Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a343030303a3a2f33342d3334203d3e20323633353731.roa
File:                     323830343a6633383a343030303a3a2f33342d3334203d3e20323633353731.roa (raw, json)
Hash identifier:          Xevlo1fTwLbY3JvEIXeeWJDYe5W/Qa0vvFTXi4fYcsE=
Subject key identifier:   94:57:23:DC:6D:AC:60:94:96:28:B1:0D:DB:CD:FE:95:AF:B8:85:BC
Certificate issuer:       /CN=41D988C453AB5CA96DA778B690390450C6345EEE
Certificate serial:       4EE7AC8DFEF11EA0B3491860762721F93AAEB4A9
Authority key identifier: 41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a343030303a3a2f33342d3334203d3e20323633353731.roa
Signing time:             Wed 27 Dec 2023 11:16:30 +0000
ROA not before:           Wed 27 Dec 2023 11:11:30 +0000
ROA not after:            Wed 25 Dec 2024 11:16:30 +0000
asID:                     263571
IP address blocks:        2804:f38:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e7:ac:8d:fe:f1:1e:a0:b3:49:18:60:76:27:21:f9:3a:ae:b4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D988C453AB5CA96DA778B690390450C6345EEE
        Validity
            Not Before: Dec 27 11:11:30 2023 GMT
            Not After : Dec 25 11:16:30 2024 GMT
        Subject: CN=945723DC6DAC60949628B10DDBCDFE95AFB885BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:96:87:85:7b:34:1e:95:ac:11:71:d3:db:70:
                    5e:a1:3b:8f:37:d5:17:e5:05:61:c4:b7:96:ed:45:
                    1a:dd:f1:52:39:fd:25:27:87:35:d7:fa:9f:ef:9e:
                    fd:e9:bd:15:7f:ef:52:23:c1:c4:da:8a:de:4b:d6:
                    bc:98:6f:0f:03:65:fc:75:8c:f1:1d:7b:9b:22:cb:
                    d7:5d:63:3d:29:6a:18:2e:f2:ad:0a:bb:06:f5:97:
                    6d:7a:e4:43:db:69:a5:aa:25:f7:ba:65:f6:4b:8f:
                    3c:1a:90:80:fa:d7:2d:96:19:93:eb:69:2f:da:79:
                    85:70:02:fe:8d:14:c8:dc:81:72:06:8e:bf:84:cd:
                    59:4f:93:7d:d3:20:c0:32:9e:7b:bd:5f:9a:16:d8:
                    b4:3c:9f:d2:c9:78:90:fd:a5:a5:b0:19:a9:b4:45:
                    b7:5f:e6:58:01:f6:34:b9:47:ac:3b:62:08:d0:94:
                    39:26:b3:2f:76:bd:ce:3d:73:47:14:f9:43:7d:f2:
                    15:64:05:18:2b:0f:ed:5d:8c:df:c1:dc:be:58:ee:
                    27:2b:e2:53:be:2b:f4:47:e2:f7:73:55:ce:bd:d1:
                    c2:b9:e8:a7:f2:be:18:93:d3:52:96:45:d9:cf:6f:
                    0e:a8:0f:56:73:0a:cb:1d:f3:79:3a:12:6c:d2:7c:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:57:23:DC:6D:AC:60:94:96:28:B1:0D:DB:CD:FE:95:AF:B8:85:BC
            X509v3 Authority Key Identifier:
                keyid:41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/323830343a6633383a343030303a3a2f33342d3334203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f38:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:43:02:a2:da:31:09:0e:0d:06:ca:51:44:e1:c7:b2:9d:
         cb:54:b5:56:2e:96:8f:0a:59:b0:2b:24:24:c7:99:ef:88:59:
         85:33:60:32:83:8e:f7:50:bc:a1:c1:40:df:f1:1c:f2:d6:ea:
         84:79:c2:f8:24:24:7d:c5:d0:bb:c2:8d:b0:78:70:83:d9:c4:
         c4:dd:a6:04:36:68:d6:3d:34:0f:1e:59:52:a6:c7:3a:08:eb:
         7f:04:29:ba:d6:d5:c3:7d:12:b6:b6:83:64:b7:df:ae:4c:a4:
         e7:a2:1f:78:41:68:75:67:11:f6:49:94:c2:56:de:ef:81:a8:
         cc:8d:58:96:03:92:65:96:8c:f9:10:2c:0f:2c:37:c6:7c:00:
         7f:5a:ba:51:39:bb:ca:ed:c4:0d:4b:59:7e:09:be:21:b0:9a:
         59:ab:68:d6:04:49:f8:30:b7:53:fa:80:b0:fc:39:4e:5e:22:
         17:d8:78:6f:24:69:cb:46:47:5a:39:58:aa:09:9a:7c:0b:53:
         54:ae:20:bd:b1:4d:8e:75:73:be:f7:28:72:3f:f8:cd:a2:7e:
         c2:fd:b8:7f:77:f2:4e:99:0a:b0:a4:04:5f:0e:37:da:4d:27:
         18:2e:3e:49:d1:7a:94:1e:53:55:00:b9:44:22:47:0d:40:86:
         e4:1a:8b:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTuesjf7xHqCzSRhgdich+TqutKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFEOTg4QzQ1M0FCNUNBOTZEQTc3OEI2OTAzOTA0NTBD
NjM0NUVFRTAeFw0yMzEyMjcxMTExMzBaFw0yNDEyMjUxMTE2MzBaMDMxMTAvBgNV
BAMTKDk0NTcyM0RDNkRBQzYwOTQ5NjI4QjEwRERCQ0RGRTk1QUZCODg1QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhloeFezQelawRcdPbcF6hO483
1RflBWHEt5btRRrd8VI5/SUnhzXX+p/vnv3pvRV/71IjwcTait5L1ryYbw8DZfx1
jPEde5siy9ddYz0pahgu8q0Kuwb1l2165EPbaaWqJfe6ZfZLjzwakID61y2WGZPr
aS/aeYVwAv6NFMjcgXIGjr+EzVlPk33TIMAynnu9X5oW2LQ8n9LJeJD9paWwGam0
Rbdf5lgB9jS5R6w7YgjQlDkmsy92vc49c0cU+UN98hVkBRgrD+1djN/B3L5Y7icr
4lO+K/RH4vdzVc690cK56KfyvhiT01KWRdnPbw6oD1ZzCssd83k6EmzSfHXLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlFcj3G2sYJSWKLEN283+la+4hbwwHwYDVR0j
BBgwFoAUQdmIxFOrXKltp3i2kDkEUMY0Xu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5
SEEvMC80MUQ5ODhDNDUzQUI1Q0E5NkRBNzc4QjY5MDM5MDQ1MEM2MzQ1RUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxRDk4OEM0NTNBQjVDQTk2
REE3NzhCNjkwMzkwNDUwQzYzNDVFRUUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVyNlBieXdLVVg2eFNrcTd2UmU5R1pDYTcxSzFLSmpKY0duQlVpczNyeUhBLzAv
MzIzODMwMzQzYTY2MzMzODNhMzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzMzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBA84QDANBgkqhkiG9w0BAQsFAAOC
AQEAbPhDAqLaMQkODQbKUUThx7Kdy1S1Vi6WjwpZsCskJMeZ74hZhTNgMoOO91C8
ocFA3/Ec8tbqhHnC+CQkfcXQu8KNsHhwg9nExN2mBDZo1j00Dx5ZUqbHOgjrfwQp
utbVw30StraDZLffrkyk56IfeEFodWcR9kmUwlbe74GozI1YlgOSZZaM+RAsDyw3
xnwAf1q6UTm7yu3EDUtZfgm+IbCaWato1gRJ+DC3U/qAsPw5Tl4iF9h4byRpy0ZH
WjlYqgmafAtTVK4gvbFNjnVzvvcocj/4zaJ+wv24f3fyTpkKsKQEXw432k0nGC4+
SdF6lB5TVQC5RCJHDUCG5BqLLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org