Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3334203d3e20323639343136.roa
File:                     323830343a363434303a3a2f33322d3334203d3e20323639343136.roa (raw, json)
Hash identifier:          TjjyeIuuRxlQkhtE4KdMNfPvuGT7RathGv3m6xoJ2Ig=
Subject key identifier:   27:1A:5C:E2:BF:C7:C6:95:1B:B8:8A:46:95:41:40:53:CC:24:60:31
Certificate issuer:       /CN=8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B
Certificate serial:       67E8B6AB7E36655C8752EBE068D82AB7C0D1EACB
Authority key identifier: 8A:2D:68:F5:9D:A7:9C:11:67:B9:6E:60:DB:2A:8A:C7:F8:97:F9:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3334203d3e20323639343136.roa
Signing time:             Sat 03 Jun 2023 03:15:02 +0000
ROA not before:           Sat 03 Jun 2023 03:10:02 +0000
ROA not after:            Sat 01 Jun 2024 03:15:02 +0000
asID:                     269416
IP address blocks:        2804:6440::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e8:b6:ab:7e:36:65:5c:87:52:eb:e0:68:d8:2a:b7:c0:d1:ea:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B
        Validity
            Not Before: Jun  3 03:10:02 2023 GMT
            Not After : Jun  1 03:15:02 2024 GMT
        Subject: CN=271A5CE2BFC7C6951BB88A4695414053CC246031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:ed:ff:4d:f9:d5:ea:4d:0f:3e:99:7d:cc:
                    99:78:d0:2f:36:df:b6:e2:d5:d6:8b:63:ca:98:a7:
                    fc:4e:a7:b5:89:ef:1c:9a:0f:3a:8f:17:77:ec:42:
                    ae:a6:66:08:53:9e:a0:27:89:a1:9c:3d:61:08:00:
                    45:0c:32:7f:55:77:6c:7e:54:6b:e0:d4:a1:2b:d4:
                    68:21:c3:45:9f:db:e2:8d:de:2b:b1:0f:f4:22:0a:
                    70:c5:79:78:f8:75:25:06:1e:8f:42:bc:8a:f2:c9:
                    49:51:7d:32:0a:1e:23:cc:6c:be:ad:07:de:2d:c1:
                    40:37:76:e6:90:35:3b:25:2f:f2:7b:62:c1:66:0b:
                    e2:9b:cc:bb:7a:b9:9d:3f:78:55:64:f5:4c:f8:93:
                    2e:ae:fc:a6:98:43:59:80:b9:d9:96:1b:d6:b3:02:
                    74:8f:37:ca:bd:81:3b:fe:35:98:ac:aa:90:69:77:
                    a4:6f:9f:7e:95:af:62:4c:5e:9a:ae:b6:9b:5c:78:
                    d6:3a:1f:0f:42:ce:77:3a:38:ae:a0:dc:09:c0:20:
                    38:c7:75:02:97:d9:76:3b:cd:99:f2:9d:c2:c4:8c:
                    ff:bc:c7:cc:8a:3c:1b:64:2d:16:a9:7b:a7:74:2b:
                    9d:9b:2f:e7:0e:ff:cc:8f:e2:d9:3c:c4:f7:17:f3:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1A:5C:E2:BF:C7:C6:95:1B:B8:8A:46:95:41:40:53:CC:24:60:31
            X509v3 Authority Key Identifier:
                keyid:8A:2D:68:F5:9D:A7:9C:11:67:B9:6E:60:DB:2A:8A:C7:F8:97:F9:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A2D68F59DA79C1167B96E60DB2A8AC7F897F91B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a3a2f33322d3334203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:50:04:9b:df:47:e4:b3:ea:3e:8e:fd:d9:1e:d5:be:e8:3d:
         56:4f:4c:7c:30:82:87:8c:47:b7:10:a5:99:fa:25:80:21:ee:
         77:d8:b0:5a:13:26:18:64:b0:5c:d5:bd:33:08:a1:bd:bf:6c:
         ca:10:a5:9c:2e:8f:43:92:05:41:e8:80:54:cd:c4:88:07:b5:
         9a:f2:2e:c4:c3:7a:e8:82:3b:a2:bf:c7:b3:b1:f4:fb:68:c4:
         34:67:13:a0:4c:cd:d6:1b:81:74:14:72:9f:2d:4e:e9:0b:5b:
         e9:7e:8a:76:50:66:6f:dc:37:5b:9a:75:19:72:fc:6e:33:eb:
         69:ef:46:3f:a8:f5:1f:85:28:1a:47:2d:0f:75:1c:bb:c8:18:
         27:98:d0:e8:74:70:49:c3:3f:d7:94:88:88:60:30:c8:f8:8d:
         ad:a0:b9:e9:5c:ce:35:56:bb:e3:c3:21:dd:35:62:87:0c:a4:
         02:da:86:7c:71:b8:77:72:d6:d7:ee:f4:8d:66:fc:c1:04:bc:
         17:ef:73:97:5e:0d:47:6a:d5:d4:92:53:c0:71:79:92:b9:39:
         23:84:74:4d:1d:e0:e8:b6:fb:db:6a:4a:d1:c0:c0:89:8a:9f:
         1b:ed:62:b8:ec:4e:7d:9e:8b:46:bb:5d:1a:b1:2b:09:7c:c3:
         10:6e:60:f5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZ+i2q342ZVyHUuvgaNgqt8DR6sswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEyRDY4RjU5REE3OUMxMTY3Qjk2RTYwREIyQThBQzdG
ODk3RjkxQjAeFw0yMzA2MDMwMzEwMDJaFw0yNDA2MDEwMzE1MDJaMDMxMTAvBgNV
BAMTKDI3MUE1Q0UyQkZDN0M2OTUxQkI4OEE0Njk1NDE0MDUzQ0MyNDYwMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpO3/TfnV6k0PPpl9zJl40C82
37bi1daLY8qYp/xOp7WJ7xyaDzqPF3fsQq6mZghTnqAniaGcPWEIAEUMMn9Vd2x+
VGvg1KEr1Gghw0Wf2+KN3iuxD/QiCnDFeXj4dSUGHo9CvIryyUlRfTIKHiPMbL6t
B94twUA3duaQNTslL/J7YsFmC+KbzLt6uZ0/eFVk9Uz4ky6u/KaYQ1mAudmWG9az
AnSPN8q9gTv+NZisqpBpd6Rvn36Vr2JMXpqutptceNY6Hw9Cznc6OK6g3AnAIDjH
dQKX2XY7zZnyncLEjP+8x8yKPBtkLRape6d0K52bL+cO/8yP4tk8xPcX86Q3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJxpc4r/HxpUbuIpGlUFAU8wkYDEwHwYDVR0j
BBgwFoAUii1o9Z2nnBFnuW5g2yqKx/iX+RswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhVWDM1Wk1VQ2JSaFl1RUNMUXVRaXlpcUNYNHo5THZSaXJKdzNiQlV3
eVgvMC84QTJENjhGNTlEQTc5QzExNjdCOTZFNjBEQjJBOEFDN0Y4OTdGOTFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBMkQ2OEY1OURBNzlDMTE2
N0I5NkU2MERCMkE4QUM3Rjg5N0Y5MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoVVgzNVpNVUNiUmhZdUVDTFF1UWl5aXFDWDR6OUx2UmlySnczYkJVd3lYLzAv
MzIzODMwMzQzYTM2MzQzNDMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM5
MzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARkQDANBgkqhkiG9w0BAQsFAAOCAQEAJlAEm99H
5LPqPo792R7Vvug9Vk9MfDCCh4xHtxClmfolgCHud9iwWhMmGGSwXNW9Mwihvb9s
yhClnC6PQ5IFQeiAVM3EiAe1mvIuxMN66II7or/Hs7H0+2jENGcToEzN1huBdBRy
ny1O6Qtb6X6KdlBmb9w3W5p1GXL8bjPrae9GP6j1H4UoGkctD3Ucu8gYJ5jQ6HRw
ScM/15SIiGAwyPiNraC56VzONVa748Mh3TVihwykAtqGfHG4d3LW1+70jWb8wQS8
F+9zl14NR2rV1JJTwHF5krk5I4R0TR3g6Lb722pK0cDAiYqfG+1iuOxOfZ6LRrtd
GrErCXzDEG5g9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org