Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a3a2f33342d3334203d3e20323639363938.roa
File:                     323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (raw, json)
Hash identifier:          o/AtfrSfqqtWLWhxQDRwR1tFUn0MNh3F/DmjKb9CvdY=
Subject key identifier:   49:68:65:2B:31:74:07:20:06:0A:F8:21:6A:2D:61:44:55:9E:04:31
Certificate issuer:       /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial:       5FBA4C44F482C6E0C5569EB52593F30ECAA319BB
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a3a2f33342d3334203d3e20323639363938.roa
Signing time:             Tue 23 Jan 2024 14:20:52 +0000
ROA not before:           Tue 23 Jan 2024 14:15:52 +0000
ROA not after:            Tue 21 Jan 2025 14:20:52 +0000
asID:                     269698
IP address blocks:        2804:6884::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:4c:44:f4:82:c6:e0:c5:56:9e:b5:25:93:f3:0e:ca:a3:19:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
        Validity
            Not Before: Jan 23 14:15:52 2024 GMT
            Not After : Jan 21 14:20:52 2025 GMT
        Subject: CN=4968652B31740720060AF8216A2D6144559E0431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:65:2c:eb:a5:44:d6:b1:84:df:8d:67:53:
                    c0:16:dd:12:c8:27:7e:56:e1:fe:b7:4e:d5:53:c4:
                    19:f3:c2:57:99:b7:45:1a:fa:98:64:7d:fe:ef:c9:
                    e4:59:9e:f1:d0:05:c1:93:18:c6:87:7c:3e:fc:6d:
                    90:09:43:5b:4f:9b:1f:58:78:29:b8:ff:4a:f9:03:
                    aa:ce:22:3f:a6:37:e0:88:a8:56:de:6c:59:a9:64:
                    bc:ef:46:bc:26:a2:f6:a7:20:8e:8a:0e:e0:ae:55:
                    a8:c4:4c:5e:ff:7b:e2:3d:0a:c8:29:56:f6:3f:57:
                    16:6f:aa:24:bd:26:98:c4:15:15:0e:89:67:14:6c:
                    33:5e:15:25:46:91:6e:4f:d2:b9:bb:63:81:d9:49:
                    d3:10:65:d9:a8:d0:e0:90:1e:e9:34:ef:2d:97:c3:
                    33:b2:f8:c0:21:31:26:b8:fc:96:ba:bb:ac:1a:0d:
                    53:2d:05:6f:08:3c:b4:bd:44:74:14:ef:0a:3a:73:
                    89:0e:e0:77:48:01:54:b5:c0:dc:86:12:92:d2:10:
                    08:79:e7:6d:9a:d8:b1:27:dc:7e:60:d6:98:5e:f8:
                    e2:c0:b3:81:61:65:5e:93:a9:b1:71:03:16:1f:cb:
                    0b:7d:53:41:72:b7:03:5f:e6:2a:1d:cf:8e:ea:e4:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:68:65:2B:31:74:07:20:06:0A:F8:21:6A:2D:61:44:55:9E:04:31
            X509v3 Authority Key Identifier:
                keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a3a2f33342d3334203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884::/34

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:3f:f8:84:3e:29:91:f3:1c:51:dc:bb:bf:0b:51:d9:51:
         7f:00:92:b7:64:02:f9:5b:71:8b:39:0e:c6:d7:4f:97:56:ba:
         d9:27:e3:93:48:2c:52:66:52:fa:18:51:db:e0:99:b2:a7:5e:
         7a:95:7a:24:29:25:a5:60:3b:8c:2e:11:7f:e8:fe:ed:97:63:
         bd:2f:8b:79:1f:13:af:4a:b5:5f:7b:2e:13:6f:c5:bb:cd:a7:
         28:31:11:a0:23:c7:de:6e:d5:8b:48:fb:6f:90:92:07:24:fc:
         bc:de:04:95:a0:73:27:d0:c2:c6:fe:02:4b:99:42:da:bb:bc:
         05:c0:74:40:7b:50:9d:af:a2:77:1e:c8:18:fd:24:67:f7:9c:
         80:a5:c0:e1:c8:56:9e:f9:07:ff:6e:bf:d1:c4:f2:96:01:a5:
         21:65:3f:0c:a3:c6:ac:12:e8:32:38:8c:1e:5b:86:df:60:5b:
         38:98:41:09:60:13:ee:59:79:47:ab:68:80:45:5e:c5:df:e5:
         78:9e:46:cf:4f:15:63:d1:fa:d4:9c:f4:41:20:1a:ca:4e:e1:
         df:9e:e9:98:26:a7:08:20:16:65:20:2f:61:b0:1e:d5:49:f3:
         3b:3e:eb:88:78:2b:1e:fb:3d:8d:59:a8:42:db:7b:d4:11:37:
         cb:e9:00:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX7pMRPSCxuDFVp61JZPzDsqjGbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI2NEMwQjdDMUYwNTEzNjg4OTI5ODM1QUU5MDhDMjFB
NzY1QzRFMzAeFw0yNDAxMjMxNDE1NTJaFw0yNTAxMjExNDIwNTJaMDMxMTAvBgNV
BAMTKDQ5Njg2NTJCMzE3NDA3MjAwNjBBRjgyMTZBMkQ2MTQ0NTU5RTA0MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBmUs66VE1rGE341nU8AW3RLI
J35W4f63TtVTxBnzwleZt0Ua+phkff7vyeRZnvHQBcGTGMaHfD78bZAJQ1tPmx9Y
eCm4/0r5A6rOIj+mN+CIqFbebFmpZLzvRrwmovanII6KDuCuVajETF7/e+I9Csgp
VvY/VxZvqiS9JpjEFRUOiWcUbDNeFSVGkW5P0rm7Y4HZSdMQZdmo0OCQHuk07y2X
wzOy+MAhMSa4/Ja6u6waDVMtBW8IPLS9RHQU7wo6c4kO4HdIAVS1wNyGEpLSEAh5
522a2LEn3H5g1phe+OLAs4FhZV6TqbFxAxYfywt9U0FytwNf5iodz47q5C0/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSWhlKzF0ByAGCvghai1hRFWeBDEwHwYDVR0j
BBgwFoAUu2TAt8HwUTaIkpg1rpCMIadlxOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhiUGt2RERrNkFrQVA4a2dkYU51VDZXdWhpYkYxUExRUWg0RGRTNXdx
VEsvMC9CQjY0QzBCN0MxRjA1MTM2ODg5Mjk4MzVBRTkwOEMyMUE3NjVDNEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCNjRDMEI3QzFGMDUxMzY4
ODkyOTgzNUFFOTA4QzIxQTc2NUM0RTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoYlBrdkREazZBa0FQOGtnZGFOdVQ2V3VoaWJGMVBMUVFoNERkUzV3cVRLLzAv
MzIzODMwMzQzYTM2MzgzODM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzYzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARohAAwDQYJKoZIhvcNAQELBQADggEBABxNP/iE
PimR8xxR3Lu/C1HZUX8AkrdkAvlbcYs5DsbXT5dWutkn45NILFJmUvoYUdvgmbKn
XnqVeiQpJaVgO4wuEX/o/u2XY70vi3kfE69KtV97LhNvxbvNpygxEaAjx95u1YtI
+2+Qkgck/LzeBJWgcyfQwsb+AkuZQtq7vAXAdEB7UJ2vonceyBj9JGf3nIClwOHI
Vp75B/9uv9HE8pYBpSFlPwyjxqwS6DI4jB5bht9gWziYQQlgE+5ZeUeraIBFXsXf
5XieRs9PFWPR+tSc9EEgGspO4d+e6ZgmpwggFmUgL2GwHtVJ8zs+64h4Kx77PY1Z
qELbe9QRN8vpAKs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org