Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa
File:                     323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (raw, json)
Hash identifier:          pSmfk/ZpskxaVjs9UMo0HaYiqnXgZ1mf4WAQgF6CvDs=
Subject key identifier:   1D:FA:E2:27:22:CD:09:6D:FE:91:79:BE:02:EF:17:42:8A:2F:02:40
Certificate issuer:       /CN=A432D1CCC67116292BF0943CA38D4C9A972E25AC
Certificate serial:       11DB88C5C3E5913A2124CF7174459D9A2B4E3344
Authority key identifier: A4:32:D1:CC:C6:71:16:29:2B:F0:94:3C:A3:8D:4C:9A:97:2E:25:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa
Signing time:             Mon 04 Dec 2023 20:00:00 +0000
ROA not before:           Mon 04 Dec 2023 19:55:00 +0000
ROA not after:            Mon 02 Dec 2024 20:00:00 +0000
asID:                     271489
IP address blocks:        2804:7c54::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:db:88:c5:c3:e5:91:3a:21:24:cf:71:74:45:9d:9a:2b:4e:33:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A432D1CCC67116292BF0943CA38D4C9A972E25AC
        Validity
            Not Before: Dec  4 19:55:00 2023 GMT
            Not After : Dec  2 20:00:00 2024 GMT
        Subject: CN=1DFAE22722CD096DFE9179BE02EF17428A2F0240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:7e:e1:77:98:19:06:91:85:ce:8c:8b:6e:
                    9f:11:03:8f:d9:4b:e7:b5:85:1c:16:00:1c:5a:59:
                    42:c9:fa:07:92:ce:ef:48:b5:3f:8b:b9:10:9d:46:
                    7e:c2:f1:5e:82:3b:98:f6:67:75:db:64:91:a5:e9:
                    10:8a:28:b5:13:2c:5d:46:9f:14:ee:e2:b6:b0:61:
                    39:e1:c9:f8:4c:02:8d:61:12:b1:2b:6c:bb:5d:97:
                    6f:72:7d:20:ef:d6:34:bb:83:34:fa:4b:de:12:6b:
                    9c:2f:fd:a5:48:08:20:b2:b2:ad:f3:ab:cd:b6:ce:
                    9b:0b:bf:b9:51:3e:25:00:81:53:48:f8:ea:4e:7a:
                    ed:62:5a:c2:e6:b2:b3:76:6a:e1:bd:9b:43:3e:61:
                    1a:d7:e0:80:74:5c:5b:fd:70:05:02:db:34:cb:4f:
                    ca:9f:60:6f:4c:3d:fc:f5:79:83:5b:2a:36:4e:36:
                    7c:1e:da:ba:c7:52:ef:79:f1:14:50:0b:cc:05:51:
                    b0:2a:1d:b1:8a:7d:a1:0b:b4:dd:18:b0:d6:36:ea:
                    7d:bc:56:3b:63:84:32:ea:c8:c4:84:c1:05:bf:90:
                    0d:5b:dd:5b:e5:15:80:7e:ac:48:d6:35:f6:27:42:
                    d2:78:b3:b9:17:26:03:6d:85:f5:ed:7d:71:2d:29:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FA:E2:27:22:CD:09:6D:FE:91:79:BE:02:EF:17:42:8A:2F:02:40
            X509v3 Authority Key Identifier:
                keyid:A4:32:D1:CC:C6:71:16:29:2B:F0:94:3C:A3:8D:4C:9A:97:2E:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:d5:9d:5d:60:4a:af:7b:c2:c4:bf:65:23:b1:79:b4:a9:38:
         9a:37:31:ee:56:b7:70:4a:51:f4:64:c8:f0:1d:67:85:84:b5:
         39:c1:06:e8:b9:ab:c7:1a:0a:67:81:07:50:ad:ba:94:c6:1c:
         bd:49:54:45:ae:a0:fe:69:3e:ec:da:a5:a7:71:c5:a0:fa:b3:
         9c:cd:95:df:11:29:03:5a:6a:40:36:5c:1c:20:59:4d:46:50:
         15:ba:9b:9f:16:24:04:d8:b3:cb:33:56:35:d4:5a:63:5d:eb:
         83:a8:74:83:1b:35:a4:4a:7b:3b:19:16:b4:aa:20:37:b8:6a:
         cc:53:c3:9f:24:ae:4e:82:79:fc:6c:eb:df:3a:79:dd:07:cc:
         74:04:48:b3:b2:b8:76:62:86:b3:02:54:68:6a:34:06:c2:15:
         6d:e5:a6:1a:88:5d:95:f7:e0:f2:30:18:86:5e:e9:93:77:80:
         36:3c:46:8f:de:1b:ab:50:70:80:03:ac:01:8a:69:ef:1b:bc:
         7a:f1:19:ff:ab:fe:48:10:e8:db:52:5e:f6:cf:45:88:da:44:
         d6:3e:3e:d4:56:f1:2f:16:f9:73:f6:8d:aa:c6:01:aa:f2:64:
         5b:6d:25:c9:b5:51:6b:06:6f:c7:08:53:85:23:8f:57:d0:41:
         0b:0a:a9:93
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEduIxcPlkTohJM9xdEWdmitOM0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzMkQxQ0NDNjcxMTYyOTJCRjA5NDNDQTM4RDRDOUE5
NzJFMjVBQzAeFw0yMzEyMDQxOTU1MDBaFw0yNDEyMDIyMDAwMDBaMDMxMTAvBgNV
BAMTKDFERkFFMjI3MjJDRDA5NkRGRTkxNzlCRTAyRUYxNzQyOEEyRjAyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyz37hd5gZBpGFzoyLbp8RA4/Z
S+e1hRwWABxaWULJ+geSzu9ItT+LuRCdRn7C8V6CO5j2Z3XbZJGl6RCKKLUTLF1G
nxTu4rawYTnhyfhMAo1hErErbLtdl29yfSDv1jS7gzT6S94Sa5wv/aVICCCysq3z
q822zpsLv7lRPiUAgVNI+OpOeu1iWsLmsrN2auG9m0M+YRrX4IB0XFv9cAUC2zTL
T8qfYG9MPfz1eYNbKjZONnwe2rrHUu958RRQC8wFUbAqHbGKfaELtN0YsNY26n28
VjtjhDLqyMSEwQW/kA1b3VvlFYB+rEjWNfYnQtJ4s7kXJgNthfXtfXEtKVRfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHfriJyLNCW3+kXm+Au8XQoovAkAwHwYDVR0j
BBgwFoAUpDLRzMZxFikr8JQ8o41MmpcuJawwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu
dlovMC9BNDMyRDFDQ0M2NzExNjI5MkJGMDk0M0NBMzhENEM5QTk3MkUyNUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0MzJEMUNDQzY3MTE2Mjky
QkYwOTQzQ0EzOEQ0QzlBOTcyRTI1QUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzSGtEZ2NyaGZxQTUzTjdvcEoycm5QRjVjUEZ1Qnl2MjIzaTZRZ3hybnZaLzAv
MzIzODMwMzQzYTM3NjMzNTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR8VDANBgkqhkiG9w0BAQsFAAOCAQEATtWdXWBK
r3vCxL9lI7F5tKk4mjcx7la3cEpR9GTI8B1nhYS1OcEG6LmrxxoKZ4EHUK26lMYc
vUlURa6g/mk+7Nqlp3HFoPqznM2V3xEpA1pqQDZcHCBZTUZQFbqbnxYkBNizyzNW
NdRaY13rg6h0gxs1pEp7OxkWtKogN7hqzFPDnySuToJ5/Gzr3zp53QfMdARIs7K4
dmKGswJUaGo0BsIVbeWmGohdlffg8jAYhl7pk3eANjxGj94bq1BwgAOsAYpp7xu8
evEZ/6v+SBDo21Je9s9FiNpE1j4+1FbxLxb5c/aNqsYBqvJkW20lybVRawZvxwhT
hSOPV9BBCwqpkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org