Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a343030303a3a2f33342d3334203d3e20323633363235.roa
File:                     323830343a313033383a343030303a3a2f33342d3334203d3e20323633363235.roa (raw, json)
Hash identifier:          JWtN+QmZ+PxTpdhbC3w9r/Advk3hX/FKrjPyXZeqjNo=
Subject key identifier:   49:A9:A4:46:DC:DB:89:3E:64:94:88:FB:D7:47:0C:08:C6:BD:5A:93
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       52C94717ACA712703E7EA2A75F11835928FD1AA7
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a343030303a3a2f33342d3334203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:29 +0000
ROA not before:           Tue 05 Dec 2023 16:27:29 +0000
ROA not after:            Tue 03 Dec 2024 16:32:29 +0000
asID:                     263625
IP address blocks:        2804:1038:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c9:47:17:ac:a7:12:70:3e:7e:a2:a7:5f:11:83:59:28:fd:1a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:29 2023 GMT
            Not After : Dec  3 16:32:29 2024 GMT
        Subject: CN=49A9A446DCDB893E649488FBD7470C08C6BD5A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:fc:f0:f3:68:23:a6:08:ac:04:02:ce:95:
                    7a:82:2a:a1:8a:80:f7:4c:2b:6d:02:b1:14:c3:bc:
                    8e:f0:55:3c:90:4e:c8:66:ee:41:49:a0:d2:ca:d3:
                    b9:ca:4f:e5:83:fe:61:e9:d1:85:74:c6:9a:b0:95:
                    af:5a:0d:b6:e8:ba:5e:2a:35:0c:e6:3e:b3:2e:a3:
                    80:47:c5:73:12:bb:b2:0e:32:e9:a8:f5:a6:3c:27:
                    7f:e0:d0:84:c0:f9:20:a8:8e:29:7a:28:d8:8b:dc:
                    87:89:1e:af:82:ec:66:79:39:3d:34:17:1b:31:1b:
                    e3:38:7c:1d:9d:51:f6:9d:3e:e1:40:3e:a9:d0:e8:
                    5a:a2:c1:ea:54:51:ad:f6:66:80:1f:0a:db:1b:06:
                    62:fc:6e:5f:f4:96:c4:0a:28:f8:24:d8:f7:e0:1f:
                    67:b6:4b:99:73:fa:df:12:2a:83:c0:0d:42:5b:09:
                    73:79:40:28:7c:af:db:53:f3:da:df:93:08:bd:ec:
                    04:ac:2b:51:de:5e:aa:dc:4a:1d:af:99:71:32:be:
                    b7:ec:26:7b:05:a9:33:67:d6:19:03:78:cc:82:cf:
                    ba:e7:36:db:32:19:91:43:a4:1d:b2:b6:17:00:3c:
                    fe:54:bf:16:ec:f9:4f:55:96:36:7c:cb:d1:60:7c:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A9:A4:46:DC:DB:89:3E:64:94:88:FB:D7:47:0C:08:C6:BD:5A:93
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/323830343a313033383a343030303a3a2f33342d3334203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1038:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:bb:c0:f7:1f:b5:bd:98:ee:9f:f1:23:35:a3:01:f7:7e:42:
         7d:28:67:3f:0b:a9:f2:7b:f0:a7:d0:dd:59:a8:2e:11:0d:67:
         b7:ff:e7:87:f1:b9:64:66:e2:e1:2e:08:0e:1f:d0:11:11:6e:
         5f:fc:2d:24:40:97:94:e3:de:66:b1:88:3e:0a:83:30:05:a0:
         47:f6:93:b7:9d:be:ca:94:64:28:f6:c7:a0:13:b2:4f:79:80:
         e2:80:bb:a5:1d:1d:29:71:06:0f:41:86:37:41:b6:50:29:8c:
         93:83:a6:5d:d7:ff:4b:4c:a6:53:c5:57:21:7a:4f:4e:c8:e6:
         85:20:8e:f5:90:98:04:51:61:60:a4:4e:c9:3c:1e:ec:8f:11:
         ec:ee:a9:6d:4e:58:56:c3:ae:0a:7b:c8:3c:54:ac:a4:a0:98:
         a5:d5:e3:91:e7:b3:47:dd:d0:4e:ab:21:84:b5:fc:13:b8:bb:
         82:fd:fc:93:62:d4:cd:69:cf:43:05:b0:63:c3:b0:a0:ca:02:
         25:9d:66:be:00:d0:fd:78:13:d9:cd:75:11:17:68:97:e4:8e:
         aa:58:0f:d5:1e:82:a5:ec:1f:ef:65:85:79:93:6b:b0:fd:18:
         e6:7f:20:20:f4:d3:9d:b2:3a:2e:35:04:cb:78:04:78:e2:39:
         bb:d4:16:53
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUslHF6ynEnA+fqKnXxGDWSj9GqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI4OEEzQUUwMDEwMjAzNkM4RUM5MUIyMjg1NEYxREU0
MTBENTlDMjAeFw0yMzEyMDUxNjI3MjlaFw0yNDEyMDMxNjMyMjlaMDMxMTAvBgNV
BAMTKDQ5QTlBNDQ2RENEQjg5M0U2NDk0ODhGQkQ3NDcwQzA4QzZCRDVBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeO/zw82gjpgisBALOlXqCKqGK
gPdMK20CsRTDvI7wVTyQTshm7kFJoNLK07nKT+WD/mHp0YV0xpqwla9aDbboul4q
NQzmPrMuo4BHxXMSu7IOMumo9aY8J3/g0ITA+SCojil6KNiL3IeJHq+C7GZ5OT00
FxsxG+M4fB2dUfadPuFAPqnQ6FqiwepUUa32ZoAfCtsbBmL8bl/0lsQKKPgk2Pfg
H2e2S5lz+t8SKoPADUJbCXN5QCh8r9tT89rfkwi97ASsK1HeXqrcSh2vmXEyvrfs
JnsFqTNn1hkDeMyCz7rnNtsyGZFDpB2ythcAPP5Uvxbs+U9VljZ8y9FgfLTnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSamkRtzbiT5klIj710cMCMa9WpMwHwYDVR0j
BBgwFoAU+4ijrgAQIDbI7JGyKFTx3kENWcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05tb3ozeGlwSHprU3F2U01xa2RXMlM5U2R6V2Q3bldBNjJFTWlRRVBZ
ZkgvMC9GQjg4QTNBRTAwMTAyMDM2QzhFQzkxQjIyODU0RjFERTQxMEQ1OUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCODhBM0FFMDAxMDIwMzZD
OEVDOTFCMjI4NTRGMURFNDEwRDU5QzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NObW96M3hpcEh6a1NxdlNNcWtkVzJTOVNkeldkN25XQTYyRU1pUUVQWWZILzAv
MzIzODMwMzQzYTMxMzAzMzM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEDhAMA0GCSqGSIb3DQEBCwUA
A4IBAQBEu8D3H7W9mO6f8SM1owH3fkJ9KGc/C6nye/Cn0N1ZqC4RDWe3/+eH8blk
ZuLhLggOH9AREW5f/C0kQJeU495msYg+CoMwBaBH9pO3nb7KlGQo9segE7JPeYDi
gLulHR0pcQYPQYY3QbZQKYyTg6Zd1/9LTKZTxVchek9OyOaFII71kJgEUWFgpE7J
PB7sjxHs7qltTlhWw64Ke8g8VKykoJil1eOR57NH3dBOqyGEtfwTuLuC/fyTYtTN
ac9DBbBjw7CgygIlnWa+AND9eBPZzXURF2iX5I6qWA/VHoKl7B/vZYV5k2uw/Rjm
fyAg9NOdsjouNQTLeAR44jm71BZT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org