Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/323830343a6463383a3a2f33322d3332203d3e203238363336.roa
File:                     323830343a6463383a3a2f33322d3332203d3e203238363336.roa (raw, json)
Hash identifier:          akdNvqaix/TdyPQ+CeeLql/uVqTozGL8IQya6kJAHvg=
Subject key identifier:   30:2D:38:94:42:1A:3D:40:7C:2C:AD:B2:89:EC:06:AF:6F:D4:B0:D2
Certificate issuer:       /CN=A9F6427C32C617D9FC68BBA56D31A88E88DAFF54
Certificate serial:       410F559F3814B42BF3B6A81A9A2C2CAE1F398C14
Authority key identifier: A9:F6:42:7C:32:C6:17:D9:FC:68:BB:A5:6D:31:A8:8E:88:DA:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/323830343a6463383a3a2f33322d3332203d3e203238363336.roa
Signing time:             Thu 04 Apr 2024 08:55:06 +0000
ROA not before:           Thu 04 Apr 2024 08:50:06 +0000
ROA not after:            Thu 03 Apr 2025 08:55:06 +0000
asID:                     28636
IP address blocks:        2804:dc8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0f:55:9f:38:14:b4:2b:f3:b6:a8:1a:9a:2c:2c:ae:1f:39:8c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F6427C32C617D9FC68BBA56D31A88E88DAFF54
        Validity
            Not Before: Apr  4 08:50:06 2024 GMT
            Not After : Apr  3 08:55:06 2025 GMT
        Subject: CN=302D3894421A3D407C2CADB289EC06AF6FD4B0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:08:0d:59:f8:80:da:e8:77:b9:70:cc:1b:
                    62:f8:8e:f0:da:bb:42:53:d1:a0:a7:2c:78:db:e6:
                    ed:4c:19:a1:e5:61:10:15:ef:9c:ff:30:60:81:b3:
                    29:96:71:f9:d9:79:9a:a2:4f:92:6f:97:89:00:d3:
                    52:fa:e7:9b:6f:9b:d0:76:61:23:bc:c0:b3:f9:b9:
                    0e:c0:5c:ac:fe:db:d3:c7:2d:40:6f:4a:44:30:82:
                    1e:94:0e:70:60:0f:e5:d8:8b:df:0a:73:1a:76:1f:
                    20:bb:0a:e7:c3:17:94:9f:c4:04:e7:9a:10:e3:77:
                    52:9a:07:76:89:81:84:e7:40:57:33:6b:78:60:ec:
                    7f:6e:48:47:b2:87:e2:e6:e3:b4:87:52:31:89:5a:
                    58:1c:ce:50:78:46:56:f8:5b:3f:8a:87:10:b8:eb:
                    9f:3c:8b:22:38:43:4b:28:da:6b:53:84:db:f4:9c:
                    ce:2a:05:9b:63:44:19:67:47:2e:cd:b7:b0:ca:d0:
                    06:31:e0:3e:27:87:26:0f:0a:bc:6e:ec:c2:17:a6:
                    a5:53:a5:b9:59:77:d7:d3:93:4e:ff:d4:6b:b9:a5:
                    93:68:79:29:28:1a:cb:22:f8:75:96:85:ad:cc:3c:
                    3b:29:b5:8d:7e:34:d2:d4:2b:4b:72:e7:e9:e5:10:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2D:38:94:42:1A:3D:40:7C:2C:AD:B2:89:EC:06:AF:6F:D4:B0:D2
            X509v3 Authority Key Identifier:
                keyid:A9:F6:42:7C:32:C6:17:D9:FC:68:BB:A5:6D:31:A8:8E:88:DA:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/323830343a6463383a3a2f33322d3332203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:b0:b2:28:56:bb:33:ca:65:59:47:7a:7b:08:a4:75:56:cd:
         37:16:c9:78:b8:7e:27:e4:d2:fb:88:e5:8e:b3:eb:7d:e1:94:
         07:5a:64:c5:cd:15:72:92:9c:40:ae:7d:c8:c5:11:7e:31:56:
         6f:cd:db:64:49:9b:34:d1:4d:dd:e6:72:a9:39:62:95:d0:a4:
         b9:ad:d9:fe:ae:ac:e3:af:67:19:01:a3:9e:88:92:f9:76:62:
         67:08:89:39:b4:2b:d0:89:e5:8b:00:ec:01:5f:c4:16:24:74:
         0b:65:45:05:36:02:c7:b4:6d:fd:5a:ad:dd:03:13:61:9f:45:
         c8:d6:e5:d3:0a:24:0d:ad:8d:81:20:36:f6:6f:e0:06:68:e2:
         27:78:eb:46:25:c9:65:80:a0:f6:72:99:e7:f0:81:29:48:02:
         b9:1c:88:b3:94:38:09:6a:be:70:1a:99:13:b6:ed:3d:85:c0:
         0e:42:2b:28:25:9e:5b:7d:12:f5:68:82:7d:c9:e9:07:98:f4:
         ab:ea:13:b9:79:de:9c:ef:73:1c:a5:98:ae:d2:65:c8:39:ba:
         84:e3:76:54:ba:f3:bb:0a:a1:37:d9:d2:0f:70:4c:28:dd:ff:
         a0:12:19:f1:20:b7:b1:db:bd:cd:59:98:4b:9d:ca:85:74:a4:
         2f:5c:46:45
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUQQ9VnzgUtCvztqgamiwsrh85jBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlGNjQyN0MzMkM2MTdEOUZDNjhCQkE1NkQzMUE4OEU4
OERBRkY1NDAeFw0yNDA0MDQwODUwMDZaFw0yNTA0MDMwODU1MDZaMDMxMTAvBgNV
BAMTKDMwMkQzODk0NDIxQTNENDA3QzJDQURCMjg5RUMwNkFGNkZENEIwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oAgNWfiA2uh3uXDMG2L4jvDa
u0JT0aCnLHjb5u1MGaHlYRAV75z/MGCBsymWcfnZeZqiT5Jvl4kA01L655tvm9B2
YSO8wLP5uQ7AXKz+29PHLUBvSkQwgh6UDnBgD+XYi98Kcxp2HyC7CufDF5SfxATn
mhDjd1KaB3aJgYTnQFcza3hg7H9uSEeyh+Lm47SHUjGJWlgczlB4Rlb4Wz+KhxC4
6588iyI4Q0so2mtThNv0nM4qBZtjRBlnRy7Nt7DK0AYx4D4nhyYPCrxu7MIXpqVT
pblZd9fTk07/1Gu5pZNoeSkoGssi+HWWha3MPDsptY1+NNLUK0ty5+nlECcBAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUMC04lEIaPUB8LK2yiewGr2/UsNIwHwYDVR0j
BBgwFoAUqfZCfDLGF9n8aLulbTGojoja/1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWl5SG84M1NOa2FRQjFQc2llVFF1UFRqRndvR281aHJoOUpVaTV3MU1E
NW4vMS9BOUY2NDI3QzMyQzYxN0Q5RkM2OEJCQTU2RDMxQTg4RTg4REFGRjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RjY0MjdDMzJDNjE3RDlG
QzY4QkJBNTZEMzFBODhFODhEQUZGNTQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpeUhvODNTTmthUUIxUHNpZVRRdVBUakZ3b0dvNWhyaDlKVWk1dzFNRDVuLzEv
MzIzODMwMzQzYTY0NjMzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzNjMz
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA3IMA0GCSqGSIb3DQEBCwUAA4IBAQCHsLIoVrszymVZ
R3p7CKR1Vs03Fsl4uH4n5NL7iOWOs+t94ZQHWmTFzRVykpxArn3IxRF+MVZvzdtk
SZs00U3d5nKpOWKV0KS5rdn+rqzjr2cZAaOeiJL5dmJnCIk5tCvQieWLAOwBX8QW
JHQLZUUFNgLHtG39Wq3dAxNhn0XI1uXTCiQNrY2BIDb2b+AGaOIneOtGJcllgKD2
cpnn8IEpSAK5HIizlDgJar5wGpkTtu09hcAOQisoJZ5bfRL1aIJ9yekHmPSr6hO5
ed6c73McpZiu0mXIObqE43ZUuvO7CqE32dIPcEwo3f+gEhnxILex273NWZhLncqF
dKQvXEZF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org