Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383830303a3a2f34302d3430203d3e203631363738.roa
File:                     323830343a316364343a383830303a3a2f34302d3430203d3e203631363738.roa (raw, json)
Hash identifier:          a5TN4O4jq5jXKViF3fF/ywgTf75es+4w6xNIh6ZIYco=
Subject key identifier:   60:1A:BC:21:5B:45:6C:4B:8D:9D:38:81:EF:9E:33:88:53:02:23:32
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       4A06AB4854928DB2B23B428FF7BE1FCB0304EAA1
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383830303a3a2f34302d3430203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:44:09 +0000
ROA not before:           Tue 24 Oct 2023 12:39:09 +0000
ROA not after:            Tue 22 Oct 2024 12:44:09 +0000
asID:                     61678
IP address blocks:        2804:1cd4:8800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:06:ab:48:54:92:8d:b2:b2:3b:42:8f:f7:be:1f:cb:03:04:ea:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:39:09 2023 GMT
            Not After : Oct 22 12:44:09 2024 GMT
        Subject: CN=601ABC215B456C4B8D9D3881EF9E338853022332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:38:c8:54:04:8c:c4:40:90:4f:ab:e1:55:
                    f2:11:4f:d7:cc:8b:79:0c:8a:3b:dd:08:96:cf:a9:
                    47:78:04:63:4a:0f:c6:1b:5b:46:7e:fd:26:30:46:
                    68:8c:58:57:86:d0:74:6b:6c:6c:cc:16:5c:7f:b7:
                    d0:5c:c7:ac:c0:a9:91:2f:6d:25:8c:07:3c:44:7b:
                    78:3d:1f:f2:26:26:f1:3b:73:00:47:67:ae:77:c1:
                    c1:e1:b8:7b:4c:46:0f:1f:aa:22:6a:e3:cb:f2:50:
                    da:c6:de:ba:44:49:fd:a2:81:7d:8f:e2:64:2b:0a:
                    19:46:12:2c:71:b2:57:7d:3b:c2:62:e4:2d:c3:89:
                    8a:0a:21:ba:0f:35:51:63:4f:5f:1a:4c:cd:eb:69:
                    4a:4c:1d:90:02:9a:8f:a6:46:4f:73:31:2e:65:4e:
                    de:4f:44:72:69:3d:93:64:c9:a3:77:72:ee:5b:05:
                    81:9d:b2:4f:a2:32:dd:4b:3d:f7:1b:c7:29:94:ed:
                    58:0e:32:cb:0c:89:57:33:9d:ff:62:fb:70:34:65:
                    c4:3f:20:56:bd:6d:19:74:84:49:d4:da:6a:d7:33:
                    97:ef:6d:4c:18:dc:2a:f7:14:8b:4d:ee:ee:c1:85:
                    f5:d5:ec:39:ff:ed:6b:82:d8:cc:b5:69:eb:44:8f:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1A:BC:21:5B:45:6C:4B:8D:9D:38:81:EF:9E:33:88:53:02:23:32
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383830303a3a2f34302d3430203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:2f:ef:fa:ab:1a:2f:46:6d:d6:4a:ee:70:ae:d7:ff:eb:
         bb:c4:60:72:be:7e:df:f0:78:72:b9:97:83:69:25:0c:c0:55:
         47:49:d8:ae:11:dd:2f:e8:83:d8:ca:10:85:98:0c:ff:8b:b5:
         9f:65:3a:f5:e2:f8:f1:68:bc:8d:65:11:20:bf:67:b3:d7:31:
         d2:5e:f4:ca:b5:2c:15:32:3c:c0:b3:7c:dc:46:0e:9b:4a:6d:
         0a:68:74:a3:02:1e:6b:8c:cc:5c:22:69:9e:7f:a4:28:d6:01:
         dd:ec:1e:b8:e0:4b:38:a4:be:72:a7:a7:22:f4:96:ab:b3:ae:
         00:8c:ed:80:ff:d3:c2:e2:3e:df:8a:7b:0d:e7:8f:74:29:d7:
         30:ee:ce:79:ba:8e:a6:75:bc:4e:2b:06:a4:37:31:20:60:f8:
         2d:db:32:fd:23:0d:04:a6:20:c0:12:af:95:6c:94:09:b2:f6:
         dc:89:fa:f4:fd:32:a0:5c:f4:dd:e3:f6:b1:8a:46:24:5d:38:
         30:2f:59:19:c1:41:d3:8d:15:49:d2:39:c1:25:c8:26:35:e8:
         a6:92:26:60:51:13:4b:f5:1a:fb:fa:2d:38:ed:b6:bd:b8:d3:
         08:b8:d1:30:bb:5a:1e:16:ea:ce:67:9d:44:ab:f6:d0:b3:7f:
         4e:30:d9:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSgarSFSSjbKyO0KP974fywME6qEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGRjFEM0E5NDdCOEI1RkY3NURENzFGRjFDRUQ3MEQ0
RTNGQTBCNDAeFw0yMzEwMjQxMjM5MDlaFw0yNDEwMjIxMjQ0MDlaMDMxMTAvBgNV
BAMTKDYwMUFCQzIxNUI0NTZDNEI4RDlEMzg4MUVGOUUzMzg4NTMwMjIzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0TjIVASMxECQT6vhVfIRT9fM
i3kMijvdCJbPqUd4BGNKD8YbW0Z+/SYwRmiMWFeG0HRrbGzMFlx/t9Bcx6zAqZEv
bSWMBzxEe3g9H/ImJvE7cwBHZ653wcHhuHtMRg8fqiJq48vyUNrG3rpESf2igX2P
4mQrChlGEixxsld9O8Ji5C3DiYoKIboPNVFjT18aTM3raUpMHZACmo+mRk9zMS5l
Tt5PRHJpPZNkyaN3cu5bBYGdsk+iMt1LPfcbxymU7VgOMssMiVcznf9i+3A0ZcQ/
IFa9bRl0hEnU2mrXM5fvbUwY3Cr3FItN7u7BhfXV7Dn/7WuC2My1aetEj6XJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYBq8IVtFbEuNnTiB754ziFMCIzIwHwYDVR0j
BBgwFoAUX/8dOpR7i1/3Xdcf8c7XDU4/oLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC81RkZGMUQzQTk0N0I4QjVGRjc1REQ3MUZGMUNFRDcwRDRFM0ZBMEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGRkYxRDNBOTQ3QjhCNUZG
NzVERDcxRkYxQ0VENzBENEUzRkEwQjQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzIzODMwMzQzYTMxNjM2NDM0M2EzODM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM2MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBzUiDANBgkqhkiG9w0BAQsFAAOC
AQEAHJgv7/qrGi9GbdZK7nCu1//ru8Rgcr5+3/B4crmXg2klDMBVR0nYrhHdL+iD
2MoQhZgM/4u1n2U69eL48Wi8jWURIL9ns9cx0l70yrUsFTI8wLN83EYOm0ptCmh0
owIea4zMXCJpnn+kKNYB3eweuOBLOKS+cqenIvSWq7OuAIztgP/TwuI+34p7DeeP
dCnXMO7OebqOpnW8TisGpDcxIGD4Ldsy/SMNBKYgwBKvlWyUCbL23In69P0yoFz0
3eP2sYpGJF04MC9ZGcFB040VSdI5wSXIJjXoppImYFETS/Ua+/otOO22vbjTCLjR
MLtaHhbqzmedRKv20LN/TjDZxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org