Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/323830343a343331383a383030303a3a2f33332d3333203d3e20323637353438.roa
File:                     323830343a343331383a383030303a3a2f33332d3333203d3e20323637353438.roa (raw, json)
Hash identifier:          x1U8Y0BLWvtZ7HBM8jrH1xXf9L/fREOs7IUrbU1YPRw=
Subject key identifier:   70:E0:2E:E8:73:DC:B4:EF:A9:9C:CB:02:15:48:37:31:CC:4D:10:4C
Certificate issuer:       /CN=763407673C9EDBA6822EBD00C9DEC6F5C34BECC0
Certificate serial:       5F5ECAEDAB112D26FF4BD086D06FD32B2CFF04B7
Authority key identifier: 76:34:07:67:3C:9E:DB:A6:82:2E:BD:00:C9:DE:C6:F5:C3:4B:EC:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/763407673C9EDBA6822EBD00C9DEC6F5C34BECC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/323830343a343331383a383030303a3a2f33332d3333203d3e20323637353438.roa
Signing time:             Wed 26 Jul 2023 14:41:17 +0000
ROA not before:           Wed 26 Jul 2023 14:36:17 +0000
ROA not after:            Wed 24 Jul 2024 14:41:17 +0000
asID:                     267548
IP address blocks:        2804:4318:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5e:ca:ed:ab:11:2d:26:ff:4b:d0:86:d0:6f:d3:2b:2c:ff:04:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=763407673C9EDBA6822EBD00C9DEC6F5C34BECC0
        Validity
            Not Before: Jul 26 14:36:17 2023 GMT
            Not After : Jul 24 14:41:17 2024 GMT
        Subject: CN=70E02EE873DCB4EFA99CCB0215483731CC4D104C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:d5:c6:8f:c5:84:fd:47:a7:76:96:1b:a6:
                    86:c4:1c:2c:50:5f:ab:5e:54:62:b5:8f:59:28:72:
                    c2:38:01:57:e4:1e:6b:4b:47:e6:e1:0a:d5:1e:91:
                    8c:49:6d:d1:88:08:1f:65:f0:bf:30:cb:61:d9:80:
                    23:d3:79:9f:b6:e3:f5:c3:cc:22:60:7e:53:ee:80:
                    a0:6b:40:51:88:7d:b8:07:b5:f5:77:6b:b2:45:6e:
                    de:43:39:f5:ed:43:56:fa:23:d2:40:19:78:c6:9b:
                    95:a5:ea:fa:96:33:85:2d:ca:28:e1:4a:f8:d0:94:
                    83:4b:93:99:24:ee:18:fa:23:1c:dd:e7:0e:75:26:
                    1f:4a:18:23:58:91:38:fa:c6:5e:db:b2:19:c9:d3:
                    86:04:ac:04:bb:c1:1b:58:a6:6f:da:67:99:4a:5a:
                    8e:08:ae:79:ce:36:d3:37:40:d0:78:3c:77:d9:68:
                    b5:57:36:0d:fb:70:44:4f:7c:2d:c1:54:6a:52:ea:
                    25:c8:0e:96:57:e4:f1:35:e4:7e:98:a9:a1:32:be:
                    cc:3c:7d:b7:a7:a1:13:08:1b:74:6d:56:58:16:71:
                    55:8e:18:ee:51:78:c7:88:5b:ad:8a:ed:68:06:72:
                    8b:74:86:da:e3:99:51:ed:e9:a8:bb:79:36:70:de:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:2E:E8:73:DC:B4:EF:A9:9C:CB:02:15:48:37:31:CC:4D:10:4C
            X509v3 Authority Key Identifier:
                keyid:76:34:07:67:3C:9E:DB:A6:82:2E:BD:00:C9:DE:C6:F5:C3:4B:EC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/763407673C9EDBA6822EBD00C9DEC6F5C34BECC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/763407673C9EDBA6822EBD00C9DEC6F5C34BECC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/323830343a343331383a383030303a3a2f33332d3333203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4318:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:af:ed:84:cb:44:f0:ce:15:65:ca:68:26:38:f2:77:66:
         bb:d7:d4:79:95:ad:45:88:4a:f6:d5:77:0b:e0:6e:0e:22:41:
         ba:74:9c:e3:a9:b1:1d:71:63:a7:82:aa:18:28:75:4a:02:c1:
         b1:15:2b:61:ec:8e:ef:9f:82:8a:e8:0b:26:ce:51:b0:0c:d0:
         44:96:c5:48:10:f0:1a:ce:0c:c0:a4:2f:3b:5d:61:7c:88:c2:
         4e:e6:d6:60:b4:f7:90:f8:38:af:e5:1e:7b:3d:e6:26:ba:ef:
         f3:b3:08:0e:63:d4:0b:40:ca:bc:dc:c1:6b:cc:b9:06:62:59:
         39:c9:37:ff:9b:18:54:ea:b7:01:ab:74:b9:6a:a3:5d:1d:ad:
         ba:b2:35:f4:59:ea:49:f9:5e:eb:3a:c4:10:06:7f:90:2f:db:
         45:24:0e:3b:db:b1:e4:49:10:41:fd:b0:16:8a:09:ad:4b:25:
         5d:d9:f1:24:c5:8a:f3:19:48:6d:b0:f8:a2:58:54:06:9c:2d:
         ad:c9:2c:81:79:bd:06:7b:73:a3:2a:50:14:af:9c:b9:a2:73:
         0b:41:40:ad:1e:1a:a5:55:aa:6a:5b:14:83:b4:56:69:b5:4f:
         1f:19:47:05:76:bd:55:69:74:86:55:3d:d4:2b:8b:89:ce:d0:
         7c:0a:9b:89
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUX17K7asRLSb/S9CG0G/TKyz/BLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYzNDA3NjczQzlFREJBNjgyMkVCRDAwQzlERUM2RjVD
MzRCRUNDMDAeFw0yMzA3MjYxNDM2MTdaFw0yNDA3MjQxNDQxMTdaMDMxMTAvBgNV
BAMTKDcwRTAyRUU4NzNEQ0I0RUZBOTlDQ0IwMjE1NDgzNzMxQ0M0RDEwNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYdXGj8WE/UendpYbpobEHCxQ
X6teVGK1j1kocsI4AVfkHmtLR+bhCtUekYxJbdGICB9l8L8wy2HZgCPTeZ+24/XD
zCJgflPugKBrQFGIfbgHtfV3a7JFbt5DOfXtQ1b6I9JAGXjGm5Wl6vqWM4Utyijh
SvjQlINLk5kk7hj6Ixzd5w51Jh9KGCNYkTj6xl7bshnJ04YErAS7wRtYpm/aZ5lK
Wo4IrnnONtM3QNB4PHfZaLVXNg37cERPfC3BVGpS6iXIDpZX5PE15H6YqaEyvsw8
fbenoRMIG3RtVlgWcVWOGO5ReMeIW62K7WgGcot0htrjmVHt6ai7eTZw3kKfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcOAu6HPctO+pnMsCFUg3McxNEEwwHwYDVR0j
BBgwFoAUdjQHZzye26aCLr0Ayd7G9cNL7MAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5qOVlISmdQUXA0YWRIN2laNjh6Wkt6RnEzWkhhbVR2VnU2eEZCYnFQ
dkUvMC83NjM0MDc2NzNDOUVEQkE2ODIyRUJEMDBDOURFQzZGNUMzNEJFQ0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc2MzQwNzY3M0M5RURCQTY4
MjJFQkQwMEM5REVDNkY1QzM0QkVDQzAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VOajlZSEpnUFFwNGFkSDdpWjY4elpLekZxM1pIYW1UdlZ1NnhGQmJxUHZFLzAv
MzIzODMwMzQzYTM0MzMzMTM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzM1MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEQxiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBf+K/thMtE8M4VZcpoJjjyd2a719R5la1FiEr21XcL4G4OIkG6dJzjqbEd
cWOngqoYKHVKAsGxFSth7I7vn4KK6AsmzlGwDNBElsVIEPAazgzApC87XWF8iMJO
5tZgtPeQ+Div5R57PeYmuu/zswgOY9QLQMq83MFrzLkGYlk5yTf/mxhU6rcBq3S5
aqNdHa26sjX0WepJ+V7rOsQQBn+QL9tFJA4727HkSRBB/bAWigmtSyVd2fEkxYrz
GUhtsPiiWFQGnC2tySyBeb0Ge3OjKlAUr5y5onMLQUCtHhqlVapqWxSDtFZptU8f
GUcFdr1VaXSGVT3UK4uJztB8CpuJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org