Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa
File:                     323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa (raw, json)
Hash identifier:          whIcBmtr+q0ihflEvhRv7sTaMqps6/zArxDcpJrod+k=
Subject key identifier:   68:C9:34:56:AC:7E:7D:F2:67:7E:18:FC:22:01:D9:A9:AC:3C:3C:F5
Certificate issuer:       /CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
Certificate serial:       11114D28159632AC209D0AF8F92C2550A6AA69DD
Authority key identifier: 40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa
Signing time:             Mon 08 May 2023 13:42:27 +0000
ROA not before:           Mon 08 May 2023 13:37:27 +0000
ROA not after:            Mon 06 May 2024 13:42:27 +0000
asID:                     270305
IP address blocks:        2804:6a00:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:11:4d:28:15:96:32:ac:20:9d:0a:f8:f9:2c:25:50:a6:aa:69:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
        Validity
            Not Before: May  8 13:37:27 2023 GMT
            Not After : May  6 13:42:27 2024 GMT
        Subject: CN=68C93456AC7E7DF2677E18FC2201D9A9AC3C3CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:58:86:f8:fd:4e:91:42:ff:b4:b0:e2:e9:
                    f0:c5:27:1d:90:cb:d5:7e:73:43:00:21:29:60:7a:
                    a8:54:a3:db:44:61:52:7b:f9:3a:e1:45:a9:57:e0:
                    76:7f:69:40:05:3d:46:aa:42:30:49:18:c3:e0:5e:
                    0a:8b:c2:56:3f:2b:56:f4:8e:c9:f6:6e:89:cb:d3:
                    83:05:39:0c:87:8f:cc:c3:8e:02:60:2d:d4:9d:09:
                    a6:61:9e:b3:9a:6d:da:6f:e0:93:5b:99:2d:6e:11:
                    d4:93:02:3c:10:38:e7:a8:45:a8:e1:2c:31:2f:cb:
                    0c:10:ac:68:c7:e2:30:d4:7f:09:f4:b2:6f:aa:72:
                    cf:45:a8:22:df:32:7a:4c:15:a3:b3:af:46:38:25:
                    ae:e8:37:62:d0:ec:77:5c:03:7c:2f:d2:1f:bd:99:
                    80:f7:5c:7a:d8:d3:ea:81:d0:7c:03:ef:bc:5a:ed:
                    b5:2b:ed:ae:6b:ed:e1:93:9b:6c:f1:a4:32:e1:f5:
                    1d:ec:d4:73:26:5f:18:ba:e3:fa:3c:cc:2a:52:36:
                    2e:d6:0b:86:b7:20:b6:ff:1b:ce:c9:9c:e8:cf:53:
                    c8:4d:58:ff:a2:07:79:ca:e1:8c:6b:75:80:d3:a2:
                    52:21:7b:96:76:ad:53:da:62:ac:63:c1:c3:0e:71:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C9:34:56:AC:7E:7D:F2:67:7E:18:FC:22:01:D9:A9:AC:3C:3C:F5
            X509v3 Authority Key Identifier:
                keyid:40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a343a3a2f34382d3438203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:25:49:e0:3a:70:f9:79:92:89:68:e9:e5:d3:a7:94:36:e6:
         d6:01:03:48:99:09:45:be:5c:aa:99:54:46:9a:b9:4f:1a:8a:
         41:83:b8:f0:fb:70:26:a5:fb:39:2b:a9:f5:d7:02:06:7d:af:
         7c:b6:ec:98:de:26:08:d7:66:2e:45:bb:76:ae:94:c1:d3:6b:
         6c:6a:85:cf:47:78:11:f5:08:97:17:29:fb:de:1b:98:8b:3d:
         7c:ef:73:8a:aa:73:8c:72:08:62:92:76:4d:12:83:6b:32:c0:
         85:23:3e:54:46:9d:22:70:db:ff:e0:18:70:08:40:9d:69:f8:
         38:3f:ea:ed:b2:02:f9:7b:6b:5d:b3:b2:ec:95:b5:e5:c2:48:
         f6:58:b8:b9:f9:3b:d6:42:00:7c:0d:9d:17:a1:db:4a:95:24:
         16:5b:b1:ca:e1:43:65:04:ce:bd:38:e0:5e:73:1c:6b:cd:cc:
         e1:a5:b6:a0:35:c9:9c:40:ec:5b:24:d4:a2:d4:86:25:fc:91:
         61:9e:8b:47:09:64:1c:b2:be:ff:b8:43:40:ca:ca:d0:ec:1b:
         50:bd:16:3a:00:a0:3b:db:96:83:66:dd:c2:40:9d:24:a8:5d:
         f4:14:54:37:2d:ee:a0:79:a7:50:82:31:0e:a0:92:8d:73:d0:
         f0:cb:92:ee
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUERFNKBWWMqwgnQr4+SwlUKaqad0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAxOUU2OEI2REVDOEFBRUM2RDI4NTMyODI3N0VGNjhB
Q0M2QzlCNDAeFw0yMzA1MDgxMzM3MjdaFw0yNDA1MDYxMzQyMjdaMDMxMTAvBgNV
BAMTKDY4QzkzNDU2QUM3RTdERjI2NzdFMThGQzIyMDFEOUE5QUMzQzNDRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBk1iG+P1OkUL/tLDi6fDFJx2Q
y9V+c0MAISlgeqhUo9tEYVJ7+TrhRalX4HZ/aUAFPUaqQjBJGMPgXgqLwlY/K1b0
jsn2bonL04MFOQyHj8zDjgJgLdSdCaZhnrOabdpv4JNbmS1uEdSTAjwQOOeoRajh
LDEvywwQrGjH4jDUfwn0sm+qcs9FqCLfMnpMFaOzr0Y4Ja7oN2LQ7HdcA3wv0h+9
mYD3XHrY0+qB0HwD77xa7bUr7a5r7eGTm2zxpDLh9R3s1HMmXxi64/o8zCpSNi7W
C4a3ILb/G87JnOjPU8hNWP+iB3nK4YxrdYDTolIhe5Z2rVPaYqxjwcMOcXDHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaMk0Vqx+ffJnfhj8IgHZqaw8PPUwHwYDVR0j
BBgwFoAUQBnmi23siq7G0oUygnfvaKzGybQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzEvNDAxOUU2OEI2REVDOEFBRUM2RDI4NTMyODI3N0VGNjhBQ0M2QzlCNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80MDE5RTY4QjZERUM4QUFFQzZE
Mjg1MzI4Mjc3RUY2OEFDQzZDOUI0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
OEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtxLzEvMzIz
ODMwMzQzYTM2NjEzMDMwM2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzcz
MDMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACgEagAABDANBgkqhkiG9w0BAQsFAAOCAQEAaCVJ
4Dpw+XmSiWjp5dOnlDbm1gEDSJkJRb5cqplURpq5TxqKQYO48PtwJqX7OSup9dcC
Bn2vfLbsmN4mCNdmLkW7dq6UwdNrbGqFz0d4EfUIlxcp+94bmIs9fO9ziqpzjHII
YpJ2TRKDazLAhSM+VEadInDb/+AYcAhAnWn4OD/q7bIC+XtrXbOy7JW15cJI9li4
ufk71kIAfA2dF6HbSpUkFluxyuFDZQTOvTjgXnMca83M4aW2oDXJnEDsWyTUotSG
JfyRYZ6LRwlkHLK+/7hDQMrK0OwbUL0WOgCgO9uWg2bdwkCdJKhd9BRUNy3uoHmn
UIIxDqCSjXPQ8MuS7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org