Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a383030303a3a2f33342d3334203d3e20323633363034.roa
File:                     323830343a6663633a383030303a3a2f33342d3334203d3e20323633363034.roa (raw, json)
Hash identifier:          6d09RkHKx3KvDmleEpivmpbWvduI7pEzovJJq1+tfq0=
Subject key identifier:   86:79:0B:5E:50:DD:48:42:B3:31:AF:1F:59:65:4A:1A:7E:0B:EE:7E
Certificate issuer:       /CN=C67929131596EB65AF046524615104BDF0EDC74D
Certificate serial:       291C8187FB1022F9F8B2308EF95B6C70E8AAB1D7
Authority key identifier: C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a383030303a3a2f33342d3334203d3e20323633363034.roa
Signing time:             Wed 13 Sep 2023 20:24:00 +0000
ROA not before:           Wed 13 Sep 2023 20:19:00 +0000
ROA not after:            Wed 11 Sep 2024 20:24:00 +0000
asID:                     263604
IP address blocks:        2804:fcc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1c:81:87:fb:10:22:f9:f8:b2:30:8e:f9:5b:6c:70:e8:aa:b1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67929131596EB65AF046524615104BDF0EDC74D
        Validity
            Not Before: Sep 13 20:19:00 2023 GMT
            Not After : Sep 11 20:24:00 2024 GMT
        Subject: CN=86790B5E50DD4842B331AF1F59654A1A7E0BEE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:ee:8c:63:60:92:71:a5:12:47:84:db:36:
                    0c:40:ba:71:59:a4:93:32:18:46:28:b8:cd:13:23:
                    2f:1a:9d:5f:1d:fe:4d:45:32:7d:a7:38:4f:60:bf:
                    01:ad:e4:7b:cc:48:ec:73:28:5b:58:b8:93:f9:44:
                    40:86:52:83:86:a0:aa:61:cc:b0:7c:4c:b8:75:77:
                    c6:ed:a0:b3:f5:a2:7a:b4:cb:e6:86:9c:5c:8a:04:
                    c9:c1:df:30:b8:82:89:33:9b:c9:25:db:f8:9a:2e:
                    60:b0:a2:c5:20:b5:6d:7e:b6:ea:37:52:cf:29:47:
                    25:4b:7f:48:11:a8:ee:79:16:d9:46:ae:18:2c:bd:
                    ed:1f:eb:28:58:8d:3b:1b:45:fe:a8:36:a9:9e:c0:
                    79:1c:f4:64:cf:6c:98:2d:3c:76:dc:25:e0:5a:bb:
                    b5:ae:3f:f9:00:b2:32:99:d0:f8:2a:6a:0e:5e:3d:
                    5e:58:24:2a:df:c3:55:77:fa:a0:e8:b4:ef:22:0a:
                    71:1b:f5:de:14:5d:df:b2:8f:75:01:0d:9a:bd:1e:
                    29:0d:72:4e:c8:36:38:5e:b6:08:e7:f6:8c:92:80:
                    81:99:b6:21:db:dd:bb:bd:1a:dd:e1:b5:cd:78:8e:
                    0b:d1:a3:63:15:82:ac:9c:62:47:f6:e2:7f:39:ac:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:79:0B:5E:50:DD:48:42:B3:31:AF:1F:59:65:4A:1A:7E:0B:EE:7E
            X509v3 Authority Key Identifier:
                keyid:C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/323830343a6663633a383030303a3a2f33342d3334203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:89:8e:8a:ca:92:31:95:03:7d:97:a8:20:36:62:37:56:be:
         0c:af:92:b7:f6:8e:bd:62:e3:58:3d:a1:e3:ce:e8:9f:65:17:
         58:30:c1:c6:0b:aa:db:73:e2:9e:22:8b:d7:cd:b2:c3:df:79:
         03:b3:bd:b3:5a:ba:a3:6c:e4:28:f0:e3:5a:94:4c:bc:c1:e0:
         e7:a3:54:cb:97:9b:6b:93:89:82:ec:bb:98:60:b7:80:14:87:
         d8:3e:fe:07:96:81:f1:c8:00:7b:8c:93:b3:01:f3:aa:6b:cb:
         af:22:ea:bc:75:c9:ef:8e:38:a9:4f:68:79:d3:df:13:d5:4a:
         24:33:28:eb:7f:8f:e1:d8:74:ee:5f:a4:32:ee:6a:4f:1b:ad:
         a0:5f:cc:72:a4:2d:44:d3:c4:10:d9:38:22:3d:47:b0:3e:79:
         87:0b:9d:08:ed:54:8d:da:9d:ec:c5:ce:2c:cb:21:9b:cc:f2:
         9e:0f:b1:5e:5b:4b:3d:23:d7:0b:e0:a0:3e:28:f1:5f:82:35:
         b7:47:f4:6b:48:59:15:2c:62:98:57:46:82:ab:57:8f:81:a8:
         4c:f4:9a:c6:ad:47:bc:c3:10:fa:f2:f2:67:d8:5a:97:79:05:
         59:ac:06:e4:66:20:1b:31:15:1f:8d:a5:71:f0:33:7b:2a:7d:
         69:93:1e:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKRyBh/sQIvn4sjCO+VtscOiqsdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3OTI5MTMxNTk2RUI2NUFGMDQ2NTI0NjE1MTA0QkRG
MEVEQzc0RDAeFw0yMzA5MTMyMDE5MDBaFw0yNDA5MTEyMDI0MDBaMDMxMTAvBgNV
BAMTKDg2NzkwQjVFNTBERDQ4NDJCMzMxQUYxRjU5NjU0QTFBN0UwQkVFN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcu6MY2CScaUSR4TbNgxAunFZ
pJMyGEYouM0TIy8anV8d/k1FMn2nOE9gvwGt5HvMSOxzKFtYuJP5RECGUoOGoKph
zLB8TLh1d8btoLP1onq0y+aGnFyKBMnB3zC4gokzm8kl2/iaLmCwosUgtW1+tuo3
Us8pRyVLf0gRqO55FtlGrhgsve0f6yhYjTsbRf6oNqmewHkc9GTPbJgtPHbcJeBa
u7WuP/kAsjKZ0Pgqag5ePV5YJCrfw1V3+qDotO8iCnEb9d4UXd+yj3UBDZq9HikN
ck7INjhetgjn9oySgIGZtiHb3bu9Gt3htc14jgvRo2MVgqycYkf24n85rP53AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhnkLXlDdSEKzMa8fWWVKGn4L7n4wHwYDVR0j
BBgwFoAUxnkpExWW62WvBGUkYVEEvfDtx00wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx
Z28vMS9DNjc5MjkxMzE1OTZFQjY1QUYwNDY1MjQ2MTUxMDRCREYwRURDNzRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2NzkyOTEzMTU5NkVCNjVB
RjA0NjUyNDYxNTEwNEJERjBFREM3NEQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcmVqUzVqQnVhdmJGNXJFV3pvMlJhTUZ1YTU4WFNpVnVlZXJuTlU4cWdvLzEv
MzIzODMwMzQzYTY2NjM2MzNhMzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzMzNjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA/MgDANBgkqhkiG9w0BAQsFAAOC
AQEAEomOisqSMZUDfZeoIDZiN1a+DK+St/aOvWLjWD2h487on2UXWDDBxguq23Pi
niKL182yw995A7O9s1q6o2zkKPDjWpRMvMHg56NUy5eba5OJguy7mGC3gBSH2D7+
B5aB8cgAe4yTswHzqmvLryLqvHXJ7444qU9oedPfE9VKJDMo63+P4dh07l+kMu5q
TxutoF/McqQtRNPEENk4Ij1HsD55hwudCO1Ujdqd7MXOLMshm8zyng+xXltLPSPX
C+CgPijxX4I1t0f0a0hZFSximFdGgqtXj4GoTPSaxq1HvMMQ+vLyZ9hal3kFWawG
5GYgGzEVH42lcfAzeyp9aZMejQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org