Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33322d3336203d3e20323633343435.roa
File:                     323830343a313165303a3a2f33322d3336203d3e20323633343435.roa (raw, json)
Hash identifier:          MaJk+jErmeRUdGVloh18EgyBHZuyoTLLgEggu+49uac=
Subject key identifier:   D0:A7:2E:E7:21:CC:AB:D1:44:1C:85:35:31:6B:E3:6C:E3:6B:4E:DB
Certificate issuer:       /CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Certificate serial:       2D22D1B2FEA5A343E531E1A040627566090E14CE
Authority key identifier: F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33322d3336203d3e20323633343435.roa
Signing time:             Thu 14 Mar 2024 11:33:26 +0000
ROA not before:           Thu 14 Mar 2024 11:28:26 +0000
ROA not after:            Thu 13 Mar 2025 11:33:26 +0000
asID:                     263445
IP address blocks:        2804:11e0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:22:d1:b2:fe:a5:a3:43:e5:31:e1:a0:40:62:75:66:09:0e:14:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1076108B5AD0183155EEC96C47E216B36ED588E
        Validity
            Not Before: Mar 14 11:28:26 2024 GMT
            Not After : Mar 13 11:33:26 2025 GMT
        Subject: CN=D0A72EE721CCABD1441C8535316BE36CE36B4EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:ef:31:bb:ad:4a:2b:58:93:59:f8:82:4f:
                    e5:ff:2f:63:8c:b7:63:4e:8c:ae:11:d7:61:bf:0b:
                    b2:d6:86:45:ca:6d:b2:17:5b:2a:9e:35:53:a2:0f:
                    33:de:16:8e:8a:0d:ee:b5:d5:5b:94:0b:b5:fb:e8:
                    aa:8b:bb:69:d1:26:ae:59:30:6c:60:f0:97:92:46:
                    24:1e:3b:4e:8f:fc:0d:04:fe:90:3b:2e:4a:68:8d:
                    05:37:cc:94:c9:92:ce:8c:f7:71:74:8c:65:7e:9c:
                    2b:a9:65:5a:8e:da:4e:61:98:f3:67:fa:e5:7a:8a:
                    4a:50:df:9a:64:1c:dd:6e:fa:6e:29:cb:be:98:3b:
                    45:70:98:38:7a:92:4a:4f:00:48:b6:c8:48:5d:18:
                    89:4a:5a:a7:03:0d:2c:0e:0f:02:9f:a9:f4:b5:eb:
                    4b:c8:83:e8:7c:21:4a:67:06:45:35:17:a6:aa:0f:
                    1f:94:21:d3:34:e3:de:72:f9:58:bd:8a:1b:27:1d:
                    c7:b8:e9:6b:90:af:9b:de:b0:d2:af:79:a0:c4:03:
                    07:7b:4e:1f:34:be:14:5b:9f:45:31:0f:0a:45:72:
                    e5:8e:2f:64:3d:bb:77:3a:90:02:41:f7:4a:88:48:
                    8b:c0:fc:e4:97:dd:00:f1:5e:3d:20:bc:9c:f6:4a:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A7:2E:E7:21:CC:AB:D1:44:1C:85:35:31:6B:E3:6C:E3:6B:4E:DB
            X509v3 Authority Key Identifier:
                keyid:F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/F1076108B5AD0183155EEC96C47E216B36ED588E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33322d3336203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:7c:91:46:09:ba:f0:e7:ba:f2:0f:99:7a:03:66:31:15:40:
         26:94:85:c8:de:fe:7a:66:8c:03:de:e2:bb:4b:b2:f0:6b:af:
         5c:01:df:ed:a9:3f:dc:27:a2:db:7e:50:31:49:3a:06:bc:0f:
         1d:99:27:1e:38:67:f6:10:aa:94:ee:6b:16:98:f7:8d:b7:5f:
         01:3a:2a:86:83:a1:c4:5f:35:50:ba:76:50:8c:19:61:22:8d:
         1b:e7:f2:b4:51:b7:78:28:78:97:8b:d1:e4:3b:b1:ad:0a:33:
         51:44:44:18:16:92:ad:b1:bc:10:13:0a:63:fd:00:7b:6d:8e:
         ae:71:e7:9f:06:ae:0d:25:73:0f:eb:97:fe:bd:7d:86:84:71:
         d0:ca:4f:7b:c8:36:87:eb:17:61:61:5d:56:aa:5f:d2:95:df:
         63:77:82:c7:f9:9a:97:f1:63:d0:2e:a3:53:03:ee:9f:fb:56:
         db:21:7f:16:ab:0b:85:7d:10:ea:f3:ed:e9:b6:f5:db:59:a3:
         66:6b:54:45:f9:5b:00:3b:90:fa:9b:dd:45:71:80:97:60:83:
         7b:c0:a6:b5:41:cc:80:2a:7b:06:2c:66:6b:1b:f0:d0:3d:3f:
         fa:0f:20:1f:53:5a:07:63:67:f2:49:c7:17:f8:e3:ff:f8:c4:
         3b:0b:60:db
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULSLRsv6lo0PlMeGgQGJ1ZgkOFM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEwNzYxMDhCNUFEMDE4MzE1NUVFQzk2QzQ3RTIxNkIz
NkVENTg4RTAeFw0yNDAzMTQxMTI4MjZaFw0yNTAzMTMxMTMzMjZaMDMxMTAvBgNV
BAMTKEQwQTcyRUU3MjFDQ0FCRDE0NDFDODUzNTMxNkJFMzZDRTM2QjRFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWe8xu61KK1iTWfiCT+X/L2OM
t2NOjK4R12G/C7LWhkXKbbIXWyqeNVOiDzPeFo6KDe611VuUC7X76KqLu2nRJq5Z
MGxg8JeSRiQeO06P/A0E/pA7LkpojQU3zJTJks6M93F0jGV+nCupZVqO2k5hmPNn
+uV6ikpQ35pkHN1u+m4py76YO0VwmDh6kkpPAEi2yEhdGIlKWqcDDSwODwKfqfS1
60vIg+h8IUpnBkU1F6aqDx+UIdM0495y+Vi9ihsnHce46WuQr5vesNKveaDEAwd7
Th80vhRbn0UxDwpFcuWOL2Q9u3c6kAJB90qISIvA/OSX3QDxXj0gvJz2SsYlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0Kcu5yHMq9FEHIU1MWvjbONrTtswHwYDVR0j
BBgwFoAU8QdhCLWtAYMVXuyWxH4hazbtWI4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE
bXgvMC9GMTA3NjEwOEI1QUQwMTgzMTU1RUVDOTZDNDdFMjE2QjM2RUQ1ODhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxMDc2MTA4QjVBRDAxODMx
NTVFRUM5NkM0N0UyMTZCMzZFRDU4OEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o5b3NwV2JWcXRZTllrUGJma3hWYmljS2RNRFhXSmdEQnFSTlV5SFM2RG14LzAv
MzIzODMwMzQzYTMxMzE2NTMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjMz
MzQzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQR4DANBgkqhkiG9w0BAQsFAAOCAQEAbHyRRgm6
8Oe68g+ZegNmMRVAJpSFyN7+emaMA97iu0uy8GuvXAHf7ak/3Cei235QMUk6BrwP
HZknHjhn9hCqlO5rFpj3jbdfAToqhoOhxF81ULp2UIwZYSKNG+fytFG3eCh4l4vR
5DuxrQozUUREGBaSrbG8EBMKY/0Ae22OrnHnnwauDSVzD+uX/r19hoRx0MpPe8g2
h+sXYWFdVqpf0pXfY3eCx/mal/Fj0C6jUwPun/tW2yF/FqsLhX0Q6vPt6bb121mj
ZmtURflbADuQ+pvdRXGAl2CDe8CmtUHMgCp7Bixmaxvw0D0/+g8gH1NaB2Nn8knH
F/jj//jEOwtg2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org