Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a666430303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a666430303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          0CvcO4T1uij8wvIpKgfgnljicAxrCjmwkibO63pZY5I=
Subject key identifier:   E3:11:D8:8C:80:F1:CF:82:41:B2:13:C9:C1:45:6D:D2:1E:A8:E4:C2
Certificate issuer:       /CN=7F2D68010D759A0F44F99D8397541824AD9D9781
Certificate serial:       51DF1DC56AA77CC104E29A00AADBB930C8490581
Authority key identifier: 7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a666430303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Fri 08 Mar 2024 18:46:22 +0000
ROA not before:           Fri 08 Mar 2024 18:41:22 +0000
ROA not after:            Fri 07 Mar 2025 18:46:22 +0000
asID:                     267458
IP address blocks:        2804:41d0:fd00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:df:1d:c5:6a:a7:7c:c1:04:e2:9a:00:aa:db:b9:30:c8:49:05:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2D68010D759A0F44F99D8397541824AD9D9781
        Validity
            Not Before: Mar  8 18:41:22 2024 GMT
            Not After : Mar  7 18:46:22 2025 GMT
        Subject: CN=E311D88C80F1CF8241B213C9C1456DD21EA8E4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:82:84:ea:63:0d:ac:f0:f0:8c:ef:c9:a0:
                    62:67:67:39:99:ff:fb:1e:06:c4:48:d7:a4:95:3a:
                    fe:2c:da:42:93:d9:b6:86:3d:36:c8:73:4b:59:f1:
                    9d:63:c0:2a:8c:ed:c5:6b:4a:0c:e3:78:89:2b:a0:
                    23:a5:f1:22:7a:b7:d7:4e:fa:1c:33:09:2c:e2:e8:
                    92:76:ed:ef:24:73:f5:32:44:e8:51:2c:4f:e4:da:
                    8a:0e:7f:83:63:05:e0:bd:19:82:cb:69:b8:15:20:
                    e6:af:78:31:70:de:e6:16:87:a1:fb:a2:ac:ac:84:
                    fc:86:76:d0:67:04:da:bb:44:08:b5:67:0c:13:d0:
                    d3:80:b1:01:9e:42:7d:c9:40:d7:f2:d6:4d:ed:d9:
                    d9:95:de:57:72:a7:a8:df:64:53:a2:94:b2:70:9c:
                    cb:ac:fa:7b:9f:75:da:1e:74:81:10:b3:91:eb:18:
                    00:67:7e:32:29:a7:a0:bb:19:de:36:53:e0:ed:11:
                    49:7d:b8:65:93:e6:76:39:ed:76:1d:36:4b:d2:b7:
                    85:25:a9:e3:58:6f:c2:d8:ba:42:cd:02:0a:6b:63:
                    76:c5:65:b8:b0:7f:f7:86:95:21:b8:98:a9:53:a0:
                    7b:1d:4a:1c:39:32:39:fb:bd:da:48:0c:3f:a6:33:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:11:D8:8C:80:F1:CF:82:41:B2:13:C9:C1:45:6D:D2:1E:A8:E4:C2
            X509v3 Authority Key Identifier:
                keyid:7F:2D:68:01:0D:75:9A:0F:44:F9:9D:83:97:54:18:24:AD:9D:97:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/7F2D68010D759A0F44F99D8397541824AD9D9781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F2D68010D759A0F44F99D8397541824AD9D9781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a666430303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:f8:8e:74:dc:56:d0:f0:da:00:2d:e9:38:b5:5e:d0:86:88:
         cd:a5:cb:60:ea:45:23:1a:cd:c9:5a:19:ad:7a:d9:79:fc:50:
         af:14:3d:d2:d7:f5:87:22:86:be:21:bc:fb:74:80:79:59:af:
         1b:74:12:cc:b5:75:62:23:77:b6:e3:fd:48:2d:84:df:54:8c:
         10:72:86:e1:19:f3:3d:b9:5d:3f:fb:50:33:7f:29:88:a6:b8:
         d8:96:d4:bc:d8:6f:cd:50:91:fd:e7:d2:e7:2d:35:a9:5d:59:
         e8:24:bf:c3:e8:09:cf:6c:de:7c:3f:3c:5d:22:68:24:25:9b:
         ce:8d:9d:af:ba:25:b9:e5:73:21:59:c4:a1:31:f2:43:d5:dc:
         c0:94:5a:77:cc:e6:1b:ec:72:b3:30:af:bd:e7:ca:06:b7:ec:
         df:b2:83:f5:18:99:e3:35:36:83:57:5a:f4:d8:d3:fc:a2:9e:
         05:0a:b7:67:a5:3b:66:dd:29:3e:31:ef:9e:f2:1b:cd:8b:c4:
         b4:01:55:2e:a1:1c:a5:3f:d4:eb:8d:cd:89:79:48:7b:6d:9a:
         10:0c:e1:44:c9:c2:f5:98:81:67:ab:ed:9d:35:fa:5e:ca:5e:
         37:20:9f:ea:7f:78:3f:ce:d5:71:a3:23:46:8e:52:8f:19:dc:
         c1:7a:8b:46
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUd8dxWqnfMEE4poAqtu5MMhJBYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyRDY4MDEwRDc1OUEwRjQ0Rjk5RDgzOTc1NDE4MjRB
RDlEOTc4MTAeFw0yNDAzMDgxODQxMjJaFw0yNTAzMDcxODQ2MjJaMDMxMTAvBgNV
BAMTKEUzMTFEODhDODBGMUNGODI0MUIyMTNDOUMxNDU2REQyMUVBOEU0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1oKE6mMNrPDwjO/JoGJnZzmZ
//seBsRI16SVOv4s2kKT2baGPTbIc0tZ8Z1jwCqM7cVrSgzjeIkroCOl8SJ6t9dO
+hwzCSzi6JJ27e8kc/UyROhRLE/k2ooOf4NjBeC9GYLLabgVIOaveDFw3uYWh6H7
oqyshPyGdtBnBNq7RAi1ZwwT0NOAsQGeQn3JQNfy1k3t2dmV3ldyp6jfZFOilLJw
nMus+nufddoedIEQs5HrGABnfjIpp6C7Gd42U+DtEUl9uGWT5nY57XYdNkvSt4Ul
qeNYb8LYukLNAgprY3bFZbiwf/eGlSG4mKlToHsdShw5Mjn7vdpIDD+mM+V/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU4xHYjIDxz4JBshPJwUVt0h6o5MIwHwYDVR0j
BBgwFoAUfy1oAQ11mg9E+Z2Dl1QYJK2dl4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMC83RjJENjgwMTBENzU5QTBGNDRGOTlEODM5NzU0MTgyNEFEOUQ5NzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGMkQ2ODAxMEQ3NTlBMEY0
NEY5OUQ4Mzk3NTQxODI0QUQ5RDk3ODEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzAv
MzIzODMwMzQzYTM0MzE2NDMwM2E2NjY0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzM0MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEQdD9MA0GCSqGSIb3DQEBCwUA
A4IBAQCI+I503FbQ8NoALek4tV7QhojNpctg6kUjGs3JWhmtetl5/FCvFD3S1/WH
Ioa+Ibz7dIB5Wa8bdBLMtXViI3e24/1ILYTfVIwQcobhGfM9uV0/+1AzfymIprjY
ltS82G/NUJH959LnLTWpXVnoJL/D6AnPbN58PzxdImgkJZvOjZ2vuiW55XMhWcSh
MfJD1dzAlFp3zOYb7HKzMK+958oGt+zfsoP1GJnjNTaDV1r02NP8op4FCrdnpTtm
3Sk+Me+e8hvNi8S0AVUuoRylP9Trjc2JeUh7bZoQDOFEycL1mIFnq+2dNfpeyl43
IJ/qf3g/ztVxoyNGjlKPGdzBeotG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org