Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313630303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a313630303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          dcuucGF4OM24DTo10AHgi0fUHAenq2PWsbLX3PEm1Ks=
Subject key identifier:   F9:E9:EC:9B:EC:0D:C0:DA:11:1F:5D:CB:4A:EC:F9:F0:35:5E:60:5C
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       4CC202E8D7B67FF8E67275B6D0579225640D283D
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313630303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:45:54 +0000
ROA not before:           Fri 08 Mar 2024 18:40:54 +0000
ROA not after:            Fri 07 Mar 2025 18:45:54 +0000
asID:                     267458
IP address blocks:        2804:41d0:1600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c2:02:e8:d7:b6:7f:f8:e6:72:75:b6:d0:57:92:25:64:0d:28:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:40:54 2024 GMT
            Not After : Mar  7 18:45:54 2025 GMT
        Subject: CN=F9E9EC9BEC0DC0DA111F5DCB4AECF9F0355E605C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:ea:dc:81:68:52:55:44:25:75:3c:c7:40:
                    ef:93:1b:52:15:22:3c:5f:87:96:1e:37:dd:d7:9c:
                    f3:25:51:bc:28:28:2c:70:cf:d0:d3:2f:aa:f7:b7:
                    ce:cd:83:6f:87:06:88:bf:1a:24:a6:4d:ea:40:a7:
                    09:81:fc:1b:74:f8:55:f6:bc:b0:d1:2e:34:0a:4f:
                    89:e2:0d:7f:ff:2d:ff:f5:34:0e:4d:d5:3d:d1:4a:
                    56:a3:d4:8d:27:6f:6a:90:03:f1:57:10:5e:47:70:
                    99:81:4e:3c:73:3e:5f:1c:18:57:6b:e8:0e:4c:7f:
                    3f:c7:e0:4a:81:3e:16:e4:a2:3d:11:c5:bc:86:68:
                    f6:a8:09:08:6e:57:ef:31:e2:2a:4c:8e:20:10:2f:
                    07:e6:52:c6:16:86:e4:74:06:63:30:fc:68:e8:6c:
                    2a:b1:b5:87:c6:fd:a8:4f:cb:22:cf:1e:bb:8e:bc:
                    eb:fb:01:66:0d:e2:33:45:b0:bb:21:89:df:9a:b7:
                    03:16:2f:3b:57:05:c8:f5:3f:7a:bf:fd:ed:4f:47:
                    8e:21:15:b7:01:da:2a:92:e7:fe:03:91:a8:d1:ce:
                    12:c4:80:c1:69:71:88:a1:6e:d0:e1:ff:f0:c4:bf:
                    86:f8:85:2c:1a:b6:d1:86:37:15:ac:32:a9:b7:66:
                    9a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:EC:9B:EC:0D:C0:DA:11:1F:5D:CB:4A:EC:F9:F0:35:5E:60:5C
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a313630303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:f2:6a:f6:13:53:3c:18:84:88:87:42:b3:8b:e2:35:b2:a4:
         18:b4:a5:e8:ad:e6:2b:1c:56:d1:e3:cc:e2:e4:5c:97:ff:01:
         e7:43:cd:41:50:13:a1:31:ea:30:eb:a7:5d:59:1e:b1:68:51:
         a6:a6:36:0e:77:2b:1f:84:41:80:ec:05:55:3a:eb:df:6a:fd:
         47:8a:c2:be:86:5d:47:9b:ca:b7:0f:8e:8f:62:29:2c:37:16:
         41:28:49:3a:c3:d4:6d:d6:5d:ea:db:bf:eb:c2:89:78:df:c6:
         99:01:d0:4d:87:16:a6:c7:7d:ea:c5:d1:90:d5:15:d2:d2:d0:
         d8:89:47:c4:ad:b8:a2:6f:5c:aa:fb:d2:e5:0c:f9:5d:37:78:
         52:c2:f7:47:1d:4f:9b:8e:59:c7:15:59:55:21:2d:6f:a5:59:
         32:68:ea:86:18:ee:c4:75:78:d5:a8:c4:52:21:95:e6:ec:9a:
         4a:76:bb:4e:d8:96:21:4b:3c:6c:45:ab:2a:30:ef:d0:99:62:
         cb:36:22:f3:5a:36:b3:21:24:ee:0c:03:82:93:44:fe:a2:0c:
         89:b7:75:36:3d:85:bf:b2:c6:0b:ad:20:2e:87:f4:39:74:9e:
         41:72:e1:cd:e5:d9:01:38:df:04:47:4a:7d:8f:54:31:2f:a9:
         d4:b7:dd:f7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTMIC6Ne2f/jmcnW20FeSJWQNKD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyRDY4MDEwRDc1OUEwRjQ0Rjk5RDgzOTc1NDE4MjRB
RDlEOTc4MTAeFw0yNDAzMDgxODQwNTRaFw0yNTAzMDcxODQ1NTRaMDMxMTAvBgNV
BAMTKEY5RTlFQzlCRUMwREMwREExMTFGNURDQjRBRUNGOUYwMzU1RTYwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDr+rcgWhSVUQldTzHQO+TG1IV
Ijxfh5YeN93XnPMlUbwoKCxwz9DTL6r3t87Ng2+HBoi/GiSmTepApwmB/Bt0+FX2
vLDRLjQKT4niDX//Lf/1NA5N1T3RSlaj1I0nb2qQA/FXEF5HcJmBTjxzPl8cGFdr
6A5Mfz/H4EqBPhbkoj0RxbyGaPaoCQhuV+8x4ipMjiAQLwfmUsYWhuR0BmMw/Gjo
bCqxtYfG/ahPyyLPHruOvOv7AWYN4jNFsLshid+atwMWLztXBcj1P3q//e1PR44h
FbcB2iqS5/4DkajRzhLEgMFpcYihbtDh//DEv4b4hSwattGGNxWsMqm3ZpobAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+ensm+wNwNoRH13LSuz58DVeYFwwHwYDVR0j
BBgwFoAUfy1oAQ11mg9E+Z2Dl1QYJK2dl4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMC83RjJENjgwMTBENzU5QTBGNDRGOTlEODM5NzU0MTgyNEFEOUQ5NzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGMkQ2ODAxMEQ3NTlBMEY0
NEY5OUQ4Mzk3NTQxODI0QUQ5RDk3ODEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzAv
MzIzODMwMzQzYTM0MzE2NDMwM2EzMTM2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM0MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEQdAWMA0GCSqGSIb3DQEBCwUA
A4IBAQAG8mr2E1M8GISIh0Kzi+I1sqQYtKXoreYrHFbR48zi5FyX/wHnQ81BUBOh
Meow66ddWR6xaFGmpjYOdysfhEGA7AVVOuvfav1HisK+hl1Hm8q3D46PYiksNxZB
KEk6w9Rt1l3q27/rwol438aZAdBNhxamx33qxdGQ1RXS0tDYiUfErbiib1yq+9Ll
DPldN3hSwvdHHU+bjlnHFVlVIS1vpVkyaOqGGO7EdXjVqMRSIZXm7JpKdrtO2JYh
SzxsRasqMO/QmWLLNiLzWjazISTuDAOCk0T+ogyJt3U2PYW/ssYLrSAuh/Q5dJ5B
cuHN5dkBON8ER0p9j1QxL6nUt933
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org