Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a353030303a3a2f34302d3430203d3e20323634343931.roa
File:                     323830343a323037343a353030303a3a2f34302d3430203d3e20323634343931.roa (raw, json)
Hash identifier:          5Rplm2vfzFML0xKvMG8V55xNszsjNcy1Hk9nh1gJN3I=
Subject key identifier:   DF:2A:D3:24:9D:2F:BB:4A:08:D2:5A:F2:39:49:66:EE:F0:29:F3:78
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       415B0FE641BFB8407511D1CFCF772C1895AF36
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a353030303a3a2f34302d3430203d3e20323634343931.roa
Signing time:             Tue 10 Oct 2023 03:11:24 +0000
ROA not before:           Tue 10 Oct 2023 03:06:24 +0000
ROA not after:            Tue 08 Oct 2024 03:11:24 +0000
asID:                     264491
IP address blocks:        2804:2074:5000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5b:0f:e6:41:bf:b8:40:75:11:d1:cf:cf:77:2c:18:95:af:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:24 2023 GMT
            Not After : Oct  8 03:11:24 2024 GMT
        Subject: CN=DF2AD3249D2FBB4A08D25AF2394966EEF029F378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:3c:fb:b0:bb:44:58:96:a5:c6:57:f0:58:
                    2e:dc:1d:bd:32:ae:74:99:55:44:b5:25:97:d0:2a:
                    81:8c:f9:91:b6:b3:77:a9:2c:30:bc:78:41:7b:09:
                    f0:65:54:65:81:80:a9:35:b0:0b:30:e3:9a:79:94:
                    b1:15:30:f1:e6:1e:9c:25:30:f5:e3:de:2e:fb:e0:
                    5a:d5:7c:5e:2a:28:31:21:fb:78:4b:ff:f6:1f:81:
                    23:85:d6:39:be:5f:00:c9:5f:36:68:17:b2:43:5e:
                    e4:ee:9a:93:78:19:67:ff:23:02:92:d8:2c:bd:f4:
                    83:48:6e:2c:1f:6f:48:9a:41:aa:b5:cf:ad:57:04:
                    8a:cd:e9:fa:30:ab:5e:d7:5c:5c:eb:9f:4c:27:89:
                    d5:55:fd:ee:bb:9a:24:06:90:42:d7:96:6d:52:fb:
                    33:4a:38:8a:72:2d:93:aa:86:d1:48:55:f0:da:02:
                    b4:c9:a2:df:da:4b:f3:8b:56:40:43:80:53:85:70:
                    c9:f9:c1:3a:d9:12:61:ee:69:de:e1:1c:2d:6e:d2:
                    1e:b8:8a:0c:1a:08:c4:02:9d:52:99:1d:ec:c5:f4:
                    31:b7:46:e1:88:23:c2:ae:06:90:2a:01:93:03:af:
                    a0:b9:35:2b:28:26:16:74:73:6b:a0:2e:69:1c:f7:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:D3:24:9D:2F:BB:4A:08:D2:5A:F2:39:49:66:EE:F0:29:F3:78
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a353030303a3a2f34302d3430203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:88:ab:e4:6d:6e:eb:f4:3d:13:27:fd:83:5b:4d:40:55:80:
         02:f9:5e:43:f0:c9:61:25:2b:ce:2b:1e:d2:f6:c9:7e:b1:2e:
         7f:5e:29:c6:44:4c:fa:3a:37:d7:54:73:89:90:2e:f8:46:81:
         11:f3:79:d6:83:42:da:a3:d5:38:0a:08:96:92:1d:af:93:68:
         a1:64:2c:d8:42:9d:bf:5c:6f:37:86:63:72:31:bb:ff:86:63:
         af:8c:1b:65:66:96:10:8c:71:27:b1:e2:df:eb:94:37:3c:b6:
         92:3f:5a:09:46:e2:1c:d6:10:dd:a3:a1:ac:f4:53:13:d5:7e:
         dd:d1:d3:99:c5:c2:90:04:b4:ca:64:8f:6e:e1:f5:0a:08:d6:
         44:05:c5:01:8f:29:f1:c5:bb:82:35:dc:8e:43:27:8a:15:64:
         cf:8e:84:72:58:65:2a:e9:7b:86:87:0a:01:a9:fa:1a:57:f6:
         d7:c3:1f:a9:a0:69:26:6b:05:f7:17:5d:c9:e0:63:da:cf:84:
         be:4a:3e:7b:bc:d6:07:40:80:2f:60:8f:9d:30:b1:ac:6c:9e:
         81:9d:12:b1:64:c2:21:a6:24:a2:21:63:86:0e:2a:e9:9e:c2:
         07:8a:00:53:3d:bf:30:49:d6:38:03:29:b0:2e:da:c8:6d:9b:
         eb:4e:8a:e0
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgITQVsP5kG/uEB1EdHPz3csGJWvNjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0MENFM0ZDNjAwNkZEOEY0NzJFODA5MTJGOEM1QTkxM0E1
QkJBN0IxMB4XDTIzMTAxMDAzMDYyNFoXDTI0MTAwODAzMTEyNFowMzExMC8GA1UE
AxMoREYyQUQzMjQ5RDJGQkI0QTA4RDI1QUYyMzk0OTY2RUVGMDI5RjM3ODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnMPPuwu0RYlqXGV/BYLtwdvTKu
dJlVRLUll9AqgYz5kbazd6ksMLx4QXsJ8GVUZYGAqTWwCzDjmnmUsRUw8eYenCUw
9ePeLvvgWtV8XiooMSH7eEv/9h+BI4XWOb5fAMlfNmgXskNe5O6ak3gZZ/8jApLY
LL30g0huLB9vSJpBqrXPrVcEis3p+jCrXtdcXOufTCeJ1VX97ruaJAaQQteWbVL7
M0o4inItk6qG0UhV8NoCtMmi39pL84tWQEOAU4VwyfnBOtkSYe5p3uEcLW7SHriK
DBoIxAKdUpkd7MX0MbdG4Ygjwq4GkCoBkwOvoLk1KygmFnRza6AuaRz3DAMCAwEA
AaOCAlswggJXMB0GA1UdDgQWBBTfKtMknS+7SgjSWvI5SWbu8CnzeDAfBgNVHSME
GDAWgBRAzj/GAG/Y9HLoCRL4xakTpbunsTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9CendqOFlqc2Q4SkRtZ1BVR29kbjdqQlBNbmQ3dWQ4UWJSMmVLMTVvbm5I
Zi8wLzQwQ0UzRkM2MDA2RkQ4RjQ3MkU4MDkxMkY4QzVBOTEzQTVCQkE3QjEuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvNDBDRTNGQzYwMDZGRDhGNDcy
RTgwOTEyRjhDNUE5MTNBNUJCQTdCMS5jZXIwgbYGCCsGAQUFBwELBIGpMIGmMIGj
BggrBgEFBQcwC4aBlnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25uSGYvMC8z
MjM4MzAzNDNhMzIzMDM3MzQzYTM1MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2Qz
ZTIwMzIzNjM0MzQzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEG
CCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQgdFAwDQYJKoZIhvcNAQELBQAD
ggEBAFCIq+Rtbuv0PRMn/YNbTUBVgAL5XkPwyWElK84rHtL2yX6xLn9eKcZETPo6
N9dUc4mQLvhGgRHzedaDQtqj1TgKCJaSHa+TaKFkLNhCnb9cbzeGY3Ixu/+GY6+M
G2VmlhCMcSex4t/rlDc8tpI/WglG4hzWEN2joaz0UxPVft3R05nFwpAEtMpkj27h
9QoI1kQFxQGPKfHFu4I13I5DJ4oVZM+OhHJYZSrpe4aHCgGp+hpX9tfDH6mgaSZr
BfcXXcngY9rPhL5KPnu81gdAgC9gj50wsaxsnoGdErFkwiGmJKIhY4YOKumewgeK
AFM9vzBJ1jgDKbAu2shtm+tOiuA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org