Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/323830343a343134303a3a2f33342d3334203d3e20323637343233.roa
File:                     323830343a343134303a3a2f33342d3334203d3e20323637343233.roa (raw, json)
Hash identifier:          Yl4TrxJo8WDAPhaZwSOu2bpUExNqJkNXAwpwkH3BUso=
Subject key identifier:   E8:F4:A7:59:A8:BB:F0:0A:5C:7C:21:52:39:EE:B3:D8:18:40:7A:75
Certificate issuer:       /CN=9830096CEE8970F0B235CCA769E85A3CC1C70EC9
Certificate serial:       32B3837B01E6E3225C03BA694AA00A0D12CB4EF8
Authority key identifier: 98:30:09:6C:EE:89:70:F0:B2:35:CC:A7:69:E8:5A:3C:C1:C7:0E:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/323830343a343134303a3a2f33342d3334203d3e20323637343233.roa
Signing time:             Mon 11 Dec 2023 17:33:59 +0000
ROA not before:           Mon 11 Dec 2023 17:28:59 +0000
ROA not after:            Mon 09 Dec 2024 17:33:59 +0000
asID:                     267423
IP address blocks:        2804:4140::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b3:83:7b:01:e6:e3:22:5c:03:ba:69:4a:a0:0a:0d:12:cb:4e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9830096CEE8970F0B235CCA769E85A3CC1C70EC9
        Validity
            Not Before: Dec 11 17:28:59 2023 GMT
            Not After : Dec  9 17:33:59 2024 GMT
        Subject: CN=E8F4A759A8BBF00A5C7C215239EEB3D818407A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:a5:4a:6c:81:43:93:c7:42:66:1d:b4:31:
                    ce:b3:9a:be:a6:de:c7:ff:ce:be:57:6e:3a:6e:09:
                    8d:33:6d:e9:88:f4:fd:69:eb:44:f0:ea:fc:4e:83:
                    a7:a6:f5:20:ce:2e:18:61:8e:12:ca:a1:c1:0f:12:
                    e6:0a:db:a2:6a:c9:d9:cd:ec:fc:1e:c5:4b:a8:e7:
                    a1:7c:b2:20:e5:81:5d:2b:31:d5:30:ad:a3:b2:a8:
                    90:dc:33:d7:78:4f:ed:e1:0c:85:09:50:94:c6:56:
                    eb:31:0e:26:16:f4:ed:7b:fc:45:4a:99:c2:e2:a4:
                    34:8e:91:2a:ea:6b:f9:e4:e2:52:ca:0a:14:74:5a:
                    a0:6e:f9:6f:bb:8f:0b:68:95:bb:ca:54:dc:b5:e8:
                    77:f5:3d:d3:1a:3c:29:58:0b:0a:78:31:78:f2:9f:
                    46:3d:76:26:f1:f5:2d:93:01:94:7c:ba:e7:28:10:
                    74:1d:c3:24:46:79:00:cd:b4:27:5e:07:04:11:ba:
                    95:11:41:0b:60:d4:46:3f:8c:1c:76:c2:8a:c6:51:
                    67:9b:be:19:21:bf:6f:8a:97:97:29:06:90:9b:9c:
                    8c:47:0a:00:83:f5:a4:c9:24:82:76:a2:eb:cb:43:
                    e1:d9:27:03:c4:e8:07:93:b1:ac:b9:b8:05:35:fb:
                    36:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:A7:59:A8:BB:F0:0A:5C:7C:21:52:39:EE:B3:D8:18:40:7A:75
            X509v3 Authority Key Identifier:
                keyid:98:30:09:6C:EE:89:70:F0:B2:35:CC:A7:69:E8:5A:3C:C1:C7:0E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/323830343a343134303a3a2f33342d3334203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4140::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:f6:39:a5:d6:47:8f:44:ff:df:06:e5:d8:48:36:8b:29:
         47:ee:2e:5f:44:d4:98:fa:1b:e4:41:23:da:33:21:da:14:68:
         e7:e2:8e:88:3e:96:c4:d5:9e:66:ab:d0:f5:05:2b:36:71:11:
         af:be:67:ef:8b:14:08:d7:cb:f9:94:59:28:d6:ab:bd:0f:37:
         12:77:72:60:eb:5c:cb:5c:2f:42:73:6d:94:ee:ba:86:01:be:
         8c:2e:e0:04:77:78:c2:fb:2a:04:ac:6d:07:d9:5f:e7:a7:31:
         6a:57:1d:40:ee:8b:21:33:61:8a:61:7c:dd:d6:b3:98:83:e4:
         b5:8f:1c:ef:57:a0:ff:b7:c6:50:33:d1:7e:74:cb:b6:5e:d3:
         88:76:cb:31:18:93:e3:41:60:95:0a:2e:01:bf:bd:5d:32:b8:
         63:9a:a5:ab:aa:8c:e2:b9:53:bc:d9:cb:6c:37:2d:d1:37:77:
         8c:6c:c9:09:c5:4c:c0:a0:a3:75:62:84:a1:3d:b2:94:73:8a:
         62:7c:19:2b:71:2c:44:a8:23:fb:ff:55:f4:0f:6a:49:d3:7c:
         61:4b:2b:0b:cf:22:1f:94:3d:80:e6:02:17:78:79:c6:6a:a4:
         9a:4e:dc:4a:63:92:86:14:b5:54:1b:aa:2e:32:e7:5f:0f:32:
         3e:84:3d:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMrODewHm4yJcA7ppSqAKDRLLTvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzMDA5NkNFRTg5NzBGMEIyMzVDQ0E3NjlFODVBM0ND
MUM3MEVDOTAeFw0yMzEyMTExNzI4NTlaFw0yNDEyMDkxNzMzNTlaMDMxMTAvBgNV
BAMTKEU4RjRBNzU5QThCQkYwMEE1QzdDMjE1MjM5RUVCM0Q4MTg0MDdBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6qVKbIFDk8dCZh20Mc6zmr6m
3sf/zr5XbjpuCY0zbemI9P1p60Tw6vxOg6em9SDOLhhhjhLKocEPEuYK26JqydnN
7PwexUuo56F8siDlgV0rMdUwraOyqJDcM9d4T+3hDIUJUJTGVusxDiYW9O17/EVK
mcLipDSOkSrqa/nk4lLKChR0WqBu+W+7jwtolbvKVNy16Hf1PdMaPClYCwp4MXjy
n0Y9dibx9S2TAZR8uucoEHQdwyRGeQDNtCdeBwQRupURQQtg1EY/jBx2worGUWeb
vhkhv2+Kl5cpBpCbnIxHCgCD9aTJJIJ2ouvLQ+HZJwPE6AeTsay5uAU1+zZVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6PSnWai78ApcfCFSOe6z2BhAenUwHwYDVR0j
BBgwFoAUmDAJbO6JcPCyNcynaehaPMHHDskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkFQUUJjWk43VVVhVVNkRjlDWDh2Q0NIeGdia3FrbXZCWk5VaTFhcHFn
TDIvMC85ODMwMDk2Q0VFODk3MEYwQjIzNUNDQTc2OUU4NUEzQ0MxQzcwRUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4MzAwOTZDRUU4OTcwRjBC
MjM1Q0NBNzY5RTg1QTNDQzFDNzBFQzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZBUFFCY1pON1VVYVVTZEY5Q1g4dkNDSHhnYmtxa212QlpOVWkxYXBxZ0wyLzAv
MzIzODMwMzQzYTM0MzEzNDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM3
MzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARBQAAwDQYJKoZIhvcNAQELBQADggEBAD5G9jml
1kePRP/fBuXYSDaLKUfuLl9E1Jj6G+RBI9ozIdoUaOfijog+lsTVnmar0PUFKzZx
Ea++Z++LFAjXy/mUWSjWq70PNxJ3cmDrXMtcL0JzbZTuuoYBvowu4AR3eML7KgSs
bQfZX+enMWpXHUDuiyEzYYphfN3Ws5iD5LWPHO9XoP+3xlAz0X50y7Ze04h2yzEY
k+NBYJUKLgG/vV0yuGOapauqjOK5U7zZy2w3LdE3d4xsyQnFTMCgo3VihKE9spRz
imJ8GStxLESoI/v/VfQPaknTfGFLKwvPIh+UPYDmAhd4ecZqpJpO3EpjkoYUtVQb
qi4y518PMj6EPbg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org