Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323031303a3a2f34342d3434203d3e20323639333033.roa
File:                     323830343a363238633a323031303a3a2f34342d3434203d3e20323639333033.roa (raw, json)
Hash identifier:          bd9w03KE8jmpgK+0fgHNJnZsDQYnry7k1ySPAEqnG+4=
Subject key identifier:   5C:68:D1:FB:12:07:C2:C6:E9:95:73:CF:FD:39:5B:95:93:9F:97:61
Certificate issuer:       /CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
Certificate serial:       1685B596611978924F9929620EB03735C5E21A53
Authority key identifier: A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323031303a3a2f34342d3434203d3e20323639333033.roa
Signing time:             Sat 16 Mar 2024 20:31:53 +0000
ROA not before:           Sat 16 Mar 2024 20:26:53 +0000
ROA not after:            Sat 15 Mar 2025 20:31:53 +0000
asID:                     269303
IP address blocks:        2804:628c:2010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:85:b5:96:61:19:78:92:4f:99:29:62:0e:b0:37:35:c5:e2:1a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
        Validity
            Not Before: Mar 16 20:26:53 2024 GMT
            Not After : Mar 15 20:31:53 2025 GMT
        Subject: CN=5C68D1FB1207C2C6E99573CFFD395B95939F9761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:51:71:70:89:66:e3:cc:d2:66:f0:9c:72:
                    9f:85:4b:14:a2:a6:5a:91:fc:f7:d2:42:c1:03:f8:
                    e3:ea:5a:64:4f:29:57:cc:b9:c0:6b:2d:ba:36:8a:
                    e1:d5:75:a7:68:93:2a:b6:dc:43:7d:30:d2:94:4f:
                    64:1c:3c:bd:a9:d9:ef:5f:56:26:96:4b:c6:0e:3d:
                    16:9a:7f:13:d0:dc:01:43:22:cf:50:9a:73:da:6c:
                    2b:73:55:ab:81:2c:27:cb:69:3d:90:a6:4b:4d:0e:
                    46:a4:ba:37:ff:35:73:41:d8:3c:cf:30:8d:0f:72:
                    47:d5:50:89:e3:77:b6:fe:76:e2:f5:d9:83:48:4e:
                    11:d9:41:19:98:b0:71:ea:b4:69:f2:42:78:a9:e6:
                    bd:2a:d8:99:0f:de:48:00:8d:64:9b:0e:36:21:df:
                    33:0f:44:5d:42:a0:58:97:ef:5c:c2:eb:83:eb:d9:
                    b1:3f:bc:38:47:57:70:2c:85:07:65:9b:e6:32:98:
                    0d:0e:63:0d:e2:14:b1:be:cd:80:99:df:e6:9e:24:
                    38:74:03:2e:63:dc:bd:6d:08:67:dc:a5:f9:fc:03:
                    05:3b:13:ee:e1:77:bb:e2:61:97:1f:f3:8f:18:e6:
                    2a:ae:ca:a6:58:08:67:81:4f:04:a7:6c:de:c3:c6:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:D1:FB:12:07:C2:C6:E9:95:73:CF:FD:39:5B:95:93:9F:97:61
            X509v3 Authority Key Identifier:
                keyid:A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a323031303a3a2f34342d3434203d3e20323639333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:628c:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         a9:68:08:37:e6:b1:7b:48:10:6a:b9:1c:23:ba:ff:c7:bb:8e:
         c6:a8:46:be:3f:81:5f:16:4e:f9:1e:c2:38:61:27:17:68:86:
         1d:4c:ae:79:60:4b:30:70:38:89:9e:9f:49:a5:dc:b3:e0:ba:
         9a:99:ee:0e:07:21:a3:ca:7f:35:11:44:ad:e0:d4:86:04:59:
         f4:ce:32:a4:2e:bb:cd:ff:10:b2:43:d3:63:f5:eb:b7:16:b1:
         0b:69:46:3d:7a:1b:c6:9a:71:2b:b6:95:25:63:62:f5:76:60:
         1b:bd:3d:61:11:2c:27:8e:82:8e:d0:73:85:fd:54:1e:6e:12:
         b2:ad:46:2e:52:d8:f4:53:97:ee:62:41:ea:e0:36:a8:17:38:
         c1:b6:86:87:07:c8:ea:38:ea:0e:09:49:dc:f3:32:30:cc:3e:
         5d:91:ce:ec:76:b4:eb:4f:e4:12:05:17:a7:d4:5b:9c:54:ea:
         d6:d2:ef:92:81:d8:f4:1f:f6:3c:7c:30:d4:0a:ea:83:74:58:
         18:f5:63:4e:0b:0e:16:bb:ce:70:16:7f:53:1e:26:0c:17:06:
         47:a6:39:46:93:d7:0e:83:d1:7d:41:88:ce:2c:77:3c:65:b0:
         3c:af:c7:bf:bf:68:30:e9:0f:8f:42:bd:67:3e:bf:93:db:a2:
         5c:be:a1:be
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUFoW1lmEZeJJPmSliDrA3NcXiGlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3RTk0NjM3NkJCMUZFNjMzRTEzREY5MkJFRjYwQkJE
RjhBNjQzODAeFw0yNDAzMTYyMDI2NTNaFw0yNTAzMTUyMDMxNTNaMDMxMTAvBgNV
BAMTKDVDNjhEMUZCMTIwN0MyQzZFOTk1NzNDRkZEMzk1Qjk1OTM5Rjk3NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVoFFxcIlm48zSZvCccp+FSxSi
plqR/PfSQsED+OPqWmRPKVfMucBrLbo2iuHVdadokyq23EN9MNKUT2QcPL2p2e9f
ViaWS8YOPRaafxPQ3AFDIs9QmnPabCtzVauBLCfLaT2QpktNDkakujf/NXNB2DzP
MI0PckfVUInjd7b+duL12YNIThHZQRmYsHHqtGnyQnip5r0q2JkP3kgAjWSbDjYh
3zMPRF1CoFiX71zC64Pr2bE/vDhHV3AshQdlm+YymA0OYw3iFLG+zYCZ3+aeJDh0
Ay5j3L1tCGfcpfn8AwU7E+7hd7viYZcf848Y5iquyqZYCGeBTwSnbN7DxsDLAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUXGjR+xIHwsbplXPP/TlblZOfl2EwHwYDVR0j
BBgwFoAUpH6UY3a7H+Yz4T35K+9gu9+KZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnNERUdlbVpmYVd0dXlhUXhiN0pVVnFLNXVMc05KcEZTSFAzZWp3VUVj
NFIvMC9BNDdFOTQ2Mzc2QkIxRkU2MzNFMTNERjkyQkVGNjBCQkRGOEE2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0N0U5NDYzNzZCQjFGRTYz
M0UxM0RGOTJCRUY2MEJCREY4QTY0MzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JzREVHZW1aZmFXdHV5YVF4YjdKVVZxSzV1THNOSnBGU0hQM2Vqd1VFYzRSLzAv
MzIzODMwMzQzYTM2MzIzODYzM2EzMjMwMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzOTMzMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEYowgEDANBgkqhkiG9w0BAQsF
AAOCAQEAqWgIN+axe0gQarkcI7r/x7uOxqhGvj+BXxZO+R7COGEnF2iGHUyueWBL
MHA4iZ6fSaXcs+C6mpnuDgcho8p/NRFEreDUhgRZ9M4ypC67zf8QskPTY/Xrtxax
C2lGPXobxppxK7aVJWNi9XZgG709YREsJ46CjtBzhf1UHm4Ssq1GLlLY9FOX7mJB
6uA2qBc4wbaGhwfI6jjqDglJ3PMyMMw+XZHO7Ha060/kEgUXp9RbnFTq1tLvkoHY
9B/2PHww1Arqg3RYGPVjTgsOFrvOcBZ/Ux4mDBcGR6Y5RpPXDoPRfUGIzix3PGWw
PK/Hv79oMOkPj0K9Zz6/k9uiXL6hvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org