Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a613030303a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a613030303a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          K+YQbrFm99CFF0Tu23KC4OE+PYz/TTuQGVBZKDcf2OI=
Subject key identifier:   E5:B0:9A:45:19:F8:4A:0B:CB:04:A1:B1:C5:C9:68:9B:0D:4A:B7:96
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       2DF8CE97898768CC806CA99C9F51240D654D8E14
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a613030303a3a2f33352d3335203d3e203631373137.roa
Signing time:             Sat 09 Dec 2023 13:03:43 +0000
ROA not before:           Sat 09 Dec 2023 12:58:43 +0000
ROA not after:            Sat 07 Dec 2024 13:03:43 +0000
asID:                     61717
IP address blocks:        2804:1b44:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f8:ce:97:89:87:68:cc:80:6c:a9:9c:9f:51:24:0d:65:4d:8e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Dec  9 12:58:43 2023 GMT
            Not After : Dec  7 13:03:43 2024 GMT
        Subject: CN=E5B09A4519F84A0BCB04A1B1C5C9689B0D4AB796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:5e:9d:b5:a6:f7:31:98:84:3f:b5:35:f4:
                    d6:56:5f:0b:d5:4f:bc:77:1c:f7:6a:1e:74:33:bb:
                    05:2f:5e:b1:68:81:78:23:a5:20:34:32:c1:a5:00:
                    79:07:86:46:50:bb:3d:24:46:ee:49:b5:ff:ac:ab:
                    5a:a6:bd:57:51:4a:b5:fd:0d:76:d6:55:e0:b5:59:
                    8e:75:dd:19:dc:2f:2b:75:e7:a0:a9:49:34:59:17:
                    12:e3:95:7c:8e:0b:7d:58:1b:e6:c3:e0:ca:0a:95:
                    d7:0d:52:03:57:f5:03:cc:11:87:a7:27:31:3c:37:
                    a6:9e:73:d8:8f:1a:94:14:84:fe:05:2c:bd:cf:4a:
                    10:4b:16:20:65:7d:83:63:fa:ce:d6:a9:fc:84:93:
                    ec:eb:9b:06:a8:c7:96:81:69:5a:6e:c1:08:58:db:
                    37:55:87:54:70:67:18:31:db:de:d9:d9:a4:3d:55:
                    1c:1e:0d:f1:58:f0:17:a8:99:3b:60:e7:da:2e:48:
                    f6:fa:7b:13:99:37:1c:a4:8e:89:62:49:4b:35:18:
                    85:09:64:f9:89:59:74:79:d4:a4:76:ee:84:5d:a4:
                    f0:b5:d0:ba:c7:ca:17:a6:82:5e:34:18:aa:c2:09:
                    80:41:fc:af:4a:a2:fa:02:6b:5f:44:c0:c6:c7:0f:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B0:9A:45:19:F8:4A:0B:CB:04:A1:B1:C5:C9:68:9B:0D:4A:B7:96
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a613030303a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:cc:16:24:26:73:51:19:17:8f:81:07:0b:1a:d3:f3:2e:
         13:62:c2:1d:85:5d:e0:59:f2:8f:4f:61:bc:a6:9a:2b:cb:b8:
         d5:17:64:fb:62:6a:15:42:ae:40:87:3f:17:3e:ce:7e:8f:48:
         f8:81:37:6f:6d:5e:a8:7c:db:76:77:82:bc:b2:1c:37:15:d7:
         cc:ec:27:41:dd:b5:ab:c2:65:9c:56:13:37:ec:05:56:b5:60:
         f6:5e:78:63:e1:2d:0e:fa:c8:bb:dc:35:38:75:5d:c5:18:2e:
         fb:ad:e0:0a:79:1c:22:97:4d:85:e3:70:ef:42:28:3f:50:b9:
         67:90:f9:93:b9:cd:4d:13:3f:e3:d1:eb:33:aa:78:a5:16:bc:
         1b:a6:dd:1a:2b:7e:71:e3:0e:05:18:a2:e0:9e:26:e8:62:21:
         54:fe:2f:57:9c:74:93:a2:f2:a7:02:6c:ae:b2:8f:fe:ee:3c:
         ac:5d:d1:d3:19:06:c4:a6:a8:52:02:78:12:0b:45:b3:60:64:
         23:4f:68:cb:28:7d:cd:56:c5:74:45:21:88:87:97:86:06:a4:
         cd:28:23:74:45:82:6a:e6:80:da:ac:97:c4:d5:53:0d:a7:ff:
         9b:77:75:87:04:f7:b5:1e:a8:82:63:24:04:ec:3f:a0:7c:9e:
         0e:ff:77:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULfjOl4mHaMyAbKmcn1EkDWVNjhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5OTE0QTM1QUNCQUJBQzZBNkU1RkFBNTk5NDk3REQ5
N0M0MTJBNTAeFw0yMzEyMDkxMjU4NDNaFw0yNDEyMDcxMzAzNDNaMDMxMTAvBgNV
BAMTKEU1QjA5QTQ1MTlGODRBMEJDQjA0QTFCMUM1Qzk2ODlCMEQ0QUI3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVF6dtab3MZiEP7U19NZWXwvV
T7x3HPdqHnQzuwUvXrFogXgjpSA0MsGlAHkHhkZQuz0kRu5Jtf+sq1qmvVdRSrX9
DXbWVeC1WY513RncLyt156CpSTRZFxLjlXyOC31YG+bD4MoKldcNUgNX9QPMEYen
JzE8N6aec9iPGpQUhP4FLL3PShBLFiBlfYNj+s7WqfyEk+zrmwaox5aBaVpuwQhY
2zdVh1RwZxgx297Z2aQ9VRweDfFY8BeomTtg59ouSPb6exOZNxykjoliSUs1GIUJ
ZPmJWXR51KR27oRdpPC10LrHyhemgl40GKrCCYBB/K9KovoCa19EwMbHD2u/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5bCaRRn4SgvLBKGxxclomw1Kt5YwHwYDVR0j
BBgwFoAUXJkUo1rLq6xqbl+qWZSX3ZfEEqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTd2UE56bmdFOGZFRFZnaWNGWEpBWnl0Zk04MThqWG85UEZrNlQxTEtH
SlgvMC81Qzk5MTRBMzVBQ0JBQkFDNkE2RTVGQUE1OTk0OTdERDk3QzQxMkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDOTkxNEEzNUFDQkFCQUM2
QTZFNUZBQTU5OTQ5N0REOTdDNDEyQTUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3dlBOem5nRThmRURWZ2ljRlhKQVp5dGZNODE4alhvOVBGazZUMUxLR0pYLzAv
MzIzODMwMzQzYTMxNjIzNDM0M2E2MTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM2MzEzNzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBtEoDANBgkqhkiG9w0BAQsFAAOC
AQEAJKTMFiQmc1EZF4+BBwsa0/MuE2LCHYVd4Fnyj09hvKaaK8u41Rdk+2JqFUKu
QIc/Fz7Ofo9I+IE3b21eqHzbdneCvLIcNxXXzOwnQd21q8JlnFYTN+wFVrVg9l54
Y+EtDvrIu9w1OHVdxRgu+63gCnkcIpdNheNw70IoP1C5Z5D5k7nNTRM/49HrM6p4
pRa8G6bdGit+ceMOBRii4J4m6GIhVP4vV5x0k6LypwJsrrKP/u48rF3R0xkGxKao
UgJ4EgtFs2BkI09oyyh9zVbFdEUhiIeXhgakzSgjdEWCauaA2qyXxNVTDaf/m3d1
hwT3tR6ogmMkBOw/oHyeDv93ig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org