Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/323830343a343763383a323430303a3a2f34302d3430203d3e20323637303736.roa
File:                     323830343a343763383a323430303a3a2f34302d3430203d3e20323637303736.roa (raw, json)
Hash identifier:          f1Dwptc9Hd9aZn5zMOlCRYORmfmVbcqLG+iwzwTTqU0=
Subject key identifier:   AF:7A:F6:DD:7F:A1:40:76:BA:4A:56:97:C4:BC:94:3F:17:21:84:58
Certificate issuer:       /CN=EF03EE27C4DF9B23AF62254E5108E69974C7CBEA
Certificate serial:       5B7017C26913318EB893EB5C2C83B78C0DA817E8
Authority key identifier: EF:03:EE:27:C4:DF:9B:23:AF:62:25:4E:51:08:E6:99:74:C7:CB:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF03EE27C4DF9B23AF62254E5108E69974C7CBEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/323830343a343763383a323430303a3a2f34302d3430203d3e20323637303736.roa
Signing time:             Mon 11 Mar 2024 14:20:02 +0000
ROA not before:           Mon 11 Mar 2024 14:15:02 +0000
ROA not after:            Mon 10 Mar 2025 14:20:02 +0000
asID:                     267076
IP address blocks:        2804:47c8:2400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:70:17:c2:69:13:31:8e:b8:93:eb:5c:2c:83:b7:8c:0d:a8:17:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF03EE27C4DF9B23AF62254E5108E69974C7CBEA
        Validity
            Not Before: Mar 11 14:15:02 2024 GMT
            Not After : Mar 10 14:20:02 2025 GMT
        Subject: CN=AF7AF6DD7FA14076BA4A5697C4BC943F17218458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:ce:fd:f4:11:07:be:b6:0b:7d:1c:17:7e:
                    e9:73:96:a9:a8:d9:e8:8f:0c:9c:d0:6b:b2:61:71:
                    ba:4d:df:72:71:89:a3:86:b9:92:5b:b1:ac:8e:62:
                    d0:8f:6f:9d:89:83:1a:a9:22:96:11:80:df:05:ca:
                    ee:02:fd:96:7c:6a:17:b1:9e:6b:4a:ef:70:bf:a9:
                    0f:7b:a4:d3:d8:a0:87:c2:5d:64:89:7b:8d:50:91:
                    a7:29:37:74:4d:79:98:ce:32:3d:17:95:d6:1e:ee:
                    76:0b:57:52:a1:32:38:db:6f:a4:25:85:62:c9:ac:
                    35:ed:e0:74:1a:fc:28:41:ba:15:63:79:ec:cb:ae:
                    b5:69:23:fb:7d:ce:84:d9:79:3f:20:f0:fb:22:4c:
                    c8:cb:26:51:d9:6b:46:71:98:9c:32:28:06:64:64:
                    e9:91:c2:c7:b9:d9:f7:32:71:7a:c1:ff:55:b4:2a:
                    c6:97:c9:86:4b:01:b0:ec:c6:bf:89:25:03:5f:fa:
                    77:92:f1:2c:1d:ac:3b:e1:24:33:e9:c3:b5:39:58:
                    43:44:87:34:6b:59:b3:e2:2f:d0:25:c0:21:59:bf:
                    b6:76:ab:ea:87:b1:e3:fe:dc:56:f9:fe:1e:75:9d:
                    c9:9c:c9:11:f1:cb:25:ef:d7:ea:c9:d6:9f:31:1f:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7A:F6:DD:7F:A1:40:76:BA:4A:56:97:C4:BC:94:3F:17:21:84:58
            X509v3 Authority Key Identifier:
                keyid:EF:03:EE:27:C4:DF:9B:23:AF:62:25:4E:51:08:E6:99:74:C7:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/EF03EE27C4DF9B23AF62254E5108E69974C7CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF03EE27C4DF9B23AF62254E5108E69974C7CBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/323830343a343763383a323430303a3a2f34302d3430203d3e20323637303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c8:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:a0:4e:f3:d5:ac:3e:a8:c9:35:28:0a:8e:71:67:62:7e:7f:
         9b:0c:45:cc:20:5c:3b:23:32:4a:77:fa:3e:0e:57:ae:39:ac:
         2f:2e:79:4a:07:30:20:04:90:a9:19:41:c9:48:01:ca:ad:d6:
         5f:12:64:aa:d0:16:58:53:3c:8e:1c:84:8b:16:a0:91:d9:48:
         8d:76:ae:c2:9c:3e:ab:19:88:98:4f:07:78:4c:66:71:74:a0:
         d7:71:35:0d:0c:bb:49:18:9d:3f:81:91:a1:4f:0d:64:69:71:
         73:bc:59:c3:57:07:34:40:65:b2:f1:8e:11:c8:56:aa:81:e0:
         b5:60:34:5c:14:f9:c7:92:36:89:43:75:db:15:93:11:44:79:
         a0:b6:de:18:2c:2f:ba:44:b5:5e:7a:ba:b5:10:d1:f6:8c:e1:
         ef:10:0f:d3:c4:e9:91:c5:85:13:c6:0d:0a:e6:7e:d4:c7:0c:
         46:ba:f9:8f:0d:50:9b:ed:38:14:e9:d2:e7:cb:8b:f5:28:19:
         8f:70:57:bd:b6:d4:78:1c:18:ec:66:a4:94:aa:f2:df:f2:ff:
         ce:da:d5:cf:be:27:39:76:e1:02:60:02:22:7f:29:66:c7:3c:
         de:0d:fb:5e:cf:90:7b:0a:3f:d9:a3:b1:bd:34:cc:c4:c8:e9:
         4d:bd:30:68
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUW3AXwmkTMY64k+tcLIO3jA2oF+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYwM0VFMjdDNERGOUIyM0FGNjIyNTRFNTEwOEU2OTk3
NEM3Q0JFQTAeFw0yNDAzMTExNDE1MDJaFw0yNTAzMTAxNDIwMDJaMDMxMTAvBgNV
BAMTKEFGN0FGNkREN0ZBMTQwNzZCQTRBNTY5N0M0QkM5NDNGMTcyMTg0NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+M799BEHvrYLfRwXfulzlqmo
2eiPDJzQa7JhcbpN33JxiaOGuZJbsayOYtCPb52JgxqpIpYRgN8Fyu4C/ZZ8ahex
nmtK73C/qQ97pNPYoIfCXWSJe41QkacpN3RNeZjOMj0XldYe7nYLV1KhMjjbb6Ql
hWLJrDXt4HQa/ChBuhVjeezLrrVpI/t9zoTZeT8g8PsiTMjLJlHZa0ZxmJwyKAZk
ZOmRwse52fcycXrB/1W0KsaXyYZLAbDsxr+JJQNf+neS8SwdrDvhJDPpw7U5WENE
hzRrWbPiL9AlwCFZv7Z2q+qHseP+3Fb5/h51ncmcyRHxyyXv1+rJ1p8xHwrzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUr3r23X+hQHa6SlaXxLyUPxchhFgwHwYDVR0j
BBgwFoAU7wPuJ8TfmyOvYiVOUQjmmXTHy+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhBZHluRlVXdG82eDFnZnltTlZSNndqYk0xcGR2Mkdvb3R3SEVzVWRT
ZTYvMC9FRjAzRUUyN0M0REY5QjIzQUY2MjI1NEU1MTA4RTY5OTc0QzdDQkVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGMDNFRTI3QzRERjlCMjNB
RjYyMjU0RTUxMDhFNjk5NzRDN0NCRUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIQWR5bkZVV3RvNngxZ2Z5bU5WUjZ3amJNMXBkdjJHb290d0hFc1VkU2U2LzAv
MzIzODMwMzQzYTM0Mzc2MzM4M2EzMjM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzMwMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgER8gkMA0GCSqGSIb3DQEBCwUA
A4IBAQAnoE7z1aw+qMk1KAqOcWdifn+bDEXMIFw7IzJKd/o+DleuOawvLnlKBzAg
BJCpGUHJSAHKrdZfEmSq0BZYUzyOHISLFqCR2UiNdq7CnD6rGYiYTwd4TGZxdKDX
cTUNDLtJGJ0/gZGhTw1kaXFzvFnDVwc0QGWy8Y4RyFaqgeC1YDRcFPnHkjaJQ3Xb
FZMRRHmgtt4YLC+6RLVeerq1ENH2jOHvEA/TxOmRxYUTxg0K5n7UxwxGuvmPDVCb
7TgU6dLny4v1KBmPcFe9ttR4HBjsZqSUqvLf8v/O2tXPvic5duECYAIifylmxzze
Dftez5B7Cj/Zo7G9NMzEyOlNvTBo
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:22 2024 by rpki-client on console.sobornost.net