Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa
File:                     323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa (raw, json)
Hash identifier:          UN/8Z4J0Nl+5TTWt8bHR8yB28mXnA+77XNRnPdnzZLo=
Subject key identifier:   A9:7A:3A:91:79:CF:DB:E0:2B:3D:4D:AF:E8:AD:07:0F:91:95:C8:CE
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       09D0D67C109CBAC77EBAB9A0140486C276F56A11
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:10 +0000
ROA not before:           Mon 11 Dec 2023 14:00:10 +0000
ROA not after:            Mon 09 Dec 2024 14:05:10 +0000
asID:                     264137
IP address blocks:        2804:2304:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d0:d6:7c:10:9c:ba:c7:7e:ba:b9:a0:14:04:86:c2:76:f5:6a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:10 2023 GMT
            Not After : Dec  9 14:05:10 2024 GMT
        Subject: CN=A97A3A9179CFDBE02B3D4DAFE8AD070F9195C8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:4b:ba:36:09:57:f3:69:79:d3:2f:de:38:
                    38:29:ce:66:5c:a5:48:0e:45:d0:3e:2c:e6:94:bc:
                    eb:aa:6e:f1:57:9f:8e:da:1f:c1:a3:6d:94:9d:f2:
                    0f:b6:bb:0f:a1:ba:23:06:f5:01:4d:c3:16:5c:8b:
                    af:24:60:81:e3:77:98:97:ef:71:15:d6:98:24:62:
                    29:ae:9c:92:47:36:57:ba:b7:13:fd:c1:59:b8:b2:
                    25:a7:a2:b8:0e:13:52:d6:d2:ec:cd:fa:80:f9:44:
                    86:13:95:19:a5:75:7a:c4:40:41:6e:a2:03:05:37:
                    76:35:46:c8:73:63:6e:4c:87:ca:67:77:da:10:2f:
                    2f:94:5d:9b:0d:fe:d9:04:c9:2d:49:a0:96:8c:d0:
                    75:58:23:69:d7:dd:06:c9:8b:36:69:7b:a6:9f:c8:
                    3c:e8:e2:44:a3:0e:5d:a5:90:b2:04:01:69:83:78:
                    85:c5:1c:82:24:7c:a9:e7:d9:cc:9b:de:37:fd:11:
                    43:e7:25:58:bf:3a:3f:ac:58:30:d0:c5:d2:89:f2:
                    7a:19:ac:80:07:8d:51:95:58:75:a1:8a:3c:4e:84:
                    62:e9:df:20:d5:76:da:44:55:f9:5e:19:9f:55:c4:
                    00:59:9c:ed:a7:73:bf:2c:6c:e2:76:12:a6:2b:19:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7A:3A:91:79:CF:DB:E0:2B:3D:4D:AF:E8:AD:07:0F:91:95:C8:CE
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a383030303a3a2f33342d3334203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:36:0d:a0:65:c8:49:49:26:f9:1f:b2:68:da:ec:8f:52:99:
         84:9d:fa:15:9d:c8:6f:a0:ce:4a:03:d1:f3:68:67:0e:d4:94:
         d7:ca:31:f1:60:b6:14:37:d8:81:0f:3e:f3:5f:73:47:82:e1:
         41:ea:0b:2b:57:fd:49:25:b6:92:56:7f:a6:5a:81:ba:d3:0a:
         a5:0d:f7:12:e1:53:8a:fc:5b:bb:e4:f5:f0:f7:e6:99:7b:00:
         cf:1a:a6:3c:24:9e:7b:18:98:05:6b:ee:4f:e8:bc:9c:1b:8e:
         28:18:85:f1:19:e4:ae:5b:6d:b8:53:b0:a8:12:58:91:f8:ac:
         84:f6:6d:44:6e:34:0b:0e:3b:4e:d4:29:42:c7:bf:23:da:cc:
         04:22:c2:13:f2:2b:e5:1c:5b:20:ee:be:f1:52:ca:21:5b:40:
         6f:f6:5d:37:7c:12:72:f4:38:46:10:bc:b2:ea:76:32:af:f4:
         ac:de:33:e2:06:d6:f2:40:05:c2:66:ab:9f:11:8c:cf:a5:1c:
         a8:02:6b:7d:53:d1:75:1f:2f:64:a8:f2:b4:85:2f:5c:aa:8b:
         f3:5c:20:59:41:8e:3a:43:da:d0:0b:69:2c:e0:02:92:bc:f3:
         32:0c:1f:e9:7f:03:93:c7:a5:16:7c:be:91:94:58:e6:90:1f:
         76:e8:0e:78
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCdDWfBCcusd+urmgFASGwnb1ahEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVDNjk4MTNBNDlFN0IyMDUwN0NCNjVBNTA4RjE0RkZC
MTI4MjIwMDAeFw0yMzEyMTExNDAwMTBaFw0yNDEyMDkxNDA1MTBaMDMxMTAvBgNV
BAMTKEE5N0EzQTkxNzlDRkRCRTAyQjNENERBRkU4QUQwNzBGOTE5NUM4Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YEu6NglX82l50y/eODgpzmZc
pUgORdA+LOaUvOuqbvFXn47aH8GjbZSd8g+2uw+huiMG9QFNwxZci68kYIHjd5iX
73EV1pgkYimunJJHNle6txP9wVm4siWnorgOE1LW0uzN+oD5RIYTlRmldXrEQEFu
ogMFN3Y1RshzY25Mh8pnd9oQLy+UXZsN/tkEyS1JoJaM0HVYI2nX3QbJizZpe6af
yDzo4kSjDl2lkLIEAWmDeIXFHIIkfKnn2cyb3jf9EUPnJVi/Oj+sWDDQxdKJ8noZ
rIAHjVGVWHWhijxOhGLp3yDVdtpEVfleGZ9VxABZnO2nc78sbOJ2EqYrGVvHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqXo6kXnP2+ArPU2v6K0HD5GVyM4wHwYDVR0j
BBgwFoAULsaYE6SeeyBQfLZaUI8U/7EoIgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE5RdVhBWFcxN3hSODQxdjlCYzVRbTVGZTZYRkNwQ3hjblllc3FhRm10
WXQvMC8yRUM2OTgxM0E0OUU3QjIwNTA3Q0I2NUE1MDhGMTRGRkIxMjgyMjAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJFQzY5ODEzQTQ5RTdCMjA1
MDdDQjY1QTUwOEYxNEZGQjEyODIyMDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROUXVYQVhXMTd4Ujg0MXY5QmM1UW01RmU2WEZDcEN4Y25ZZXNxYUZtdFl0LzAv
MzIzODMwMzQzYTMyMzMzMDM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEIwSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCHNg2gZchJSSb5H7Jo2uyPUpmEnfoVnchvoM5KA9HzaGcO1JTXyjHxYLYU
N9iBDz7zX3NHguFB6gsrV/1JJbaSVn+mWoG60wqlDfcS4VOK/Fu75PXw9+aZewDP
GqY8JJ57GJgFa+5P6LycG44oGIXxGeSuW224U7CoEliR+KyE9m1EbjQLDjtO1ClC
x78j2swEIsIT8ivlHFsg7r7xUsohW0Bv9l03fBJy9DhGELyy6nYyr/Ss3jPiBtby
QAXCZqufEYzPpRyoAmt9U9F1Hy9kqPK0hS9cqovzXCBZQY46Q9rQC2ks4AKSvPMy
DB/pfwOTx6UWfL6RlFjmkB926A54
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org