Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa
File:                     323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (raw, json)
Hash identifier:          oJmQNWtNHgyR7f0MCUB0Tx51A1aerFRIhRQQ1Vd/7Jo=
Subject key identifier:   4D:B4:0D:12:D1:BF:E3:10:21:8D:CD:53:3F:96:D9:FE:D3:76:79:47
Certificate issuer:       /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial:       511196D2A731D6FC3512C1ED5CD93CA9231879CD
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa
Signing time:             Tue 23 Jan 2024 14:21:33 +0000
ROA not before:           Tue 23 Jan 2024 14:16:33 +0000
ROA not after:            Tue 21 Jan 2025 14:21:33 +0000
asID:                     269698
IP address blocks:        2804:6884:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:11:96:d2:a7:31:d6:fc:35:12:c1:ed:5c:d9:3c:a9:23:18:79:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
        Validity
            Not Before: Jan 23 14:16:33 2024 GMT
            Not After : Jan 21 14:21:33 2025 GMT
        Subject: CN=4DB40D12D1BFE310218DCD533F96D9FED3767947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:4d:d7:39:b2:d5:ee:a0:0f:37:af:b6:08:
                    9f:13:f6:1b:91:e0:ba:6e:9a:97:32:4c:17:19:80:
                    f3:9d:2a:f6:ca:5e:ff:47:1d:a5:34:b7:52:12:2e:
                    a2:80:ac:e9:de:50:76:d3:46:5a:d7:80:9a:13:00:
                    75:ce:98:48:af:5f:de:26:76:07:71:2b:89:8e:1c:
                    66:02:39:01:7f:b9:3e:0e:43:59:84:72:5a:f9:f1:
                    86:9b:cf:bf:eb:bb:bc:87:04:3d:ff:c7:ae:04:1e:
                    a7:b1:d0:1f:a8:07:12:2c:3b:e5:cd:41:77:8e:f9:
                    c0:3c:6b:31:6c:fe:26:23:18:e9:97:9c:e5:73:8b:
                    44:db:a5:45:4d:45:08:77:2c:3b:00:71:f6:ed:84:
                    3b:70:df:61:a8:08:cb:0c:95:83:11:ea:df:67:96:
                    c4:91:f5:27:99:18:b9:9d:f2:a0:49:4d:4a:6e:29:
                    90:6a:0b:ce:93:a1:36:13:62:65:b4:f9:b9:dc:16:
                    f6:2e:f7:68:14:a8:92:eb:97:29:76:6c:4b:9f:98:
                    3c:f8:2b:88:0b:9e:78:21:49:55:40:6c:36:a2:fe:
                    37:fd:46:89:26:7a:f6:70:6a:07:9d:e2:04:c3:33:
                    33:a6:43:f0:c5:5e:c9:80:02:25:93:ff:fe:21:55:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B4:0D:12:D1:BF:E3:10:21:8D:CD:53:3F:96:D9:FE:D3:76:79:47
            X509v3 Authority Key Identifier:
                keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:b0:ef:66:9e:e3:8b:df:2c:39:61:4c:e0:0e:0e:9f:76:
         9a:7c:1b:4e:6a:ef:38:7f:67:b3:b9:45:82:98:b3:8c:7b:85:
         08:61:4e:1c:b9:84:73:00:0c:9e:f2:24:2f:bc:db:a3:be:e2:
         b8:cc:a6:df:28:cf:c5:d3:e8:f7:7d:08:30:5a:c6:f0:24:54:
         75:6f:c9:28:10:39:11:f5:a0:65:7c:be:8b:e8:f7:56:89:b2:
         d0:62:3c:23:dc:71:28:1c:65:76:cc:db:25:62:84:d8:14:2c:
         b6:f3:ac:86:b0:e2:70:42:05:ea:01:01:de:b1:10:ff:65:63:
         91:82:32:d1:f7:35:6d:92:3c:99:e6:1b:fc:4b:25:4a:9b:5a:
         19:14:7c:60:ab:22:85:71:9b:b0:95:ac:ba:e8:48:2e:b8:7d:
         e5:88:e3:77:e5:f0:f6:79:cb:70:72:dc:21:47:5f:99:16:c5:
         37:17:a9:55:e6:2e:20:56:2b:38:b1:a9:9c:d7:31:8c:8f:69:
         1f:0f:0f:ad:0d:6d:83:66:76:d3:bb:9c:e7:05:d2:20:e2:94:
         ee:dc:66:1e:ba:7b:45:9e:9d:54:47:3e:ab:7f:f2:35:8c:89:
         b9:b7:04:35:ad:99:4d:31:cd:5d:54:7a:bb:87:9d:4c:39:6e:
         4d:f6:a0:2c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUURGW0qcx1vw1EsHtXNk8qSMYec0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI2NEMwQjdDMUYwNTEzNjg4OTI5ODM1QUU5MDhDMjFB
NzY1QzRFMzAeFw0yNDAxMjMxNDE2MzNaFw0yNTAxMjExNDIxMzNaMDMxMTAvBgNV
BAMTKDREQjQwRDEyRDFCRkUzMTAyMThEQ0Q1MzNGOTZEOUZFRDM3Njc5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1E3XObLV7qAPN6+2CJ8T9huR
4LpumpcyTBcZgPOdKvbKXv9HHaU0t1ISLqKArOneUHbTRlrXgJoTAHXOmEivX94m
dgdxK4mOHGYCOQF/uT4OQ1mEclr58Yabz7/ru7yHBD3/x64EHqex0B+oBxIsO+XN
QXeO+cA8azFs/iYjGOmXnOVzi0TbpUVNRQh3LDsAcfbthDtw32GoCMsMlYMR6t9n
lsSR9SeZGLmd8qBJTUpuKZBqC86ToTYTYmW0+bncFvYu92gUqJLrlyl2bEufmDz4
K4gLnnghSVVAbDai/jf9RokmevZwaged4gTDMzOmQ/DFXsmAAiWT//4hVYp5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUTbQNEtG/4xAhjc1TP5bZ/tN2eUcwHwYDVR0j
BBgwFoAUu2TAt8HwUTaIkpg1rpCMIadlxOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhiUGt2RERrNkFrQVA4a2dkYU51VDZXdWhpYkYxUExRUWg0RGRTNXdx
VEsvMC9CQjY0QzBCN0MxRjA1MTM2ODg5Mjk4MzVBRTkwOEMyMUE3NjVDNEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCNjRDMEI3QzFGMDUxMzY4
ODkyOTgzNUFFOTA4QzIxQTc2NUM0RTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoYlBrdkREazZBa0FQOGtnZGFOdVQ2V3VoaWJGMVBMUVFoNERkUzV3cVRLLzAv
MzIzODMwMzQzYTM2MzgzODM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM2MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEaITAMA0GCSqGSIb3DQEBCwUA
A4IBAQA78bDvZp7ji98sOWFM4A4On3aafBtOau84f2ezuUWCmLOMe4UIYU4cuYRz
AAye8iQvvNujvuK4zKbfKM/F0+j3fQgwWsbwJFR1b8koEDkR9aBlfL6L6PdWibLQ
Yjwj3HEoHGV2zNslYoTYFCy286yGsOJwQgXqAQHesRD/ZWORgjLR9zVtkjyZ5hv8
SyVKm1oZFHxgqyKFcZuwlay66EguuH3liON35fD2ectwctwhR1+ZFsU3F6lV5i4g
Vis4samc1zGMj2kfDw+tDW2DZnbTu5znBdIg4pTu3GYeuntFnp1URz6rf/I1jIm5
twQ1rZlNMc1dVHq7h51MOW5N9qAs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:49 2024 by rpki-client on console-ams.rpki-client.org