Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a363031303a3a2f34352d3435203d3e20323732343730.roa
File:                     323830343a383162303a363031303a3a2f34352d3435203d3e20323732343730.roa (raw, json)
Hash identifier:          nMXP20tJgXee03z++aymQAnKy17qabPMkaez0Eo0A4Y=
Subject key identifier:   51:AA:73:79:93:8B:44:51:CC:96:B4:07:DE:17:E8:B8:90:0F:99:CD
Certificate issuer:       /CN=70E16C82EF433C8672E0C20D7962F17FA03BD3A1
Certificate serial:       21B414790766DB4D683E00525C940B56BC0FDF2E
Authority key identifier: 70:E1:6C:82:EF:43:3C:86:72:E0:C2:0D:79:62:F1:7F:A0:3B:D3:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a363031303a3a2f34352d3435203d3e20323732343730.roa
Signing time:             Wed 09 Nov 2022 17:04:08 +0000
ROA not before:           Wed 09 Nov 2022 16:59:08 +0000
ROA not after:            Wed 08 Nov 2023 17:04:08 +0000
asID:                     272470
IP address blocks:        2804:81b0:6010::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b4:14:79:07:66:db:4d:68:3e:00:52:5c:94:0b:56:bc:0f:df:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70E16C82EF433C8672E0C20D7962F17FA03BD3A1
        Validity
            Not Before: Nov  9 16:59:08 2022 GMT
            Not After : Nov  8 17:04:08 2023 GMT
        Subject: CN=51AA7379938B4451CC96B407DE17E8B8900F99CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:4c:f9:22:03:94:5f:41:f6:7e:c2:ca:a7:
                    6c:45:a4:9e:0b:74:f0:ae:61:9d:61:50:d1:c8:50:
                    f8:73:21:14:9f:6c:5e:f8:11:ca:b6:58:99:a5:0a:
                    7c:f0:9d:c5:33:6c:6c:47:9d:15:ca:c8:73:13:b5:
                    d5:da:75:25:97:c1:cc:c4:e2:1d:d0:44:2c:cc:44:
                    04:d7:cb:c9:e9:b7:bf:d6:d5:6b:44:6b:a4:57:6a:
                    de:c6:45:7e:93:d7:21:cf:a8:3e:2e:3d:96:e8:ec:
                    a3:33:f7:42:08:0d:2e:e8:fc:af:32:c6:cf:53:16:
                    24:c2:da:cf:82:a4:23:3e:46:a0:f9:b2:5d:62:e6:
                    bf:bc:bd:dd:ef:07:92:ba:28:76:52:b9:0d:3a:67:
                    92:2f:9e:14:81:8c:b8:2c:63:71:7d:9f:3e:ab:31:
                    64:a0:e3:66:bc:16:3a:25:4c:c9:e7:4b:7e:09:98:
                    6d:a4:40:07:3d:43:3c:5e:7a:23:c6:fe:54:e3:a1:
                    2a:89:3a:65:2a:64:4d:7a:dc:15:39:2c:7f:7b:9c:
                    76:a8:5b:af:16:ad:2b:e8:66:59:47:b7:75:07:16:
                    2b:52:1a:da:b3:f1:93:d1:d9:29:25:1f:a1:9d:a6:
                    6a:0e:ba:a2:ea:1b:ab:fe:65:fc:85:a9:8b:85:8b:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:73:79:93:8B:44:51:CC:96:B4:07:DE:17:E8:B8:90:0F:99:CD
            X509v3 Authority Key Identifier:
                keyid:70:E1:6C:82:EF:43:3C:86:72:E0:C2:0D:79:62:F1:7F:A0:3B:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/323830343a383162303a363031303a3a2f34352d3435203d3e20323732343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b0:6010::/45

    Signature Algorithm: sha256WithRSAEncryption
         9a:f6:41:18:f6:de:8e:4e:8f:1b:4c:9d:ed:e5:2a:6d:94:bb:
         07:36:2d:1d:dd:ab:37:93:6d:fc:7b:65:4d:f9:73:fe:8e:0c:
         36:b7:89:a2:e3:54:c3:cb:77:b6:32:e4:17:05:b1:55:36:f2:
         85:cd:42:72:be:8f:c5:cc:c0:7a:be:44:49:c2:2e:61:6c:38:
         88:ca:99:9b:ec:9d:ff:a3:dc:6a:ab:90:84:1a:ae:aa:85:f9:
         7b:14:f3:ef:f3:ff:4c:db:c8:62:21:26:a4:20:b2:24:66:cd:
         bd:35:63:88:f2:d5:d3:19:26:cb:75:8b:82:61:1d:71:8a:4b:
         05:99:40:94:2e:a6:6d:c3:db:b9:6e:79:b6:da:cf:6c:c7:4f:
         4a:ff:9c:98:ad:74:e5:f1:44:d9:b7:a7:fe:20:fc:c4:66:da:
         b8:67:93:18:91:a2:ec:56:f9:7a:62:c8:71:35:db:03:d9:6f:
         2b:e0:09:c9:e1:dd:8b:29:a2:2a:95:ca:1e:a0:d3:1d:5e:ef:
         19:b0:03:91:86:c1:6d:91:e4:34:b3:bd:fe:f8:5b:22:3d:7c:
         1d:e5:e9:e7:c3:11:83:e8:ad:0c:7a:55:1f:8c:45:02:91:e3:
         4c:2b:f6:46:b7:98:90:16:62:4d:04:c5:3d:58:ed:7d:9a:d0:
         f9:3d:9d:9d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUIbQUeQdm201oPgBSXJQLVrwP3y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBFMTZDODJFRjQzM0M4NjcyRTBDMjBENzk2MkYxN0ZB
MDNCRDNBMTAeFw0yMjExMDkxNjU5MDhaFw0yMzExMDgxNzA0MDhaMDMxMTAvBgNV
BAMTKDUxQUE3Mzc5OTM4QjQ0NTFDQzk2QjQwN0RFMTdFOEI4OTAwRjk5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAEz5IgOUX0H2fsLKp2xFpJ4L
dPCuYZ1hUNHIUPhzIRSfbF74Ecq2WJmlCnzwncUzbGxHnRXKyHMTtdXadSWXwczE
4h3QRCzMRATXy8npt7/W1WtEa6RXat7GRX6T1yHPqD4uPZbo7KMz90IIDS7o/K8y
xs9TFiTC2s+CpCM+RqD5sl1i5r+8vd3vB5K6KHZSuQ06Z5IvnhSBjLgsY3F9nz6r
MWSg42a8FjolTMnnS34JmG2kQAc9QzxeeiPG/lTjoSqJOmUqZE163BU5LH97nHao
W68WrSvoZllHt3UHFitSGtqz8ZPR2SklH6GdpmoOuqLqG6v+ZfyFqYuFi7OBAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUUapzeZOLRFHMlrQH3hfouJAPmc0wHwYDVR0j
BBgwFoAUcOFsgu9DPIZy4MINeWLxf6A706EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFGNUxBSHM4bTFFV3Bza2ZmcEh3bmlDWTZkY1BIOUtLUzZjWUtjblRw
SEIvMC83MEUxNkM4MkVGNDMzQzg2NzJFMEMyMEQ3OTYyRjE3RkEwM0JEM0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwRTE2QzgyRUY0MzNDODY3
MkUwQzIwRDc5NjJGMTdGQTAzQkQzQTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVhRjVMQUhzOG0xRVdwc2tmZnBId25pQ1k2ZGNQSDlLS1M2Y1lLY25UcEhCLzAv
MzIzODMwMzQzYTM4MzE2MjMwM2EzNjMwMzEzMDNhM2EyZjM0MzUyZDM0MzUyMDNk
M2UyMDMyMzczMjM0MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygEgbBgEDANBgkqhkiG9w0BAQsF
AAOCAQEAmvZBGPbejk6PG0yd7eUqbZS7BzYtHd2rN5Nt/HtlTflz/o4MNreJouNU
w8t3tjLkFwWxVTbyhc1Ccr6PxczAer5EScIuYWw4iMqZm+yd/6PcaquQhBquqoX5
exTz7/P/TNvIYiEmpCCyJGbNvTVjiPLV0xkmy3WLgmEdcYpLBZlAlC6mbcPbuW55
ttrPbMdPSv+cmK105fFE2ben/iD8xGbauGeTGJGi7Fb5emLIcTXbA9lvK+AJyeHd
iymiKpXKHqDTHV7vGbADkYbBbZHkNLO9/vhbIj18HeXp58MRg+itDHpVH4xFApHj
TCv2RreYkBZiTQTFPVjtfZrQ+T2dnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org