Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdqJ96QzucASWp6GSoeSsvZwPuKjyARZD9GBk7Xg2kau/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa
File:                     323830343a333163633a3a2f33322d3334203d3e20323635303338.roa (raw, json)
Hash identifier:          cd2ZsHfZiizBuhxBJhwaZCV9HId9hwyTQlS14zq3yqE=
Subject key identifier:   3A:1E:91:C3:3D:F4:DB:F0:C8:B2:7D:0F:5E:D6:17:B8:6E:5F:A2:5A
Certificate issuer:       /CN=3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2
Certificate serial:       46A90312B12C1E3DED0D99B0E90275B4D9F9E0F3
Authority key identifier: 3F:FC:B7:BA:58:3D:74:E3:AD:F0:38:4A:E1:FB:35:70:75:5A:05:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdqJ96QzucASWp6GSoeSsvZwPuKjyARZD9GBk7Xg2kau/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa
Signing time:             Wed 24 May 2023 16:43:47 +0000
ROA not before:           Wed 24 May 2023 16:38:47 +0000
ROA not after:            Wed 22 May 2024 16:43:47 +0000
asID:                     265038
IP address blocks:        2804:31cc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a9:03:12:b1:2c:1e:3d:ed:0d:99:b0:e9:02:75:b4:d9:f9:e0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2
        Validity
            Not Before: May 24 16:38:47 2023 GMT
            Not After : May 22 16:43:47 2024 GMT
        Subject: CN=3A1E91C33DF4DBF0C8B27D0F5ED617B86E5FA25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:d9:bd:f9:28:1c:2f:2f:b7:0b:70:0a:a6:
                    e0:c4:d4:87:59:6b:0b:63:67:8b:f1:d3:1a:1b:93:
                    28:6a:25:bd:27:49:8a:03:e2:1d:dd:ce:93:ec:4d:
                    fa:d4:75:69:4d:0c:fb:c4:a1:52:5f:c0:f8:76:9a:
                    f6:10:8b:cf:07:9b:2e:d9:78:88:ac:14:cb:88:4b:
                    81:ff:39:9d:ff:6a:77:49:26:f0:35:d2:82:5f:da:
                    38:ea:eb:ed:e5:d5:2d:77:e0:dc:66:40:74:98:95:
                    e0:34:bb:c0:d2:7c:ef:80:06:7e:11:10:7d:39:1a:
                    62:e1:41:66:a9:89:15:ff:be:83:aa:90:19:e1:b7:
                    59:f1:60:de:f0:22:21:4e:ab:ca:3b:c1:ae:8b:b1:
                    81:34:d3:30:a8:c8:4a:5b:f9:b0:28:df:07:2f:54:
                    4c:f5:50:1e:75:e4:ed:31:8c:94:34:2e:6d:0a:45:
                    bc:3c:6d:e6:9e:3e:e0:4e:2b:fb:77:91:c3:58:3b:
                    2a:8f:62:d9:30:9a:e5:d4:92:8e:2a:e5:4f:6a:c4:
                    24:03:3b:3e:2a:68:dd:53:e6:73:70:b4:90:30:0b:
                    d8:71:87:75:88:2e:31:03:29:36:f1:65:50:a3:86:
                    0d:a5:d0:60:ce:2b:e8:bd:3c:91:50:67:f2:30:b2:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1E:91:C3:3D:F4:DB:F0:C8:B2:7D:0F:5E:D6:17:B8:6E:5F:A2:5A
            X509v3 Authority Key Identifier:
                keyid:3F:FC:B7:BA:58:3D:74:E3:AD:F0:38:4A:E1:FB:35:70:75:5A:05:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdqJ96QzucASWp6GSoeSsvZwPuKjyARZD9GBk7Xg2kau/0/3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdqJ96QzucASWp6GSoeSsvZwPuKjyARZD9GBk7Xg2kau/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:55:0f:b4:12:ee:26:5a:85:ab:1c:5b:f3:09:21:35:05:
         74:ed:31:56:ff:3f:bd:69:e2:32:12:43:49:33:02:db:22:3b:
         6b:35:4c:b9:87:a8:85:24:24:c5:14:42:32:b5:71:94:d2:db:
         ce:c2:c6:fb:03:5f:f0:2c:26:cb:37:22:70:e6:bb:34:e8:49:
         81:b9:cf:99:5b:e3:67:f9:00:ee:4b:d2:29:6d:67:a7:27:6a:
         12:c3:40:48:00:81:e9:24:e8:62:9f:5a:ed:b4:3a:66:9a:06:
         87:5b:39:76:88:76:c8:59:a2:d9:8b:be:0a:67:b7:10:ab:8e:
         8f:82:d6:5c:70:c4:c0:83:b3:f3:5d:4c:29:e6:de:d0:c6:d3:
         27:cf:f1:43:10:7d:78:92:ee:20:c1:80:17:66:ec:15:75:26:
         7c:da:7a:46:7b:be:16:ff:d8:6a:ff:ef:08:9c:93:9a:04:ed:
         c2:e5:39:5f:d1:da:e4:9b:71:6b:3b:bc:01:52:d0:38:f0:18:
         73:17:d2:30:6f:a8:5a:22:21:57:45:2b:bf:0d:17:6d:8a:59:
         3b:7b:15:49:0f:a0:ef:ac:86:47:92:80:4b:ee:ec:68:71:bd:
         9e:c8:c0:1b:c7:d0:ec:24:91:eb:17:87:5c:da:1e:76:0b:e8:
         9d:7e:ae:5f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURqkDErEsHj3tDZmw6QJ1tNn54PMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGQ0I3QkE1ODNENzRFM0FERjAzODRBRTFGQjM1NzA3
NTVBMDVBMjAeFw0yMzA1MjQxNjM4NDdaFw0yNDA1MjIxNjQzNDdaMDMxMTAvBgNV
BAMTKDNBMUU5MUMzM0RGNERCRjBDOEIyN0QwRjVFRDYxN0I4NkU1RkEyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVOtm9+SgcLy+3C3AKpuDE1IdZ
awtjZ4vx0xobkyhqJb0nSYoD4h3dzpPsTfrUdWlNDPvEoVJfwPh2mvYQi88Hmy7Z
eIisFMuIS4H/OZ3/andJJvA10oJf2jjq6+3l1S134NxmQHSYleA0u8DSfO+ABn4R
EH05GmLhQWapiRX/voOqkBnht1nxYN7wIiFOq8o7wa6LsYE00zCoyEpb+bAo3wcv
VEz1UB515O0xjJQ0Lm0KRbw8beaePuBOK/t3kcNYOyqPYtkwmuXUko4q5U9qxCQD
Oz4qaN1T5nNwtJAwC9hxh3WILjEDKTbxZVCjhg2l0GDOK+i9PJFQZ/IwsnqFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOh6Rwz302/DIsn0PXtYXuG5folowHwYDVR0j
BBgwFoAUP/y3ulg9dOOt8DhK4fs1cHVaBaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRxSjk2UXp1Y0FTV3A2R1NvZVNzdlp3UHVLanlBUlpEOUdCazdYZzJr
YXUvMC8zRkZDQjdCQTU4M0Q3NEUzQURGMDM4NEFFMUZCMzU3MDc1NUEwNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRkNCN0JBNTgzRDc0RTNB
REYwMzg0QUUxRkIzNTcwNzU1QTA1QTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkcUo5NlF6dWNBU1dwNkdTb2VTc3Zad1B1S2p5QVJaRDlHQms3WGcya2F1LzAv
MzIzODMwMzQzYTMzMzE2MzYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM1
MzAzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxzDANBgkqhkiG9w0BAQsFAAOCAQEAaIpVD7QS
7iZahascW/MJITUFdO0xVv8/vWniMhJDSTMC2yI7azVMuYeohSQkxRRCMrVxlNLb
zsLG+wNf8CwmyzcicOa7NOhJgbnPmVvjZ/kA7kvSKW1npydqEsNASACB6SToYp9a
7bQ6ZpoGh1s5doh2yFmi2Yu+Cme3EKuOj4LWXHDEwIOz811MKebe0MbTJ8/xQxB9
eJLuIMGAF2bsFXUmfNp6Rnu+Fv/Yav/vCJyTmgTtwuU5X9Ha5Jtxazu8AVLQOPAY
cxfSMG+oWiIhV0Urvw0XbYpZO3sVSQ+g76yGR5KAS+7saHG9nsjAG8fQ7CSR6xeH
XNoedgvonX6uXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org