Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323030303a3a2f34382d3438203d3e20323632353639.roa
File:                     323830343a3632633a323030303a3a2f34382d3438203d3e20323632353639.roa (raw, json)
Hash identifier:          YpzU3rQ8zdPbieLdAC0tYPZp00wA+kWXTDs+jXDG3HQ=
Subject key identifier:   A4:FB:3C:18:15:0B:D9:BC:E5:81:05:FD:CC:3E:1C:2B:11:91:73:9D
Certificate issuer:       /CN=6F94A77003B05A3AABF4148B7031094EAC378573
Certificate serial:       217E780659D98FCFAF5B263B926B1B3BE9809B63
Authority key identifier: 6F:94:A7:70:03:B0:5A:3A:AB:F4:14:8B:70:31:09:4E:AC:37:85:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F94A77003B05A3AABF4148B7031094EAC378573.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323030303a3a2f34382d3438203d3e20323632353639.roa
Signing time:             Sat 17 Feb 2024 15:12:16 +0000
ROA not before:           Sat 17 Feb 2024 15:07:16 +0000
ROA not after:            Sat 15 Feb 2025 15:12:16 +0000
asID:                     262569
IP address blocks:        2804:62c:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7e:78:06:59:d9:8f:cf:af:5b:26:3b:92:6b:1b:3b:e9:80:9b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F94A77003B05A3AABF4148B7031094EAC378573
        Validity
            Not Before: Feb 17 15:07:16 2024 GMT
            Not After : Feb 15 15:12:16 2025 GMT
        Subject: CN=A4FB3C18150BD9BCE58105FDCC3E1C2B1191739D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:24:51:0a:de:b1:5f:4f:16:72:b1:72:f5:
                    d5:d2:f7:5e:7d:98:1f:62:a0:2c:7a:7c:a0:16:7b:
                    a9:61:e7:fb:bf:9c:f5:99:0d:37:9d:e4:f7:50:2d:
                    d0:72:2f:a8:a7:25:a3:f7:af:47:cb:75:73:95:3e:
                    c1:8c:0f:3c:d7:3e:0a:30:c5:f3:25:8d:03:7d:d7:
                    fb:95:d6:31:c8:94:95:2c:f3:57:aa:92:87:b2:52:
                    57:d9:80:6e:69:80:59:f9:5f:ff:d5:b8:cf:47:66:
                    ed:15:3c:d7:07:e9:2c:9e:0e:1b:94:0f:33:da:88:
                    61:6c:23:87:f7:8a:26:0d:82:71:d6:dc:1a:b6:c2:
                    50:b7:4a:e8:60:c5:30:36:59:50:46:38:87:a1:d5:
                    a2:b4:96:a0:8f:d0:43:8b:1a:09:76:ba:70:62:b8:
                    d5:d9:44:3a:ea:ba:89:04:cc:f5:e0:01:c3:89:96:
                    73:9f:25:6b:8c:2b:8d:52:e5:a7:ca:97:8b:1a:6d:
                    38:4c:0e:73:11:05:89:62:f7:4f:e6:17:63:b1:df:
                    63:e5:2d:cd:71:d1:a2:99:3a:55:4c:7a:50:d0:33:
                    38:82:06:91:d5:b3:a7:23:96:0a:04:e3:83:68:9b:
                    1c:43:73:17:2f:2f:b6:21:bd:50:83:e6:5d:3a:30:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FB:3C:18:15:0B:D9:BC:E5:81:05:FD:CC:3E:1C:2B:11:91:73:9D
            X509v3 Authority Key Identifier:
                keyid:6F:94:A7:70:03:B0:5A:3A:AB:F4:14:8B:70:31:09:4E:AC:37:85:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/6F94A77003B05A3AABF4148B7031094EAC378573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F94A77003B05A3AABF4148B7031094EAC378573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323030303a3a2f34382d3438203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62c:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:0e:b1:68:b9:9e:3d:31:db:e1:7e:7a:53:97:63:e0:b0:4f:
         a3:26:37:5b:dd:95:e3:4c:76:61:6f:89:53:7f:79:65:52:c5:
         22:7a:b5:38:f4:31:5a:87:bc:c4:ee:eb:0d:e4:cf:3d:c6:f2:
         60:e2:b1:f5:0c:4d:2a:a6:2e:43:7e:e9:0f:d7:fc:15:b2:2f:
         59:5d:95:82:76:5d:3e:c8:38:8f:34:6c:fe:57:57:33:b3:d0:
         2c:74:8f:e7:c2:d6:82:e8:2f:95:29:11:2e:c8:8b:b2:af:8f:
         14:ef:02:d3:88:6b:57:d5:e9:c0:5b:c9:6e:7d:32:62:ee:5d:
         f6:34:e7:97:44:d4:93:90:16:c0:41:de:00:32:23:63:da:69:
         ed:0e:cf:2e:40:cf:f0:ac:8a:84:09:a5:da:aa:74:81:b5:4e:
         27:bf:32:8a:74:dd:d7:a4:3d:91:7d:0b:80:75:55:8a:89:67:
         f1:09:9a:b1:c3:52:cb:5d:71:1b:1d:08:39:08:aa:27:a1:16:
         c2:68:59:68:41:32:b3:46:08:56:53:00:3a:97:79:79:86:1a:
         0d:35:17:dd:75:9f:52:74:b2:88:9f:73:6c:dc:27:8b:fa:97:
         36:df:ce:3d:05:af:fc:e7:95:a5:59:ce:dd:40:13:92:df:c0:
         bf:13:61:1b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUIX54BlnZj8+vWyY7kmsbO+mAm2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY5NEE3NzAwM0IwNUEzQUFCRjQxNDhCNzAzMTA5NEVB
QzM3ODU3MzAeFw0yNDAyMTcxNTA3MTZaFw0yNTAyMTUxNTEyMTZaMDMxMTAvBgNV
BAMTKEE0RkIzQzE4MTUwQkQ5QkNFNTgxMDVGRENDM0UxQzJCMTE5MTczOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeiRRCt6xX08WcrFy9dXS9159
mB9ioCx6fKAWe6lh5/u/nPWZDTed5PdQLdByL6inJaP3r0fLdXOVPsGMDzzXPgow
xfMljQN91/uV1jHIlJUs81eqkoeyUlfZgG5pgFn5X//VuM9HZu0VPNcH6SyeDhuU
DzPaiGFsI4f3iiYNgnHW3Bq2wlC3SuhgxTA2WVBGOIeh1aK0lqCP0EOLGgl2unBi
uNXZRDrquokEzPXgAcOJlnOfJWuMK41S5afKl4sabThMDnMRBYli90/mF2Ox32Pl
Lc1x0aKZOlVMelDQMziCBpHVs6cjlgoE44NomxxDcxcvL7YhvVCD5l06MGZzAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUpPs8GBUL2bzlgQX9zD4cKxGRc50wHwYDVR0j
BBgwFoAUb5SncAOwWjqr9BSLcDEJTqw3hXMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzAvNkY5NEE3NzAwM0IwNUEzQUFCRjQxNDhCNzAzMTA5NEVBQzM3ODU3My5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82Rjk0QTc3MDAzQjA1QTNBQUJG
NDE0OEI3MDMxMDk0RUFDMzc4NTczLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzAvMzIz
ODMwMzQzYTM2MzI2MzNhMzIzMDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MjM2MzIzNTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBAYsIAAwDQYJKoZIhvcNAQELBQADggEB
ABQOsWi5nj0x2+F+elOXY+CwT6MmN1vdleNMdmFviVN/eWVSxSJ6tTj0MVqHvMTu
6w3kzz3G8mDisfUMTSqmLkN+6Q/X/BWyL1ldlYJ2XT7IOI80bP5XVzOz0Cx0j+fC
1oLoL5UpES7Ii7KvjxTvAtOIa1fV6cBbyW59MmLuXfY055dE1JOQFsBB3gAyI2Pa
ae0Ozy5Az/CsioQJpdqqdIG1Tie/Mop03dekPZF9C4B1VYqJZ/EJmrHDUstdcRsd
CDkIqiehFsJoWWhBMrNGCFZTADqXeXmGGg01F911n1J0soifc2zcJ4v6lzbfzj0F
r/znlaVZzt1AE5LfwL8TYRs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org