Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa
File:                     323830343a323232383a3a2f33322d3332203d3e20323634353935.roa (raw, json)
Hash identifier:          /vfaORXgjgQGXkz9/URZdSYf7/fUDldC0YdET06CEKg=
Subject key identifier:   EC:79:64:F0:88:54:18:60:22:8E:B9:33:B1:C2:1F:7E:AE:3F:70:99
Certificate issuer:       /CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
Certificate serial:       3300935CAAA5CEE7F7EEFA74C8F13FD071D4942C
Authority key identifier: FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa
Signing time:             Sat 10 Dec 2022 21:23:39 +0000
ROA not before:           Sat 10 Dec 2022 21:18:39 +0000
ROA not after:            Sat 09 Dec 2023 21:23:39 +0000
asID:                     264595
IP address blocks:        2804:2228::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:93:5c:aa:a5:ce:e7:f7:ee:fa:74:c8:f1:3f:d0:71:d4:94:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
        Validity
            Not Before: Dec 10 21:18:39 2022 GMT
            Not After : Dec  9 21:23:39 2023 GMT
        Subject: CN=EC7964F088541860228EB933B1C21F7EAE3F7099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:74:7d:af:99:27:34:3d:8b:d5:74:08:54:
                    03:4b:2d:d9:4a:61:50:cf:32:91:eb:f6:b5:eb:7e:
                    25:7c:69:5a:11:f0:a9:05:5a:11:bc:22:a8:ec:4d:
                    87:f0:12:46:71:ea:df:fe:7b:70:31:9e:c4:c6:3e:
                    a5:80:4a:0b:13:86:3c:58:6b:16:71:95:b4:22:91:
                    48:bd:dd:1b:e7:03:4d:83:b8:64:f2:e7:1e:e0:86:
                    6b:d7:b2:7a:8c:ea:8e:5e:49:60:44:1a:df:07:4b:
                    de:ad:ba:96:46:1d:62:2d:5e:5a:f6:38:fa:84:84:
                    d4:be:7a:54:2e:d9:d0:29:8c:4d:5e:94:47:71:20:
                    83:10:fd:b6:47:c1:73:97:21:ab:8d:bb:77:ac:b9:
                    29:c9:f8:ee:61:80:ac:1c:e7:44:0d:1a:87:2f:c7:
                    63:2d:25:42:44:1c:07:60:75:1b:4e:fc:26:80:03:
                    6d:0b:92:a1:9d:e9:47:f9:fa:bf:e7:ae:09:f5:03:
                    05:85:27:b3:92:f7:fb:80:7a:b2:bf:f2:be:51:a6:
                    73:09:a8:de:70:c4:3a:73:cc:4a:3c:da:9e:7d:4d:
                    d5:d5:be:31:82:e2:fa:f4:8f:57:0f:e6:14:ed:8d:
                    63:45:0a:5e:4a:f5:29:7f:8b:dc:d4:0b:87:eb:ff:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:64:F0:88:54:18:60:22:8E:B9:33:B1:C2:1F:7E:AE:3F:70:99
            X509v3 Authority Key Identifier:
                keyid:FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a3a2f33322d3332203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2228::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:50:6c:d0:44:e2:ec:3d:67:ae:37:a3:9d:a1:4f:6b:38:d1:
         06:c0:48:87:6b:ea:b2:30:e6:21:9e:9d:95:52:fb:af:ee:3a:
         05:ee:4b:34:bf:20:35:77:42:0d:f6:8b:bd:3d:df:7f:2f:fe:
         d5:0f:60:3a:af:33:ec:f0:6e:88:ff:8e:9a:86:d0:e3:c6:42:
         45:96:77:e1:08:16:ea:43:be:9e:91:b1:44:90:ee:e0:02:fc:
         9e:29:43:36:f0:ca:34:d1:ac:32:ff:92:2e:df:41:89:80:c7:
         1d:51:a4:ad:e5:8d:6e:67:13:15:30:6d:1e:43:2b:93:6e:78:
         47:f7:fd:8e:ea:f3:8f:30:99:91:a9:b2:1e:27:7b:1a:78:ea:
         3a:7d:1c:06:f8:71:90:0a:56:c6:56:09:dd:f2:97:c3:1d:42:
         55:07:06:82:de:a2:8f:86:55:91:95:4e:62:f0:06:c6:db:08:
         7e:32:31:02:fa:c1:99:0d:c1:8c:d3:a1:11:cd:94:4f:4f:90:
         7c:bf:94:45:38:c8:0e:38:6e:c4:35:c4:54:ac:4f:64:dd:df:
         0f:da:ed:02:6b:ed:13:b8:cc:4d:7a:9e:e4:b9:65:20:75:b9:
         71:e9:cc:94:24:d5:a6:9d:21:b3:d9:c7:b8:75:d2:50:b7:19:
         2c:d1:f5:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMwCTXKqlzuf37vp0yPE/0HHUlCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY3MTY2MURGM0Q0NkQwN0ZDMzdCRDcyRjFCNzlEMUQ1
RTg3OTYxQjAeFw0yMjEyMTAyMTE4MzlaFw0yMzEyMDkyMTIzMzlaMDMxMTAvBgNV
BAMTKEVDNzk2NEYwODg1NDE4NjAyMjhFQjkzM0IxQzIxRjdFQUUzRjcwOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1T3R9r5knND2L1XQIVANLLdlK
YVDPMpHr9rXrfiV8aVoR8KkFWhG8IqjsTYfwEkZx6t/+e3AxnsTGPqWASgsThjxY
axZxlbQikUi93RvnA02DuGTy5x7ghmvXsnqM6o5eSWBEGt8HS96tupZGHWItXlr2
OPqEhNS+elQu2dApjE1elEdxIIMQ/bZHwXOXIauNu3esuSnJ+O5hgKwc50QNGocv
x2MtJUJEHAdgdRtO/CaAA20LkqGd6Uf5+r/nrgn1AwWFJ7OS9/uAerK/8r5RpnMJ
qN5wxDpzzEo82p59TdXVvjGC4vr0j1cP5hTtjWNFCl5K9Sl/i9zUC4fr/5L1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7Hlk8IhUGGAijrkzscIffq4/cJkwHwYDVR0j
BBgwFoAU/3FmHfPUbQf8N71y8bedHV6HlhswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVQzOU5TV2laZzNlQXJLRzdYWUtBcFFUV2E2QmdMNURvamR5YmFqR3RG
VXkvMC9GRjcxNjYxREYzRDQ2RDA3RkMzN0JENzJGMUI3OUQxRDVFODc5NjFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGNzE2NjFERjNENDZEMDdG
QzM3QkQ3MkYxQjc5RDFENUU4Nzk2MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VUMzlOU1dpWmczZUFyS0c3WFlLQXBRVFdhNkJnTDVEb2pkeWJhakd0RlV5LzAv
MzIzODMwMzQzYTMyMzIzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQiKDANBgkqhkiG9w0BAQsFAAOCAQEAdVBs0ETi
7D1nrjejnaFPazjRBsBIh2vqsjDmIZ6dlVL7r+46Be5LNL8gNXdCDfaLvT3ffy/+
1Q9gOq8z7PBuiP+OmobQ48ZCRZZ34QgW6kO+npGxRJDu4AL8nilDNvDKNNGsMv+S
Lt9BiYDHHVGkreWNbmcTFTBtHkMrk254R/f9jurzjzCZkamyHid7GnjqOn0cBvhx
kApWxlYJ3fKXwx1CVQcGgt6ij4ZVkZVOYvAGxtsIfjIxAvrBmQ3BjNOhEc2UT0+Q
fL+URTjIDjhuxDXEVKxPZN3fD9rtAmvtE7jMTXqe5LllIHW5cenMlCTVpp0hs9nH
uHXSULcZLNH1LA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org