Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a383030303a3a2f33332d3333203d3e20323730383830.roa
File:                     323830343a373264633a383030303a3a2f33332d3333203d3e20323730383830.roa (raw, json)
Hash identifier:          UflPaKlYilo19P6ThEyOyRzfVWkSmSae6R3omAGKN9s=
Subject key identifier:   4B:37:91:D9:A6:5C:06:AD:36:F2:C1:ED:E0:8F:D5:CB:BA:60:06:7F
Certificate issuer:       /CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Certificate serial:       604E410F9190759885CA9AC31A34CE9DECE83590
Authority key identifier: 87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a383030303a3a2f33332d3333203d3e20323730383830.roa
Signing time:             Mon 04 Dec 2023 19:49:02 +0000
ROA not before:           Mon 04 Dec 2023 19:44:02 +0000
ROA not after:            Mon 02 Dec 2024 19:49:02 +0000
asID:                     270880
IP address blocks:        2804:72dc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4e:41:0f:91:90:75:98:85:ca:9a:c3:1a:34:ce:9d:ec:e8:35:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
        Validity
            Not Before: Dec  4 19:44:02 2023 GMT
            Not After : Dec  2 19:49:02 2024 GMT
        Subject: CN=4B3791D9A65C06AD36F2C1EDE08FD5CBBA60067F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:b7:56:25:d4:67:32:d8:04:d6:7a:21:24:
                    b0:06:a8:0d:67:ac:7a:ac:d1:d8:b1:fc:85:e1:81:
                    43:0a:9b:41:77:b2:cd:68:3e:d6:71:7a:87:0b:c9:
                    43:e8:9d:be:cc:2c:5e:70:08:88:87:b1:4e:85:34:
                    af:ae:ca:17:ff:c5:c1:a3:87:51:f1:e3:b7:c4:5a:
                    8d:07:9c:55:d7:b2:e8:56:2e:b6:cf:d7:7c:47:d8:
                    52:36:4f:34:c8:21:94:e5:69:ae:32:b3:9f:2b:43:
                    c9:db:65:4d:df:cb:03:54:52:0e:d7:2b:cb:52:a7:
                    4f:1a:e7:fc:95:c5:53:c3:b9:22:da:51:30:82:97:
                    b0:b5:2e:9c:c8:50:64:04:7b:67:b1:3d:98:6b:3e:
                    fa:9d:5b:cf:a3:0e:88:f8:ad:54:ee:cf:79:9f:59:
                    ed:0c:d4:03:87:9a:b0:4f:e8:df:6a:10:f8:aa:f8:
                    b4:52:04:b7:9f:73:38:a4:1f:04:fe:7a:0a:e2:d3:
                    db:cc:e1:7c:70:ee:55:e6:14:a7:39:42:1c:5c:3b:
                    74:f3:98:a9:19:db:79:84:04:72:13:31:83:37:0c:
                    c6:a0:c4:61:5e:3d:85:d4:8e:bd:fa:1b:bc:57:0f:
                    43:f9:f4:70:71:38:26:0d:42:7c:68:f7:37:cb:55:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:91:D9:A6:5C:06:AD:36:F2:C1:ED:E0:8F:D5:CB:BA:60:06:7F
            X509v3 Authority Key Identifier:
                keyid:87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/323830343a373264633a383030303a3a2f33332d3333203d3e20323730383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72dc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:dc:32:91:af:51:36:0e:1a:9d:99:3f:1c:ef:cd:bd:da:2f:
         a0:2d:9f:92:60:87:ab:52:b4:aa:eb:ee:b0:58:18:2b:42:98:
         d4:c1:f3:24:e6:2d:64:0f:ed:e2:46:c7:85:8e:ff:77:94:12:
         39:8e:6c:2e:da:88:c0:ae:d4:a8:d0:d9:3a:98:88:c6:4c:d4:
         c9:3f:09:5a:69:8d:ae:1c:a8:a4:1e:1b:51:81:cb:9d:e3:e0:
         98:62:91:64:ee:e8:70:2f:d3:76:cd:0e:14:38:2b:64:c2:b9:
         3d:78:0a:b7:80:83:8e:50:4e:b2:e7:30:0e:82:a5:ca:02:e3:
         ec:d0:8d:3e:b8:b3:9f:f5:34:e2:f6:dd:0a:5b:0a:f9:bb:67:
         52:9b:e2:8e:d4:14:6c:e0:e5:29:46:1c:a9:d7:ee:b0:89:c7:
         74:6a:57:cf:73:79:d8:85:87:f5:d0:c4:b3:77:f8:93:96:f9:
         18:82:fa:31:fa:4c:d6:c3:48:de:d8:59:ef:e3:8d:63:97:75:
         15:32:48:a1:19:c2:72:a2:49:d1:a5:7b:0d:d1:52:d5:b7:f0:
         d2:bc:27:03:d9:61:1d:34:7b:32:16:d8:60:35:c8:9d:07:25:
         c8:03:03:37:b5:9f:e7:66:cb:02:d4:16:40:4d:8b:21:ca:38:
         f8:84:e9:79
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYE5BD5GQdZiFyprDGjTOnezoNZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBQUVDQkMzNDI2RDM4MTI1NjI5OUMyRDZFN0Y2RkM2
MkM4RURFQzAeFw0yMzEyMDQxOTQ0MDJaFw0yNDEyMDIxOTQ5MDJaMDMxMTAvBgNV
BAMTKDRCMzc5MUQ5QTY1QzA2QUQzNkYyQzFFREUwOEZENUNCQkE2MDA2N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJrdWJdRnMtgE1nohJLAGqA1n
rHqs0dix/IXhgUMKm0F3ss1oPtZxeocLyUPonb7MLF5wCIiHsU6FNK+uyhf/xcGj
h1Hx47fEWo0HnFXXsuhWLrbP13xH2FI2TzTIIZTlaa4ys58rQ8nbZU3fywNUUg7X
K8tSp08a5/yVxVPDuSLaUTCCl7C1LpzIUGQEe2exPZhrPvqdW8+jDoj4rVTuz3mf
We0M1AOHmrBP6N9qEPiq+LRSBLefczikHwT+egri09vM4Xxw7lXmFKc5QhxcO3Tz
mKkZ23mEBHITMYM3DMagxGFePYXUjr36G7xXD0P59HBxOCYNQnxo9zfLVZgRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSzeR2aZcBq028sHt4I/Vy7pgBn8wHwYDVR0j
BBgwFoAUh6rsvDQm04ElYpnC1uf2/GLI7ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZheGE0MktrVHVzTjVZWmpiam1ITXg2UGoxcEcyYmNtVlhuZ2NHZ3E5
QjYvMC84N0FBRUNCQzM0MjZEMzgxMjU2Mjk5QzJENkU3RjZGQzYyQzhFREVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3QUFFQ0JDMzQyNkQzODEy
NTYyOTlDMkQ2RTdGNkZDNjJDOEVERUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2YXhhNDJLa1R1c041WVpqYmptSE14NlBqMXBHMmJjbVZYbmdjR2dxOUI2LzAv
MzIzODMwMzQzYTM3MzI2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM4MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEctyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCG3DKRr1E2DhqdmT8c78292i+gLZ+SYIerUrSq6+6wWBgrQpjUwfMk5i1k
D+3iRseFjv93lBI5jmwu2ojArtSo0Nk6mIjGTNTJPwlaaY2uHKikHhtRgcud4+CY
YpFk7uhwL9N2zQ4UOCtkwrk9eAq3gIOOUE6y5zAOgqXKAuPs0I0+uLOf9TTi9t0K
Wwr5u2dSm+KO1BRs4OUpRhyp1+6wicd0alfPc3nYhYf10MSzd/iTlvkYgvox+kzW
w0je2Fnv441jl3UVMkihGcJyoknRpXsN0VLVt/DSvCcD2WEdNHsyFthgNcidByXI
AwM3tZ/nZssC1BZATYshyjj4hOl5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org