Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a32323a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a32323a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          HtuYkjwePKloCr7KgURR3KDvdxW5IkkaLlL22poRkCk=
Subject key identifier:   8D:DD:E1:12:10:65:72:64:D3:E6:87:E8:10:30:43:6A:23:B9:2C:E8
Certificate issuer:       /CN=9DAE8BBC8F98902E3CD7785BF588EF89DA215B20
Certificate serial:       7294C9A54388DEE59CB91F1A693B057491FE1548
Authority key identifier: 9D:AE:8B:BC:8F:98:90:2E:3C:D7:78:5B:F5:88:EF:89:DA:21:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAE8BBC8F98902E3CD7785BF588EF89DA215B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a32323a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Mon 16 May 2022 02:00:00 +0000
ROA not before:           Mon 16 May 2022 01:55:00 +0000
ROA not after:            Mon 15 May 2023 02:00:00 +0000
asID:                     265330
IP address blocks:        2804:2e30:22::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:94:c9:a5:43:88:de:e5:9c:b9:1f:1a:69:3b:05:74:91:fe:15:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAE8BBC8F98902E3CD7785BF588EF89DA215B20
        Validity
            Not Before: May 16 01:55:00 2022 GMT
            Not After : May 15 02:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:d0:f0:9f:43:72:fe:d3:9b:dc:1a:d7:5b:
                    d9:0f:a6:36:c2:39:69:59:42:43:e6:7c:51:e4:b5:
                    be:fc:11:ea:77:fb:84:2a:82:8b:f8:8f:b7:3d:1e:
                    28:18:69:09:cf:08:49:41:9c:8b:f0:cc:1f:a4:63:
                    d9:75:cc:f7:b4:25:92:d7:c7:d1:62:ad:95:5f:92:
                    c9:a1:73:e8:4f:8b:f9:38:1f:0b:42:ba:52:9c:24:
                    40:61:30:a7:3b:9c:7e:ef:b7:98:d3:e5:7e:b8:1c:
                    51:69:a6:30:82:37:27:b4:77:dc:15:cf:a7:12:65:
                    02:6a:a5:9a:5e:05:e5:53:c0:aa:ba:77:4f:01:7a:
                    6e:ac:51:db:b6:61:02:05:79:f1:51:46:c3:ff:6c:
                    e3:1c:f4:3e:f9:10:ab:7c:ff:8f:46:31:0f:6b:5e:
                    f5:b9:41:cb:42:56:8e:51:a8:99:60:cc:02:6f:b7:
                    d9:18:3a:b1:40:61:2c:2e:4b:4f:25:c0:1c:e6:7c:
                    92:f8:7e:fe:23:66:82:e3:b3:e5:3f:71:dc:8e:66:
                    85:13:b5:a9:36:d1:97:4f:bf:bd:83:80:b4:53:95:
                    e2:58:b5:0e:e4:27:d2:b1:2f:16:de:52:38:94:c0:
                    ca:45:93:1f:a6:8a:97:89:a2:0c:48:3d:58:29:40:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:E1:12:10:65:72:64:D3:E6:87:E8:10:30:43:6A:23:B9:2C:E8
            X509v3 Authority Key Identifier:
                keyid:9D:AE:8B:BC:8F:98:90:2E:3C:D7:78:5B:F5:88:EF:89:DA:21:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/9DAE8BBC8F98902E3CD7785BF588EF89DA215B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAE8BBC8F98902E3CD7785BF588EF89DA215B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a32323a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:fe:79:33:74:93:59:f6:08:04:57:42:68:fb:c8:b4:e1:
         19:2e:ad:f3:d9:b0:73:c2:c6:30:17:17:27:e0:4f:1f:f0:0c:
         dd:02:0a:8c:3e:64:9a:dd:08:76:63:b5:37:b2:dd:32:e3:56:
         6a:71:04:79:31:7b:7a:e4:14:a6:c9:47:30:a9:a3:29:2e:73:
         a8:24:fe:b0:30:5b:c9:d8:5e:7d:6e:ff:56:a9:b1:db:b0:a1:
         aa:7b:44:0f:0d:92:2e:a1:f1:ab:6a:93:92:f7:45:87:a3:08:
         52:f9:fa:e1:bd:21:03:a7:7e:e4:e3:91:d1:b8:16:29:56:8e:
         9b:14:39:3e:e3:2e:2a:a3:21:8f:dd:e7:a0:a9:24:e2:9a:ce:
         f8:74:b4:63:eb:92:5f:90:77:b4:52:03:fe:58:ff:22:14:6e:
         c8:85:08:0c:0f:47:1f:b6:f5:c6:aa:3e:c4:a8:de:5b:18:2e:
         2e:16:46:bc:3a:e0:a5:3f:60:3d:25:fa:19:0d:34:da:9c:9b:
         2a:48:98:7a:9e:40:1a:c9:7e:7e:6a:72:91:47:51:f1:c7:66:
         4a:e6:c0:7d:12:44:c0:b6:2d:72:63:1d:2a:7f:f6:e9:95:d2:
         e5:57:64:1b:22:a6:e1:7d:c0:6c:b1:a0:29:19:9f:5e:25:f3:
         14:8e:3e:7e
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUcpTJpUOI3uWcuR8aaTsFdJH+FUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBRThCQkM4Rjk4OTAyRTNDRDc3ODVCRjU4OEVGODlE
QTIxNUIyMDAeFw0yMjA1MTYwMTU1MDBaFw0yMzA1MTUwMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREVFNEQwRjA5RjQzNzJGRUQz
OUJEQzFBRDc1QkQ5MEZBNjM2QzIzOTY5NTk0MjQzRTY3QzUxRTRCNUJFRkMxMUVB
NzdGQjg0MkE4MjhCRjg4RkI3M0QxRTI4MTg2OTA5Q0YwODQ5NDE5QzhCRjBDQzFG
QTQ2M0Q5NzVDQ0Y3QjQyNTkyRDdDN0QxNjJBRDk1NUY5MkM5QTE3M0U4NEY4QkY5
MzgxRjBCNDJCQTUyOUMyNDQwNjEzMEE3M0I5QzdFRUZCNzk4RDNFNTdFQjgxQzUx
NjlBNjMwODIzNzI3QjQ3N0RDMTVDRkE3MTI2NTAyNkFBNTlBNUUwNUU1NTNDMEFB
QkE3NzRGMDE3QTZFQUM1MURCQjY2MTAyMDU3OUYxNTE0NkMzRkY2Q0UzMUNGNDNF
RjkxMEFCN0NGRjhGNDYzMTBGNkI1RUY1Qjk0MUNCNDI1NjhFNTFBODk5NjBDQzAy
NkZCN0Q5MTgzQUIxNDA2MTJDMkU0QjRGMjVDMDFDRTY3QzkyRjg3RUZFMjM2Njgy
RTNCM0U1M0Y3MURDOEU2Njg1MTNCNUE5MzZEMTk3NEZCRkJEODM4MEI0NTM5NUUy
NThCNTBFRTQyN0QyQjEyRjE2REU1MjM4OTRDMENBNDU5MzFGQTY4QTk3ODlBMjBD
NDgzRDU4Mjk0MDVFMTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3uTQ8J9Dcv7Tm9wa11vZD6Y2wjlpWUJD5nxR5LW+/BHqd/uEKoKL
+I+3PR4oGGkJzwhJQZyL8MwfpGPZdcz3tCWS18fRYq2VX5LJoXPoT4v5OB8LQrpS
nCRAYTCnO5x+77eY0+V+uBxRaaYwgjcntHfcFc+nEmUCaqWaXgXlU8CqundPAXpu
rFHbtmECBXnxUUbD/2zjHPQ++RCrfP+PRjEPa171uUHLQlaOUaiZYMwCb7fZGDqx
QGEsLktPJcAc5nyS+H7+I2aC47PlP3HcjmaFE7WpNtGXT7+9g4C0U5XiWLUO5CfS
sS8W3lI4lMDKRZMfpoqXiaIMSD1YKUBeFwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FI3d4RIQZXJk0+aH6BAwQ2ojuSzoMB8GA1UdIwQYMBaAFJ2ui7yPmJAuPNd4W/WI
74naIVsgMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NOc0oycWJaaVR6ZUw1
R2RMQ0JmQVh5SHBzUkJhamJ5TjlvTFFhaUVuSENaLzAvOURBRThCQkM4Rjk4OTAy
RTNDRDc3ODVCRjU4OEVGODlEQTIxNUIyMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85REFFOEJCQzhGOTg5MDJFM0NENzc4NUJGNTg4RUY4OURBMjE1
QjIwLmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DTnNKMnFiWmlUemVMNUdkTENC
ZkFYeUhwc1JCYWpieU45b0xRYWlFbkhDWi8wLzMyMzgzMDM0M2EzMjY1MzMzMDNh
MzIzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTMzMzMzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACgELjAAIjANBgkqhkiG9w0BAQsFAAOCAQEAOrL+eTN0k1n2CARXQmj7yLTh
GS6t89mwc8LGMBcXJ+BPH/AM3QIKjD5kmt0IdmO1N7LdMuNWanEEeTF7euQUpslH
MKmjKS5zqCT+sDBbydhefW7/Vqmx27ChqntEDw2SLqHxq2qTkvdFh6MIUvn64b0h
A6d+5OOR0bgWKVaOmxQ5PuMuKqMhj93noKkk4prO+HS0Y+uSX5B3tFID/lj/IhRu
yIUIDA9HH7b1xqo+xKjeWxguLhZGvDrgpT9gPSX6GQ002pybKkiYep5AGsl+fmpy
kUdR8cdmSubAfRJEwLYtcmMdKn/26ZXS5VdkGyKm4X3AbLGgKRmfXiXzFI4+fg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org