Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a3a2f33382d3338203d3e20323636393839.roa
File:                     323830343a343637303a3a2f33382d3338203d3e20323636393839.roa (raw, json)
Hash identifier:          CzDNkxMiQ311pf+EGzU1/NvFZg/JDyKoo1SBWN3wS4g=
Subject key identifier:   88:CE:C1:E2:79:61:96:39:44:8A:E8:08:36:D7:5C:7F:E6:A6:78:69
Certificate issuer:       /CN=11E1368454EE4321A3D47283E551C91FAE044C9F
Certificate serial:       14141FE303A1318B3399E0BBE36BC9A88B53B7B2
Authority key identifier: 11:E1:36:84:54:EE:43:21:A3:D4:72:83:E5:51:C9:1F:AE:04:4C:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E1368454EE4321A3D47283E551C91FAE044C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a3a2f33382d3338203d3e20323636393839.roa
Signing time:             Tue 02 May 2023 15:48:28 +0000
ROA not before:           Tue 02 May 2023 15:43:28 +0000
ROA not after:            Tue 30 Apr 2024 15:48:28 +0000
asID:                     266989
IP address blocks:        2804:4670::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:14:1f:e3:03:a1:31:8b:33:99:e0:bb:e3:6b:c9:a8:8b:53:b7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1368454EE4321A3D47283E551C91FAE044C9F
        Validity
            Not Before: May  2 15:43:28 2023 GMT
            Not After : Apr 30 15:48:28 2024 GMT
        Subject: CN=88CEC1E279619639448AE80836D75C7FE6A67869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:7a:1d:c9:6f:96:87:59:e7:8a:78:d6:91:82:
                    c2:67:53:98:24:5e:af:c0:4e:4a:d9:f3:bf:27:76:
                    e1:a6:00:de:ac:c6:79:1e:bf:24:6e:1d:c9:d4:ff:
                    df:23:d9:f0:f5:f0:f2:04:d9:c1:76:8a:c3:fe:fa:
                    89:96:b0:fb:dd:0a:17:b7:de:1d:49:43:6b:67:54:
                    69:12:ee:38:43:3e:73:7d:b2:d9:8a:4c:da:c3:8c:
                    90:89:cc:6b:17:f6:ec:42:4a:fc:62:df:01:7e:af:
                    d7:05:80:ce:7b:4b:53:23:0e:b7:02:02:36:ce:05:
                    5b:26:14:59:e5:de:35:c6:6f:7c:d8:63:c9:6c:e0:
                    55:c3:e1:4b:8d:49:44:0a:4f:97:21:21:c4:b0:5f:
                    ec:00:88:90:39:cd:15:6e:fe:25:03:65:38:df:b7:
                    e4:d0:e4:04:6b:1d:7d:de:03:57:b8:1b:4d:b2:76:
                    fe:1d:e0:47:1c:70:ae:db:5c:cd:84:81:e2:88:ad:
                    1f:ba:4f:c0:21:67:ef:d6:d6:49:ab:66:a5:b2:54:
                    b7:a0:62:ae:ad:08:3a:47:2e:75:74:4f:98:5d:92:
                    b8:35:13:13:8e:e1:2e:05:92:ff:c7:d4:a1:ad:ba:
                    d4:02:7f:0f:a0:82:7d:4c:dd:e1:b2:76:1d:da:2a:
                    46:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CE:C1:E2:79:61:96:39:44:8A:E8:08:36:D7:5C:7F:E6:A6:78:69
            X509v3 Authority Key Identifier:
                keyid:11:E1:36:84:54:EE:43:21:A3:D4:72:83:E5:51:C9:1F:AE:04:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/11E1368454EE4321A3D47283E551C91FAE044C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E1368454EE4321A3D47283E551C91FAE044C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/323830343a343637303a3a2f33382d3338203d3e20323636393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4670::/38

    Signature Algorithm: sha256WithRSAEncryption
         8d:a0:38:0d:8e:36:0d:30:4e:ae:9a:4d:5c:1b:b4:a1:6f:47:
         44:dd:22:a2:02:bb:69:95:ae:2e:98:b5:ec:d9:f1:5b:d6:c0:
         8b:95:a4:9a:7e:23:10:8b:1e:ce:64:b8:a9:a6:ba:7b:31:45:
         ba:b1:27:ae:ab:1e:9f:9e:f9:0e:3d:03:7d:a0:65:f3:6b:46:
         8e:ff:2a:11:89:d6:53:7e:33:38:24:f3:e9:b5:bb:8a:8e:92:
         7c:18:9c:af:10:8c:96:4a:8f:85:2d:37:29:d4:b2:7d:cd:0c:
         69:d2:b5:63:b7:54:4c:0a:35:55:0a:60:46:23:92:da:b0:f8:
         ae:a3:c7:a0:0a:a6:9a:a5:d9:9f:60:3e:88:f5:1f:58:89:df:
         36:89:46:c9:81:6f:00:e2:5d:5f:3d:a1:16:bb:60:1a:6f:ba:
         70:20:ea:cf:b0:55:b2:46:ce:28:44:a2:08:7a:76:b6:85:0c:
         7b:a7:df:c8:d2:0f:da:13:a0:88:25:9c:a5:f1:a0:68:2a:6a:
         95:04:ab:c9:75:7a:54:3d:58:0c:52:ef:3d:a2:61:82:b3:26:
         d1:eb:e3:a2:7e:de:a0:74:aa:aa:d3:3e:22:8a:f0:90:d8:82:
         90:61:51:b2:26:30:f3:da:1d:19:4e:db:13:84:75:5f:c6:41:
         95:c9:95:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFBQf4wOhMYszmeC742vJqItTt7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFFMTM2ODQ1NEVFNDMyMUEzRDQ3MjgzRTU1MUM5MUZB
RTA0NEM5RjAeFw0yMzA1MDIxNTQzMjhaFw0yNDA0MzAxNTQ4MjhaMDMxMTAvBgNV
BAMTKDg4Q0VDMUUyNzk2MTk2Mzk0NDhBRTgwODM2RDc1QzdGRTZBNjc4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7eh3Jb5aHWeeKeNaRgsJnU5gk
Xq/ATkrZ878nduGmAN6sxnkevyRuHcnU/98j2fD18PIE2cF2isP++omWsPvdChe3
3h1JQ2tnVGkS7jhDPnN9stmKTNrDjJCJzGsX9uxCSvxi3wF+r9cFgM57S1MjDrcC
AjbOBVsmFFnl3jXGb3zYY8ls4FXD4UuNSUQKT5chIcSwX+wAiJA5zRVu/iUDZTjf
t+TQ5ARrHX3eA1e4G02ydv4d4EcccK7bXM2EgeKIrR+6T8AhZ+/W1kmrZqWyVLeg
Yq6tCDpHLnV0T5hdkrg1ExOO4S4Fkv/H1KGtutQCfw+ggn1M3eGydh3aKkYDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiM7B4nlhljlEiugINtdcf+ameGkwHwYDVR0j
BBgwFoAUEeE2hFTuQyGj1HKD5VHJH64ETJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRoYllLeXlNUlMxMlJVUlRHYkxBZ1pmcW1pblJuU1drZHlLcTZrb3dR
dmEvMC8xMUUxMzY4NDU0RUU0MzIxQTNENDcyODNFNTUxQzkxRkFFMDQ0QzlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExRTEzNjg0NTRFRTQzMjFB
M0Q0NzI4M0U1NTFDOTFGQUUwNDRDOUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0aGJZS3l5TVJTMTJSVVJUR2JMQWdaZnFtaW5SblNXa2R5S3E2a293UXZhLzAv
MzIzODMwMzQzYTM0MzYzNzMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzNjM2
MzkzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYCKARGcAAwDQYJKoZIhvcNAQELBQADggEBAI2gOA2O
Ng0wTq6aTVwbtKFvR0TdIqICu2mVri6YtezZ8VvWwIuVpJp+IxCLHs5kuKmmunsx
RbqxJ66rHp+e+Q49A32gZfNrRo7/KhGJ1lN+Mzgk8+m1u4qOknwYnK8QjJZKj4Ut
NynUsn3NDGnStWO3VEwKNVUKYEYjktqw+K6jx6AKppql2Z9gPoj1H1iJ3zaJRsmB
bwDiXV89oRa7YBpvunAg6s+wVbJGzihEogh6draFDHun38jSD9oToIglnKXxoGgq
apUEq8l1elQ9WAxS7z2iYYKzJtHr46J+3qB0qqrTPiKK8JDYgpBhUbImMPPaHRlO
2xOEdV/GQZXJlZQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org