Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa (raw, json)
Hash identifier:          ft+2JGmT6QbbMFcpKYWNegUctG8Yn/ax7efgFvPMoFc=
Subject key identifier:   BB:52:70:64:74:DE:40:1D:90:D1:5C:D2:4C:0A:80:7D:C4:F9:C5:F1
Certificate issuer:       /CN=B139021633E78ADF542F9ECA67CAD78E1B463ED2
Certificate serial:       16CEEE64735D3CBE513571BC5FCD00F3005E5656
Authority key identifier: B1:39:02:16:33:E7:8A:DF:54:2F:9E:CA:67:CA:D7:8E:1B:46:3E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
Signing time:             Tue 09 Jan 2024 16:54:32 +0000
ROA not before:           Tue 09 Jan 2024 16:49:32 +0000
ROA not after:            Tue 07 Jan 2025 16:54:32 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ce:ee:64:73:5d:3c:be:51:35:71:bc:5f:cd:00:f3:00:5e:56:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B139021633E78ADF542F9ECA67CAD78E1B463ED2
        Validity
            Not Before: Jan  9 16:49:32 2024 GMT
            Not After : Jan  7 16:54:32 2025 GMT
        Subject: CN=BB52706474DE401D90D15CD24C0A807DC4F9C5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:03:c2:66:a7:f7:67:6b:bd:38:43:9d:49:
                    2e:62:42:f0:f2:94:d3:39:f8:f4:18:8d:93:79:80:
                    5f:08:b3:23:85:da:e6:61:50:a0:7e:5f:0f:d7:1c:
                    2b:98:44:93:ad:2c:45:81:b8:55:a2:40:d3:57:58:
                    65:4b:64:eb:6f:54:da:bd:1f:fd:01:49:45:f9:23:
                    48:ff:33:f9:bf:c7:ff:61:e1:31:9f:02:bd:aa:84:
                    6e:03:3d:d8:9b:db:c8:4e:47:c9:52:1f:e6:4f:5c:
                    24:e3:7f:95:5a:c2:9a:f8:10:7c:1c:9e:36:4e:b7:
                    6d:4f:cf:ba:4e:59:56:84:0a:00:a8:4a:30:cc:eb:
                    27:f5:6b:91:5d:6b:15:8b:ff:00:96:4a:e6:83:10:
                    3f:b9:9e:43:42:21:fa:4a:d0:4f:96:67:98:fe:9f:
                    fa:af:04:9f:09:5b:4d:dc:14:4f:f9:ee:91:bf:40:
                    13:b9:b7:4b:9d:b6:9c:19:9f:c2:ef:77:c6:fd:96:
                    41:68:5f:a0:6f:4e:f3:fb:8b:fa:ec:5d:94:41:f2:
                    06:cf:ac:fc:68:7b:c8:04:68:ae:c0:0a:48:51:1e:
                    10:ed:a5:e8:ef:e1:88:67:c6:13:01:2e:bf:fb:19:
                    07:40:0e:86:b1:5c:5c:70:d5:ac:d4:c0:e5:45:29:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:70:64:74:DE:40:1D:90:D1:5C:D2:4C:0A:80:7D:C4:F9:C5:F1
            X509v3 Authority Key Identifier:
                keyid:B1:39:02:16:33:E7:8A:DF:54:2F:9E:CA:67:CA:D7:8E:1B:46:3E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:7b:7e:b3:8b:c7:44:1d:8f:90:60:3b:a7:68:04:b9:8b:
         80:c7:f7:3f:d0:76:9d:f4:fa:7d:09:ef:52:d7:9f:55:df:4c:
         f6:a6:87:67:bd:96:d0:e7:08:d7:41:88:53:fd:89:46:73:94:
         57:97:11:8d:75:6c:1c:6f:7c:21:95:22:c2:1a:0a:29:ba:42:
         73:29:ca:7d:63:3e:81:cf:2c:94:98:ea:b8:5e:80:7a:3a:ca:
         fc:af:b7:72:d2:81:e5:c7:7f:a2:79:08:7c:bf:f6:4b:01:8e:
         73:52:d4:6f:13:c8:0c:81:9f:1a:a1:65:6b:ee:2f:2f:de:98:
         c2:f3:5d:85:72:06:1c:c4:e8:ca:53:a9:af:81:b4:3a:32:66:
         a7:fe:1a:72:4c:70:bd:bb:d2:3c:7c:79:bb:e4:61:3f:d1:a1:
         2e:79:95:d7:b8:9b:98:6b:f1:29:c7:a0:5b:a5:68:27:b4:a4:
         06:34:42:a3:6d:0f:de:d4:0b:5a:82:43:3c:b0:44:ff:1b:53:
         35:03:0a:d1:12:28:30:1c:ec:6f:48:f1:e1:ac:cd:d6:6f:7b:
         d5:ba:3f:96:45:10:34:5e:3b:f5:c6:de:2c:da:c0:b1:84:09:
         b3:3e:6e:e1:c2:05:55:b8:d9:f5:1c:30:3a:f3:55:d4:fd:c8:
         7f:52:fa:d4
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUFs7uZHNdPL5RNXG8X80A8wBeVlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzOTAyMTYzM0U3OEFERjU0MkY5RUNBNjdDQUQ3OEUx
QjQ2M0VEMjAeFw0yNDAxMDkxNjQ5MzJaFw0yNTAxMDcxNjU0MzJaMDMxMTAvBgNV
BAMTKEJCNTI3MDY0NzRERTQwMUQ5MEQxNUNEMjRDMEE4MDdEQzRGOUM1RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sgPCZqf3Z2u9OEOdSS5iQvDy
lNM5+PQYjZN5gF8IsyOF2uZhUKB+Xw/XHCuYRJOtLEWBuFWiQNNXWGVLZOtvVNq9
H/0BSUX5I0j/M/m/x/9h4TGfAr2qhG4DPdib28hOR8lSH+ZPXCTjf5Vawpr4EHwc
njZOt21Pz7pOWVaECgCoSjDM6yf1a5FdaxWL/wCWSuaDED+5nkNCIfpK0E+WZ5j+
n/qvBJ8JW03cFE/57pG/QBO5t0udtpwZn8Lvd8b9lkFoX6BvTvP7i/rsXZRB8gbP
rPxoe8gEaK7ACkhRHhDtpejv4YhnxhMBLr/7GQdADoaxXFxw1azUwOVFKRhfAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUu1JwZHTeQB2Q0VzSTAqAfcT5xfEwHwYDVR0j
BBgwFoAUsTkCFjPnit9UL57KZ8rXjhtGPtIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnB4VTFrSDdXUnB1R29HR25hSDdmVWpNM0pvY2F4cnNTcjdLZTJBV3lQ
bm8vMC9CMTM5MDIxNjMzRTc4QURGNTQyRjlFQ0E2N0NBRDc4RTFCNDYzRUQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxMzkwMjE2MzNFNzhBREY1
NDJGOUVDQTY3Q0FENzhFMUI0NjNFRDIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JweFUxa0g3V1JwdUdvR0duYUg3ZlVqTTNKb2NheHJzU3I3S2UyQVd5UG5vLzAv
MzIzODMwMzEzYTM4MzAzYTM0MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw
MzIzNzMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEAgEAwDQYJKoZIhvcNAQELBQADggEB
ADcNe36zi8dEHY+QYDunaAS5i4DH9z/Qdp30+n0J71LXn1XfTPamh2e9ltDnCNdB
iFP9iUZzlFeXEY11bBxvfCGVIsIaCim6QnMpyn1jPoHPLJSY6rhegHo6yvyvt3LS
geXHf6J5CHy/9ksBjnNS1G8TyAyBnxqhZWvuLy/emMLzXYVyBhzE6MpTqa+BtDoy
Zqf+GnJMcL270jx8ebvkYT/RoS55lde4m5hr8SnHoFulaCe0pAY0QqNtD97UC1qC
QzywRP8bUzUDCtESKDAc7G9I8eGszdZve9W6P5ZFEDReO/XG3izawLGECbM+buHC
BVW42fUcMDrzVdT9yH9S+tQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org