMTUxMjMzMTJaFw0yNTAyMTMxMjM4MTJaMDMxMTAvBgNV
BAMTKEZENUNDQjNGQjQ2MUI0NDdCMkM3M0ZEMUFGNUNBRDMxQzY2NkQzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Vps6dTM3ZB5U8MyiEaRIW+ug
3nXWEblAoMGbpGk7DpkaKnRNijxbMFp2ATXNi92nsLYjpyxnR/60hvZ/9BLMGTr+
vhBsmU9a9O87YS6qMf94VaGxGHS3QyO/OCwxfdqMvByKjoqUR3LUxktElBIP88sf
qGN6aiKm4Bb6D3Z7XyiJOIwrn7ge7z/SR5ltSGOG0Pp7MmJ8dZTt/LHHg4FLeYLz
qm97KmAgxQ/tCdMVWQee+WjoDyNCpWIKI+gs9ndeZckUzezkY11UAAVii+vJxVyQ
V3z8CtWSi5Z8XDBkcH9no8eBpAp6I25ZdlPAkxIywqCaZd5+RRKwYBkBCnHnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/VzLP7RhtEeyxz/Rr1ytMcZm06gwHwYDVR0j
BBgwFoAUw3yyvlfAOvMpSs+t6WMlNPBpaq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkI2U1FTY2ppSkUzSlYyTFJ4Z3l2S0ZGOUZmS2EyQkh0bWJSTktNVDVU
NDgvMC9DMzdDQjJCRTU3QzAzQUYzMjk0QUNGQURFOTYzMjUzNEYwNjk2QUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzN0NCMkJFNTdDMDNBRjMy
OTRBQ0ZBREU5NjMyNTM0RjA2OTZBQUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCNlNRU2NqaUpFM0pWMkxSeGd5dktGRjlGZkthMkJIdG1iUk5LTVQ1VDQ4LzAv
MzIzODMwMzQzYTM1NjEzNDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzczNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARaRDANBgkqhkiG9w0BAQsFAAOCAQEAbGOlK9Yq
2fTRZFRAivHkWBom5uH31CSMlcEeR94DN6EgduRx5pY9zaUV6kaVtm7PSc8fFR7g
ZyemAhPDt3pAwqLJefySVcAjyd5S3Ii6WlZdbVrRizEMSBkqfDzOJHONWMKB7rbr
6tQ/PuHRkaVDyTF5XBm9WoC1uhT856zDC0hr7d6nzN3ZVrxjUnmIHBYacvIgWdkN
oLLKhJ39QNAG1mMrVMCEb1IdClhSMJ3B4DUcJsvehK41XGms8tzKvNkOACKDiSeE
NXRl/lrTwBJ9A7ak0j7DUsMIwASk6sxYJl+5vRoIGAepPO9fpO7cuW71Bzu+i8PV
9w9dqdrP0WmTaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org