Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a383030303a3a2f33332d3333203d3e203238313235.roa
File:                     323830343a313438383a383030303a3a2f33332d3333203d3e203238313235.roa (raw, json)
Hash identifier:          1tcFqwTTLmYhTcELw+CPRv4YapEQZYiwO+/JRSnBFGs=
Subject key identifier:   45:F3:62:58:72:F6:45:6B:56:3F:EA:42:79:7F:AC:9C:84:5B:10:47
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       03ECC63B9E99E9CC5F7289648C6F921831733B85
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a383030303a3a2f33332d3333203d3e203238313235.roa
Signing time:             Fri 11 Aug 2023 12:57:38 +0000
ROA not before:           Fri 11 Aug 2023 12:52:38 +0000
ROA not after:            Fri 09 Aug 2024 12:57:38 +0000
asID:                     28125
IP address blocks:        2804:1488:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ec:c6:3b:9e:99:e9:cc:5f:72:89:64:8c:6f:92:18:31:73:3b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Aug 11 12:52:38 2023 GMT
            Not After : Aug  9 12:57:38 2024 GMT
        Subject: CN=45F3625872F6456B563FEA42797FAC9C845B1047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:be:3d:1e:4d:56:22:0b:a9:bf:69:d7:e9:
                    07:1a:ac:53:fc:ef:49:48:2f:0e:66:3b:cd:6f:a6:
                    b9:58:e9:ba:1e:7a:16:1b:39:02:72:ec:66:b5:96:
                    f9:4f:f9:e1:b8:87:e9:bd:ba:16:81:7c:a8:da:73:
                    c3:2b:6c:c7:7f:cb:44:89:75:ca:a2:1a:ac:cf:68:
                    34:bd:7e:1a:9d:43:21:33:26:28:23:b7:fa:7f:c1:
                    15:44:1a:c5:97:68:cd:2f:b8:41:f0:07:f8:28:22:
                    c7:b9:68:bd:35:28:1c:ee:a3:63:7e:71:4e:54:71:
                    5b:79:91:8c:c5:0e:14:99:e4:3b:4a:d3:9b:66:07:
                    15:7d:d6:90:9c:c2:ce:30:20:4f:0d:7b:53:31:ad:
                    ed:b1:6b:53:b0:d1:c2:0a:dc:7b:a9:63:a2:8b:d2:
                    f6:b7:49:18:c9:38:3c:5b:a8:32:a1:ba:b2:20:c9:
                    d0:f1:96:31:8b:70:62:1e:bf:2c:98:dc:0e:f9:b3:
                    09:32:92:53:38:47:46:b9:b6:4d:fc:a2:e2:54:1f:
                    1d:38:86:b9:90:38:21:93:36:6f:9b:02:fe:13:ec:
                    cb:60:72:03:1a:e8:df:b5:9b:86:5d:55:b0:f4:fa:
                    32:04:89:49:85:b2:8c:4c:6c:11:ea:30:66:a3:23:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F3:62:58:72:F6:45:6B:56:3F:EA:42:79:7F:AC:9C:84:5B:10:47
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a383030303a3a2f33332d3333203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:70:df:88:35:23:60:ee:2f:13:c1:61:83:af:5e:3e:d2:7a:
         a4:82:75:68:ed:9d:6a:18:03:92:bf:50:c9:e7:5e:38:9d:45:
         a6:24:f0:88:79:c9:1b:7e:39:43:a5:6f:90:18:82:83:d0:39:
         c2:98:6a:be:3f:53:65:4a:84:be:6f:a1:01:aa:a1:6f:c5:24:
         e6:6f:9b:e3:30:06:51:47:e2:b2:45:b4:5c:5f:b3:34:7d:63:
         bf:04:24:ba:5e:42:8b:9b:9e:50:f5:14:c2:13:6e:04:d6:62:
         e4:21:f4:98:83:03:6e:4c:85:ca:31:c5:38:ff:60:2e:f2:a7:
         c9:8b:f5:09:ed:2c:c4:61:b0:d4:a7:fc:d9:9d:1c:f6:d5:bf:
         44:b7:10:de:da:41:d5:60:2e:2e:2d:f4:18:88:dd:e9:12:bc:
         0e:44:8d:85:24:11:b8:9b:41:5c:4b:a9:0b:dc:81:ff:a5:72:
         66:c1:46:09:01:50:b4:3d:18:58:6e:b7:a0:eb:b3:22:8e:39:
         8a:69:29:6c:27:2e:fe:5f:b0:eb:18:ed:d0:dc:37:8c:45:c9:
         f4:67:fe:b8:94:01:e8:2a:a5:d8:54:ba:17:34:b1:46:80:d5:
         ed:7d:58:63:5e:70:be:6f:c7:67:27:32:db:f4:84:84:65:b1:
         af:93:0f:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUA+zGO56Z6cxfcolkjG+SGDFzO4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFBMEYzM0EwMkQyNDBFOUE1RTY2MDAwMUM5RTU3NDFE
QzEyQUNDQjAeFw0yMzA4MTExMjUyMzhaFw0yNDA4MDkxMjU3MzhaMDMxMTAvBgNV
BAMTKDQ1RjM2MjU4NzJGNjQ1NkI1NjNGRUE0Mjc5N0ZBQzlDODQ1QjEwNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpsr49Hk1WIgupv2nX6QcarFP8
70lILw5mO81vprlY6boeehYbOQJy7Ga1lvlP+eG4h+m9uhaBfKjac8MrbMd/y0SJ
dcqiGqzPaDS9fhqdQyEzJigjt/p/wRVEGsWXaM0vuEHwB/goIse5aL01KBzuo2N+
cU5UcVt5kYzFDhSZ5DtK05tmBxV91pCcws4wIE8Ne1Mxre2xa1Ow0cIK3HupY6KL
0va3SRjJODxbqDKhurIgydDxljGLcGIevyyY3A75swkyklM4R0a5tk38ouJUHx04
hrmQOCGTNm+bAv4T7MtgcgMa6N+1m4ZdVbD0+jIEiUmFsoxMbBHqMGajI2QpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURfNiWHL2RWtWP+pCeX+snIRbEEcwHwYDVR0j
BBgwFoAUUaDzOgLSQOml5mAAHJ5XQdwSrMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMC81MUEwRjMzQTAyRDI0MEU5QTVFNjYwMDAxQzlFNTc0MURDMTJBQ0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxQTBGMzNBMDJEMjQwRTlB
NUU2NjAwMDFDOUU1NzQxREMxMkFDQ0IuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzAv
MzIzODMwMzQzYTMxMzQzODM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzgzMTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBBSIgDANBgkqhkiG9w0BAQsFAAOC
AQEAiXDfiDUjYO4vE8Fhg69ePtJ6pIJ1aO2dahgDkr9QyedeOJ1FpiTwiHnJG345
Q6VvkBiCg9A5wphqvj9TZUqEvm+hAaqhb8Uk5m+b4zAGUUfiskW0XF+zNH1jvwQk
ul5Ci5ueUPUUwhNuBNZi5CH0mIMDbkyFyjHFOP9gLvKnyYv1Ce0sxGGw1Kf82Z0c
9tW/RLcQ3tpB1WAuLi30GIjd6RK8DkSNhSQRuJtBXEupC9yB/6VyZsFGCQFQtD0Y
WG63oOuzIo45imkpbCcu/l+w6xjt0Nw3jEXJ9Gf+uJQB6Cql2FS6FzSxRoDV7X1Y
Y15wvm/HZycy2/SEhGWxr5MPxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org