Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130323a3a2f34382d3438203d3e20323730333538.roa
File:                     323830343a366163383a3130323a3a2f34382d3438203d3e20323730333538.roa (raw, json)
Hash identifier:          8YGxrFUduaFAB9S/rkbEDV8S9bB5t5GA4s4AYaZNegg=
Subject key identifier:   45:94:05:D5:F3:2D:B6:48:D9:CF:3C:93:FB:3B:52:33:65:B7:97:C5
Certificate issuer:       /CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Certificate serial:       0F01B5200D32EBF9835928A0056F89112364C9CB
Authority key identifier: 61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130323a3a2f34382d3438203d3e20323730333538.roa
Signing time:             Fri 24 Mar 2023 01:47:12 +0000
ROA not before:           Fri 24 Mar 2023 01:42:12 +0000
ROA not after:            Fri 22 Mar 2024 01:47:12 +0000
asID:                     270358
IP address blocks:        2804:6ac8:102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:b5:20:0d:32:eb:f9:83:59:28:a0:05:6f:89:11:23:64:c9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
        Validity
            Not Before: Mar 24 01:42:12 2023 GMT
            Not After : Mar 22 01:47:12 2024 GMT
        Subject: CN=459405D5F32DB648D9CF3C93FB3B523365B797C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:ba:2f:4b:5a:c7:01:bd:cf:fc:3c:aa:19:
                    ed:56:e9:19:63:e3:b9:10:da:01:60:21:c7:e8:20:
                    e6:77:d8:dc:7a:2d:54:3c:e6:a2:68:68:8f:0e:0c:
                    51:d4:2d:91:37:1a:41:46:43:d9:d9:8e:83:a4:bb:
                    33:78:a1:5d:78:a3:db:50:3a:2f:e1:3a:64:41:0c:
                    69:79:5a:0a:66:5a:57:1e:aa:f9:45:70:f6:99:7e:
                    00:3e:79:50:aa:44:2d:d6:d7:7a:72:da:4b:2d:87:
                    d3:9d:64:07:d0:45:75:92:c2:1e:91:cc:9a:d2:04:
                    14:75:42:f7:3a:09:53:b8:2e:6c:21:b6:83:e3:1e:
                    48:53:2d:93:66:74:27:2f:96:01:05:7d:71:05:88:
                    3b:f4:b7:6a:70:85:c7:1e:8a:24:ab:47:d0:5f:20:
                    de:9d:4e:53:b5:22:74:7c:36:2f:f1:e2:b8:f0:0a:
                    4e:32:a7:3f:fc:6a:aa:42:41:4f:e1:be:0c:af:e2:
                    b9:02:1f:be:a1:0a:e8:39:63:a0:74:62:b2:90:8f:
                    e6:6b:71:01:16:ca:59:0e:79:be:41:8e:9e:07:7f:
                    20:16:68:19:6b:80:46:72:6f:c2:47:df:5c:09:d8:
                    76:c5:e3:46:ee:3d:a9:df:13:8f:23:a5:49:e4:65:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:05:D5:F3:2D:B6:48:D9:CF:3C:93:FB:3B:52:33:65:B7:97:C5
            X509v3 Authority Key Identifier:
                keyid:61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/323830343a366163383a3130323a3a2f34382d3438203d3e20323730333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac8:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:58:96:54:31:b8:2d:c1:85:80:57:61:1a:78:63:bb:59:8a:
         a2:df:2a:42:f3:f5:42:ed:9d:8f:22:ed:3d:8c:12:5d:df:0b:
         9d:e5:48:60:ed:37:ef:60:e7:ea:11:d3:26:ff:3f:19:bd:fe:
         47:08:a7:ff:ec:52:96:84:72:95:28:e1:a9:bc:84:fe:ce:ef:
         5c:1a:85:3a:39:89:40:04:91:fb:b2:61:49:3f:cd:dd:aa:9b:
         2c:2c:03:70:32:3c:30:50:da:36:f0:df:d7:f2:d3:d9:d9:2a:
         d4:c9:46:2d:fc:d3:2d:83:f8:83:da:72:4b:e3:52:e1:c6:b4:
         f2:26:7d:c6:1e:69:9a:a2:dd:73:be:7b:5e:55:10:3e:e3:b8:
         79:b5:c5:44:e1:04:8c:79:d2:4b:06:a8:18:6e:60:0c:49:03:
         d1:b4:2e:6b:7c:56:50:b3:a3:3d:88:7c:35:8d:58:46:eb:1e:
         65:ac:e2:01:1d:a6:7e:5a:e0:af:05:28:8f:a5:42:17:12:86:
         5b:99:dd:95:2d:99:7f:9a:63:2d:9c:32:63:7d:ff:b4:92:0e:
         a5:d2:c6:a0:e5:87:d3:0a:86:e6:51:0b:14:cd:50:dc:ac:c0:
         29:98:28:4d:8b:94:67:89:51:91:8d:5a:15:32:34:96:94:5d:
         26:82:6a:14
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUDwG1IA0y6/mDWSigBW+JESNkycswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFGNDg3NEU2NDc0QThFNUNFMjQyQkQxRkI3ODU0RkEx
NTI5N0Q4NTAeFw0yMzAzMjQwMTQyMTJaFw0yNDAzMjIwMTQ3MTJaMDMxMTAvBgNV
BAMTKDQ1OTQwNUQ1RjMyREI2NDhEOUNGM0M5M0ZCM0I1MjMzNjVCNzk3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQbovS1rHAb3P/DyqGe1W6Rlj
47kQ2gFgIcfoIOZ32Nx6LVQ85qJoaI8ODFHULZE3GkFGQ9nZjoOkuzN4oV14o9tQ
Oi/hOmRBDGl5WgpmWlceqvlFcPaZfgA+eVCqRC3W13py2ksth9OdZAfQRXWSwh6R
zJrSBBR1Qvc6CVO4LmwhtoPjHkhTLZNmdCcvlgEFfXEFiDv0t2pwhcceiiSrR9Bf
IN6dTlO1InR8Ni/x4rjwCk4ypz/8aqpCQU/hvgyv4rkCH76hCug5Y6B0YrKQj+Zr
cQEWylkOeb5Bjp4HfyAWaBlrgEZyb8JH31wJ2HbF40buPanfE48jpUnkZWLlAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQURZQF1fMttkjZzzyT+ztSM2W3l8UwHwYDVR0j
BBgwFoAUYfSHTmR0qOXOJCvR+3hU+hUpfYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENjVjhZSkc5NDFhTTZWc1dycFRUVUQxb3dxbUF3aVhDMmZMVzlhYjJn
QUgvMC82MUY0ODc0RTY0NzRBOEU1Q0UyNDJCRDFGQjc4NTRGQTE1Mjk3RDg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxRjQ4NzRFNjQ3NEE4RTVD
RTI0MkJEMUZCNzg1NEZBMTUyOTdEODUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDY1Y4WUpHOTQxYU02VnNXcnBUVFVEMW93cW1Bd2lYQzJmTFc5YWIyZ0FILzAv
MzIzODMwMzQzYTM2NjE2MzM4M2EzMTMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM3MzAzMzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBGrIAQIwDQYJKoZIhvcNAQELBQAD
ggEBAKZYllQxuC3BhYBXYRp4Y7tZiqLfKkLz9ULtnY8i7T2MEl3fC53lSGDtN+9g
5+oR0yb/Pxm9/kcIp//sUpaEcpUo4am8hP7O71wahTo5iUAEkfuyYUk/zd2qmyws
A3AyPDBQ2jbw39fy09nZKtTJRi380y2D+IPackvjUuHGtPImfcYeaZqi3XO+e15V
ED7juHm1xUThBIx50ksGqBhuYAxJA9G0Lmt8VlCzoz2IfDWNWEbrHmWs4gEdpn5a
4K8FKI+lQhcShluZ3ZUtmX+aYy2cMmN9/7SSDqXSxqDlh9MKhuZRCxTNUNyswCmY
KE2LlGeJUZGNWhUyNJaUXSaCahQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org