Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130343a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3130343a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          tCeiIKVrIlg7AjSnkSunnQXb0h4p5k9t8s6nj4CvrAs=
Subject key identifier:   92:11:B0:DC:18:02:3F:3F:F2:23:89:53:AF:50:00:D2:04:F7:A5:9C
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       46C1AC90F56CBEAFBF5E7E41515F1DA1F4B342BA
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130343a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:18 +0000
ROA not before:           Thu 03 Aug 2023 13:04:18 +0000
ROA not after:            Thu 01 Aug 2024 13:09:18 +0000
asID:                     262617
IP address blocks:        2804:90c:104::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c1:ac:90:f5:6c:be:af:bf:5e:7e:41:51:5f:1d:a1:f4:b3:42:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:18 2023 GMT
            Not After : Aug  1 13:09:18 2024 GMT
        Subject: CN=9211B0DC18023F3FF2238953AF5000D204F7A59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:46:a0:90:41:dc:ec:42:d6:59:79:23:36:
                    5b:1b:da:47:24:62:ba:32:c0:ff:ea:69:ff:e5:33:
                    f2:37:21:d8:e4:a3:e1:62:1d:4f:e0:07:42:25:5d:
                    f6:26:55:d2:99:eb:52:c2:41:a9:64:ef:03:d1:70:
                    a1:03:7b:b6:53:c0:ca:75:10:54:9a:6f:b2:aa:98:
                    c7:56:95:8a:71:72:80:8c:ee:77:da:c8:ec:a2:5c:
                    fc:d0:61:d9:0e:02:24:a9:cd:2c:c6:66:6f:65:95:
                    40:9a:a0:0d:15:c7:31:e7:b5:8e:f3:c3:b4:98:99:
                    eb:d8:1c:8c:67:f2:e1:a9:1b:cb:3d:af:e8:5f:63:
                    6d:ba:e0:17:ea:a1:de:24:27:a9:da:91:c1:e2:70:
                    e1:c6:f6:e4:c6:cc:3c:1d:68:4b:dd:b5:ec:6a:68:
                    99:77:f5:e2:ac:c0:fd:2c:03:1e:85:f5:6f:22:ce:
                    a6:4c:18:df:db:a3:a2:53:0e:84:d6:e8:2e:27:bd:
                    de:d0:73:d3:02:74:8f:b7:db:ba:41:4f:a0:ca:7a:
                    81:47:46:b6:06:34:57:be:e5:94:b8:1f:ed:aa:9d:
                    1a:9b:14:0e:92:86:6a:e3:ef:e7:5b:df:ee:1b:3a:
                    28:97:9e:9f:34:86:37:4c:a2:07:c5:fc:e8:cf:3e:
                    30:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:B0:DC:18:02:3F:3F:F2:23:89:53:AF:50:00:D2:04:F7:A5:9C
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130343a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:4e:3d:48:23:ae:a6:aa:b3:78:44:f6:a6:8e:3b:75:90:07:
         ed:b6:63:23:21:08:45:4d:14:77:93:4c:8b:3e:fe:29:39:25:
         a6:0c:d8:8f:61:b5:5e:6e:aa:1c:c9:3a:0f:b3:de:09:81:6a:
         f2:4d:99:f9:15:ee:a8:7a:b5:2e:c6:2b:32:9d:ee:73:c4:ed:
         2a:7b:ac:d1:e6:18:57:b6:d0:c0:a9:41:21:cf:25:23:60:43:
         97:eb:06:2d:45:f9:03:c8:87:30:09:2a:36:cc:26:46:ee:06:
         80:c3:91:2b:64:68:8c:b1:12:63:bd:b7:e8:ec:57:d8:e6:4e:
         b5:7b:ba:2f:04:82:7e:a7:d9:f0:87:d2:d0:ab:1a:78:de:e4:
         4d:75:35:44:60:c1:8e:7e:e7:af:a9:94:53:b3:71:64:b0:2b:
         1d:0f:f9:00:d4:fd:8b:32:5f:d9:09:57:67:ab:b3:00:fa:5b:
         de:20:29:2a:fb:2f:51:db:74:5a:bd:10:eb:08:73:8b:4e:4f:
         c7:72:b9:8a:a9:80:07:88:c2:7f:e9:22:a2:5e:ea:2b:27:db:
         4b:de:41:a1:96:c5:c0:7a:d1:27:9f:0e:41:e6:6e:1c:24:e8:
         0c:0a:72:0f:a7:7e:f4:61:5d:e1:68:b3:3a:61:de:19:a1:fd:
         bd:79:5c:a3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIURsGskPVsvq+/Xn5BUV8dofSzQrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MThaFw0yNDA4MDExMzA5MThaMDMxMTAvBgNV
BAMTKDkyMTFCMERDMTgwMjNGM0ZGMjIzODk1M0FGNTAwMEQyMDRGN0E1OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/UagkEHc7ELWWXkjNlsb2kck
YroywP/qaf/lM/I3Idjko+FiHU/gB0IlXfYmVdKZ61LCQalk7wPRcKEDe7ZTwMp1
EFSab7KqmMdWlYpxcoCM7nfayOyiXPzQYdkOAiSpzSzGZm9llUCaoA0VxzHntY7z
w7SYmevYHIxn8uGpG8s9r+hfY2264Bfqod4kJ6nakcHicOHG9uTGzDwdaEvdtexq
aJl39eKswP0sAx6F9W8izqZMGN/bo6JTDoTW6C4nvd7Qc9MCdI+327pBT6DKeoFH
RrYGNFe+5ZS4H+2qnRqbFA6Shmrj7+db3+4bOiiXnp80hjdMogfF/OjPPjCLAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUkhGw3BgCPz/yI4lTr1AA0gT3pZwwHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzIzODMwMzQzYTM5MzA2MzNhMzEzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjMyMzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQJDAEEMA0GCSqGSIb3DQEBCwUAA4IB
AQAQTj1II66mqrN4RPamjjt1kAfttmMjIQhFTRR3k0yLPv4pOSWmDNiPYbVebqoc
yToPs94JgWryTZn5Fe6oerUuxisyne5zxO0qe6zR5hhXttDAqUEhzyUjYEOX6wYt
RfkDyIcwCSo2zCZG7gaAw5ErZGiMsRJjvbfo7FfY5k61e7ovBIJ+p9nwh9LQqxp4
3uRNdTVEYMGOfuevqZRTs3FksCsdD/kA1P2LMl/ZCVdnq7MA+lveICkq+y9R23Ra
vRDrCHOLTk/HcrmKqYAHiMJ/6SKiXuorJ9tL3kGhlsXAetEnnw5B5m4cJOgMCnIP
p370YV3haLM6Yd4Zof29eVyj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org