Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/323830343a3939343a3a2f33322d3332203d3e203238313339.roa
File:                     323830343a3939343a3a2f33322d3332203d3e203238313339.roa (raw, json)
Hash identifier:          eqowgSJMovct3dUdaBwUEE4tMvRiLDyfrbdvnwHOKvI=
Subject key identifier:   74:94:DC:BA:49:FA:A5:71:76:6F:D6:9E:7A:64:A1:55:AC:0D:38:63
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       15FC37FA8B03D3FC927F5026FE4E00AB9E1DE5B2
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/323830343a3939343a3a2f33322d3332203d3e203238313339.roa
Signing time:             Tue 09 Jan 2024 11:47:58 +0000
ROA not before:           Tue 09 Jan 2024 11:42:58 +0000
ROA not after:            Tue 07 Jan 2025 11:47:58 +0000
asID:                     28139
IP address blocks:        2804:994::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fc:37:fa:8b:03:d3:fc:92:7f:50:26:fe:4e:00:ab:9e:1d:e5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jan  9 11:42:58 2024 GMT
            Not After : Jan  7 11:47:58 2025 GMT
        Subject: CN=7494DCBA49FAA571766FD69E7A64A155AC0D3863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:88:6a:e8:35:56:1b:b5:18:3a:20:f6:c7:
                    e6:22:bd:4d:ee:5f:ab:4c:18:18:95:45:29:8e:2f:
                    63:fc:75:ee:09:75:e1:2f:50:1a:9f:4f:93:71:52:
                    5f:d0:41:0f:6b:9f:8c:20:c8:b9:98:c7:ea:16:cb:
                    bf:81:ee:6c:5b:72:0c:b3:05:f1:7b:b7:5b:31:a4:
                    4f:e1:1b:a7:c1:47:ea:8d:d3:74:78:30:fa:14:0a:
                    89:7e:bf:61:87:1e:06:85:f9:81:08:ff:7e:10:0c:
                    dc:88:32:76:18:16:aa:ad:29:71:a8:23:ab:88:3e:
                    dc:09:99:0b:4f:01:3f:15:0e:ff:1d:d4:06:c9:3c:
                    20:37:62:f4:86:bb:29:6f:83:b9:e3:fc:57:9d:e9:
                    ee:5a:ed:15:75:45:2e:1f:6b:c4:21:ce:7b:cb:87:
                    df:69:b7:3d:18:66:b6:49:ed:ca:27:bc:2c:35:df:
                    14:91:51:2a:15:08:f0:2e:0c:8e:31:fb:0f:55:0a:
                    ba:34:32:21:13:c9:07:dc:10:7f:25:7d:2d:3b:a6:
                    2d:9a:ee:1f:c8:eb:01:b5:f7:be:dc:3a:d7:40:91:
                    37:b4:1a:f2:ee:25:6d:35:28:b5:15:1c:83:7f:13:
                    05:0e:56:80:62:ef:0e:46:95:16:8b:8b:09:0f:67:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:94:DC:BA:49:FA:A5:71:76:6F:D6:9E:7A:64:A1:55:AC:0D:38:63
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/323830343a3939343a3a2f33322d3332203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:994::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:e5:18:81:a0:29:6b:86:49:90:0a:19:7e:d2:87:06:35:a7:
         cf:05:8e:dd:3c:25:ab:d2:1a:4e:4a:50:15:3d:83:ad:01:40:
         e8:51:e1:f9:c4:52:29:c2:75:af:0b:a5:af:45:a8:89:af:45:
         7e:6f:51:a2:e0:59:c9:ec:d7:70:82:f0:48:68:14:39:76:63:
         10:48:af:8a:a1:2b:63:2c:da:6e:0b:0f:17:6f:7e:27:25:2e:
         5f:32:62:9a:da:b9:c8:b5:0e:10:d9:92:e6:9a:45:55:2f:8b:
         05:9e:4a:4a:77:70:ef:42:f0:20:a7:18:6a:16:6b:6d:15:d8:
         85:30:b0:55:bb:dc:a7:41:18:42:34:0a:65:a0:79:e3:d6:a7:
         b8:e8:7d:6d:7d:a2:54:09:f0:b7:05:59:78:4f:17:13:b5:5b:
         46:ee:dd:47:bb:bb:58:38:dc:ee:35:1e:a1:b7:03:8f:b2:80:
         2a:8d:41:b7:74:af:2e:27:69:c4:df:ba:59:0b:7b:d0:28:6d:
         78:20:df:5d:d3:d5:17:05:e8:8b:4e:37:f7:8f:9c:b1:9d:d9:
         5a:2a:70:a3:00:8e:4a:99:4d:fa:9f:f2:11:cc:f8:6d:68:3d:
         cf:c4:9e:d9:c8:b1:1f:10:c7:6c:21:50:f8:8c:1c:6f:bd:b0:
         48:0e:d2:37
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUFfw3+osD0/ySf1Am/k4Aq54d5bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ2QzgyMDcyQTdENjUxMjlCMkZEMjlDODBBRDBBNzA3
NzFFRjkxRjAeFw0yNDAxMDkxMTQyNThaFw0yNTAxMDcxMTQ3NThaMDMxMTAvBgNV
BAMTKDc0OTREQ0JBNDlGQUE1NzE3NjZGRDY5RTdBNjRBMTU1QUMwRDM4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxv4hq6DVWG7UYOiD2x+YivU3u
X6tMGBiVRSmOL2P8de4JdeEvUBqfT5NxUl/QQQ9rn4wgyLmYx+oWy7+B7mxbcgyz
BfF7t1sxpE/hG6fBR+qN03R4MPoUCol+v2GHHgaF+YEI/34QDNyIMnYYFqqtKXGo
I6uIPtwJmQtPAT8VDv8d1AbJPCA3YvSGuylvg7nj/Fed6e5a7RV1RS4fa8QhznvL
h99ptz0YZrZJ7convCw13xSRUSoVCPAuDI4x+w9VCro0MiETyQfcEH8lfS07pi2a
7h/I6wG1977cOtdAkTe0GvLuJW01KLUVHIN/EwUOVoBi7w5GlRaLiwkPZ2znAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUdJTcukn6pXF2b9aeemShVawNOGMwHwYDVR0j
BBgwFoAU/WyCByp9ZRKbL9KcgK0KcHce+R8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTZoRW4xWlZVNG5DWlFFTXpxMUZuWm15N2VpblB5QUxHVGdqclM4eW1w
aUwvMC9GRDZDODIwNzJBN0Q2NTEyOUIyRkQyOUM4MEFEMEE3MDc3MUVGOTFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZENkM4MjA3MkE3RDY1MTI5
QjJGRDI5QzgwQUQwQTcwNzcxRUY5MUYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E2aEVuMVpWVTRuQ1pRRU16cTFGblpteTdlaW5QeUFMR1RnanJTOHltcGlMLzAv
MzIzODMwMzQzYTM5MzkzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzMTMz
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAmUMA0GCSqGSIb3DQEBCwUAA4IBAQBf5RiBoClrhkmQ
Chl+0ocGNafPBY7dPCWr0hpOSlAVPYOtAUDoUeH5xFIpwnWvC6WvRaiJr0V+b1Gi
4FnJ7NdwgvBIaBQ5dmMQSK+KoStjLNpuCw8Xb34nJS5fMmKa2rnItQ4Q2ZLmmkVV
L4sFnkpKd3DvQvAgpxhqFmttFdiFMLBVu9ynQRhCNAploHnj1qe46H1tfaJUCfC3
BVl4TxcTtVtG7t1Hu7tYONzuNR6htwOPsoAqjUG3dK8uJ2nE37pZC3vQKG14IN9d
09UXBeiLTjf3j5yxndlaKnCjAI5KmU36n/IRzPhtaD3PxJ7ZyLEfEMdsIVD4jBxv
vbBIDtI3
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org