Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313031363a3a2f34382d3438203d3e203533303539.roa
File:                     323830343a323134303a313031363a3a2f34382d3438203d3e203533303539.roa (raw, json)
Hash identifier:          H8nU/sPOxrZiDN6e1uXqYmV6cOdcS8xPVumyvBgWODw=
Subject key identifier:   1F:D6:AB:49:25:46:6F:14:7D:83:0C:F9:F8:63:62:5E:93:42:34:B7
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       2DA8484C6F7A0499984D05F1E193B8976F67B405
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313031363a3a2f34382d3438203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:17:52 +0000
ROA not before:           Fri 03 Mar 2023 12:12:52 +0000
ROA not after:            Fri 01 Mar 2024 12:17:52 +0000
asID:                     53059
IP address blocks:        2804:2140:1016::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a8:48:4c:6f:7a:04:99:98:4d:05:f1:e1:93:b8:97:6f:67:b4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:12:52 2023 GMT
            Not After : Mar  1 12:17:52 2024 GMT
        Subject: CN=1FD6AB4925466F147D830CF9F863625E934234B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:a9:71:b5:7c:6e:54:3d:8a:94:e8:ad:39:
                    a3:7f:28:73:9a:b4:bb:0d:d0:10:68:99:89:35:f2:
                    9a:fa:b2:67:0c:84:2d:9a:99:fc:af:71:90:f1:77:
                    ed:28:ec:02:67:8e:25:8e:3a:34:f2:9a:65:f8:90:
                    77:d2:14:0d:2e:a7:ef:e2:86:1a:9a:c8:7c:58:85:
                    5b:18:59:df:54:02:23:6f:39:75:3e:be:81:34:76:
                    5d:18:9d:57:e3:ab:a4:52:36:a3:0b:fe:bd:21:b7:
                    23:1e:81:a4:09:c3:31:c5:69:b6:7b:8f:09:eb:08:
                    79:fc:1a:20:14:83:4c:60:a1:5f:a8:e8:e0:78:94:
                    c5:6c:66:92:1d:1b:d1:2b:b7:69:b8:b7:f9:92:47:
                    59:a9:3f:81:51:1b:44:37:75:a9:9c:ec:8e:96:1f:
                    e3:4e:f4:aa:99:85:d2:f4:3f:c7:ba:61:50:0e:fe:
                    a6:a2:49:f8:de:bf:17:c3:a5:f1:d8:0c:9d:fe:d1:
                    ba:d9:ea:aa:7c:3f:1b:af:2b:ce:57:51:e7:1c:06:
                    06:81:c6:cf:16:4c:8b:ef:4e:52:7c:fd:af:fe:c3:
                    ea:0a:a7:70:c6:6d:24:ff:a3:a4:0b:5e:05:e9:3f:
                    f7:35:d7:e6:d6:0e:1a:6f:93:6a:74:9a:e6:b7:76:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D6:AB:49:25:46:6F:14:7D:83:0C:F9:F8:63:62:5E:93:42:34:B7
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a313031363a3a2f34382d3438203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2140:1016::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:f3:87:7b:6a:e5:db:aa:ad:36:0c:e6:32:41:2d:ba:a0:a6:
         3a:d5:14:0f:0c:2e:c4:6b:80:28:75:b0:0e:c0:d5:2d:68:f3:
         60:39:07:38:bf:68:19:ec:55:c4:73:b1:fd:5b:f1:f3:8b:53:
         07:f6:32:1a:02:31:e6:86:27:75:5b:aa:15:5e:cd:13:15:d1:
         e0:b4:8a:fc:6e:96:4a:43:35:01:61:8b:e5:19:26:e2:2c:7c:
         ef:af:3c:98:0a:53:0f:cf:5d:36:fa:03:f1:47:46:ff:7f:1f:
         1c:f2:61:63:48:f1:1a:23:84:04:89:6d:4e:ed:2c:a0:42:7c:
         88:57:df:99:b3:08:b1:fd:8d:dc:45:c3:50:ba:20:e7:47:c6:
         74:c0:3d:2e:36:a4:42:0a:11:a1:7c:63:a2:f3:3f:55:ce:69:
         de:fa:09:e4:53:14:92:9f:8b:57:14:14:ab:47:2e:5d:13:37:
         05:ac:eb:bd:14:7c:99:14:26:19:6b:a2:ab:fa:46:12:9c:ab:
         ba:02:a6:92:78:41:13:b8:cd:be:52:9b:ed:16:97:99:11:88:
         8a:49:6f:6d:1f:c6:0e:97:09:8a:cd:7f:fe:76:ad:64:9d:f7:
         27:05:86:1c:cd:46:f8:77:0d:3f:14:58:0c:79:99:59:19:2c:
         a0:d4:c0:01
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIULahITG96BJmYTQXx4ZO4l29ntAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDMxMjEyNTJaFw0yNDAzMDExMjE3NTJaMDMxMTAvBgNV
BAMTKDFGRDZBQjQ5MjU0NjZGMTQ3RDgzMENGOUY4NjM2MjVFOTM0MjM0QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XqlxtXxuVD2KlOitOaN/KHOa
tLsN0BBomYk18pr6smcMhC2amfyvcZDxd+0o7AJnjiWOOjTymmX4kHfSFA0up+/i
hhqayHxYhVsYWd9UAiNvOXU+voE0dl0YnVfjq6RSNqML/r0htyMegaQJwzHFabZ7
jwnrCHn8GiAUg0xgoV+o6OB4lMVsZpIdG9Ert2m4t/mSR1mpP4FRG0Q3damc7I6W
H+NO9KqZhdL0P8e6YVAO/qaiSfjevxfDpfHYDJ3+0brZ6qp8PxuvK85XUeccBgaB
xs8WTIvvTlJ8/a/+w+oKp3DGbST/o6QLXgXpP/c11+bWDhpvk2p0mua3dm5rAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUH9arSSVGbxR9gwz5+GNiXpNCNLcwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzIzODMwMzQzYTMyMzEzNDMwM2EzMTMwMzEzNjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM1MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCFAEBYwDQYJKoZIhvcNAQELBQAD
ggEBAM3zh3tq5duqrTYM5jJBLbqgpjrVFA8MLsRrgCh1sA7A1S1o82A5Bzi/aBns
VcRzsf1b8fOLUwf2MhoCMeaGJ3VbqhVezRMV0eC0ivxulkpDNQFhi+UZJuIsfO+v
PJgKUw/PXTb6A/FHRv9/HxzyYWNI8RojhASJbU7tLKBCfIhX35mzCLH9jdxFw1C6
IOdHxnTAPS42pEIKEaF8Y6LzP1XOad76CeRTFJKfi1cUFKtHLl0TNwWs670UfJkU
Jhlroqv6RhKcq7oCppJ4QRO4zb5Sm+0Wl5kRiIpJb20fxg6XCYrNf/52rWSd9ycF
hhzNRvh3DT8UWAx5mVkZLKDUwAE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org