Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/323830343a313432303a3a2f33322d3438203d3e203532393031.roa
File:                     323830343a313432303a3a2f33322d3438203d3e203532393031.roa (raw, json)
Hash identifier:          ztwYG+TDOzTj7nmtQ51rPO/Oafx1RzQqqH8fFh+phm4=
Subject key identifier:   A7:84:34:BB:54:D5:9B:69:8C:07:85:15:0E:FF:C4:09:8E:F0:4A:43
Certificate issuer:       /CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
Certificate serial:       75951E533D02EF47E41B212E3B7C3B6E451A2E03
Authority key identifier: CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/323830343a313432303a3a2f33322d3438203d3e203532393031.roa
Signing time:             Tue 12 Jul 2022 12:56:12 +0000
ROA not before:           Tue 12 Jul 2022 12:51:12 +0000
ROA not after:            Tue 11 Jul 2023 12:56:12 +0000
asID:                     52901
IP address blocks:        2804:1420::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:95:1e:53:3d:02:ef:47:e4:1b:21:2e:3b:7c:3b:6e:45:1a:2e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
        Validity
            Not Before: Jul 12 12:51:12 2022 GMT
            Not After : Jul 11 12:56:12 2023 GMT
        Subject: CN=A78434BB54D59B698C0785150EFFC4098EF04A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:cb:f0:6c:f0:5e:2b:62:d4:9c:89:bf:cc:
                    cb:ae:7e:4c:b8:b2:76:db:45:e1:ae:b6:61:9f:30:
                    c7:59:10:3a:6b:7e:60:e2:c7:64:15:07:dc:24:3e:
                    95:c4:2f:31:58:84:fb:90:e0:30:19:4d:3c:26:36:
                    15:11:4a:1e:4f:29:86:9f:2b:78:fb:e4:79:c1:66:
                    17:07:0e:66:64:bb:b7:2e:55:2a:8e:c8:5c:9e:c8:
                    79:fb:a3:7d:65:d3:c9:43:01:a9:4c:44:87:1a:2a:
                    35:a6:9b:bd:5c:e9:fa:e5:a4:f6:de:3b:b7:62:82:
                    5d:e8:ed:4e:ea:aa:72:a9:0e:7d:59:f5:18:24:65:
                    e2:24:8e:46:1b:c4:e0:21:92:c4:7d:f9:09:c3:ef:
                    c8:9f:64:ad:cb:c9:57:40:f9:1b:d8:89:fd:ac:7d:
                    1f:5c:8d:5d:fe:c1:e2:7f:0f:6f:56:4e:4b:d7:f1:
                    bd:84:30:04:bf:e2:26:58:17:5b:ac:0b:4d:9d:8a:
                    e6:e8:12:5f:50:b5:12:fb:d9:21:f3:a0:be:15:b4:
                    33:e5:db:cd:cc:e4:a0:16:f7:30:8e:65:6f:19:4c:
                    28:1a:06:7e:ec:55:12:10:f9:7f:c2:10:42:5a:76:
                    5c:eb:8d:40:02:7b:b1:c5:44:ba:96:47:5d:1c:92:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:84:34:BB:54:D5:9B:69:8C:07:85:15:0E:FF:C4:09:8E:F0:4A:43
            X509v3 Authority Key Identifier:
                keyid:CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/323830343a313432303a3a2f33322d3438203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1420::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:43:78:f3:25:44:0c:1d:ee:ea:68:e9:f5:f2:4c:24:2f:2d:
         d6:07:99:53:e3:1b:0d:15:bb:9c:22:fb:25:a4:de:ca:fb:b4:
         1f:a3:af:65:4e:55:6f:7d:88:30:15:86:e5:7c:41:4d:17:15:
         7b:bb:ab:76:12:51:de:8b:a0:ac:81:67:0e:30:b4:ea:fe:c0:
         6a:86:87:0c:69:5f:99:00:20:1e:b0:b7:16:55:0b:4c:62:b3:
         25:b9:27:70:f9:4a:32:6a:f3:e1:87:f8:61:ba:fc:e2:90:0c:
         4f:d5:d4:19:86:26:f2:a7:5d:92:95:f4:1d:dc:28:28:3b:25:
         cc:54:96:51:96:37:69:25:5b:69:8a:f2:e4:10:a4:17:df:29:
         3b:b0:f7:a5:42:8a:a0:af:60:8e:bc:07:65:fc:16:2f:57:1c:
         7c:83:17:ad:5d:53:9d:65:b7:6e:09:47:9d:fe:f7:56:2b:e7:
         4b:7f:90:c2:05:7b:95:d1:f0:6c:00:04:d0:63:a6:06:cd:8e:
         25:79:6c:94:c8:a5:c0:18:41:13:42:2e:1d:fa:42:05:3e:22:
         3b:94:d4:63:29:aa:de:19:b5:f8:e8:45:ea:ab:ef:c0:a3:6f:
         5c:27:b6:ee:b1:26:46:a9:87:f1:da:74:ce:cd:6f:fc:12:6d:
         37:77:b0:93
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdZUeUz0C70fkGyEuO3w7bkUaLgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q0MzBGQTExQ0Y5OUEyQTAyQkE4MkQ1MDVDQ0YyNEZC
QzhDRTc3RTAeFw0yMjA3MTIxMjUxMTJaFw0yMzA3MTExMjU2MTJaMDMxMTAvBgNV
BAMTKEE3ODQzNEJCNTRENTlCNjk4QzA3ODUxNTBFRkZDNDA5OEVGMDRBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZgcvwbPBeK2LUnIm/zMuufky4
snbbReGutmGfMMdZEDprfmDix2QVB9wkPpXELzFYhPuQ4DAZTTwmNhURSh5PKYaf
K3j75HnBZhcHDmZku7cuVSqOyFyeyHn7o31l08lDAalMRIcaKjWmm71c6frlpPbe
O7digl3o7U7qqnKpDn1Z9RgkZeIkjkYbxOAhksR9+QnD78ifZK3LyVdA+RvYif2s
fR9cjV3+weJ/D29WTkvX8b2EMAS/4iZYF1usC02diuboEl9QtRL72SHzoL4VtDPl
283M5KAW9zCOZW8ZTCgaBn7sVRIQ+X/CEEJadlzrjUACe7HFRLqWR10ckvtNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUp4Q0u1TVm2mMB4UVDv/ECY7wSkMwHwYDVR0j
BBgwFoAUzUMPoRz5mioCuoLVBczyT7yM534wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1U3dXBjVU1YNDlHM1ZTb1lxRFBheFhZbkpXcDE5Q25yMmFrd3FZZGs5
cngvMC9DRDQzMEZBMTFDRjk5QTJBMDJCQTgyRDUwNUNDRjI0RkJDOENFNzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENDMwRkExMUNGOTlBMkEw
MkJBODJENTA1Q0NGMjRGQkM4Q0U3N0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVN3VwY1VNWDQ5RzNWU29ZcURQYXhYWW5KV3AxOUNucjJha3dxWWRrOXJ4LzAv
MzIzODMwMzQzYTMxMzQzMjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM5
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFCAwDQYJKoZIhvcNAQELBQADggEBAIlDePMlRAwd
7upo6fXyTCQvLdYHmVPjGw0Vu5wi+yWk3sr7tB+jr2VOVW99iDAVhuV8QU0XFXu7
q3YSUd6LoKyBZw4wtOr+wGqGhwxpX5kAIB6wtxZVC0xisyW5J3D5SjJq8+GH+GG6
/OKQDE/V1BmGJvKnXZKV9B3cKCg7JcxUllGWN2klW2mK8uQQpBffKTuw96VCiqCv
YI68B2X8Fi9XHHyDF61dU51lt24JR53+91Yr50t/kMIFe5XR8GwABNBjpgbNjiV5
bJTIpcAYQRNCLh36QgU+IjuU1GMpqt4ZtfjoReqr78Cjb1wntu6xJkaph/HadM7N
b/wSbTd3sJM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org