Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3438203d3e20323633333539.roa
File:                     323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (raw, json)
Hash identifier:          4iMC8L/QxXreGL5dTNiCTB6Mcwg5Ntbxu2Jnt5RY8O4=
Subject key identifier:   CA:7B:45:77:05:5D:69:09:9E:B0:E2:89:48:08:F0:F6:B3:CE:E8:F0
Certificate issuer:       /CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
Certificate serial:       21DF2E312D2FFD29FDFE3C10494D7F1E582F0419
Authority key identifier: 2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3438203d3e20323633333539.roa
Signing time:             Wed 08 Nov 2023 11:56:22 +0000
ROA not before:           Wed 08 Nov 2023 11:51:22 +0000
ROA not after:            Wed 06 Nov 2024 11:56:22 +0000
asID:                     263359
IP address blocks:        2804:14ec::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:df:2e:31:2d:2f:fd:29:fd:fe:3c:10:49:4d:7f:1e:58:2f:04:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
        Validity
            Not Before: Nov  8 11:51:22 2023 GMT
            Not After : Nov  6 11:56:22 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:79:a6:7e:6c:3a:c3:a7:f3:47:12:09:84:
                    24:fe:61:d5:2a:e2:c3:b0:85:76:25:9c:eb:29:c8:
                    1b:ab:ea:70:07:ce:14:b2:e7:e4:58:a0:c8:ae:fa:
                    f9:e4:f0:86:27:06:14:ce:5a:83:48:bd:e0:a3:be:
                    b8:99:84:08:cf:84:ae:30:9e:63:d2:57:f6:27:6f:
                    dc:24:da:ed:56:d1:10:ca:93:f6:54:bd:1e:7c:e8:
                    ac:db:5d:11:3c:7a:50:02:36:33:f3:04:6e:29:93:
                    d1:8b:13:df:c1:7b:cf:18:ef:7f:8e:bd:2f:19:ad:
                    45:cf:7c:f2:a3:1c:f2:f4:b7:70:29:f2:6f:65:11:
                    c8:d1:b5:8d:bf:eb:0c:8a:f0:b7:97:11:aa:c3:3f:
                    61:8c:05:15:b6:92:6e:cf:5e:11:a5:a8:c0:c3:84:
                    6d:5d:e1:9e:d3:5a:a6:87:73:53:5e:f3:50:f5:92:
                    5d:28:d8:97:bc:fe:4a:9d:36:c8:60:36:f8:a1:f0:
                    f5:05:3c:c3:04:cf:42:07:f8:b5:da:36:dc:a6:da:
                    9a:6a:8b:7a:2f:19:ec:7a:2b:b4:88:f7:30:d0:19:
                    d1:2e:59:6b:70:ff:6f:2d:13:ba:1b:b0:d7:92:06:
                    d9:8d:69:8d:d7:ed:df:e9:e4:56:d5:9b:40:e9:b2:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7B:45:77:05:5D:69:09:9E:B0:E2:89:48:08:F0:F6:B3:CE:E8:F0
            X509v3 Authority Key Identifier:
                keyid:2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3438203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:a8:d9:f8:14:1b:a5:2a:93:8a:92:f6:77:cc:f8:0c:e7:
         75:36:b1:56:2b:96:34:c1:3c:d2:6e:a5:ce:b6:19:0e:3e:7c:
         9b:78:e6:55:56:26:a1:25:53:1a:22:e9:eb:ab:b7:dd:06:b3:
         ba:10:f2:7e:35:02:b3:fd:89:15:99:ea:2e:01:9f:dc:8f:6b:
         fc:00:50:a1:e4:f3:4a:c5:82:05:0a:5d:75:96:1d:47:f6:e8:
         f7:de:83:b2:0d:f7:20:a7:c9:24:73:26:20:40:8b:9a:8e:f2:
         2d:9e:50:ab:0f:d9:95:06:1a:16:1e:cc:dd:9f:6f:33:65:ea:
         bc:19:ed:09:0a:6e:73:78:5d:eb:e3:4f:92:22:78:33:c8:00:
         9f:61:4c:08:17:c8:a4:eb:52:ac:c1:66:8c:64:73:0f:c0:8f:
         6c:00:22:e1:43:99:9f:50:dd:49:4b:f7:66:eb:36:85:90:e5:
         d3:1c:cd:b4:9c:f0:fe:a9:d9:56:02:8f:b3:13:33:e5:94:77:
         af:cf:85:d9:5c:2a:af:8a:e1:a5:4a:3e:05:e5:70:c4:ca:ec:
         77:36:ab:d0:af:95:c8:af:ee:c5:13:39:6a:3b:06:c5:02:89:
         65:2e:76:03:50:7f:ef:09:a3:f4:97:d5:d0:46:3d:e6:16:54:
         f8:d2:9a:3a
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUId8uMS0v/Sn9/jwQSU1/HlgvBBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0QjVEOTFERjgwQzU5NEM3QjFERjI1RjRDMDU3MzU3
QUQxNjBFRjAeFw0yMzExMDgxMTUxMjJaFw0yNDExMDYxMTU2MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREE4MTc5QTY3RTZDM0FDM0E3
RjM0NzEyMDk4NDI0RkU2MUQ1MkFFMkMzQjA4NTc2MjU5Q0VCMjlDODFCQUJFQTcw
MDdDRTE0QjJFN0U0NThBMEM4QUVGQUY5RTRGMDg2MjcwNjE0Q0U1QTgzNDhCREUw
QTNCRUI4OTk4NDA4Q0Y4NEFFMzA5RTYzRDI1N0Y2Mjc2RkRDMjREQUVENTZEMTEw
Q0E5M0Y2NTRCRDFFN0NFOEFDREI1RDExM0M3QTUwMDIzNjMzRjMwNDZFMjk5M0Qx
OEIxM0RGQzE3QkNGMThFRjdGOEVCRDJGMTlBRDQ1Q0Y3Q0YyQTMxQ0YyRjRCNzcw
MjlGMjZGNjUxMUM4RDFCNThEQkZFQjBDOEFGMEI3OTcxMUFBQzMzRjYxOEMwNTE1
QjY5MjZFQ0Y1RTExQTVBOEMwQzM4NDZENURFMTlFRDM1QUE2ODc3MzUzNUVGMzUw
RjU5MjVEMjhEODk3QkNGRTRBOUQzNkM4NjAzNkY4QTFGMEY1MDUzQ0MzMDRDRjQy
MDdGOEI1REEzNkRDQTZEQTlBNkE4QjdBMkYxOUVDN0EyQkI0ODhGNzMwRDAxOUQx
MkU1OTZCNzBGRjZGMkQxM0JBMUJCMEQ3OTIwNkQ5OEQ2OThERDdFRERGRTlFNDU2
RDU5QjQwRTlCMjUzMTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2oF5pn5sOsOn80cSCYQk/mHVKuLDsIV2JZzrKcgbq+pwB84Usufk
WKDIrvr55PCGJwYUzlqDSL3go764mYQIz4SuMJ5j0lf2J2/cJNrtVtEQypP2VL0e
fOis210RPHpQAjYz8wRuKZPRixPfwXvPGO9/jr0vGa1Fz3zyoxzy9LdwKfJvZRHI
0bWNv+sMivC3lxGqwz9hjAUVtpJuz14RpajAw4RtXeGe01qmh3NTXvNQ9ZJdKNiX
vP5KnTbIYDb4ofD1BTzDBM9CB/i12jbcptqaaot6Lxnseiu0iPcw0BnRLllrcP9v
LRO6G7DXkgbZjWmN1+3f6eRW1ZtA6bJTFQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FMp7RXcFXWkJnrDiiUgI8PazzujwMB8GA1UdIwQYMBaAFCxLXZHfgMWUx7HfJfTA
VzV60WDvMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4dHBBVDJwMVcxZ1RS
dDFlcUdjcFBrcHRHVm04UlI2RGFlbnA1VHlTUzhrLzAvMkM0QjVEOTFERjgwQzU5
NEM3QjFERjI1RjRDMDU3MzU3QUQxNjBFRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yQzRCNUQ5MURGODBDNTk0QzdCMURGMjVGNEMwNTczNTdBRDE2
MEVGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yOHRwQVQycDFXMWdUUnQxZXFH
Y3BQa3B0R1ZtOFJSNkRhZW5wNVR5U1M4ay8wLzMyMzgzMDM0M2EzMTM0NjU2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMzMzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
FOwwDQYJKoZIhvcNAQELBQADggEBAA8lqNn4FBulKpOKkvZ3zPgM53U2sVYrljTB
PNJupc62GQ4+fJt45lVWJqElUxoi6eurt90Gs7oQ8n41ArP9iRWZ6i4Bn9yPa/wA
UKHk80rFggUKXXWWHUf26Pfeg7IN9yCnySRzJiBAi5qO8i2eUKsP2ZUGGhYezN2f
bzNl6rwZ7QkKbnN4XevjT5IieDPIAJ9hTAgXyKTrUqzBZoxkcw/Aj2wAIuFDmZ9Q
3UlL92brNoWQ5dMczbSc8P6p2VYCj7MTM+WUd6/PhdlcKq+K4aVKPgXlcMTK7Hc2
q9Cvlciv7sUTOWo7BsUCiWUudgNQf+8Jo/SX1dBGPeYWVPjSmjo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org