Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a343030303a3a2f33342d3334203d3e20323636303636.roa
File:                     323830343a336130383a343030303a3a2f33342d3334203d3e20323636303636.roa (raw, json)
Hash identifier:          QKTZ+Hq7LTcNg34YRxQ9NKMhj8BTDdJHG8z3y5qMOfk=
Subject key identifier:   DE:4C:BC:40:AB:A8:B6:C7:CD:7C:97:59:9E:A8:5B:DF:3F:40:7C:19
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       2A76B5537190DB8B987D93A16D33147341FBEC57
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a343030303a3a2f33342d3334203d3e20323636303636.roa
Signing time:             Sat 18 Nov 2023 00:21:16 +0000
ROA not before:           Sat 18 Nov 2023 00:16:16 +0000
ROA not after:            Sat 16 Nov 2024 00:21:16 +0000
asID:                     266066
IP address blocks:        2804:3a08:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:76:b5:53:71:90:db:8b:98:7d:93:a1:6d:33:14:73:41:fb:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Nov 18 00:16:16 2023 GMT
            Not After : Nov 16 00:21:16 2024 GMT
        Subject: CN=DE4CBC40ABA8B6C7CD7C97599EA85BDF3F407C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:39:03:34:2a:86:5e:0f:49:d9:8d:64:6f:
                    8f:fd:65:60:de:77:38:95:b8:f9:60:d6:18:a7:e7:
                    9d:82:e4:2b:c8:05:89:57:04:03:57:b5:c1:e6:2a:
                    9f:02:70:de:fa:12:ff:12:a7:07:e1:35:af:33:c3:
                    3c:77:9d:23:34:6c:c8:08:2a:d5:f2:b3:58:1d:5c:
                    f2:a8:76:db:57:32:72:6a:06:20:3f:cf:73:d9:ed:
                    29:87:11:5a:3e:fa:4f:16:05:97:00:df:a5:c1:6b:
                    8b:df:9e:76:14:e9:a5:7b:95:26:eb:b1:26:8e:f3:
                    0b:81:69:08:7d:80:b0:f2:a8:83:2f:22:f4:39:3a:
                    5c:2c:6a:29:91:7d:91:b3:7e:f2:1b:fc:d4:9b:55:
                    40:54:44:42:7a:38:ff:68:13:a3:72:42:43:55:b8:
                    16:99:02:8a:a6:eb:2d:b3:16:90:e6:0b:f0:71:5f:
                    22:2f:57:a5:e5:ee:ed:02:1f:0b:36:33:99:85:57:
                    d6:77:95:39:a1:4e:c3:e8:77:26:db:5a:37:79:25:
                    ae:6b:ad:b5:a8:cf:b8:1d:ed:3a:0c:f6:b2:71:c2:
                    f0:52:d6:c3:34:3d:53:0f:89:40:8b:5e:bc:32:3d:
                    fb:12:d5:cf:cd:c6:3e:51:25:40:a9:53:41:5b:f8:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4C:BC:40:AB:A8:B6:C7:CD:7C:97:59:9E:A8:5B:DF:3F:40:7C:19
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a343030303a3a2f33342d3334203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:8a:13:17:7c:c4:57:ee:49:b9:06:31:86:21:5e:b2:b3:
         52:f8:74:e2:04:36:fe:91:15:11:1a:fd:4e:94:ca:41:26:c4:
         83:e9:3e:a8:a1:44:63:84:f8:b1:80:17:63:ca:14:33:61:16:
         2b:b4:0b:98:a1:d2:8e:aa:10:90:d1:f3:a6:b0:b4:79:85:b0:
         8b:81:72:5d:c3:25:04:fe:3b:25:00:cb:b7:96:40:5c:70:dd:
         3c:ff:2c:61:34:cf:5b:d4:04:ec:ba:57:ea:15:88:73:6f:1f:
         05:8e:b9:e3:4c:c2:41:37:6f:62:3f:f9:de:15:ac:84:3a:d3:
         68:9e:2b:c5:38:01:b8:1c:6f:a2:d4:d4:39:9d:1a:82:d4:f7:
         0f:e1:d1:96:7c:be:3d:25:b9:5a:a4:79:97:62:d1:39:98:a9:
         6d:14:b9:b2:b9:ca:3d:32:21:af:d6:47:a6:ea:53:05:de:e4:
         44:15:3a:f7:3e:27:23:be:1f:ec:bf:b6:64:02:48:a6:b2:28:
         7d:ca:d1:94:a6:53:48:0a:e2:f2:3c:74:3e:45:a7:d9:e9:9b:
         58:c6:9c:10:41:12:b7:55:cd:e2:83:8c:0a:7b:e1:ab:98:66:
         b1:d8:9e:97:c3:ac:1f:20:45:58:21:f3:55:2d:ba:3e:a4:8e:
         61:ae:f8:90
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKna1U3GQ24uYfZOhbTMUc0H77FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk3NkQ4NjQzRERBQzA0RTlERjQxMDdEQzI3MTA2MjQ5
Nzg4QUY4RjAeFw0yMzExMTgwMDE2MTZaFw0yNDExMTYwMDIxMTZaMDMxMTAvBgNV
BAMTKERFNENCQzQwQUJBOEI2QzdDRDdDOTc1OTlFQTg1QkRGM0Y0MDdDMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGjkDNCqGXg9J2Y1kb4/9ZWDe
dziVuPlg1hin552C5CvIBYlXBANXtcHmKp8CcN76Ev8SpwfhNa8zwzx3nSM0bMgI
KtXys1gdXPKodttXMnJqBiA/z3PZ7SmHEVo++k8WBZcA36XBa4vfnnYU6aV7lSbr
sSaO8wuBaQh9gLDyqIMvIvQ5OlwsaimRfZGzfvIb/NSbVUBUREJ6OP9oE6NyQkNV
uBaZAoqm6y2zFpDmC/BxXyIvV6Xl7u0CHws2M5mFV9Z3lTmhTsPodybbWjd5Ja5r
rbWoz7gd7ToM9rJxwvBS1sM0PVMPiUCLXrwyPfsS1c/Nxj5RJUCpU0Fb+NM1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3ky8QKuotsfNfJdZnqhb3z9AfBkwHwYDVR0j
BBgwFoAU2XbYZD3awE6d9BB9wnEGJJeIr48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5
NncvMC9EOTc2RDg2NDNEREFDMDRFOURGNDEwN0RDMjcxMDYyNDk3ODhBRjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5NzZEODY0M0REQUMwNEU5
REY0MTA3REMyNzEwNjI0OTc4OEFGOEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JNQ1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzAv
MzIzODMwMzQzYTMzNjEzMDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMwMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOghAMA0GCSqGSIb3DQEBCwUA
A4IBAQBK4IoTF3zEV+5JuQYxhiFesrNS+HTiBDb+kRURGv1OlMpBJsSD6T6ooURj
hPixgBdjyhQzYRYrtAuYodKOqhCQ0fOmsLR5hbCLgXJdwyUE/jslAMu3lkBccN08
/yxhNM9b1ATsulfqFYhzbx8FjrnjTMJBN29iP/neFayEOtNonivFOAG4HG+i1NQ5
nRqC1PcP4dGWfL49JblapHmXYtE5mKltFLmyuco9MiGv1kem6lMF3uREFTr3Picj
vh/sv7ZkAkimsih9ytGUplNICuLyPHQ+RafZ6ZtYxpwQQRK3Vc3ig4wKe+GrmGax
2J6Xw6wfIEVYIfNVLbo+pI5hrviQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org