Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
File:                     323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (raw, json)
Hash identifier:          0gxMFR6WTdTcDfdpddoDdOcLNZx+xjudJWc1Cacbvfw=
Subject key identifier:   30:33:AA:78:29:4C:22:48:50:53:00:6A:35:17:E8:88:58:98:D7:2C
Certificate issuer:       /CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
Certificate serial:       158F321D640A0AEE0E0A3B46F5135FFEBA6093B1
Authority key identifier: 79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
Signing time:             Wed 03 Jan 2024 14:01:15 +0000
ROA not before:           Wed 03 Jan 2024 13:56:15 +0000
ROA not after:            Wed 01 Jan 2025 14:01:15 +0000
asID:                     267324
IP address blocks:        2804:4bb0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8f:32:1d:64:0a:0a:ee:0e:0a:3b:46:f5:13:5f:fe:ba:60:93:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
        Validity
            Not Before: Jan  3 13:56:15 2024 GMT
            Not After : Jan  1 14:01:15 2025 GMT
        Subject: CN=3033AA78294C22485053006A3517E8885898D72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:33:af:11:49:65:49:c3:ff:72:25:2a:a3:83:
                    1f:ff:85:32:e6:43:cd:22:d9:90:5a:80:a7:ba:bd:
                    8c:62:d3:1a:4b:43:02:42:f6:9c:49:85:96:8f:0d:
                    14:f3:67:4e:7e:cc:0d:69:66:00:09:c1:42:d3:01:
                    35:68:e5:62:9d:84:43:21:86:08:a5:16:2b:e6:7c:
                    6d:e6:7f:fb:e9:9e:ea:b7:4f:29:dd:d1:8c:d7:66:
                    ae:0c:a1:d6:43:f1:94:f0:1a:c4:f5:3f:5b:99:88:
                    f5:eb:26:56:b2:d4:5c:8d:6b:23:d0:f6:f9:88:71:
                    18:99:8b:a1:b5:36:a6:96:bb:70:89:51:32:c2:09:
                    27:88:04:12:76:43:19:e8:83:26:59:3f:9f:1d:5e:
                    7d:16:e4:43:a7:00:38:68:88:7d:da:72:fd:69:59:
                    74:ed:b9:c4:22:f7:f7:86:2f:77:b6:2a:f5:ba:73:
                    be:c6:2f:ee:71:58:9e:29:5f:5d:78:cf:f6:fc:29:
                    26:b5:e8:45:06:35:a7:d2:38:25:81:fa:bf:c6:6e:
                    f7:7f:c7:78:ad:e8:10:77:7d:85:d3:30:6d:68:7d:
                    2e:9a:ef:4c:e9:52:d5:b0:44:13:4d:80:72:9a:87:
                    4e:d4:41:a3:c5:0c:f7:df:4f:a5:d0:ab:76:4a:5b:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:AA:78:29:4C:22:48:50:53:00:6A:35:17:E8:88:58:98:D7:2C
            X509v3 Authority Key Identifier:
                keyid:79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:c5:db:d4:fc:b5:f2:fe:69:db:03:59:72:b2:58:1e:b1:34:
         3e:4e:e2:87:bb:b3:1b:f1:a9:2f:2f:8a:27:99:53:db:90:77:
         d9:a0:d2:fa:39:24:a2:c1:a3:0c:b0:ac:f1:62:3f:0e:47:1f:
         4f:b7:60:f5:20:f8:71:55:8f:26:14:81:cf:3f:a7:88:18:97:
         dc:97:a5:59:df:0e:29:d8:e4:22:79:b1:ad:ca:b2:80:c0:c4:
         69:d3:9a:b4:c5:2b:9c:c7:49:88:fe:9e:c4:f0:4f:7f:2e:6b:
         7f:93:9f:a2:79:d6:2e:d3:b1:00:6d:5a:e2:46:e2:34:cb:2a:
         5c:21:fb:a2:86:8a:53:7b:a4:90:33:5b:cb:68:f9:f0:40:c5:
         22:60:28:31:d2:10:e8:64:e9:61:e0:d1:c5:2f:e6:df:36:2f:
         68:b1:d4:70:bb:ad:e6:fb:3f:16:4d:f3:69:57:cb:73:22:e4:
         af:c1:ba:c6:52:60:0f:6a:04:00:0c:cd:d4:37:a2:19:8c:9e:
         a7:ad:bb:18:eb:d6:6b:a5:eb:27:ee:5b:11:8d:5b:fc:df:e9:
         cf:e0:fa:24:dd:40:4a:fd:19:7b:1c:3c:fb:0a:05:66:aa:f2:
         36:38:da:b6:68:d6:20:2b:f1:0e:fd:cc:38:bc:3b:0c:2b:10:
         72:96:d7:79
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFY8yHWQKCu4OCjtG9RNf/rpgk7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkxMkY4RDlBQkM4OUQyQTg4RTlBRDAzMzFDM0YyRjFC
MzI5NjY1RTAeFw0yNDAxMDMxMzU2MTVaFw0yNTAxMDExNDAxMTVaMDMxMTAvBgNV
BAMTKDMwMzNBQTc4Mjk0QzIyNDg1MDUzMDA2QTM1MTdFODg4NTg5OEQ3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhM68RSWVJw/9yJSqjgx//hTLm
Q80i2ZBagKe6vYxi0xpLQwJC9pxJhZaPDRTzZ05+zA1pZgAJwULTATVo5WKdhEMh
hgilFivmfG3mf/vpnuq3Tynd0YzXZq4ModZD8ZTwGsT1P1uZiPXrJlay1FyNayPQ
9vmIcRiZi6G1NqaWu3CJUTLCCSeIBBJ2QxnogyZZP58dXn0W5EOnADhoiH3acv1p
WXTtucQi9/eGL3e2KvW6c77GL+5xWJ4pX114z/b8KSa16EUGNafSOCWB+r/Gbvd/
x3it6BB3fYXTMG1ofS6a70zpUtWwRBNNgHKah07UQaPFDPffT6XQq3ZKW5DhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMDOqeClMIkhQUwBqNRfoiFiY1ywwHwYDVR0j
BBgwFoAUeRL42avInSqI6a0DMcPy8bMpZl4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5
aW4vMC83OTEyRjhEOUFCQzg5RDJBODhFOUFEMDMzMUMzRjJGMUIzMjk2NjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5MTJGOEQ5QUJDODlEMkE4
OEU5QUQwMzMxQzNGMkYxQjMyOTY2NUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0eXBMVXdlMmt2bm1qZ1hZbk5aRHlEMlMzSmM2UXN5Z29UYUE4TVJMOWluLzAv
MzIzODMwMzQzYTM0NjI2MjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARLsDANBgkqhkiG9w0BAQsFAAOCAQEArcXb1Py1
8v5p2wNZcrJYHrE0Pk7ih7uzG/GpLy+KJ5lT25B32aDS+jkkosGjDLCs8WI/Dkcf
T7dg9SD4cVWPJhSBzz+niBiX3JelWd8OKdjkInmxrcqygMDEadOatMUrnMdJiP6e
xPBPfy5rf5OfonnWLtOxAG1a4kbiNMsqXCH7ooaKU3ukkDNby2j58EDFImAoMdIQ
6GTpYeDRxS/m3zYvaLHUcLut5vs/Fk3zaVfLcyLkr8G6xlJgD2oEAAzN1DeiGYye
p627GOvWa6XrJ+5bEY1b/N/pz+D6JN1ASv0Zexw8+woFZqryNjjatmjWICvxDv3M
OLw7DCsQcpbXeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org