Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          oEck1YxT+N2kAD0L6nY6EJfgHdnYWask+N6zMV8ZXI4=
Subject key identifier:   46:6F:74:F2:CC:05:7E:14:81:C7:18:2C:F8:4E:1A:65:54:94:1A:1F
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       68CB57F362685942C86F276AEDC6D227BDC66976
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:17 +0000
ROA not before:           Thu 03 Aug 2023 13:04:17 +0000
ROA not after:            Thu 01 Aug 2024 13:09:17 +0000
asID:                     262617
IP address blocks:        2804:90c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cb:57:f3:62:68:59:42:c8:6f:27:6a:ed:c6:d2:27:bd:c6:69:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:17 2023 GMT
            Not After : Aug  1 13:09:17 2024 GMT
        Subject: CN=466F74F2CC057E1481C7182CF84E1A6554941A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:bc:7f:0e:15:b4:cf:20:7f:28:a9:a5:67:
                    3e:7d:ef:1a:cf:93:78:ea:d6:d1:88:5d:75:82:63:
                    8c:f5:76:18:d3:a5:c4:44:a8:1e:6f:fc:26:19:da:
                    27:e7:51:c0:19:76:78:18:0a:de:c9:87:1d:0d:96:
                    35:70:64:c9:3b:1a:4f:a2:3c:d1:e3:88:ed:94:57:
                    f2:7a:55:cb:94:62:a0:af:d8:a2:ac:d1:c7:49:f6:
                    8e:c7:11:49:c4:c9:6c:8a:f5:58:4b:b9:51:71:7f:
                    b8:12:0d:3f:53:6b:a0:60:82:12:a5:6c:59:2b:81:
                    39:39:f4:7c:72:31:9b:64:e2:d1:a4:39:12:44:ef:
                    66:3b:fd:e8:bb:0b:13:15:2b:4c:26:f6:f3:cc:5d:
                    69:70:2c:14:46:d2:43:83:3d:58:b8:ba:65:b0:7f:
                    89:90:df:e7:b9:7e:f9:b7:95:20:36:c8:df:73:e4:
                    c7:7c:16:11:0a:7f:ad:39:fd:c6:ce:48:65:c2:44:
                    7a:8d:9f:c9:7b:91:15:84:de:3f:5a:4e:04:9d:2f:
                    da:99:8b:1f:f2:e2:a9:ac:d0:73:f5:32:ec:3c:e7:
                    06:d5:f7:eb:c5:8a:68:81:98:aa:5f:61:b4:b2:91:
                    d4:2a:3f:c0:54:07:32:1f:2d:43:2a:cb:8a:9e:6c:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:74:F2:CC:05:7E:14:81:C7:18:2C:F8:4E:1A:65:54:94:1A:1F
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:eb:1c:0f:91:83:e6:58:a7:1d:e1:26:c0:cb:54:5a:36:
         4e:cd:f8:2a:ec:c2:ea:52:0b:6f:30:ed:6b:80:1b:ff:4c:c9:
         cf:5d:cc:f5:77:98:cc:2e:55:65:1f:0d:e4:6c:34:95:ad:dd:
         c4:42:68:ac:18:5c:80:54:fc:b5:31:a3:c7:ba:e3:ad:94:e7:
         0d:a0:a4:d3:9f:b1:34:a4:4d:fe:a1:1a:ed:f9:e9:43:f2:a0:
         65:ef:12:8f:8b:da:ab:0c:c9:f1:72:fc:03:0d:7e:6c:12:12:
         15:33:b6:1a:57:a3:5c:21:4c:ab:90:f0:11:7b:39:34:be:e3:
         4b:a0:28:4f:19:96:5a:fd:ae:1e:6b:26:7f:c3:4e:4f:fd:37:
         e5:54:c6:dc:6b:6d:df:6b:aa:f7:30:83:0f:66:4c:e8:88:96:
         0c:5a:7b:e4:e5:ba:ba:92:af:54:57:ac:4a:19:d3:bd:97:62:
         70:2e:78:b1:f7:cb:03:1a:44:52:47:3f:41:91:29:e5:aa:70:
         3e:0a:d2:20:7d:66:7a:bf:d8:f1:8d:ac:6c:7f:54:7d:e9:04:
         98:22:a5:74:cd:f5:f9:2c:0f:8e:90:80:b1:8b:8a:0c:a0:dd:
         69:77:cb:ce:7a:28:07:ef:9b:4f:36:0c:98:96:d6:12:66:4b:
         e4:cb:21:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaMtX82JoWULIbydq7cbSJ73GaXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBRjI2N0Y5QjI0N0ZCMENGQjM3RjIzMkI1QkQwODg5
Qjk2QjEwMjAeFw0yMzA4MDMxMzA0MTdaFw0yNDA4MDExMzA5MTdaMDMxMTAvBgNV
BAMTKDQ2NkY3NEYyQ0MwNTdFMTQ4MUM3MTgyQ0Y4NEUxQTY1NTQ5NDFBMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXrx/DhW0zyB/KKmlZz597xrP
k3jq1tGIXXWCY4z1dhjTpcREqB5v/CYZ2ifnUcAZdngYCt7Jhx0NljVwZMk7Gk+i
PNHjiO2UV/J6VcuUYqCv2KKs0cdJ9o7HEUnEyWyK9VhLuVFxf7gSDT9Ta6BgghKl
bFkrgTk59HxyMZtk4tGkORJE72Y7/ei7CxMVK0wm9vPMXWlwLBRG0kODPVi4umWw
f4mQ3+e5fvm3lSA2yN9z5Md8FhEKf605/cbOSGXCRHqNn8l7kRWE3j9aTgSdL9qZ
ix/y4qms0HP1Muw85wbV9+vFimiBmKpfYbSykdQqP8BUBzIfLUMqy4qebGqbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURm908swFfhSBxxgs+E4aZVSUGh8wHwYDVR0j
BBgwFoAUua8mf5skf7DPs38jK1vQiJuWsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMC9COUFGMjY3RjlCMjQ3RkIwQ0ZCMzdGMjMyQjVCRDA4ODlCOTZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5QUYyNjdGOUIyNDdGQjBD
RkIzN0YyMzJCNUJEMDg4OUI5NkIxMDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzAv
MzIzODMwMzQzYTM5MzA2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMjM2
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACgECQwAADANBgkqhkiG9w0BAQsFAAOCAQEAcCvrHA+R
g+ZYpx3hJsDLVFo2Ts34KuzC6lILbzDta4Ab/0zJz13M9XeYzC5VZR8N5Gw0la3d
xEJorBhcgFT8tTGjx7rjrZTnDaCk05+xNKRN/qEa7fnpQ/KgZe8Sj4vaqwzJ8XL8
Aw1+bBISFTO2GlejXCFMq5DwEXs5NL7jS6AoTxmWWv2uHmsmf8NOT/035VTG3Gtt
32uq9zCDD2ZM6IiWDFp75OW6upKvVFesShnTvZdicC54sffLAxpEUkc/QZEp5apw
PgrSIH1mer/Y8Y2sbH9UfekEmCKldM31+SwPjpCAsYuKDKDdaXfLznooB++bTzYM
mJbWEmZL5MshHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org