Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33342d3334203d3e20323632393739.roa
File:                     323830343a3961383a633030303a3a2f33342d3334203d3e20323632393739.roa (raw, json)
Hash identifier:          F4GV/QCoL0GPjerIC5ZRB1nB843Yi05AvCSyISb9jf8=
Subject key identifier:   10:CE:57:11:3A:56:CF:F6:AB:C0:E7:AF:19:52:D1:43:45:47:34:EF
Certificate issuer:       /CN=E0E973E8DD046A62F5490A0C4B758171A606CEBE
Certificate serial:       28128B1F226DBD36D8F5694C525A18353D464F73
Authority key identifier: E0:E9:73:E8:DD:04:6A:62:F5:49:0A:0C:4B:75:81:71:A6:06:CE:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33342d3334203d3e20323632393739.roa
Signing time:             Mon 10 Jul 2023 12:51:58 +0000
ROA not before:           Mon 10 Jul 2023 12:46:58 +0000
ROA not after:            Mon 08 Jul 2024 12:51:58 +0000
asID:                     262979
IP address blocks:        2804:9a8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:12:8b:1f:22:6d:bd:36:d8:f5:69:4c:52:5a:18:35:3d:46:4f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E973E8DD046A62F5490A0C4B758171A606CEBE
        Validity
            Not Before: Jul 10 12:46:58 2023 GMT
            Not After : Jul  8 12:51:58 2024 GMT
        Subject: CN=10CE57113A56CFF6ABC0E7AF1952D143454734EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:52:90:0a:27:7e:8b:80:20:cf:61:5c:36:
                    51:ea:fe:bb:d7:ae:d4:32:84:61:c6:a6:48:85:f3:
                    a5:99:2a:17:e6:31:92:4f:13:b8:c2:46:17:16:7b:
                    d0:23:46:99:72:93:8e:92:24:fa:87:64:b7:e2:aa:
                    5d:3c:00:3d:0b:26:d0:b7:16:5b:65:bd:8f:14:a4:
                    1a:33:f2:c7:ed:58:e4:b1:75:15:b5:91:42:61:61:
                    8f:e3:a0:06:f6:58:69:9d:24:34:6c:db:d1:a4:c4:
                    8d:5b:e9:25:f9:ed:84:58:63:29:8d:8e:fd:c7:30:
                    3a:10:73:1b:b4:d1:68:11:d5:eb:bb:73:81:60:4a:
                    2c:36:cc:2c:1b:8b:6b:c4:b0:35:ca:6a:84:20:bc:
                    d6:bd:47:1a:a2:74:1a:e6:ea:ca:f5:3e:69:dc:fd:
                    37:02:29:7d:89:01:d5:7f:ad:9f:28:c7:ee:86:6a:
                    c6:ee:c5:aa:ac:6e:49:a2:a8:ce:53:35:49:26:e5:
                    1e:62:ee:c7:8a:2c:05:ec:2f:f8:a6:53:86:12:68:
                    d4:2a:96:0d:13:5f:a7:d0:c6:e8:e3:59:8b:f3:a4:
                    bc:0c:f3:fb:0e:5a:cd:70:bc:04:d1:dc:07:07:d0:
                    3a:d6:96:6b:7d:bd:72:2d:8c:83:c7:17:9f:b7:ea:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CE:57:11:3A:56:CF:F6:AB:C0:E7:AF:19:52:D1:43:45:47:34:EF
            X509v3 Authority Key Identifier:
                keyid:E0:E9:73:E8:DD:04:6A:62:F5:49:0A:0C:4B:75:81:71:A6:06:CE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E973E8DD046A62F5490A0C4B758171A606CEBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33342d3334203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:4a:64:7c:05:b0:a1:77:e0:25:3c:ec:c4:ea:7c:30:b2:
         64:c8:b3:38:e3:9b:2f:33:7a:17:bf:7f:93:f5:7d:e4:e1:cb:
         b2:17:e4:64:b1:ae:9d:e7:b4:1e:05:51:38:3e:4d:88:0e:3d:
         70:2b:51:6b:0c:10:45:b9:7a:4c:a3:07:13:a5:9b:98:b2:17:
         be:19:38:89:3f:1d:45:93:e3:fb:d1:0a:53:bd:e6:a1:47:02:
         13:10:de:b1:29:7e:e2:51:f7:27:5a:0d:3e:40:e6:97:ad:f9:
         b5:fb:3f:01:f2:7e:51:28:74:30:c0:4a:99:ec:44:06:e7:51:
         cf:9f:27:b3:05:0e:88:18:41:e0:43:e2:ac:7c:18:56:1c:7c:
         c2:13:7f:30:e9:71:ff:63:03:3a:b6:9c:64:70:fc:01:97:cf:
         22:c8:e8:cf:56:23:b0:2c:4c:df:14:34:25:7a:3c:47:ed:70:
         16:62:db:24:aa:e3:69:cc:27:50:46:16:15:0a:b9:72:81:d0:
         2c:8c:f3:8e:94:e9:d1:b6:8f:29:e0:8a:f4:0f:9d:ae:3a:cc:
         dd:cc:46:12:2e:b4:53:bb:c2:f6:b4:49:71:77:a5:c4:0f:03:
         b2:f8:6b:70:cc:fe:fd:c6:0a:6e:19:ec:d2:d8:0e:07:ce:1b:
         f6:9c:58:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKBKLHyJtvTbY9WlMUloYNT1GT3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBFOTczRThERDA0NkE2MkY1NDkwQTBDNEI3NTgxNzFB
NjA2Q0VCRTAeFw0yMzA3MTAxMjQ2NThaFw0yNDA3MDgxMjUxNThaMDMxMTAvBgNV
BAMTKDEwQ0U1NzExM0E1NkNGRjZBQkMwRTdBRjE5NTJEMTQzNDU0NzM0RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCta1KQCid+i4Agz2FcNlHq/rvX
rtQyhGHGpkiF86WZKhfmMZJPE7jCRhcWe9AjRplyk46SJPqHZLfiql08AD0LJtC3
FltlvY8UpBoz8sftWOSxdRW1kUJhYY/joAb2WGmdJDRs29GkxI1b6SX57YRYYymN
jv3HMDoQcxu00WgR1eu7c4FgSiw2zCwbi2vEsDXKaoQgvNa9RxqidBrm6sr1Pmnc
/TcCKX2JAdV/rZ8ox+6GasbuxaqsbkmiqM5TNUkm5R5i7seKLAXsL/imU4YSaNQq
lg0TX6fQxujjWYvzpLwM8/sOWs1wvATR3AcH0DrWlmt9vXItjIPHF5+36hiFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEM5XETpWz/arwOevGVLRQ0VHNO8wHwYDVR0j
BBgwFoAU4Olz6N0EamL1SQoMS3WBcaYGzr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZlc01HODlTckh6Szh5eXNrNk1FalRoc2VlR2FGRVF1VFRETkNGam04
SDgvMC9FMEU5NzNFOEREMDQ2QTYyRjU0OTBBMEM0Qjc1ODE3MUE2MDZDRUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UwRTk3M0U4REQwNDZBNjJG
NTQ5MEEwQzRCNzU4MTcxQTYwNkNFQkUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWZXNNRzg5U3JIeks4eXlzazZNRWpUaHNlZUdhRkVRdVRURE5DRmptOEg4LzAv
MzIzODMwMzQzYTM5NjEzODNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzIzOTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBAmowDANBgkqhkiG9w0BAQsFAAOC
AQEAH6BKZHwFsKF34CU87MTqfDCyZMizOOObLzN6F79/k/V95OHLshfkZLGunee0
HgVROD5NiA49cCtRawwQRbl6TKMHE6WbmLIXvhk4iT8dRZPj+9EKU73moUcCExDe
sSl+4lH3J1oNPkDml635tfs/AfJ+USh0MMBKmexEBudRz58nswUOiBhB4EPirHwY
Vhx8whN/MOlx/2MDOracZHD8AZfPIsjoz1YjsCxM3xQ0JXo8R+1wFmLbJKrjacwn
UEYWFQq5coHQLIzzjpTp0baPKeCK9A+drjrM3cxGEi60U7vC9rRJcXelxA8Dsvhr
cMz+/cYKbhns0tgOB84b9pxYMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org