Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a393030303a3a2f33362d3336203d3e20323733353638.roa
File:                     323830343a383865383a393030303a3a2f33362d3336203d3e20323733353638.roa (raw, json)
Hash identifier:          R2OPRhAySUzh9W6HKUUHm1t9b0TT24xgnnLTi84gbt4=
Subject key identifier:   34:D4:C7:25:74:EE:97:7E:03:8E:57:D5:FC:F1:22:32:EF:67:30:F5
Certificate issuer:       /CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
Certificate serial:       1C5312B15FEB5465148FA06C51D2CE355E670BBB
Authority key identifier: 6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a393030303a3a2f33362d3336203d3e20323733353638.roa
Signing time:             Tue 31 Oct 2023 18:38:55 +0000
ROA not before:           Tue 31 Oct 2023 18:33:55 +0000
ROA not after:            Tue 29 Oct 2024 18:38:55 +0000
asID:                     273568
IP address blocks:        2804:88e8:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:53:12:b1:5f:eb:54:65:14:8f:a0:6c:51:d2:ce:35:5e:67:0b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4A647AFA002C03109D6A323355E36ABA9C7284
        Validity
            Not Before: Oct 31 18:33:55 2023 GMT
            Not After : Oct 29 18:38:55 2024 GMT
        Subject: CN=34D4C72574EE977E038E57D5FCF12232EF6730F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:f4:0a:6a:db:f4:63:d9:fb:ca:be:10:0b:
                    26:2f:56:49:27:10:19:f6:1a:29:0f:30:53:31:e5:
                    af:53:0b:43:be:20:9c:f2:54:b5:ec:8e:0d:11:1c:
                    f5:05:b2:e2:dc:d0:01:22:8a:33:05:de:0f:fd:8d:
                    01:f3:af:bb:4c:74:63:4e:75:9f:0b:0e:e2:a6:16:
                    cf:d3:60:d1:e4:79:75:11:9c:e7:ae:2c:3a:ac:bc:
                    1c:36:2a:67:87:91:c4:03:c0:3d:f5:71:b4:41:a4:
                    00:72:cf:09:e9:1c:82:e7:79:5b:2f:73:b3:50:81:
                    7a:e9:db:c9:09:b9:f1:37:73:ce:4d:38:c1:1b:0c:
                    77:6a:eb:47:8c:51:27:c1:51:2f:a2:72:ed:eb:15:
                    2e:6f:7d:e8:37:42:c3:32:8a:78:45:71:61:6c:84:
                    13:ea:ff:01:0b:f5:e8:10:17:76:ee:26:cc:90:68:
                    2f:33:7c:4f:7a:c8:f6:c1:38:f7:e8:a7:8a:bc:c1:
                    52:ae:c8:93:b1:d2:b3:ce:8f:53:0a:a9:50:dc:fe:
                    53:4c:83:dd:77:59:93:a8:15:2e:a3:85:25:d5:d6:
                    7d:53:4b:1c:c0:e3:f9:96:ec:4e:b2:f7:ed:3e:9c:
                    f1:1d:d0:55:53:37:7e:fa:2f:1b:ea:d6:e4:62:12:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:C7:25:74:EE:97:7E:03:8E:57:D5:FC:F1:22:32:EF:67:30:F5
            X509v3 Authority Key Identifier:
                keyid:6F:4A:64:7A:FA:00:2C:03:10:9D:6A:32:33:55:E3:6A:BA:9C:72:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4A647AFA002C03109D6A323355E36ABA9C7284.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsjjm6QSV9ecHJyqvHR7uwf4ECdAZ84SMikunf8rZsmA/0/323830343a383865383a393030303a3a2f33362d3336203d3e20323733353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a9:89:41:a5:0c:cd:f8:bb:b1:83:1c:72:30:78:cd:6a:0d:28:
         75:8d:67:1c:20:2c:49:ca:b8:32:67:83:84:30:45:3d:d6:b0:
         a5:20:63:6b:ec:7e:c2:d4:1b:07:5f:9d:67:33:7e:76:86:4b:
         02:cf:70:ba:52:55:e2:4c:07:c9:90:f7:75:1f:a1:b9:a5:be:
         93:a1:87:69:0b:4e:5c:f1:a4:58:a7:0b:36:00:ab:0a:bf:c7:
         e0:1b:c1:c7:88:4d:33:60:67:66:c0:b0:b9:c9:65:b2:a4:e2:
         d4:9e:0a:0f:bd:1d:b5:e3:6d:28:16:94:8d:be:b4:2e:31:45:
         de:01:33:23:c8:da:b1:d7:65:92:38:c3:dd:84:7d:45:ee:f7:
         0c:bd:96:54:d5:76:ba:fb:75:74:d0:cf:cd:4f:00:86:a6:32:
         2f:7e:99:26:5f:13:9d:9c:ac:be:a6:2b:93:9e:96:70:a2:53:
         94:29:45:07:9a:ff:44:33:fd:47:d1:aa:c4:b5:1d:80:85:81:
         b1:3d:3a:a2:36:a8:43:6b:66:b0:a4:71:8b:d4:72:d3:34:3c:
         bb:61:c3:1d:a5:af:91:86:e7:7e:d6:4b:9e:14:1e:23:0f:47:
         04:cf:51:a2:42:52:e9:f3:fd:41:f1:1a:ca:5f:e0:39:4a:1d:
         91:ba:0f:88
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHFMSsV/rVGUUj6BsUdLONV5nC7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY0QTY0N0FGQTAwMkMwMzEwOUQ2QTMyMzM1NUUzNkFC
QTlDNzI4NDAeFw0yMzEwMzExODMzNTVaFw0yNDEwMjkxODM4NTVaMDMxMTAvBgNV
BAMTKDM0RDRDNzI1NzRFRTk3N0UwMzhFNTdENUZDRjEyMjMyRUY2NzMwRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2/QKatv0Y9n7yr4QCyYvVkkn
EBn2GikPMFMx5a9TC0O+IJzyVLXsjg0RHPUFsuLc0AEiijMF3g/9jQHzr7tMdGNO
dZ8LDuKmFs/TYNHkeXURnOeuLDqsvBw2KmeHkcQDwD31cbRBpAByzwnpHILneVsv
c7NQgXrp28kJufE3c85NOMEbDHdq60eMUSfBUS+icu3rFS5vfeg3QsMyinhFcWFs
hBPq/wEL9egQF3buJsyQaC8zfE96yPbBOPfop4q8wVKuyJOx0rPOj1MKqVDc/lNM
g913WZOoFS6jhSXV1n1TSxzA4/mW7E6y9+0+nPEd0FVTN376Lxvq1uRiEsjPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUNNTHJXTul34DjlfV/PEiMu9nMPUwHwYDVR0j
BBgwFoAUb0pkevoALAMQnWoyM1XjarqccoQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNqam02UVNWOWVjSEp5cXZIUjd1d2Y0RUNkQVo4NFNNaWt1bmY4clpz
bUEvMC82RjRBNjQ3QUZBMDAyQzAzMTA5RDZBMzIzMzU1RTM2QUJBOUM3Mjg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZGNEE2NDdBRkEwMDJDMDMx
MDlENkEzMjMzNTVFMzZBQkE5QzcyODQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZzamptNlFTVjllY0hKeXF2SFI3dXdmNEVDZEFaODRTTWlrdW5mOHJac21BLzAv
MzIzODMwMzQzYTM4Mzg2NTM4M2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMzM1MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEiOiQMA0GCSqGSIb3DQEBCwUA
A4IBAQCpiUGlDM34u7GDHHIweM1qDSh1jWccICxJyrgyZ4OEMEU91rClIGNr7H7C
1BsHX51nM352hksCz3C6UlXiTAfJkPd1H6G5pb6ToYdpC05c8aRYpws2AKsKv8fg
G8HHiE0zYGdmwLC5yWWypOLUngoPvR21420oFpSNvrQuMUXeATMjyNqx12WSOMPd
hH1F7vcMvZZU1Xa6+3V00M/NTwCGpjIvfpkmXxOdnKy+piuTnpZwolOUKUUHmv9E
M/1H0arEtR2AhYGxPTqiNqhDa2awpHGL1HLTNDy7YcMdpa+Rhud+1kueFB4jD0cE
z1GiQlLp8/1B8RrKX+A5Sh2Rug+I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org