Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa (raw, json)
Hash identifier:          Ymmc0ZDc2NhuTj5+G8dJlOtJpmkVXri/ZhSXIazlgBg=
Subject key identifier:   3E:4D:B6:8F:FF:BC:95:78:59:55:47:5C:A8:48:61:1F:D3:38:4F:D7
Certificate issuer:       /CN=D031B487E72103F23BC5CC66124308EAD566D33F
Certificate serial:       7300E6E19490719D3C2F046BB86546F7CCEC8DF2
Authority key identifier: D0:31:B4:87:E7:21:03:F2:3B:C5:CC:66:12:43:08:EA:D5:66:D3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D031B487E72103F23BC5CC66124308EAD566D33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
Signing time:             Tue 23 Jan 2024 12:52:22 +0000
ROA not before:           Tue 23 Jan 2024 12:47:22 +0000
ROA not after:            Tue 21 Jan 2025 12:52:22 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:00:e6:e1:94:90:71:9d:3c:2f:04:6b:b8:65:46:f7:cc:ec:8d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D031B487E72103F23BC5CC66124308EAD566D33F
        Validity
            Not Before: Jan 23 12:47:22 2024 GMT
            Not After : Jan 21 12:52:22 2025 GMT
        Subject: CN=3E4DB68FFFBC95785955475CA848611FD3384FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:0b:bc:b4:25:fe:eb:34:f9:59:77:1f:72:
                    10:3b:3f:29:7b:52:72:14:ef:55:48:7d:74:43:88:
                    ad:44:5e:07:71:1a:75:1a:5a:32:91:4b:a0:8a:63:
                    b8:91:51:26:54:62:23:a0:86:ab:77:50:0a:64:3b:
                    f1:2b:c4:54:1b:a3:10:d8:de:c1:72:66:33:89:3b:
                    c4:bd:57:5c:3b:a6:fd:b7:d2:5d:98:ed:81:82:bb:
                    2b:0b:53:70:aa:82:a2:5c:31:54:eb:7d:1c:51:9e:
                    68:de:85:88:38:55:5a:b2:50:20:7c:55:3a:d4:8f:
                    87:f4:b3:71:2d:ff:10:88:c8:94:f3:99:ce:f0:f1:
                    7f:08:9e:b4:42:65:8e:30:26:3b:bf:04:f9:dd:99:
                    8b:d9:98:78:18:60:2a:d1:eb:ec:0d:77:07:7d:8a:
                    4e:78:cb:f1:da:a8:70:3e:f6:40:0f:e8:f7:b7:1d:
                    6d:e6:4c:56:7f:f5:69:74:94:fe:dd:2a:d6:14:69:
                    20:7d:6e:c0:40:c0:9e:ad:83:08:88:3c:ca:3e:14:
                    0d:54:6d:93:63:f5:94:a2:95:16:0b:d0:e8:65:58:
                    55:19:a3:55:29:02:99:9c:88:5c:7f:05:bd:41:fd:
                    d5:0c:44:37:dc:08:2d:ba:4d:36:8a:e4:ec:ea:13:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4D:B6:8F:FF:BC:95:78:59:55:47:5C:A8:48:61:1F:D3:38:4F:D7
            X509v3 Authority Key Identifier:
                keyid:D0:31:B4:87:E7:21:03:F2:3B:C5:CC:66:12:43:08:EA:D5:66:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/D031B487E72103F23BC5CC66124308EAD566D33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D031B487E72103F23BC5CC66124308EAD566D33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:6a:ab:8d:36:4f:ce:45:63:da:1a:9d:83:99:b7:ba:df:
         05:80:22:a8:b7:c7:7f:d3:ca:c1:3a:69:58:09:6d:af:a4:36:
         29:10:6d:07:7d:5b:b1:1c:35:96:a4:0e:1a:03:61:5a:0c:ac:
         8c:46:95:02:d6:22:8a:03:ac:46:d4:c1:77:5e:a9:95:7c:ca:
         16:a6:3e:8d:34:81:d6:59:ca:dd:03:a4:19:a2:7f:ef:cb:53:
         1f:75:a2:de:4f:96:42:4c:a4:28:31:c8:48:80:1b:44:d8:79:
         a5:87:a1:12:5f:5a:83:32:62:0d:0f:aa:5a:f2:78:34:d5:f1:
         b3:a0:bb:d4:53:f6:64:61:2a:e7:f7:83:ce:27:58:9e:c5:77:
         c3:a0:6c:66:f9:c3:f9:ad:be:be:34:2a:11:59:dd:b5:8c:b4:
         2e:ed:ec:65:09:0c:a6:6d:99:30:23:d3:1d:be:ab:9c:46:4e:
         ed:c3:35:d3:fd:2f:b1:14:7b:46:fd:58:8c:44:a9:bf:e7:7b:
         8c:04:2f:a4:5d:56:5c:7b:69:54:a4:82:ac:c8:bb:12:d1:e0:
         6d:c4:35:69:82:bb:91:18:d6:ca:75:69:ca:f6:76:ba:fb:e2:
         f9:8c:f3:4e:71:cb:dd:11:1c:0a:16:f5:52:18:07:c6:45:e3:
         eb:b7:27:40
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUcwDm4ZSQcZ08LwRruGVG98zsjfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAzMUI0ODdFNzIxMDNGMjNCQzVDQzY2MTI0MzA4RUFE
NTY2RDMzRjAeFw0yNDAxMjMxMjQ3MjJaFw0yNTAxMjExMjUyMjJaMDMxMTAvBgNV
BAMTKDNFNERCNjhGRkZCQzk1Nzg1OTU1NDc1Q0E4NDg2MTFGRDMzODRGRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0Qu8tCX+6zT5WXcfchA7Pyl7
UnIU71VIfXRDiK1EXgdxGnUaWjKRS6CKY7iRUSZUYiOghqt3UApkO/ErxFQboxDY
3sFyZjOJO8S9V1w7pv230l2Y7YGCuysLU3CqgqJcMVTrfRxRnmjehYg4VVqyUCB8
VTrUj4f0s3Et/xCIyJTzmc7w8X8InrRCZY4wJju/BPndmYvZmHgYYCrR6+wNdwd9
ik54y/HaqHA+9kAP6Pe3HW3mTFZ/9Wl0lP7dKtYUaSB9bsBAwJ6tgwiIPMo+FA1U
bZNj9ZSilRYL0OhlWFUZo1UpApmciFx/Bb1B/dUMRDfcCC26TTaK5OzqE3yNAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUPk22j/+8lXhZVUdcqEhhH9M4T9cwHwYDVR0j
BBgwFoAU0DG0h+chA/I7xcxmEkMI6tVm0z8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnB4VTFrSDdXUnB1R29HR25hSDdmVWpNM0pvY2F4cnNTcjdLZTJBV3lQ
bm8vMS9EMDMxQjQ4N0U3MjEwM0YyM0JDNUNDNjYxMjQzMDhFQUQ1NjZEMzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwMzFCNDg3RTcyMTAzRjIz
QkM1Q0M2NjEyNDMwOEVBRDU2NkQzM0YuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JweFUxa0g3V1JwdUdvR0duYUg3ZlVqTTNKb2NheHJzU3I3S2UyQVd5UG5vLzEv
MzIzODMwMzEzYTM4MzAzYTM0MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw
MzIzNzMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEAgEAwDQYJKoZIhvcNAQELBQADggEB
AJVOaquNNk/ORWPaGp2Dmbe63wWAIqi3x3/TysE6aVgJba+kNikQbQd9W7EcNZak
DhoDYVoMrIxGlQLWIooDrEbUwXdeqZV8yhamPo00gdZZyt0DpBmif+/LUx91ot5P
lkJMpCgxyEiAG0TYeaWHoRJfWoMyYg0PqlryeDTV8bOgu9RT9mRhKuf3g84nWJ7F
d8OgbGb5w/mtvr40KhFZ3bWMtC7t7GUJDKZtmTAj0x2+q5xGTu3DNdP9L7EUe0b9
WIxEqb/ne4wEL6RdVlx7aVSkgqzIuxLR4G3ENWmCu5EY1sp1acr2drr74vmM805x
y90RHAoW9VIYB8ZF4+u3J0A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org