Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a3a2f33322d3334203d3e203532353430.roa
File:                     323830343a6531303a3a2f33322d3334203d3e203532353430.roa (raw, json)
Hash identifier:          Gj3TVjYajoyt8gQRbl37BlVE8RhaNTM4rn2crnEdmNM=
Subject key identifier:   74:ED:C4:5A:2D:2C:E0:38:E6:08:06:A8:1C:30:64:28:A4:55:88:8A
Certificate issuer:       /CN=8C004D33839E9718AC5A43521533E7535258D419
Certificate serial:       3D37747755FEE5C9904F5EABB53DD553AB7A403B
Authority key identifier: 8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a3a2f33322d3334203d3e203532353430.roa
Signing time:             Thu 19 Oct 2023 19:12:13 +0000
ROA not before:           Thu 19 Oct 2023 19:07:13 +0000
ROA not after:            Thu 17 Oct 2024 19:12:13 +0000
asID:                     52540
IP address blocks:        2804:e10::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:37:74:77:55:fe:e5:c9:90:4f:5e:ab:b5:3d:d5:53:ab:7a:40:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C004D33839E9718AC5A43521533E7535258D419
        Validity
            Not Before: Oct 19 19:07:13 2023 GMT
            Not After : Oct 17 19:12:13 2024 GMT
        Subject: CN=74EDC45A2D2CE038E60806A81C306428A455888A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:f9:84:24:2f:0a:0d:32:20:fa:e7:30:8b:
                    16:6d:21:e6:09:e9:05:3f:86:d2:78:64:04:b7:70:
                    0a:b3:45:25:a6:6f:a9:d9:af:ea:08:f6:a2:2f:d7:
                    db:53:8c:39:20:b0:9a:9a:72:b1:57:9e:82:5c:b6:
                    e2:c6:23:a3:5d:85:7f:ca:c6:38:08:a5:6b:fa:f3:
                    05:76:df:f6:98:82:71:2f:c0:d9:77:33:78:16:ae:
                    34:fa:e3:66:7e:b8:3e:0d:bf:1d:84:5b:2b:fc:0f:
                    6a:de:b2:37:5a:8e:7f:72:d2:e3:fb:bd:36:a6:06:
                    01:32:c5:4b:38:58:94:68:2b:57:da:dd:47:46:ea:
                    2d:91:8f:8f:ed:c5:c5:57:7f:97:ab:91:6d:34:6d:
                    77:61:61:7d:49:2f:b9:4e:1c:85:ac:6f:38:4f:43:
                    1c:ba:7f:2b:80:3b:79:cb:6a:ad:0a:49:4b:da:00:
                    7e:8f:61:07:1a:44:8b:1c:00:89:c9:ba:1e:80:e7:
                    f3:67:5e:95:73:8a:1f:cd:39:2d:24:99:9c:1e:53:
                    db:0d:99:73:17:bb:f2:90:4a:c4:36:6f:3c:9c:a4:
                    da:a3:4a:be:e8:dd:96:f5:07:3d:11:35:b1:1d:84:
                    55:7f:2d:a0:c0:53:1d:12:3b:41:19:70:64:53:51:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:ED:C4:5A:2D:2C:E0:38:E6:08:06:A8:1C:30:64:28:A4:55:88:8A
            X509v3 Authority Key Identifier:
                keyid:8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/8C004D33839E9718AC5A43521533E7535258D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a3a2f33322d3334203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:8e:20:5b:7d:79:cd:bf:5a:52:7f:04:fb:04:00:d3:1d:
         77:6c:a4:6e:a8:24:2f:30:3e:dc:bb:cc:58:f3:e9:24:ed:dc:
         76:38:8d:4d:63:cd:fe:8b:d3:41:14:0e:21:02:75:d0:d3:d0:
         61:b8:8f:c1:3f:c2:33:e6:f5:c7:f8:74:4e:61:26:5e:d9:10:
         5d:6e:90:b7:fc:bf:2f:f6:fe:f0:cd:27:e6:4f:85:3e:74:11:
         31:50:ea:d3:36:55:6f:1f:85:ee:5c:e2:76:b2:12:03:cd:19:
         fa:26:c6:5c:d3:d2:77:6f:ec:db:84:e4:52:27:a8:ed:8a:61:
         03:4c:18:7f:d8:97:13:ab:76:53:b9:1c:b4:93:e4:51:65:13:
         a8:de:d8:6d:08:11:f9:73:26:ab:e5:61:8b:77:45:b1:00:3e:
         23:0a:c3:70:dd:e1:e7:82:82:12:9c:d5:13:9a:d7:41:d0:4a:
         3c:f5:f4:4b:39:82:a1:2a:8b:5c:49:b3:d4:38:6b:ef:a8:b1:
         8e:38:ad:a4:a9:63:74:31:62:f7:82:f3:17:bb:6c:5b:32:59:
         6a:57:31:81:dc:15:e8:3f:68:24:7f:db:c5:9a:96:93:c4:30:
         05:90:10:d5:c4:3b:ea:f4:32:09:83:32:3c:6a:3f:23:7e:d5:
         24:96:6a:ab
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUPTd0d1X+5cmQT16rtT3VU6t6QDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwMDREMzM4MzlFOTcxOEFDNUE0MzUyMTUzM0U3NTM1
MjU4RDQxOTAeFw0yMzEwMTkxOTA3MTNaFw0yNDEwMTcxOTEyMTNaMDMxMTAvBgNV
BAMTKDc0RURDNDVBMkQyQ0UwMzhFNjA4MDZBODFDMzA2NDI4QTQ1NTg4OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPvmEJC8KDTIg+ucwixZtIeYJ
6QU/htJ4ZAS3cAqzRSWmb6nZr+oI9qIv19tTjDkgsJqacrFXnoJctuLGI6NdhX/K
xjgIpWv68wV23/aYgnEvwNl3M3gWrjT642Z+uD4Nvx2EWyv8D2resjdajn9y0uP7
vTamBgEyxUs4WJRoK1fa3UdG6i2Rj4/txcVXf5erkW00bXdhYX1JL7lOHIWsbzhP
Qxy6fyuAO3nLaq0KSUvaAH6PYQcaRIscAInJuh6A5/NnXpVzih/NOS0kmZweU9sN
mXMXu/KQSsQ2bzycpNqjSr7o3Zb1Bz0RNbEdhFV/LaDAUx0SO0EZcGRTUfT/AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUdO3EWi0s4DjmCAaoHDBkKKRViIowHwYDVR0j
BBgwFoAUjABNM4OelxisWkNSFTPnU1JY1BkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEsxak0yNmlOZnJGTVkycHdHVzJ1MUpMSkRtVGVzd0YxVThHeWk3YkRB
VjUvMS84QzAwNEQzMzgzOUU5NzE4QUM1QTQzNTIxNTMzRTc1MzUyNThENDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDMDA0RDMzODM5RTk3MThB
QzVBNDM1MjE1MzNFNzUzNTI1OEQ0MTkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLMWpNMjZpTmZyRk1ZMnB3R1cydTFKTEpEbVRlc3dGMVU4R3lpN2JEQVY1LzEv
MzIzODMwMzQzYTY1MzEzMDNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDM1MzIzNTM0
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA4QMA0GCSqGSIb3DQEBCwUAA4IBAQCkpI4gW315zb9a
Un8E+wQA0x13bKRuqCQvMD7cu8xY8+kk7dx2OI1NY83+i9NBFA4hAnXQ09BhuI/B
P8Iz5vXH+HROYSZe2RBdbpC3/L8v9v7wzSfmT4U+dBExUOrTNlVvH4XuXOJ2shID
zRn6JsZc09J3b+zbhORSJ6jtimEDTBh/2JcTq3ZTuRy0k+RRZROo3thtCBH5cyar
5WGLd0WxAD4jCsNw3eHngoISnNUTmtdB0Eo89fRLOYKhKotcSbPUOGvvqLGOOK2k
qWN0MWL3gvMXu2xbMllqVzGB3BXoP2gkf9vFmpaTxDAFkBDVxDvq9DIJgzI8aj8j
ftUklmqr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org