Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/323830343a316137303a3a2f33322d3332203d3e203631383539.roa
File:                     323830343a316137303a3a2f33322d3332203d3e203631383539.roa (raw, json)
Hash identifier:          HEbDsL9FxlutHzrNq88oFXmt79hLlEWZMpPoZOgxTpA=
Subject key identifier:   2E:74:0A:1B:AF:16:FB:32:CE:15:4B:59:B4:16:82:83:83:90:CF:F0
Certificate issuer:       /CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
Certificate serial:       204E4E4E02C86FC13F405E66B3A209EC140266D0
Authority key identifier: 4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/323830343a316137303a3a2f33322d3332203d3e203631383539.roa
Signing time:             Wed 07 Jun 2023 13:43:51 +0000
ROA not before:           Wed 07 Jun 2023 13:38:51 +0000
ROA not after:            Wed 05 Jun 2024 13:43:51 +0000
asID:                     61859
IP address blocks:        2804:1a70::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4e:4e:4e:02:c8:6f:c1:3f:40:5e:66:b3:a2:09:ec:14:02:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
        Validity
            Not Before: Jun  7 13:38:51 2023 GMT
            Not After : Jun  5 13:43:51 2024 GMT
        Subject: CN=2E740A1BAF16FB32CE154B59B41682838390CFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:11:31:a5:f1:32:4d:eb:c4:fd:8c:de:63:
                    ff:a8:6e:4f:27:c2:cc:c1:58:72:1a:87:55:db:b3:
                    83:be:b6:8b:78:e9:6f:1a:69:78:75:37:43:5c:56:
                    b1:9b:56:4a:ac:7d:41:36:71:1a:2c:77:97:61:d3:
                    87:28:1a:15:0b:22:2f:5c:b1:02:51:f2:db:25:33:
                    8f:d6:3c:9f:dc:6e:f2:e3:31:14:a6:09:07:15:ac:
                    88:f9:2e:e8:8f:39:a3:3e:1b:55:07:47:0b:fa:61:
                    e3:09:c4:97:76:44:0b:34:c9:e1:e4:9b:06:bf:1f:
                    1f:e2:93:87:30:fc:07:8a:35:06:5b:6e:81:09:5b:
                    8d:a9:e6:4b:00:73:94:96:6d:5f:4b:ad:0d:16:b1:
                    cf:e6:85:17:04:c0:67:f8:41:86:2c:10:71:86:c7:
                    ce:df:08:9d:d9:07:0f:f5:7c:3b:82:4f:36:85:30:
                    a8:fc:0d:fb:00:d2:5d:38:cc:50:9d:af:e1:ec:fc:
                    6e:09:a4:71:d6:87:e1:89:f6:ad:c1:23:85:22:5a:
                    df:1a:d7:a1:ee:90:d5:e0:30:cf:5f:34:da:b4:a7:
                    f5:4e:d1:33:76:ff:92:14:a2:ca:4f:71:2e:bf:e9:
                    30:c7:42:d2:7a:6c:98:53:75:a5:7f:0e:3b:68:b7:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:74:0A:1B:AF:16:FB:32:CE:15:4B:59:B4:16:82:83:83:90:CF:F0
            X509v3 Authority Key Identifier:
                keyid:4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/323830343a316137303a3a2f33322d3332203d3e203631383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a70::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:23:f0:f5:ec:8d:bc:b4:30:cc:c1:65:34:60:57:ab:4a:05:
         70:fb:de:0c:11:50:86:ae:2b:53:37:c0:28:5a:d7:c7:d0:7a:
         c9:b8:eb:02:d4:3d:8d:db:ce:1a:8d:e7:c4:81:50:5d:26:cc:
         ed:88:88:72:c5:8f:f7:2b:80:e8:3f:27:29:0e:49:78:bd:06:
         c8:6a:d4:fa:7d:2c:b8:ad:b9:4c:90:a6:7c:be:1d:85:a2:8f:
         c8:25:88:a4:4e:07:ff:a1:f7:00:93:e3:21:86:52:30:b9:01:
         e1:bd:21:30:c8:b2:0c:c4:9d:1b:2f:6b:c4:29:c4:4d:ba:b7:
         29:d7:fc:10:dd:46:f2:92:c2:0f:c4:17:fc:a3:ad:e9:4f:6f:
         25:bf:e4:2e:45:a0:50:2e:9e:e4:ab:f0:d5:69:fd:7d:24:c1:
         98:76:77:35:6d:83:09:c7:b4:e9:91:b7:84:db:b3:44:3e:37:
         98:f3:bb:21:4a:ca:a0:53:b9:63:11:7a:ec:ff:d0:fa:f4:90:
         1a:d4:71:13:6e:50:b1:62:7f:8f:68:5e:7b:72:1e:79:cb:ab:
         97:49:91:1c:cb:00:61:54:22:f9:08:f5:e0:7b:11:3d:ca:3d:
         fc:e2:f2:a3:16:b1:65:1f:cb:d5:a8:a2:7f:59:52:5d:de:8a:
         8b:76:ab:d6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIE5OTgLIb8E/QF5ms6IJ7BQCZtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEzQUQwMkRENUNDRkUxQ0QyNDlDNjE3NzMwRUY0ODc4
QjUxNjMzNDAeFw0yMzA2MDcxMzM4NTFaFw0yNDA2MDUxMzQzNTFaMDMxMTAvBgNV
BAMTKDJFNzQwQTFCQUYxNkZCMzJDRTE1NEI1OUI0MTY4MjgzODM5MENGRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyERExpfEyTevE/YzeY/+obk8n
wszBWHIah1Xbs4O+tot46W8aaXh1N0NcVrGbVkqsfUE2cRosd5dh04coGhULIi9c
sQJR8tslM4/WPJ/cbvLjMRSmCQcVrIj5LuiPOaM+G1UHRwv6YeMJxJd2RAs0yeHk
mwa/Hx/ik4cw/AeKNQZbboEJW42p5ksAc5SWbV9LrQ0Wsc/mhRcEwGf4QYYsEHGG
x87fCJ3ZBw/1fDuCTzaFMKj8DfsA0l04zFCdr+Hs/G4JpHHWh+GJ9q3BI4UiWt8a
16HukNXgMM9fNNq0p/VO0TN2/5IUospPcS6/6TDHQtJ6bJhTdaV/Djtotx3FAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQULnQKG68W+zLOFUtZtBaCg4OQz/AwHwYDVR0j
BBgwFoAUSjrQLdXM/hzSScYXcw70h4tRYzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRlTXI4NVlQZUU3UE5DRldxa0E2UWt6dHk0eWRaRjMxTWVSMVdCNVVq
R1AvMC80QTNBRDAyREQ1Q0NGRTFDRDI0OUM2MTc3MzBFRjQ4NzhCNTE2MzM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBM0FEMDJERDVDQ0ZFMUNE
MjQ5QzYxNzczMEVGNDg3OEI1MTYzMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUZU1yODVZUGVFN1BOQ0ZXcWtBNlFrenR5NHlkWkYzMU1lUjFXQjVVakdQLzAv
MzIzODMwMzQzYTMxNjEzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM4
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGnAwDQYJKoZIhvcNAQELBQADggEBALAj8PXsjby0
MMzBZTRgV6tKBXD73gwRUIauK1M3wCha18fQesm46wLUPY3bzhqN58SBUF0mzO2I
iHLFj/crgOg/JykOSXi9Bshq1Pp9LLituUyQpny+HYWij8gliKROB/+h9wCT4yGG
UjC5AeG9ITDIsgzEnRsva8QpxE26tynX/BDdRvKSwg/EF/yjrelPbyW/5C5FoFAu
nuSr8NVp/X0kwZh2dzVtgwnHtOmRt4Tbs0Q+N5jzuyFKyqBTuWMReuz/0Pr0kBrU
cRNuULFif49oXntyHnnLq5dJkRzLAGFUIvkI9eB7ET3KPfzi8qMWsWUfy9Woon9Z
Ul3eiot2q9Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org