Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a643a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a643a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          xXizRr9t90yD+4IdanCEh1Y24g1ezk0s2kGf4RWB7UI=
Subject key identifier:   3B:46:BE:5D:75:90:C9:E7:EA:2B:A8:5B:05:9F:75:D1:86:A9:5B:9C
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       5120FCE01E962D9711C459C77E63C4B04E82A7DE
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a643a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:11:57 +0000
ROA not before:           Sat 24 Feb 2024 01:06:57 +0000
ROA not after:            Mon 24 Feb 2025 01:11:57 +0000
asID:                     262494
IP address blocks:        2804:ad8:d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:20:fc:e0:1e:96:2d:97:11:c4:59:c7:7e:63:c4:b0:4e:82:a7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:06:57 2024 GMT
            Not After : Feb 24 01:11:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:d3:53:0e:91:5e:b4:ba:38:f2:ad:02:ea:
                    2f:72:1b:e1:1a:0f:b5:a9:9f:84:7e:ad:c7:ff:ed:
                    8e:72:b7:97:f8:93:55:04:79:c9:c9:c0:6e:b6:cf:
                    cd:01:3f:c4:62:f0:d1:60:6c:6d:38:b7:90:0e:99:
                    d4:6d:ee:aa:d5:1b:e3:0b:c7:0e:cf:99:1d:8c:6c:
                    9e:28:6e:d2:c9:07:c2:ea:54:88:0b:ed:e2:d5:42:
                    ed:07:98:08:2e:1b:8f:57:14:c5:37:26:41:87:46:
                    dd:9d:3b:71:e5:a6:41:42:04:aa:24:0c:94:e2:36:
                    3c:41:69:8e:39:f6:7d:98:ed:e2:ab:32:19:41:7e:
                    45:bc:de:6c:8c:41:8e:9b:71:83:8c:6d:c8:3e:f5:
                    2b:06:f8:73:0f:90:cc:86:0f:f7:f8:77:d4:05:63:
                    f0:9e:57:92:f9:31:a1:3f:05:7c:3b:84:00:f2:6e:
                    cd:33:97:df:d1:48:c3:93:ef:bb:bb:a5:6f:a2:70:
                    80:c3:82:a0:91:4d:41:a5:19:b0:3f:a8:da:42:85:
                    cf:8d:ac:fa:69:1c:ef:b5:4f:91:04:7c:c2:69:a0:
                    0b:84:bc:7b:26:c1:14:8b:4c:51:09:03:14:91:05:
                    79:50:bb:84:3c:d6:c2:75:45:a0:c6:62:3d:53:ae:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:46:BE:5D:75:90:C9:E7:EA:2B:A8:5B:05:9F:75:D1:86:A9:5B:9C
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a643a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:40:cf:df:81:2b:ea:a5:e0:7c:04:78:67:81:2d:2b:0c:b6:
         3b:a6:57:4b:4c:a4:11:a8:1c:06:86:19:70:33:b2:c0:39:46:
         37:db:99:2e:9c:33:c2:45:16:0d:52:73:c5:38:6d:73:b8:fe:
         83:e9:81:3e:f9:29:ad:34:93:ac:d4:0b:e9:b7:17:12:62:94:
         f4:ab:aa:2a:2a:96:f8:2e:a5:10:d0:53:e5:65:d1:ec:1b:29:
         f2:53:51:27:fc:1d:1d:19:27:14:dc:b6:2c:05:fa:6b:c6:37:
         62:21:4e:56:9e:c1:0b:31:78:24:cd:8c:72:43:bb:4c:18:29:
         60:70:01:28:4f:b7:9b:24:37:52:ee:86:d8:12:cb:44:3e:49:
         90:90:f5:e9:67:6b:01:33:b9:c9:17:d5:2b:cb:49:7f:64:26:
         f0:fb:2c:20:f7:a7:3b:81:ed:92:70:a5:00:1c:fb:e8:bf:e2:
         8c:a4:90:4e:5f:b3:62:90:a9:85:87:97:af:ea:9a:fe:ce:2a:
         06:c0:ca:0a:ab:be:70:b1:b4:2c:c8:72:15:60:52:3f:ed:77:
         c3:17:39:7a:63:9e:46:0a:a9:f1:f8:35:bf:bc:e9:e5:f3:00:
         64:30:7f:6d:05:69:c4:9e:be:ec:71:e3:8b:6f:37:8a:8a:2c:
         1a:59:f8:d7
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUUSD84B6WLZcRxFnHfmPEsE6Cp94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yNDAyMjQwMTA2NTdaFw0yNTAyMjQwMTExNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzRDOEQzNTMwRTkxNUVCNEJB
MzhGMkFEMDJFQTJGNzIxQkUxMUEwRkI1QTk5Rjg0N0VBREM3RkZFRDhFNzJCNzk3
Rjg5MzU1MDQ3OUM5QzlDMDZFQjZDRkNEMDEzRkM0NjJGMEQxNjA2QzZEMzhCNzkw
MEU5OUQ0NkRFRUFBRDUxQkUzMEJDNzBFQ0Y5OTFEOEM2QzlFMjg2RUQyQzkwN0My
RUE1NDg4MEJFREUyRDU0MkVEMDc5ODA4MkUxQjhGNTcxNEM1MzcyNjQxODc0NkRE
OUQzQjcxRTVBNjQxNDIwNEFBMjQwQzk0RTIzNjNDNDE2OThFMzlGNjdEOThFREUy
QUIzMjE5NDE3RTQ1QkNERTZDOEM0MThFOUI3MTgzOEM2REM4M0VGNTJCMDZGODcz
MEY5MENDODYwRkY3Rjg3N0Q0MDU2M0YwOUU1NzkyRjkzMUExM0YwNTdDM0I4NDAw
RjI2RUNEMzM5N0RGRDE0OEMzOTNFRkJCQkJBNTZGQTI3MDgwQzM4MkEwOTE0RDQx
QTUxOUIwM0ZBOERBNDI4NUNGOERBQ0ZBNjkxQ0VGQjU0RjkxMDQ3Q0MyNjlBMDBC
ODRCQzdCMjZDMTE0OEI0QzUxMDkwMzE0OTEwNTc5NTBCQjg0M0NENkMyNzU0NUEw
QzY2MjNENTNBRTJENDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxMjTUw6RXrS6OPKtAuovchvhGg+1qZ+Efq3H/+2OcreX+JNVBHnJ
ycButs/NAT/EYvDRYGxtOLeQDpnUbe6q1RvjC8cOz5kdjGyeKG7SyQfC6lSIC+3i
1ULtB5gILhuPVxTFNyZBh0bdnTtx5aZBQgSqJAyU4jY8QWmOOfZ9mO3iqzIZQX5F
vN5sjEGOm3GDjG3IPvUrBvhzD5DMhg/3+HfUBWPwnleS+TGhPwV8O4QA8m7NM5ff
0UjDk++7u6VvonCAw4KgkU1BpRmwP6jaQoXPjaz6aRzvtU+RBHzCaaALhLx7JsEU
i0xRCQMUkQV5ULuEPNbCdUWgxmI9U64tQwIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FDtGvl11kMnn6iuoWwWfddGGqVucMB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMyMzgzMDM0M2E2MTY0MzgzYTY0
M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KAQK2AANMA0GCSqGSIb3DQEBCwUAA4IBAQAPQM/fgSvqpeB8BHhngS0rDLY7pldL
TKQRqBwGhhlwM7LAOUY325kunDPCRRYNUnPFOG1zuP6D6YE++SmtNJOs1AvptxcS
YpT0q6oqKpb4LqUQ0FPlZdHsGynyU1En/B0dGScU3LYsBfprxjdiIU5WnsELMXgk
zYxyQ7tMGClgcAEoT7ebJDdS7obYEstEPkmQkPXpZ2sBM7nJF9Ury0l/ZCbw+ywg
96c7ge2ScKUAHPvov+KMpJBOX7NikKmFh5ev6pr+zioGwMoKq75wsbQsyHIVYFI/
7XfDFzl6Y55GCqnx+DW/vOnl8wBkMH9tBWnEnr7sceOLbzeKiiwaWfjX
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org