Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313830303a3a2f33382d3338203d3e203532393136.roa
File:                     323830343a326231303a313830303a3a2f33382d3338203d3e203532393136.roa (raw, json)
Hash identifier:          jNGKQolEgcg90EJ0zf2qMwWkF1mJegp6kBLURHGSE94=
Subject key identifier:   BB:B6:BB:93:9A:20:AF:DC:5F:DA:CB:CA:71:89:A9:A4:16:8B:2F:A0
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       6D7B82792CBA53F092311F2C8FD6A568E63865A6
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313830303a3a2f33382d3338203d3e203532393136.roa
Signing time:             Sat 30 Mar 2024 01:37:53 +0000
ROA not before:           Sat 30 Mar 2024 01:32:53 +0000
ROA not after:            Sat 29 Mar 2025 01:37:53 +0000
asID:                     52916
IP address blocks:        2804:2b10:1800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7b:82:79:2c:ba:53:f0:92:31:1f:2c:8f:d6:a5:68:e6:38:65:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Mar 30 01:32:53 2024 GMT
            Not After : Mar 29 01:37:53 2025 GMT
        Subject: CN=BBB6BB939A20AFDC5FDACBCA7189A9A4168B2FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:09:2c:85:86:46:71:84:6e:b7:19:d2:54:04:
                    76:74:a8:99:e0:86:32:92:42:5f:36:3f:35:a5:57:
                    94:43:b7:77:f2:41:bf:62:70:b4:a7:a2:e9:bf:87:
                    99:bf:7f:25:4f:c5:0f:89:fd:c6:f6:20:5d:1a:4c:
                    3b:8b:48:87:e6:9b:89:89:f8:f3:ed:73:80:7b:9b:
                    62:b1:11:82:f7:b3:a8:b2:1b:19:62:c2:d5:9f:94:
                    95:51:f5:26:78:fb:69:eb:0d:9a:18:41:62:6f:d0:
                    7a:f0:38:94:ca:8f:0f:c2:3e:28:9f:bc:cc:82:41:
                    fb:d4:10:97:1e:34:b9:2f:7f:64:db:a6:b0:24:f2:
                    ef:5f:f7:fe:1d:6e:72:b1:86:a7:ac:01:ad:58:e6:
                    79:14:c2:77:9c:c1:1b:ca:37:ad:0d:08:8b:54:de:
                    23:a9:84:8b:70:fa:3e:98:a6:99:4a:f6:f5:8f:15:
                    b7:22:f0:4a:a6:00:4f:5f:f0:cc:2b:88:2f:15:63:
                    4c:cd:9f:68:01:27:0f:e1:6a:5d:c5:ca:70:20:69:
                    eb:cf:6f:00:d0:5b:7a:01:8a:2f:26:ad:e3:36:f6:
                    24:d0:9c:56:fa:83:ad:3b:4f:68:bf:61:2a:40:d9:
                    af:a2:3c:dd:48:e8:26:b2:e0:45:cb:81:2e:63:ee:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B6:BB:93:9A:20:AF:DC:5F:DA:CB:CA:71:89:A9:A4:16:8B:2F:A0
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/323830343a326231303a313830303a3a2f33382d3338203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         01:f4:e2:40:0f:34:aa:e9:2e:4d:f3:a8:b0:ce:d1:1a:64:ca:
         ce:4b:af:54:30:a7:f4:2d:7a:2e:f7:28:b7:6f:1b:be:a8:68:
         24:46:9c:e6:87:57:b6:ad:05:b5:ba:4e:dd:c6:b4:6d:da:9f:
         16:cc:53:43:98:20:87:18:a0:a0:6a:02:27:1e:ad:7e:36:87:
         05:22:03:9c:db:4a:e9:37:4c:eb:c9:eb:c4:b5:bc:42:56:d2:
         4e:dd:e2:9a:5a:b1:18:f2:45:8c:c9:a9:94:2e:00:bf:66:ba:
         c6:ea:6f:da:55:d1:82:41:8a:10:d2:7d:19:4f:e5:fd:73:b3:
         4c:b3:66:2e:de:94:db:c5:9f:54:f5:73:08:44:a0:8d:b1:e0:
         b2:c5:81:1e:67:85:71:29:39:12:d2:7e:45:84:0e:e9:10:5a:
         f2:84:1a:13:11:31:12:0d:c5:d9:0a:c5:77:b8:d1:68:35:56:
         98:ae:21:ab:a5:c6:69:52:11:51:40:07:9d:94:6a:13:a3:8b:
         10:23:a7:4c:03:ff:17:c7:43:ba:36:81:a2:78:86:ca:14:41:
         de:74:7d:44:d7:be:73:bf:d8:26:d9:a1:62:3e:35:03:3a:24:
         fe:bf:f3:e0:a8:d4:7e:a6:99:4d:2f:9e:69:ba:2c:66:a5:dd:
         03:5f:b0:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbXuCeSy6U/CSMR8sj9alaOY4ZaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEwMzRDNEI3MUM4RkQ1Q0YzQ0M3RTNDMDJFQ0Y4MjJB
MUEyMTczRDAeFw0yNDAzMzAwMTMyNTNaFw0yNTAzMjkwMTM3NTNaMDMxMTAvBgNV
BAMTKEJCQjZCQjkzOUEyMEFGREM1RkRBQ0JDQTcxODlBOUE0MTY4QjJGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmCSyFhkZxhG63GdJUBHZ0qJng
hjKSQl82PzWlV5RDt3fyQb9icLSnoum/h5m/fyVPxQ+J/cb2IF0aTDuLSIfmm4mJ
+PPtc4B7m2KxEYL3s6iyGxliwtWflJVR9SZ4+2nrDZoYQWJv0HrwOJTKjw/CPiif
vMyCQfvUEJceNLkvf2TbprAk8u9f9/4dbnKxhqesAa1Y5nkUwnecwRvKN60NCItU
3iOphItw+j6YpplK9vWPFbci8EqmAE9f8MwriC8VY0zNn2gBJw/hal3FynAgaevP
bwDQW3oBii8mreM29iTQnFb6g607T2i/YSpA2a+iPN1I6Cay4EXLgS5j7j+LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUu7a7k5ogr9xf2svKcYmppBaLL6AwHwYDVR0j
BBgwFoAU0QNMS3HI/VzzzH48Auz4IqGiFz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMC9EMTAzNEM0QjcxQzhGRDVDRjNDQzdFM0MwMkVDRjgyMkExQTIxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QxMDM0QzRCNzFDOEZENUNG
M0NDN0UzQzAyRUNGODIyQTFBMjE3M0QuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzAv
MzIzODMwMzQzYTMyNjIzMTMwM2EzMTM4MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDM1MzIzOTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIoBCsQGDANBgkqhkiG9w0BAQsFAAOC
AQEAAfTiQA80qukuTfOosM7RGmTKzkuvVDCn9C16Lvcot28bvqhoJEac5odXtq0F
tbpO3ca0bdqfFsxTQ5gghxigoGoCJx6tfjaHBSIDnNtK6TdM68nrxLW8QlbSTt3i
mlqxGPJFjMmplC4Av2a6xupv2lXRgkGKENJ9GU/l/XOzTLNmLt6U28WfVPVzCESg
jbHgssWBHmeFcSk5EtJ+RYQO6RBa8oQaExExEg3F2QrFd7jRaDVWmK4hq6XGaVIR
UUAHnZRqE6OLECOnTAP/F8dDujaBoniGyhRB3nR9RNe+c7/YJtmhYj41Azok/r/z
4KjUfqaZTS+eabosZqXdA1+w2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org