Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a323438343a3a2f33322d3438203d3e203238323538.roa
File:                     323830343a323438343a3a2f33322d3438203d3e203238323538.roa (raw, json)
Hash identifier:          F0dAJchnodWoPfDMEm9x9rBVhTysb6hxfNTnvK/9Y2U=
Subject key identifier:   32:8F:69:E7:5B:74:FA:E8:82:91:4C:BD:6F:33:99:E6:C8:86:1B:F8
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       4D5D56A69E4F67C28E0DEEA8E095B1580F8A0BBD
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a323438343a3a2f33322d3438203d3e203238323538.roa
Signing time:             Fri 03 May 2024 21:17:56 +0000
ROA not before:           Fri 03 May 2024 21:12:56 +0000
ROA not after:            Fri 02 May 2025 21:17:56 +0000
asID:                     28258
IP address blocks:        2804:2484::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5d:56:a6:9e:4f:67:c2:8e:0d:ee:a8:e0:95:b1:58:0f:8a:0b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:12:56 2024 GMT
            Not After : May  2 21:17:56 2025 GMT
        Subject: CN=328F69E75B74FAE882914CBD6F3399E6C8861BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:7c:7b:01:ab:04:60:3c:df:97:62:bc:0a:
                    c3:04:4d:29:ce:10:eb:95:dd:ff:db:89:db:42:0b:
                    eb:2f:8b:d9:6f:0f:fb:4b:0b:de:37:2d:27:25:ce:
                    f7:7e:8c:41:8d:dc:8e:e0:b4:12:79:0c:9d:f5:c7:
                    b9:77:65:cb:09:fa:6e:ff:96:57:24:b3:6b:c3:17:
                    5d:98:93:81:51:3d:97:c6:cf:00:ae:3b:2b:2d:b7:
                    4e:e7:78:28:b5:f7:b2:66:60:5d:75:28:d9:d6:4d:
                    15:04:5c:f7:74:de:0f:51:95:b6:ac:92:99:7b:83:
                    95:e9:87:f4:75:29:bb:c6:ce:7e:14:c6:39:3c:06:
                    f9:59:e2:d3:2f:d7:6f:f3:4c:a7:6d:56:cd:ab:53:
                    ea:dc:52:9c:fd:f1:cb:32:ea:83:b2:9a:d8:5e:64:
                    53:bc:06:6d:09:c6:71:0b:e6:6e:ca:02:00:c0:28:
                    26:3c:c1:6d:6b:8a:56:06:36:a1:c4:92:6f:cb:73:
                    3f:81:c5:db:a7:2f:16:32:32:44:e4:27:1c:42:c1:
                    9f:76:7b:ec:08:3a:9a:10:d4:9d:cb:1f:39:5f:8a:
                    d0:54:07:d3:59:33:6b:5e:35:c3:78:6f:50:f3:aa:
                    71:8a:24:0a:d0:fe:28:f6:f8:b1:a6:3e:2e:17:6c:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8F:69:E7:5B:74:FA:E8:82:91:4C:BD:6F:33:99:E6:C8:86:1B:F8
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a323438343a3a2f33322d3438203d3e203238323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2484::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:1a:d7:a0:c9:01:b1:b5:cd:07:16:da:27:ed:7e:05:53:ea:
         dc:9b:66:dc:b7:7b:ed:53:b7:1d:69:c7:2c:55:7d:d5:4a:c1:
         66:aa:80:2e:f3:91:5d:77:fb:16:75:a8:81:ac:e2:72:b4:b5:
         c3:a9:9a:a0:84:08:10:40:76:02:ba:5e:81:dc:e2:64:1b:ae:
         d8:73:f7:39:62:1c:82:87:ac:dc:e9:41:23:63:ed:aa:6a:7e:
         44:89:56:64:06:5b:0a:40:87:76:50:df:5c:f6:de:36:95:08:
         e6:92:7d:36:cc:99:62:5c:fb:b7:59:08:f8:2b:52:7e:c7:d9:
         29:90:26:a0:20:fe:e0:ce:50:74:c9:1a:27:27:89:b6:20:60:
         0d:77:fa:55:83:31:b9:ef:ef:c6:b9:d5:d2:47:53:07:35:11:
         59:a8:24:58:1e:c7:b5:fc:6d:80:bb:ae:29:3b:85:e1:b3:ba:
         21:85:60:23:ad:30:bc:d6:80:27:c6:89:6f:af:4d:76:6a:2b:
         f8:eb:32:f4:d2:19:2b:f6:fe:6d:d2:9c:dd:9a:c5:fc:96:6d:
         e0:88:52:d1:8b:4f:7f:ad:ca:4c:8f:e6:6e:41:eb:4a:1e:71:
         ef:ef:f3:e7:3b:d8:a7:7c:e9:9b:a4:2c:92:61:ff:17:ba:48:
         4c:da:29:16
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUTV1Wpp5PZ8KODe6o4JWxWA+KC70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTEyNTZaFw0yNTA1MDIyMTE3NTZaMDMxMTAvBgNV
BAMTKDMyOEY2OUU3NUI3NEZBRTg4MjkxNENCRDZGMzM5OUU2Qzg4NjFCRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcuXx7AasEYDzfl2K8CsMETSnO
EOuV3f/bidtCC+svi9lvD/tLC943LSclzvd+jEGN3I7gtBJ5DJ31x7l3ZcsJ+m7/
llcks2vDF12Yk4FRPZfGzwCuOystt07neCi197JmYF11KNnWTRUEXPd03g9Rlbas
kpl7g5Xph/R1KbvGzn4Uxjk8BvlZ4tMv12/zTKdtVs2rU+rcUpz98csy6oOymthe
ZFO8Bm0JxnEL5m7KAgDAKCY8wW1rilYGNqHEkm/Lcz+BxdunLxYyMkTkJxxCwZ92
e+wIOpoQ1J3LHzlfitBUB9NZM2teNcN4b1DzqnGKJArQ/ij2+LGmPi4XbIFdAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUMo9p51t0+uiCkUy9bzOZ5siGG/gwHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzIzODMwMzQzYTMyMzQzODM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODMy
MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEJIQwDQYJKoZIhvcNAQELBQADggEBAKsa16DJAbG1
zQcW2iftfgVT6tybZty3e+1Ttx1pxyxVfdVKwWaqgC7zkV13+xZ1qIGs4nK0tcOp
mqCECBBAdgK6XoHc4mQbrthz9zliHIKHrNzpQSNj7apqfkSJVmQGWwpAh3ZQ31z2
3jaVCOaSfTbMmWJc+7dZCPgrUn7H2SmQJqAg/uDOUHTJGicnibYgYA13+lWDMbnv
78a51dJHUwc1EVmoJFgex7X8bYC7rik7heGzuiGFYCOtMLzWgCfGiW+vTXZqK/jr
MvTSGSv2/m3SnN2axfyWbeCIUtGLT3+tykyP5m5B60oece/v8+c72Kd86ZukLJJh
/xe6SEzaKRY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org