Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a3a2f33322d3332203d3e203533303539.roa
File:                     323830343a323134303a3a2f33322d3332203d3e203533303539.roa (raw, json)
Hash identifier:          Z9E/mVn+ZqV1FAli5dbdE5T9wugZccyLRWeQf7rqHD8=
Subject key identifier:   2D:FF:76:23:DE:68:08:82:A2:AD:67:C1:29:F1:A1:2F:E4:1B:1D:CE
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       531F2FD90D124FAEA1384438B54995397B0D05C2
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a3a2f33322d3332203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:17:59 +0000
ROA not before:           Fri 03 Mar 2023 12:12:59 +0000
ROA not after:            Fri 01 Mar 2024 12:17:59 +0000
asID:                     53059
IP address blocks:        2804:2140::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1f:2f:d9:0d:12:4f:ae:a1:38:44:38:b5:49:95:39:7b:0d:05:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:12:59 2023 GMT
            Not After : Mar  1 12:17:59 2024 GMT
        Subject: CN=2DFF7623DE680882A2AD67C129F1A12FE41B1DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:da:bb:a9:78:e8:92:b3:b4:9c:7d:a2:e4:
                    9c:4f:fa:80:43:54:17:d2:67:b1:da:52:1e:71:aa:
                    03:42:e8:2b:01:9c:8f:6f:8d:ee:09:2d:5d:a1:8b:
                    73:c4:0e:fa:92:4c:f0:05:c7:c8:cf:fb:c6:39:25:
                    0f:6f:05:a8:fe:96:b9:97:ee:9b:c1:c8:11:bd:bb:
                    f5:b7:d0:c6:3b:60:5b:2d:60:e6:71:9e:cf:bd:a6:
                    40:c9:a6:26:96:55:b4:11:ae:dd:07:25:0e:85:49:
                    b5:23:6b:01:69:4a:fa:a5:16:e0:a7:9a:c9:c4:38:
                    83:b0:65:75:79:8b:74:53:78:db:4c:30:58:35:d7:
                    0b:cd:bd:50:37:d5:ee:4e:1e:74:3f:05:02:0d:fc:
                    50:e4:5d:29:c8:72:e7:3f:90:04:d4:cc:34:05:5b:
                    19:ec:6a:cc:58:74:3a:33:3d:57:ba:3f:9f:45:ea:
                    85:e3:6c:dc:08:17:e9:b0:50:fe:65:bd:02:94:4e:
                    36:fd:e4:33:fd:3e:e6:ae:3a:ee:18:19:a4:ad:5f:
                    d9:d0:ac:0c:b0:a9:72:dc:2d:87:80:81:d2:76:be:
                    23:e5:32:da:76:91:2c:d1:c7:32:b7:6e:c5:70:71:
                    c6:94:e7:ff:80:06:bd:33:59:66:b6:d1:aa:7f:a9:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FF:76:23:DE:68:08:82:A2:AD:67:C1:29:F1:A1:2F:E4:1B:1D:CE
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/323830343a323134303a3a2f33322d3332203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:76:61:2e:41:81:4a:be:9f:0e:7b:5e:17:87:3f:e9:01:00:
         82:ca:f0:3f:c2:23:24:5c:c8:20:c8:14:c0:ee:71:3f:2c:e2:
         7e:3a:06:b3:95:d9:02:e8:48:79:dc:74:d2:58:81:ad:62:95:
         66:c9:d1:2c:e5:42:2d:a8:e2:8b:f3:db:36:e1:e5:2f:a7:aa:
         f9:5b:21:2f:17:50:21:66:80:6b:88:12:0c:05:0f:48:a5:67:
         f7:7c:98:0d:be:ff:6a:40:59:76:ed:21:f9:1f:9d:a7:95:02:
         b7:fb:69:39:af:de:8c:19:f4:6f:b5:f7:05:51:04:5d:c4:1c:
         4e:45:04:18:e5:20:a0:19:99:d8:df:79:6d:47:49:0d:7f:cc:
         57:2c:04:4a:ce:9b:54:2c:64:aa:83:aa:ff:83:60:8d:23:e5:
         b3:74:0f:64:a8:44:2e:f6:72:7f:61:1f:2a:27:5a:2e:7b:f4:
         cb:bd:af:d0:a4:e3:e4:4a:d9:91:4a:64:c0:be:41:83:c0:d0:
         9f:c9:44:e7:85:33:e3:33:ff:33:86:12:ba:26:d8:45:45:71:
         52:1e:60:8d:1c:1d:ce:38:b4:33:e5:e4:69:f7:aa:26:bb:53:
         f5:cb:df:46:f0:1d:20:e0:ae:f2:1c:9d:7d:e7:ac:81:be:c9:
         bd:7d:18:71
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUx8v2Q0ST66hOEQ4tUmVOXsNBcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDMxMjEyNTlaFw0yNDAzMDExMjE3NTlaMDMxMTAvBgNV
BAMTKDJERkY3NjIzREU2ODA4ODJBMkFENjdDMTI5RjFBMTJGRTQxQjFEQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIptq7qXjokrO0nH2i5JxP+oBD
VBfSZ7HaUh5xqgNC6CsBnI9vje4JLV2hi3PEDvqSTPAFx8jP+8Y5JQ9vBaj+lrmX
7pvByBG9u/W30MY7YFstYOZxns+9pkDJpiaWVbQRrt0HJQ6FSbUjawFpSvqlFuCn
msnEOIOwZXV5i3RTeNtMMFg11wvNvVA31e5OHnQ/BQIN/FDkXSnIcuc/kATUzDQF
WxnsasxYdDozPVe6P59F6oXjbNwIF+mwUP5lvQKUTjb95DP9PuauOu4YGaStX9nQ
rAywqXLcLYeAgdJ2viPlMtp2kSzRxzK3bsVwccaU5/+ABr0zWWa20ap/qeETAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQULf92I95oCIKirWfBKfGhL+QbHc4wHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzIzODMwMzQzYTMyMzEzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMzMw
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEIUAwDQYJKoZIhvcNAQELBQADggEBAL92YS5BgUq+
nw57XheHP+kBAILK8D/CIyRcyCDIFMDucT8s4n46BrOV2QLoSHncdNJYga1ilWbJ
0SzlQi2o4ovz2zbh5S+nqvlbIS8XUCFmgGuIEgwFD0ilZ/d8mA2+/2pAWXbtIfkf
naeVArf7aTmv3owZ9G+19wVRBF3EHE5FBBjlIKAZmdjfeW1HSQ1/zFcsBErOm1Qs
ZKqDqv+DYI0j5bN0D2SoRC72cn9hHyonWi579Mu9r9Ck4+RK2ZFKZMC+QYPA0J/J
ROeFM+Mz/zOGErom2EVFcVIeYI0cHc44tDPl5Gn3qia7U/XL30bwHSDgrvIcnX3n
rIG+yb19GHE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org