Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33322d3332203d3e203631353739.roa
File:                     323830343a326439383a3a2f33322d3332203d3e203631353739.roa (raw, json)
Hash identifier:          mkHliiGxQQqHbNckvpdXEXMPCZ0I2f/qazI8i68xC08=
Subject key identifier:   92:F8:15:82:58:19:0F:EC:65:7D:80:4F:F6:0A:C3:70:57:31:82:B7
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       60D3169338423E6EA1BDDA49AA62BDED2C3EC7B3
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33322d3332203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:37 +0000
ROA not before:           Tue 06 Feb 2024 11:56:37 +0000
ROA not after:            Tue 04 Feb 2025 12:01:37 +0000
asID:                     61579
IP address blocks:        2804:2d98::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:16:93:38:42:3e:6e:a1:bd:da:49:aa:62:bd:ed:2c:3e:c7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:37 2024 GMT
            Not After : Feb  4 12:01:37 2025 GMT
        Subject: CN=92F8158258190FEC657D804FF60AC370573182B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:33:1e:08:50:66:27:a7:79:bc:37:c9:4f:
                    eb:a2:5c:9c:24:4e:6f:88:46:3d:5c:89:d1:bd:29:
                    5b:eb:3a:f6:29:db:4b:30:2e:a3:6b:d7:d1:21:60:
                    e3:4c:00:8a:ea:d0:57:ca:7a:c6:96:65:21:a4:5f:
                    56:f4:e7:18:ae:9e:56:0a:11:6d:32:a7:fe:f7:0f:
                    9f:bc:6b:57:fd:9e:e9:b3:54:6d:50:d0:f8:23:98:
                    ec:84:87:c7:cc:84:79:8b:3e:32:7c:79:2b:ea:39:
                    75:cd:77:d5:97:83:ae:cf:7e:eb:39:52:6f:20:67:
                    15:86:6a:04:65:15:f1:12:50:10:98:63:92:30:a1:
                    b0:0e:b1:b3:b7:09:63:1e:08:c2:93:54:7d:88:e9:
                    0d:3d:33:07:02:c4:ad:77:0b:fe:b1:d7:86:ef:ae:
                    ab:c1:4d:60:7f:c3:db:71:b4:b1:d0:c6:50:df:99:
                    b6:67:dc:78:33:ad:b1:fd:73:35:f1:42:a0:97:70:
                    f0:be:7e:38:37:8d:e4:45:3d:35:7f:82:f6:f4:eb:
                    4d:4a:08:e4:1e:36:d7:cc:ec:62:9d:4d:bf:8d:16:
                    ae:63:79:4d:a3:4e:28:d3:c2:1c:1c:68:b8:cf:5b:
                    c6:8a:c5:a1:1f:b3:d5:83:53:50:5e:1a:a8:e2:f1:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:15:82:58:19:0F:EC:65:7D:80:4F:F6:0A:C3:70:57:31:82:B7
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33322d3332203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d98::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:b9:00:69:0b:09:e9:54:9f:9e:72:0d:e3:d7:f6:ff:9a:34:
         b0:2e:56:3d:04:d7:59:f1:10:6d:fd:20:75:f5:f9:07:72:7e:
         0f:da:29:af:a7:15:0b:80:bc:4b:5f:ea:91:a3:01:86:6e:1d:
         b1:6a:73:6d:76:43:97:49:56:a1:30:40:a7:f9:96:19:9c:4b:
         18:36:32:05:1d:f2:79:29:41:3c:bb:24:21:9f:73:39:d5:0d:
         45:74:d5:e6:ce:2c:9f:a8:13:1a:b6:3d:67:4d:e8:17:bf:ee:
         bf:9f:98:07:b7:b5:88:5c:3d:cc:cf:6a:70:44:52:d8:98:6f:
         e9:54:fe:16:bc:05:3b:1a:9a:a3:31:aa:19:33:e4:a6:ec:b4:
         53:76:7d:2d:a3:89:1d:ac:75:f8:ba:1f:9c:44:01:51:17:b5:
         ea:07:14:de:2b:eb:cb:6f:77:9e:27:1e:79:69:52:2f:94:02:
         ce:f9:9e:8f:80:6c:57:57:c8:4a:9b:b2:de:af:ff:69:78:9a:
         3a:92:3b:bf:1c:90:b5:10:96:22:05:87:3e:8f:7f:a0:8d:32:
         6e:cc:e8:1d:03:e4:fa:a0:4d:9d:d5:99:47:b9:2a:5b:1e:67:
         7b:77:fb:6a:93:e4:5f:a7:76:95:5b:f3:33:93:8a:ce:a4:2e:
         61:0d:da:12
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUYNMWkzhCPm6hvdpJqmK97Sw+x7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2RTkyRUVCMTEyQTFENTIzQTI4MTc0MDFCNkVCM0NF
MDlBRkZGQzAeFw0yNDAyMDYxMTU2MzdaFw0yNTAyMDQxMjAxMzdaMDMxMTAvBgNV
BAMTKDkyRjgxNTgyNTgxOTBGRUM2NTdEODA0RkY2MEFDMzcwNTczMTgyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHDMeCFBmJ6d5vDfJT+uiXJwk
Tm+IRj1cidG9KVvrOvYp20swLqNr19EhYONMAIrq0FfKesaWZSGkX1b05xiunlYK
EW0yp/73D5+8a1f9numzVG1Q0PgjmOyEh8fMhHmLPjJ8eSvqOXXNd9WXg67Pfus5
Um8gZxWGagRlFfESUBCYY5IwobAOsbO3CWMeCMKTVH2I6Q09MwcCxK13C/6x14bv
rqvBTWB/w9txtLHQxlDfmbZn3HgzrbH9czXxQqCXcPC+fjg3jeRFPTV/gvb0601K
COQeNtfM7GKdTb+NFq5jeU2jTijTwhwcaLjPW8aKxaEfs9WDU1BeGqji8f9jAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUkvgVglgZD+xlfYBP9grDcFcxgrcwHwYDVR0j
BBgwFoAUoW6S7rESodUjooF0AbbrPOCa//wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDFLQmk4a3N1dEpvOWR6c0tWemFNd1FQR2g2b05KeUZMZFgxMmlBNjdV
bnMvMC9BMTZFOTJFRUIxMTJBMUQ1MjNBMjgxNzQwMUI2RUIzQ0UwOUFGRkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExNkU5MkVFQjExMkExRDUy
M0EyODE3NDAxQjZFQjNDRTA5QUZGRkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQxS0JpOGtzdXRKbzlkenNLVnphTXdRUEdoNm9OSnlGTGRYMTJpQTY3VW5zLzAv
MzIzODMwMzQzYTMyNjQzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM1
MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgELZgwDQYJKoZIhvcNAQELBQADggEBALe5AGkLCelU
n55yDePX9v+aNLAuVj0E11nxEG39IHX1+Qdyfg/aKa+nFQuAvEtf6pGjAYZuHbFq
c212Q5dJVqEwQKf5lhmcSxg2MgUd8nkpQTy7JCGfcznVDUV01ebOLJ+oExq2PWdN
6Be/7r+fmAe3tYhcPczPanBEUtiYb+lU/ha8BTsamqMxqhkz5KbstFN2fS2jiR2s
dfi6H5xEAVEXteoHFN4r68tvd54nHnlpUi+UAs75no+AbFdXyEqbst6v/2l4mjqS
O78ckLUQliIFhz6Pf6CNMm7M6B0D5PqgTZ3VmUe5KlseZ3t3+2qT5F+ndpVb8zOT
is6kLmEN2hI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org