Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393034303a3a2f35302d3530203d3e20323633343231.roa
File:                     323830343a313630303a393034303a3a2f35302d3530203d3e20323633343231.roa (raw, json)
Hash identifier:          bwsriwvwFFw+VMwHjoJUC7FGIxqnDquU5+IPIzRBZD0=
Subject key identifier:   49:7E:D8:44:FC:A6:BC:69:B5:E9:E8:26:BF:F7:ED:C6:C8:D0:15:D7
Certificate issuer:       /CN=411194BD84722FD252C79F3307A7C3ACFDC84782
Certificate serial:       3EB4411E168669AECA5C1F409E9C01554A198694
Authority key identifier: 41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393034303a3a2f35302d3530203d3e20323633343231.roa
Signing time:             Mon 10 Jul 2023 20:19:53 +0000
ROA not before:           Mon 10 Jul 2023 20:14:53 +0000
ROA not after:            Mon 08 Jul 2024 20:19:53 +0000
asID:                     263421
IP address blocks:        2804:1600:9040::/50 maxlen: 50

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b4:41:1e:16:86:69:ae:ca:5c:1f:40:9e:9c:01:55:4a:19:86:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Validity
            Not Before: Jul 10 20:14:53 2023 GMT
            Not After : Jul  8 20:19:53 2024 GMT
        Subject: CN=497ED844FCA6BC69B5E9E826BFF7EDC6C8D015D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:29:f5:57:71:f1:4a:e3:dd:04:29:c1:4f:
                    fb:2d:35:b6:38:88:45:03:b5:6c:f0:f8:e5:ad:78:
                    e0:3f:95:fe:2e:28:65:d9:74:9c:4f:0a:f7:de:4a:
                    7e:6f:4d:20:9f:90:5d:d6:06:f1:96:e6:20:47:ee:
                    fe:ee:d7:3a:89:42:7b:47:1c:b7:5d:02:ce:ef:67:
                    d7:47:8b:ea:d1:22:85:12:c9:bd:bf:e5:a0:92:b5:
                    1d:ec:dd:b2:2b:33:9a:fd:6c:73:76:9c:9c:9e:f4:
                    14:4e:35:35:ef:e3:4f:d4:ae:86:22:3a:da:89:ea:
                    c8:67:aa:ae:d0:de:43:a1:43:72:c2:79:80:2a:43:
                    ff:ee:5e:26:15:c4:e0:71:d5:59:b0:7b:ba:f5:ca:
                    cf:9b:d2:97:8e:4d:0b:92:76:5e:fa:46:28:05:72:
                    27:ee:36:c0:72:2f:8b:73:54:7d:2e:16:61:20:48:
                    e1:a6:6f:75:c1:58:8f:23:5e:f0:07:e7:af:ee:e0:
                    61:a1:01:cc:04:b6:93:36:aa:4d:9c:6c:68:92:cb:
                    0e:3e:f6:f7:d7:c7:6b:17:eb:01:17:f1:af:62:0b:
                    06:2f:65:05:24:20:85:f5:ce:bc:9f:7f:68:1e:b1:
                    5d:ef:51:e1:8a:01:3a:6f:3d:6d:38:74:ae:40:0b:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7E:D8:44:FC:A6:BC:69:B5:E9:E8:26:BF:F7:ED:C6:C8:D0:15:D7
            X509v3 Authority Key Identifier:
                keyid:41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393034303a3a2f35302d3530203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:9040::/50

    Signature Algorithm: sha256WithRSAEncryption
         84:52:27:48:04:e1:ef:fa:2b:12:ee:0e:b0:f4:cf:23:66:3b:
         c3:cf:c3:58:3b:63:b3:01:16:a0:bc:fd:b3:46:a9:47:f6:fb:
         f0:fc:d1:e1:4b:80:4a:e5:db:98:61:36:a9:a4:cc:2f:71:0f:
         8a:86:c8:92:fe:6e:24:a4:9c:61:e3:00:93:17:ca:a4:3e:0d:
         61:bd:4b:c8:0e:4a:f3:f7:ab:82:ea:60:97:12:df:68:7f:1b:
         a3:31:e7:37:d0:95:58:bc:47:f5:e1:62:9b:be:b8:58:3d:7f:
         23:49:e5:7b:68:3d:67:c6:c2:71:da:9b:42:bc:6a:44:07:ad:
         a7:9a:86:e0:26:31:8d:96:ac:59:fb:0b:f9:10:ef:1e:fc:36:
         2a:2a:9d:22:74:36:90:7b:a2:ff:64:14:cc:56:d6:e7:72:4e:
         95:7f:54:84:02:ff:cb:3c:e7:0e:c9:e4:4e:bd:fe:f1:1e:b0:
         ed:e9:c3:35:da:e5:30:20:fd:df:ac:d9:56:22:82:4c:64:74:
         4a:29:1e:28:ba:d2:75:c3:73:66:87:8c:89:27:ab:41:b2:f5:
         a7:02:1c:8c:4a:26:ef:ee:d9:f0:7f:53:3f:98:1b:a5:66:ca:
         7a:5a:48:48:d2:17:49:fb:ab:24:91:a9:b5:0b:e2:de:52:4d:
         1a:01:d7:8f
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUPrRBHhaGaa7KXB9AnpwBVUoZhpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDExMTk0QkQ4NDcyMkZEMjUyQzc5RjMzMDdBN0MzQUNG
REM4NDc4MjAeFw0yMzA3MTAyMDE0NTNaFw0yNDA3MDgyMDE5NTNaMDMxMTAvBgNV
BAMTKDQ5N0VEODQ0RkNBNkJDNjlCNUU5RTgyNkJGRjdFREM2QzhEMDE1RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfyn1V3HxSuPdBCnBT/stNbY4
iEUDtWzw+OWteOA/lf4uKGXZdJxPCvfeSn5vTSCfkF3WBvGW5iBH7v7u1zqJQntH
HLddAs7vZ9dHi+rRIoUSyb2/5aCStR3s3bIrM5r9bHN2nJye9BRONTXv40/UroYi
OtqJ6shnqq7Q3kOhQ3LCeYAqQ//uXiYVxOBx1Vmwe7r1ys+b0peOTQuSdl76RigF
cifuNsByL4tzVH0uFmEgSOGmb3XBWI8jXvAH56/u4GGhAcwEtpM2qk2cbGiSyw4+
9vfXx2sX6wEX8a9iCwYvZQUkIIX1zryff2gesV3vUeGKATpvPW04dK5AC0XPAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUSX7YRPymvGm16egmv/ftxsjQFdcwHwYDVR0j
BBgwFoAUQRGUvYRyL9JSx58zB6fDrP3IR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdM
eUYvMC80MTExOTRCRDg0NzIyRkQyNTJDNzlGMzMwN0E3QzNBQ0ZEQzg0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxMTE5NEJEODQ3MjJGRDI1
MkM3OUYzMzA3QTdDM0FDRkRDODQ3ODIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jud1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAv
MzIzODMwMzQzYTMxMzYzMDMwM2EzOTMwMzQzMDNhM2EyZjM1MzAyZDM1MzAyMDNk
M2UyMDMyMzYzMzM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAj
BggrBgEFBQcBBwEB/wQUMBIwEAQCAAIwCgMIBigEFgCQQAAwDQYJKoZIhvcNAQEL
BQADggEBAIRSJ0gE4e/6KxLuDrD0zyNmO8PPw1g7Y7MBFqC8/bNGqUf2+/D80eFL
gErl25hhNqmkzC9xD4qGyJL+biSknGHjAJMXyqQ+DWG9S8gOSvP3q4LqYJcS32h/
G6Mx5zfQlVi8R/XhYpu+uFg9fyNJ5XtoPWfGwnHam0K8akQHraeahuAmMY2WrFn7
C/kQ7x78NioqnSJ0NpB7ov9kFMxW1udyTpV/VIQC/8s85w7J5E69/vEesO3pwzXa
5TAg/d+s2VYigkxkdEopHii60nXDc2aHjIknq0Gy9acCHIxKJu/u2fB/Uz+YG6Vm
ynpaSEjSF0n7qySRqbUL4t5STRoB148=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org