Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/1/323830343a326537343a3a2f33322d3438203d3e20323635333437.roa
File:                     323830343a326537343a3a2f33322d3438203d3e20323635333437.roa (raw, json)
Hash identifier:          lE+sDch6U8TbpqYB0218b93AtT3d1A4qoB/m5mNYDQk=
Subject key identifier:   FF:45:65:D9:4C:1E:DF:E6:05:C8:66:24:CC:1A:CE:9A:9F:B3:01:33
Certificate issuer:       /CN=10067344E8488D7168BE29EAA4F7408481854C47
Certificate serial:       23D80609A78544CD0D7780D1BE90CA61C43B1E26
Authority key identifier: 10:06:73:44:E8:48:8D:71:68:BE:29:EA:A4:F7:40:84:81:85:4C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10067344E8488D7168BE29EAA4F7408481854C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/1/323830343a326537343a3a2f33322d3438203d3e20323635333437.roa
Signing time:             Thu 02 Jun 2022 17:38:00 +0000
ROA not before:           Thu 02 Jun 2022 17:33:00 +0000
ROA not after:            Thu 01 Jun 2023 17:38:00 +0000
asID:                     265347
IP address blocks:        2804:2e74::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d8:06:09:a7:85:44:cd:0d:77:80:d1:be:90:ca:61:c4:3b:1e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10067344E8488D7168BE29EAA4F7408481854C47
        Validity
            Not Before: Jun  2 17:33:00 2022 GMT
            Not After : Jun  1 17:38:00 2023 GMT
        Subject: CN=3082010A0282010100EFA47D44C7262A35D0524E5365133809595AB0CE7C502729726239361679ADDA8F56F81DB848426C00AEFF68E891B51D5F11E46DEC2E6CA44C770736C7E2008CE6189D5FD27A24008ED10069253CFEA9D5A5642DC99289C7ED176ABE7E17AD8B7C9998224CFF22AE2FDBF89679CE5F49FDEBDE33833DA7874D35A2186CB296178660F2D649F7D36C5F50087F73F78897A15D2263388171265706AE222552AF664D4545B049219F8C7F2F1C2141444C5BBF0696EC8F8F2BA91D99286A9F9DA47C60F74894150628A1C93934F7189682192B20DFB773E7DB7EBA59A106B1AD2040BD6F0CB004392F972EDB7814334CBAAE0435DEEA72184174AA7A016B3D0FCE830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:7d:44:c7:26:2a:35:d0:52:4e:53:65:13:
                    38:09:59:5a:b0:ce:7c:50:27:29:72:62:39:36:16:
                    79:ad:da:8f:56:f8:1d:b8:48:42:6c:00:ae:ff:68:
                    e8:91:b5:1d:5f:11:e4:6d:ec:2e:6c:a4:4c:77:07:
                    36:c7:e2:00:8c:e6:18:9d:5f:d2:7a:24:00:8e:d1:
                    00:69:25:3c:fe:a9:d5:a5:64:2d:c9:92:89:c7:ed:
                    17:6a:be:7e:17:ad:8b:7c:99:98:22:4c:ff:22:ae:
                    2f:db:f8:96:79:ce:5f:49:fd:eb:de:33:83:3d:a7:
                    87:4d:35:a2:18:6c:b2:96:17:86:60:f2:d6:49:f7:
                    d3:6c:5f:50:08:7f:73:f7:88:97:a1:5d:22:63:38:
                    81:71:26:57:06:ae:22:25:52:af:66:4d:45:45:b0:
                    49:21:9f:8c:7f:2f:1c:21:41:44:4c:5b:bf:06:96:
                    ec:8f:8f:2b:a9:1d:99:28:6a:9f:9d:a4:7c:60:f7:
                    48:94:15:06:28:a1:c9:39:34:f7:18:96:82:19:2b:
                    20:df:b7:73:e7:db:7e:ba:59:a1:06:b1:ad:20:40:
                    bd:6f:0c:b0:04:39:2f:97:2e:db:78:14:33:4c:ba:
                    ae:04:35:de:ea:72:18:41:74:aa:7a:01:6b:3d:0f:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:45:65:D9:4C:1E:DF:E6:05:C8:66:24:CC:1A:CE:9A:9F:B3:01:33
            X509v3 Authority Key Identifier:
                keyid:10:06:73:44:E8:48:8D:71:68:BE:29:EA:A4:F7:40:84:81:85:4C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/1/10067344E8488D7168BE29EAA4F7408481854C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10067344E8488D7168BE29EAA4F7408481854C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PMPRR6Qri1BDAvYtUApPxNy4B7AfRxZC39ZiiTRfyaK/1/323830343a326537343a3a2f33322d3438203d3e20323635333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e74::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:e9:54:44:95:d2:73:e6:24:3a:8c:23:cb:43:ae:65:25:
         bc:aa:22:f5:40:31:02:1f:51:09:0d:16:b6:8b:d7:41:a1:75:
         6d:92:53:4a:2c:13:7b:66:14:0d:ec:12:7d:27:00:7b:08:aa:
         f1:d0:5a:76:d7:4a:91:4b:61:79:a9:91:cc:62:12:2d:8d:0d:
         f1:b8:20:bf:70:3b:21:0b:9f:91:ea:c3:19:10:cf:a3:dc:58:
         32:2e:42:8e:fc:f3:14:98:a5:42:ec:ef:f4:30:56:04:a2:f0:
         15:8c:75:f9:22:0a:c7:f5:71:a9:29:5d:af:45:f0:09:7b:52:
         d6:83:e6:25:36:d2:59:8d:64:9b:b8:af:0e:9a:29:50:85:6b:
         dc:8b:fe:fb:93:4a:e7:7c:ce:6d:2c:7b:0f:8a:6c:80:de:7d:
         cf:fe:7f:8e:4c:c0:4c:37:4a:22:c5:95:11:d0:85:f3:aa:79:
         2a:ca:d3:16:44:fc:5c:45:ef:61:6f:c1:b5:bf:30:47:a7:31:
         05:ef:ea:6a:95:79:02:5a:ba:ad:62:5e:0a:6c:ed:9a:30:36:
         96:8f:86:5b:a2:28:22:b6:e7:c2:0b:8d:7d:36:aa:6b:b7:49:
         20:79:7b:e0:d3:08:6f:70:09:cb:1d:d9:3f:73:81:73:a5:18:
         82:1d:fd:71
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUI9gGCaeFRM0Nd4DRvpDKYcQ7HiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAwNjczNDRFODQ4OEQ3MTY4QkUyOUVBQTRGNzQwODQ4
MTg1NEM0NzAeFw0yMjA2MDIxNzMzMDBaFw0yMzA2MDExNzM4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUZBNDdENDRDNzI2MkEzNUQw
NTI0RTUzNjUxMzM4MDk1OTVBQjBDRTdDNTAyNzI5NzI2MjM5MzYxNjc5QUREQThG
NTZGODFEQjg0ODQyNkMwMEFFRkY2OEU4OTFCNTFENUYxMUU0NkRFQzJFNkNBNDRD
NzcwNzM2QzdFMjAwOENFNjE4OUQ1RkQyN0EyNDAwOEVEMTAwNjkyNTNDRkVBOUQ1
QTU2NDJEQzk5Mjg5QzdFRDE3NkFCRTdFMTdBRDhCN0M5OTk4MjI0Q0ZGMjJBRTJG
REJGODk2NzlDRTVGNDlGREVCREUzMzgzM0RBNzg3NEQzNUEyMTg2Q0IyOTYxNzg2
NjBGMkQ2NDlGN0QzNkM1RjUwMDg3RjczRjc4ODk3QTE1RDIyNjMzODgxNzEyNjU3
MDZBRTIyMjU1MkFGNjY0RDQ1NDVCMDQ5MjE5RjhDN0YyRjFDMjE0MTQ0NEM1QkJG
MDY5NkVDOEY4RjJCQTkxRDk5Mjg2QTlGOURBNDdDNjBGNzQ4OTQxNTA2MjhBMUM5
MzkzNEY3MTg5NjgyMTkyQjIwREZCNzczRTdEQjdFQkE1OUExMDZCMUFEMjA0MEJE
NkYwQ0IwMDQzOTJGOTcyRURCNzgxNDMzNENCQUFFMDQzNURFRUE3MjE4NDE3NEFB
N0EwMTZCM0QwRkNFODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA76R9RMcmKjXQUk5TZRM4CVlasM58UCcpcmI5NhZ5rdqPVvgduEhC
bACu/2jokbUdXxHkbewubKRMdwc2x+IAjOYYnV/SeiQAjtEAaSU8/qnVpWQtyZKJ
x+0Xar5+F62LfJmYIkz/Iq4v2/iWec5fSf3r3jODPaeHTTWiGGyylheGYPLWSffT
bF9QCH9z94iXoV0iYziBcSZXBq4iJVKvZk1FRbBJIZ+Mfy8cIUFETFu/Bpbsj48r
qR2ZKGqfnaR8YPdIlBUGKKHJOTT3GJaCGSsg37dz59t+ulmhBrGtIEC9bwywBDkv
ly7beBQzTLquBDXe6nIYQXSqegFrPQ/OgwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FP9FZdlMHt/mBchmJMwazpqfswEzMB8GA1UdIwQYMBaAFBAGc0ToSI1xaL4p6qT3
QISBhUxHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVQTVBSUjZRcmkxQkRB
dll0VUFwUHhOeTRCN0FmUnhaQzM5WmlpVFJmeWFLLzEvMTAwNjczNDRFODQ4OEQ3
MTY4QkUyOUVBQTRGNzQwODQ4MTg1NEM0Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xMDA2NzM0NEU4NDg4RDcxNjhCRTI5RUFBNEY3NDA4NDgxODU0
QzQ3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81UE1QUlI2UXJpMUJEQXZZdFVB
cFB4Tnk0QjdBZlJ4WkMzOVppaVRSZnlhSy8xLzMyMzgzMDM0M2EzMjY1MzczNDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTMzMzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
LnQwDQYJKoZIhvcNAQELBQADggEBAEpw6VREldJz5iQ6jCPLQ65lJbyqIvVAMQIf
UQkNFraL10GhdW2SU0osE3tmFA3sEn0nAHsIqvHQWnbXSpFLYXmpkcxiEi2NDfG4
IL9wOyELn5HqwxkQz6PcWDIuQo788xSYpULs7/QwVgSi8BWMdfkiCsf1cakpXa9F
8Al7UtaD5iU20lmNZJu4rw6aKVCFa9yL/vuTSud8zm0sew+KbIDefc/+f45MwEw3
SiLFlRHQhfOqeSrK0xZE/FxF72FvwbW/MEenMQXv6mqVeQJauq1iXgps7ZowNpaP
hluiKCK258ILjX02qmu3SSB5e+DTCG9wCcsd2T9zgXOlGIId/XE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org