Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/323830343a343765343a3a2f33322d3333203d3e20323637303833.roa
File:                     323830343a343765343a3a2f33322d3333203d3e20323637303833.roa (raw, json)
Hash identifier:          jKe30PtpyPoOcM1G+r3m3tH+n9haRxpb1Ld4Mgf+yaE=
Subject key identifier:   3D:D1:01:E9:A7:4F:E0:9D:86:F9:37:4D:75:62:7B:05:A1:68:57:25
Certificate issuer:       /CN=CE138B642DF1CA32ED81973E2984F21F40D85813
Certificate serial:       28349396EECECA58C263F7F88D6045908C7B6661
Authority key identifier: CE:13:8B:64:2D:F1:CA:32:ED:81:97:3E:29:84:F2:1F:40:D8:58:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE138B642DF1CA32ED81973E2984F21F40D85813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/323830343a343765343a3a2f33322d3333203d3e20323637303833.roa
Signing time:             Mon 19 Jun 2023 21:10:28 +0000
ROA not before:           Mon 19 Jun 2023 21:05:28 +0000
ROA not after:            Mon 17 Jun 2024 21:10:28 +0000
asID:                     267083
IP address blocks:        2804:47e4::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:34:93:96:ee:ce:ca:58:c2:63:f7:f8:8d:60:45:90:8c:7b:66:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE138B642DF1CA32ED81973E2984F21F40D85813
        Validity
            Not Before: Jun 19 21:05:28 2023 GMT
            Not After : Jun 17 21:10:28 2024 GMT
        Subject: CN=3DD101E9A74FE09D86F9374D75627B05A1685725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:bb:44:c2:7f:66:41:da:82:55:5c:0f:a3:
                    86:42:cc:2f:89:af:9e:43:91:d9:9e:3b:53:4d:e6:
                    84:89:f6:ac:18:5b:b3:dd:42:75:49:7e:ae:6c:f5:
                    e3:c4:c9:34:38:e2:a4:4b:16:ab:21:e2:08:b3:d4:
                    5c:bf:bd:b8:8f:04:1d:32:7b:23:f9:2a:2e:b5:49:
                    f8:29:33:5d:a6:94:1a:d0:ce:56:1c:7d:cb:98:da:
                    4d:84:b6:84:e9:df:f3:d3:c1:3c:a2:ca:ec:39:4e:
                    92:86:fc:11:6c:40:20:4c:e0:8c:96:2d:79:72:ed:
                    18:88:40:3f:e3:0a:52:d7:40:0c:f6:04:c3:39:59:
                    56:e9:82:d4:f9:e4:0f:b9:75:f0:2d:04:b5:b4:c7:
                    ea:68:ca:68:c1:df:be:4c:b5:a6:33:ae:67:30:ad:
                    a2:ed:77:65:61:99:8c:51:99:b4:2a:82:01:05:76:
                    4b:24:15:bb:b2:b5:d1:3d:b3:4c:ff:6b:77:17:c3:
                    e2:57:b3:d8:f3:5b:b3:71:1f:50:92:89:35:0e:5c:
                    e3:ce:c7:c9:e3:91:bc:a1:03:cc:89:93:7a:8f:68:
                    76:05:17:58:47:fd:9d:c5:4a:4d:64:98:b2:02:26:
                    03:e3:5d:a2:a2:11:68:77:db:f4:9f:92:fb:9a:5e:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D1:01:E9:A7:4F:E0:9D:86:F9:37:4D:75:62:7B:05:A1:68:57:25
            X509v3 Authority Key Identifier:
                keyid:CE:13:8B:64:2D:F1:CA:32:ED:81:97:3E:29:84:F2:1F:40:D8:58:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/CE138B642DF1CA32ED81973E2984F21F40D85813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE138B642DF1CA32ED81973E2984F21F40D85813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/323830343a343765343a3a2f33322d3333203d3e20323637303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:04:fb:7c:d2:0e:0b:e2:d0:57:a0:40:3f:87:0b:2c:84:c4:
         25:6f:81:5d:2a:9c:51:b3:f3:d4:cb:55:ef:70:5a:65:4d:5c:
         f4:6f:0c:92:6d:71:18:12:6a:6a:89:d4:56:45:9d:b0:0d:ef:
         f2:44:3b:21:0f:82:57:66:ba:25:8e:5e:3d:9e:2d:55:a1:77:
         8e:a2:52:ab:6e:42:2d:60:f5:da:6f:38:ee:18:b5:1b:af:18:
         63:32:18:39:e3:0e:e8:4f:67:a2:59:a4:d9:f0:16:f5:5a:dd:
         86:57:cf:70:c3:e3:fc:d7:c2:18:0d:07:69:9d:94:87:1c:35:
         33:dc:19:42:51:f4:13:03:1a:42:6a:5a:d1:4d:bf:c8:43:37:
         ab:ee:68:34:7f:5e:8b:1a:27:a2:8e:51:4c:e4:65:0a:df:c9:
         cc:d8:37:5f:bb:d5:79:2c:35:b2:5d:c9:eb:52:ae:64:ec:18:
         ea:3f:a4:21:68:bd:78:6c:3e:05:28:40:92:25:ff:39:9b:94:
         91:07:a0:a8:2d:6a:a4:44:3c:7a:35:fc:b3:6f:1a:58:ee:d9:
         dd:c5:1f:aa:af:c4:7b:fe:72:04:b1:14:12:e1:0e:df:fa:59:
         89:48:db:ea:1d:2a:fb:42:37:c7:6e:10:0f:87:db:ac:b7:ea:
         18:b4:aa:98
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKDSTlu7OyljCY/f4jWBFkIx7ZmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMzhCNjQyREYxQ0EzMkVEODE5NzNFMjk4NEYyMUY0
MEQ4NTgxMzAeFw0yMzA2MTkyMTA1MjhaFw0yNDA2MTcyMTEwMjhaMDMxMTAvBgNV
BAMTKDNERDEwMUU5QTc0RkUwOUQ4NkY5Mzc0RDc1NjI3QjA1QTE2ODU3MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrprtEwn9mQdqCVVwPo4ZCzC+J
r55DkdmeO1NN5oSJ9qwYW7PdQnVJfq5s9ePEyTQ44qRLFqsh4giz1Fy/vbiPBB0y
eyP5Ki61SfgpM12mlBrQzlYcfcuY2k2EtoTp3/PTwTyiyuw5TpKG/BFsQCBM4IyW
LXly7RiIQD/jClLXQAz2BMM5WVbpgtT55A+5dfAtBLW0x+poymjB375MtaYzrmcw
raLtd2VhmYxRmbQqggEFdkskFbuytdE9s0z/a3cXw+JXs9jzW7NxH1CSiTUOXOPO
x8njkbyhA8yJk3qPaHYFF1hH/Z3FSk1kmLICJgPjXaKiEWh32/SfkvuaXpcbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPdEB6adP4J2G+TdNdWJ7BaFoVyUwHwYDVR0j
BBgwFoAUzhOLZC3xyjLtgZc+KYTyH0DYWBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGdYQXdvdHpyTHA3Y2J2VVZLS3p4TEFkQ3pIRnJnV2szTm9DVFhRaEpI
UzkvMC9DRTEzOEI2NDJERjFDQTMyRUQ4MTk3M0UyOTg0RjIxRjQwRDg1ODEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFMTM4QjY0MkRGMUNBMzJF
RDgxOTczRTI5ODRGMjFGNDBEODU4MTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hnWEF3b3R6ckxwN2NidlVWS0t6eExBZEN6SEZyZ1drM05vQ1RYUWhKSFM5LzAv
MzIzODMwMzQzYTM0Mzc2NTM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM3
MzAzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARH5DANBgkqhkiG9w0BAQsFAAOCAQEAIwT7fNIO
C+LQV6BAP4cLLITEJW+BXSqcUbPz1MtV73BaZU1c9G8Mkm1xGBJqaonUVkWdsA3v
8kQ7IQ+CV2a6JY5ePZ4tVaF3jqJSq25CLWD12m847hi1G68YYzIYOeMO6E9nolmk
2fAW9VrdhlfPcMPj/NfCGA0HaZ2Uhxw1M9wZQlH0EwMaQmpa0U2/yEM3q+5oNH9e
ixonoo5RTORlCt/JzNg3X7vVeSw1sl3J61KuZOwY6j+kIWi9eGw+BShAkiX/OZuU
kQegqC1qpEQ8ejX8s28aWO7Z3cUfqq/Ee/5yBLEUEuEO3/pZiUjb6h0q+0I3x24Q
D4fbrLfqGLSqmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org