Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a3a2f33322d3332203d3e20323634343739.roa
File:                     323830343a323033633a3a2f33322d3332203d3e20323634343739.roa (raw, json)
Hash identifier:          LM1XDFU8e3NzS8IC0mdE5qoC88yTd82XvlJfqQDJdcE=
Subject key identifier:   53:19:D3:94:F2:7A:A6:78:C5:61:D2:AB:4F:AC:45:B3:25:C8:48:02
Certificate issuer:       /CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Certificate serial:       0D7B23301A7C3C03CEA251C288877C8D48B04928
Authority key identifier: 32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a3a2f33322d3332203d3e20323634343739.roa
Signing time:             Mon 15 May 2023 22:43:03 +0000
ROA not before:           Mon 15 May 2023 22:38:03 +0000
ROA not after:            Mon 13 May 2024 22:43:03 +0000
asID:                     264479
IP address blocks:        2804:203c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7b:23:30:1a:7c:3c:03:ce:a2:51:c2:88:87:7c:8d:48:b0:49:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3225A9367BE412857B6DFF323F2D20F155EF273C
        Validity
            Not Before: May 15 22:38:03 2023 GMT
            Not After : May 13 22:43:03 2024 GMT
        Subject: CN=5319D394F27AA678C561D2AB4FAC45B325C84802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:e8:fd:db:87:b8:a6:18:33:62:a0:09:2a:
                    f8:ad:20:07:e3:8d:62:81:cb:8b:4f:56:fa:4d:d4:
                    c1:bd:bb:df:02:c2:3c:66:a9:69:0e:5f:35:2c:7a:
                    f8:fe:55:cd:88:31:87:a1:01:7f:21:08:0d:5a:f0:
                    77:cd:41:51:ef:e7:b2:4d:b9:c8:c4:26:6b:42:56:
                    5c:80:3f:fa:ad:56:1b:4c:67:e9:ad:ae:e6:5d:af:
                    f7:c7:aa:fd:bd:3b:6a:ae:54:f3:27:c8:a0:01:32:
                    c4:a6:8b:06:f6:9c:08:98:6e:31:f5:ee:a4:c0:83:
                    fb:39:43:15:5e:6b:4b:3c:7f:85:94:93:d5:3c:95:
                    8a:8e:47:30:c1:56:83:a5:c6:a7:a3:66:ad:41:d8:
                    3b:27:38:71:ba:af:c7:61:33:a7:72:07:4e:7c:f6:
                    e4:ec:6e:c3:f1:69:60:69:8f:01:cf:02:87:30:08:
                    cf:e2:bd:b1:01:fd:8f:53:36:90:1d:44:09:6b:bd:
                    91:11:f2:d7:ff:fc:e3:93:df:f6:5b:96:94:1c:f2:
                    36:21:0c:12:a5:dd:2a:ec:ab:bc:a6:04:a0:25:a9:
                    79:b3:1f:a5:d5:e5:06:41:4a:10:29:c7:fe:d5:d8:
                    b2:18:89:3c:1b:a3:7f:d5:65:06:12:cd:33:f9:cf:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:19:D3:94:F2:7A:A6:78:C5:61:D2:AB:4F:AC:45:B3:25:C8:48:02
            X509v3 Authority Key Identifier:
                keyid:32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3225A9367BE412857B6DFF323F2D20F155EF273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/323830343a323033633a3a2f33322d3332203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:02:f9:95:80:dd:40:f5:3b:61:7e:7a:88:81:d4:e4:57:8b:
         82:c8:89:b9:af:28:11:71:81:ed:ee:83:cc:bc:d7:22:30:6a:
         56:5b:3a:a2:f3:a7:5b:e0:e8:4a:79:16:59:35:6d:4b:94:c9:
         02:e8:25:46:5c:39:cd:22:f2:d4:a7:2d:db:65:26:23:87:54:
         43:5a:99:be:68:4b:27:d0:f8:62:62:22:77:d4:e4:86:a5:bf:
         aa:3a:be:dc:02:87:7c:17:a3:de:53:36:39:9e:41:3c:39:91:
         f9:f0:86:f4:48:cc:c8:01:1a:86:54:e0:03:2a:0b:94:47:f1:
         67:2f:8a:64:18:19:23:fe:90:66:1c:06:cd:06:21:76:a6:8f:
         31:2f:34:5f:81:67:fa:b9:77:b4:cd:ac:93:15:ca:0b:cd:74:
         97:54:38:6d:0a:5d:a8:ab:c0:fe:10:da:f1:55:0a:54:44:fc:
         4b:ba:8d:a9:75:b1:e8:a0:27:95:84:6a:97:2f:96:07:72:3f:
         ac:33:0c:fa:11:45:65:e5:de:90:93:7b:2c:f6:e0:ee:ce:a1:
         ab:31:ab:4b:8a:b9:15:27:5a:5e:c7:aa:34:6e:95:d6:cc:36:
         18:44:82:30:57:2f:31:a5:db:a8:be:73:3b:3e:23:9c:6a:15:
         53:3e:e5:9f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDXsjMBp8PAPOolHCiId8jUiwSSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyNUE5MzY3QkU0MTI4NTdCNkRGRjMyM0YyRDIwRjE1
NUVGMjczQzAeFw0yMzA1MTUyMjM4MDNaFw0yNDA1MTMyMjQzMDNaMDMxMTAvBgNV
BAMTKDUzMTlEMzk0RjI3QUE2NzhDNTYxRDJBQjRGQUM0NUIzMjVDODQ4MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtuj924e4phgzYqAJKvitIAfj
jWKBy4tPVvpN1MG9u98CwjxmqWkOXzUsevj+Vc2IMYehAX8hCA1a8HfNQVHv57JN
ucjEJmtCVlyAP/qtVhtMZ+mtruZdr/fHqv29O2quVPMnyKABMsSmiwb2nAiYbjH1
7qTAg/s5QxVea0s8f4WUk9U8lYqORzDBVoOlxqejZq1B2DsnOHG6r8dhM6dyB058
9uTsbsPxaWBpjwHPAocwCM/ivbEB/Y9TNpAdRAlrvZER8tf//OOT3/ZblpQc8jYh
DBKl3Srsq7ymBKAlqXmzH6XV5QZBShApx/7V2LIYiTwbo3/VZQYSzTP5zx6nAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUxnTlPJ6pnjFYdKrT6xFsyXISAIwHwYDVR0j
BBgwFoAUMiWpNnvkEoV7bf8yPy0g8VXvJzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMC8zMjI1QTkzNjdCRTQxMjg1N0I2REZGMzIzRjJEMjBGMTU1RUYyNzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMjVBOTM2N0JFNDEyODU3
QjZERkYzMjNGMkQyMEYxNTVFRjI3M0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzAv
MzIzODMwMzQzYTMyMzAzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQgPDANBgkqhkiG9w0BAQsFAAOCAQEAaQL5lYDd
QPU7YX56iIHU5FeLgsiJua8oEXGB7e6DzLzXIjBqVls6ovOnW+DoSnkWWTVtS5TJ
AuglRlw5zSLy1Kct22UmI4dUQ1qZvmhLJ9D4YmIid9TkhqW/qjq+3AKHfBej3lM2
OZ5BPDmR+fCG9EjMyAEahlTgAyoLlEfxZy+KZBgZI/6QZhwGzQYhdqaPMS80X4Fn
+rl3tM2skxXKC810l1Q4bQpdqKvA/hDa8VUKVET8S7qNqXWx6KAnlYRqly+WB3I/
rDMM+hFFZeXekJN7LPbg7s6hqzGrS4q5FSdaXseqNG6V1sw2GESCMFcvMaXbqL5z
Oz4jnGoVUz7lnw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org