Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a383930303a3a2f34302d3430203d3e20323635323431.roa
File:                     323830343a326363303a383930303a3a2f34302d3430203d3e20323635323431.roa (raw, json)
Hash identifier:          vE33CD3pB6wjJ+lVj7vtH2Wv5Mw4bbGwUL5kVojwjyQ=
Subject key identifier:   5E:9C:EF:60:A0:5F:9B:67:CB:4E:0C:6A:90:36:9F:4F:61:28:1C:A2
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       38780E80396564E23EB3968BAA63A7055F012595
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a383930303a3a2f34302d3430203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:39 +0000
ROA not before:           Thu 04 Apr 2024 23:02:39 +0000
ROA not after:            Thu 03 Apr 2025 23:07:39 +0000
asID:                     265241
IP address blocks:        2804:2cc0:8900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:78:0e:80:39:65:64:e2:3e:b3:96:8b:aa:63:a7:05:5f:01:25:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:39 2024 GMT
            Not After : Apr  3 23:07:39 2025 GMT
        Subject: CN=5E9CEF60A05F9B67CB4E0C6A90369F4F61281CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:27:ce:a3:d1:17:a8:ed:b9:f3:e7:88:d8:
                    3a:56:97:ff:20:cd:fa:11:5a:1c:86:4e:d7:1b:07:
                    d6:c4:d2:75:e8:f0:80:9f:2c:3b:d6:8a:f5:1a:b5:
                    dd:89:34:00:e4:0a:7f:e8:46:74:4f:d3:10:9c:88:
                    68:e4:7a:d8:b5:d4:29:7a:03:69:b0:a2:2f:5f:8e:
                    1e:8e:34:51:a5:91:07:15:29:fe:e1:d8:3c:16:75:
                    d7:26:26:c0:ef:3a:a8:66:b8:f1:6c:7c:ad:72:f4:
                    de:16:aa:fd:a4:56:d6:21:c2:de:fc:43:ae:0b:87:
                    f1:71:4d:6c:52:9e:29:31:91:c2:06:74:f3:5c:88:
                    90:1e:f2:e3:55:7f:b3:cc:4b:32:89:da:51:63:5a:
                    f0:ef:63:bd:70:66:74:2c:7d:2e:8f:51:45:c5:0a:
                    9d:ba:99:a1:b9:ed:3a:da:10:a2:bd:58:cb:82:c7:
                    56:d6:f5:5b:44:c4:78:e5:44:64:09:16:e1:ad:b6:
                    09:9b:2c:ee:ac:6a:24:42:a7:f8:56:b8:b1:6e:10:
                    f5:d2:f4:f7:b0:d4:7c:31:51:87:c8:fe:aa:52:76:
                    cb:07:ca:5a:a3:2a:50:dd:6b:78:ad:dc:1e:d5:42:
                    cd:df:83:4a:9c:68:4f:c6:0c:f6:7b:01:ac:58:43:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9C:EF:60:A0:5F:9B:67:CB:4E:0C:6A:90:36:9F:4F:61:28:1C:A2
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a383930303a3a2f34302d3430203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         d3:b9:e2:96:e3:d2:f5:9d:1d:db:a4:9e:87:6d:69:a0:63:c4:
         1c:75:a9:aa:59:21:1d:97:22:73:b8:3e:ad:4e:5c:d5:ad:b9:
         ac:08:a1:23:b6:20:c4:c8:86:b2:5f:43:3c:f8:08:c5:be:5e:
         cf:0a:ee:71:52:f2:b1:d3:02:39:43:42:fe:e4:bf:90:cf:b8:
         72:5f:be:b5:50:fc:98:20:e5:b8:dc:4e:3e:db:a3:48:ff:51:
         ea:22:71:c1:29:cb:43:cf:a0:60:ea:a8:e7:8a:80:bc:ff:81:
         d7:0d:4f:f8:f8:8e:c9:fd:2d:a4:5f:62:02:85:f9:57:59:a2:
         18:9d:ec:c3:fe:d4:70:80:72:97:4b:98:b7:9b:53:41:72:93:
         36:f6:05:80:f2:21:05:70:2f:c7:b5:4a:c1:d0:66:f9:81:ec:
         79:0e:75:e9:e1:62:6b:43:c6:34:38:8a:e0:69:75:52:e5:6a:
         16:c3:d1:a8:2c:75:23:4e:2d:bc:15:be:ec:11:d3:a5:38:a9:
         3d:87:96:d7:c3:9c:a5:4b:70:7e:01:c7:d0:08:7d:fc:b2:40:
         99:59:76:c7:35:12:e2:b7:1d:e9:f8:f4:b8:5b:01:e6:42:55:
         1c:db:35:1a:8a:b0:b9:5c:de:17:1e:e3:0e:74:7d:06:a6:a6:
         d6:27:cb:74
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOHgOgDllZOI+s5aLqmOnBV8BJZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGNDQ1RDA4Q0Y4QjQ4QTc3MjRDREQzNUYwQTU0RDU0
MjVFM0NCQTAeFw0yNDA0MDQyMzAyMzlaFw0yNTA0MDMyMzA3MzlaMDMxMTAvBgNV
BAMTKDVFOUNFRjYwQTA1RjlCNjdDQjRFMEM2QTkwMzY5RjRGNjEyODFDQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4yfOo9EXqO258+eI2DpWl/8g
zfoRWhyGTtcbB9bE0nXo8ICfLDvWivUatd2JNADkCn/oRnRP0xCciGjketi11Cl6
A2mwoi9fjh6ONFGlkQcVKf7h2DwWddcmJsDvOqhmuPFsfK1y9N4Wqv2kVtYhwt78
Q64Lh/FxTWxSnikxkcIGdPNciJAe8uNVf7PMSzKJ2lFjWvDvY71wZnQsfS6PUUXF
Cp26maG57TraEKK9WMuCx1bW9VtExHjlRGQJFuGttgmbLO6saiRCp/hWuLFuEPXS
9Pew1HwxUYfI/qpSdssHylqjKlDda3it3B7VQs3fg0qcaE/GDPZ7AaxYQ70XAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXpzvYKBfm2fLTgxqkDafT2EoHKIwHwYDVR0j
BBgwFoAUFfRF0Iz4tIp3JM3TXwpU1UJePLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFvY1J1aHFhZVNQ
Sm0vMS8xNUY0NDVEMDhDRjhCNDhBNzcyNENERDM1RjBBNTRENTQyNUUzQ0JBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1RjQ0NUQwOENGOEI0OEE3
NzI0Q0REMzVGMEE1NEQ1NDI1RTNDQkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOc0Mxb1FXVHYyOWVTOGJHcFpxRUFqUUI3eWV2cGQxb2NSdWhxYWVTUEptLzEv
MzIzODMwMzQzYTMyNjM2MzMwM2EzODM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTMyMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgELMCJMA0GCSqGSIb3DQEBCwUA
A4IBAQDTueKW49L1nR3bpJ6HbWmgY8QcdamqWSEdlyJzuD6tTlzVrbmsCKEjtiDE
yIayX0M8+AjFvl7PCu5xUvKx0wI5Q0L+5L+Qz7hyX761UPyYIOW43E4+26NI/1Hq
InHBKctDz6Bg6qjnioC8/4HXDU/4+I7J/S2kX2IChflXWaIYnezD/tRwgHKXS5i3
m1NBcpM29gWA8iEFcC/HtUrB0Gb5gex5DnXp4WJrQ8Y0OIrgaXVS5WoWw9GoLHUj
Ti28Fb7sEdOlOKk9h5bXw5ylS3B+AcfQCH38skCZWXbHNRLitx3p+PS4WwHmQlUc
2zUairC5XN4XHuMOdH0GpqbWJ8t0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org