Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a3a2f33322d3332203d3e20323638323438.roa
File:                     323830343a346533633a3a2f33322d3332203d3e20323638323438.roa (raw, json)
Hash identifier:          0Xc+wX0CUAuKDZStdc1quZd2dqe3tNm2zR8Lm8HaLm0=
Subject key identifier:   2F:4F:DB:F8:AF:8C:0C:D1:C3:01:7A:D2:61:B6:48:FC:48:E4:A9:A0
Certificate issuer:       /CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
Certificate serial:       23B23CAA1CD11ABF6CAF45B6632B6B87C4D22C81
Authority key identifier: E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a3a2f33322d3332203d3e20323638323438.roa
Signing time:             Thu 04 Apr 2024 07:14:14 +0000
ROA not before:           Thu 04 Apr 2024 07:09:14 +0000
ROA not after:            Thu 03 Apr 2025 07:14:14 +0000
asID:                     268248
IP address blocks:        2804:4e3c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:3c:aa:1c:d1:1a:bf:6c:af:45:b6:63:2b:6b:87:c4:d2:2c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73
        Validity
            Not Before: Apr  4 07:09:14 2024 GMT
            Not After : Apr  3 07:14:14 2025 GMT
        Subject: CN=2F4FDBF8AF8C0CD1C3017AD261B648FC48E4A9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:39:c0:39:72:33:2f:e6:42:47:d4:d2:58:
                    16:60:2d:ed:73:0d:4e:a5:c7:66:0e:4d:86:e5:21:
                    f1:0c:33:f0:ca:2c:f7:73:2e:d2:21:7a:14:e5:9e:
                    f5:b9:3e:0f:81:38:e4:a7:17:2f:43:bf:57:e3:2e:
                    70:ed:df:e0:cf:4d:f3:7c:91:76:b0:47:85:35:36:
                    9c:96:35:8b:28:84:53:79:36:a6:f3:1d:6f:13:6f:
                    1c:2e:4a:af:e0:e0:51:63:f5:44:b0:72:7f:b2:ff:
                    b0:79:46:a9:1f:f8:f6:39:0e:6e:08:2b:6b:94:1e:
                    6c:27:32:85:37:ad:37:c3:96:78:ff:da:e1:71:4e:
                    71:68:cd:c0:8e:7a:21:1b:54:e9:55:7b:7e:a4:1e:
                    e1:b8:9f:c9:a4:31:0a:85:5f:df:db:68:a5:f3:65:
                    66:e3:78:c1:da:e0:d3:11:6c:0f:ae:9a:97:d4:63:
                    ab:dd:cf:7d:99:62:02:d9:df:b8:4b:8d:ce:03:c9:
                    ff:f4:a1:b1:94:c9:2a:92:e2:7d:1b:15:89:43:f7:
                    97:ed:7b:05:c4:24:c2:5d:b2:f9:d5:bf:b4:c0:89:
                    02:9d:77:42:ea:ef:a8:87:6d:bc:9c:a8:a8:cf:c7:
                    4c:a7:eb:4c:dc:d7:39:3a:86:be:8a:13:36:ec:d3:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4F:DB:F8:AF:8C:0C:D1:C3:01:7A:D2:61:B6:48:FC:48:E4:A9:A0
            X509v3 Authority Key Identifier:
                keyid:E8:A5:A4:81:2F:C2:BE:78:2D:28:3B:76:19:D7:FD:A2:A7:DD:AB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8A5A4812FC2BE782D283B7619D7FDA2A7DDAB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/2/323830343a346533633a3a2f33322d3332203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:1f:0f:c4:7e:5f:07:14:f0:7b:e3:b3:ea:22:56:ac:c5:28:
         8f:27:d3:bd:86:7d:bb:79:14:6c:33:c8:4a:44:92:b2:f2:06:
         7b:19:9a:57:84:80:2b:f6:62:57:eb:4d:64:ab:2a:94:b5:d8:
         8e:84:e1:a6:c9:84:35:8f:ed:7d:01:d4:b5:42:c7:fb:2c:3b:
         3e:c5:71:4d:0e:b5:59:4f:5d:10:c9:ab:fc:3f:c9:62:83:5c:
         b3:bc:c2:b4:2d:36:9f:6a:56:fb:77:77:87:52:6c:ee:79:67:
         e2:40:08:6e:cb:b6:cc:db:8d:83:89:08:4f:45:ec:3d:f3:4d:
         5d:37:70:76:c6:3f:83:7f:f8:1e:1f:22:50:37:0b:76:21:da:
         77:55:c1:fc:4f:da:b1:d0:29:14:2b:67:32:4a:f6:b4:9e:2c:
         20:3b:6f:e7:17:b8:37:41:b6:80:d3:ab:d1:aa:40:99:df:03:
         ed:fe:65:53:9c:1a:ae:6b:cd:5d:87:8e:0c:33:0b:4c:eb:a1:
         da:ce:1d:b8:1d:f1:df:49:d0:84:3e:82:9c:e9:83:c7:33:e2:
         62:f0:6b:ae:2e:e1:0b:13:b9:7c:cd:a4:2c:31:9a:03:22:42:
         4a:19:8f:7c:a8:c4:c4:71:26:bc:4d:bc:5a:47:42:ed:ca:4d:
         86:74:58:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUI7I8qhzRGr9sr0W2Yytrh8TSLIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThBNUE0ODEyRkMyQkU3ODJEMjgzQjc2MTlEN0ZEQTJB
N0REQUI3MzAeFw0yNDA0MDQwNzA5MTRaFw0yNTA0MDMwNzE0MTRaMDMxMTAvBgNV
BAMTKDJGNEZEQkY4QUY4QzBDRDFDMzAxN0FEMjYxQjY0OEZDNDhFNEE5QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJTnAOXIzL+ZCR9TSWBZgLe1z
DU6lx2YOTYblIfEMM/DKLPdzLtIhehTlnvW5Pg+BOOSnFy9Dv1fjLnDt3+DPTfN8
kXawR4U1NpyWNYsohFN5NqbzHW8TbxwuSq/g4FFj9USwcn+y/7B5Rqkf+PY5Dm4I
K2uUHmwnMoU3rTfDlnj/2uFxTnFozcCOeiEbVOlVe36kHuG4n8mkMQqFX9/baKXz
ZWbjeMHa4NMRbA+umpfUY6vdz32ZYgLZ37hLjc4Dyf/0obGUySqS4n0bFYlD95ft
ewXEJMJdsvnVv7TAiQKdd0Lq76iHbbycqKjPx0yn60zc1zk6hr6KEzbs03NNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUL0/b+K+MDNHDAXrSYbZI/EjkqaAwHwYDVR0j
BBgwFoAU6KWkgS/CvngtKDt2Gdf9oqfdq3MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZWRERaZVA4Skt6QzJtUndhRnVIQXRiMnpuYU5IQ3p4NFU1RUh0VllQ
SEwvMi9FOEE1QTQ4MTJGQzJCRTc4MkQyODNCNzYxOUQ3RkRBMkE3RERBQjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QTVBNDgxMkZDMkJFNzgy
RDI4M0I3NjE5RDdGREEyQTdEREFCNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWVkREWmVQOEpLekMybVJ3YUZ1SEF0YjJ6bmFOSEN6eDRVNUVIdFZZUEhMLzIv
MzIzODMwMzQzYTM0NjUzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzIzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAROPDANBgkqhkiG9w0BAQsFAAOCAQEAeR8PxH5f
BxTwe+Oz6iJWrMUojyfTvYZ9u3kUbDPISkSSsvIGexmaV4SAK/ZiV+tNZKsqlLXY
joThpsmENY/tfQHUtULH+yw7PsVxTQ61WU9dEMmr/D/JYoNcs7zCtC02n2pW+3d3
h1Js7nln4kAIbsu2zNuNg4kIT0XsPfNNXTdwdsY/g3/4Hh8iUDcLdiHad1XB/E/a
sdApFCtnMkr2tJ4sIDtv5xe4N0G2gNOr0apAmd8D7f5lU5warmvNXYeODDMLTOuh
2s4duB3x30nQhD6CnOmDxzPiYvBrri7hCxO5fM2kLDGaAyJCShmPfKjExHEmvE28
WkdC7cpNhnRYaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org