Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/323830343a373030633a3a2f33322d3438203d3e20323730373033.roa
File:                     323830343a373030633a3a2f33322d3438203d3e20323730373033.roa (raw, json)
Hash identifier:          vq5PADWVxLz3pC+SJHLjvZpw+zbkEt+Mc8JX3EzCFLs=
Subject key identifier:   85:71:94:8C:78:E4:B9:36:14:A9:FA:9F:14:E2:3E:02:DD:1F:6F:CC
Certificate issuer:       /CN=C72C0559FB1F31B425FED99C06F7F89D1EDCD484
Certificate serial:       0FE2BA1FAF9985BF39AC34B9F9521500D7EF45CF
Authority key identifier: C7:2C:05:59:FB:1F:31:B4:25:FE:D9:9C:06:F7:F8:9D:1E:DC:D4:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C72C0559FB1F31B425FED99C06F7F89D1EDCD484.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/323830343a373030633a3a2f33322d3438203d3e20323730373033.roa
Signing time:             Wed 07 Jun 2023 11:04:26 +0000
ROA not before:           Wed 07 Jun 2023 10:59:26 +0000
ROA not after:            Wed 05 Jun 2024 11:04:26 +0000
asID:                     270703
IP address blocks:        2804:700c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e2:ba:1f:af:99:85:bf:39:ac:34:b9:f9:52:15:00:d7:ef:45:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C72C0559FB1F31B425FED99C06F7F89D1EDCD484
        Validity
            Not Before: Jun  7 10:59:26 2023 GMT
            Not After : Jun  5 11:04:26 2024 GMT
        Subject: CN=8571948C78E4B93614A9FA9F14E23E02DD1F6FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:0c:78:49:8d:2b:87:e0:69:34:17:60:05:
                    c5:6f:2f:56:68:80:7f:97:fa:94:c6:30:f4:20:47:
                    a0:bb:02:a9:c6:62:72:f7:f1:6b:43:a3:ac:ca:14:
                    c1:7a:8b:20:13:ea:5d:b3:df:20:ab:63:85:19:67:
                    b3:42:dc:50:e7:3c:49:93:c4:f8:5f:0b:fd:eb:63:
                    ac:ce:da:19:c3:02:67:3f:ea:b8:bb:bb:d3:94:42:
                    5a:25:ff:35:43:bd:4b:56:6c:36:58:7d:26:dc:56:
                    14:34:0d:52:0f:d8:ce:bb:52:9f:ed:41:46:90:a7:
                    f1:e1:9b:37:18:cb:b5:80:c5:15:4b:4b:04:c7:10:
                    1a:9c:b9:d2:1b:51:3d:89:85:a5:92:0e:8c:13:c7:
                    5c:33:bf:a2:b1:c7:9f:4b:67:c7:ab:87:f4:89:be:
                    16:10:67:85:1d:b2:4c:7a:ba:28:bf:90:4b:07:8a:
                    26:89:24:c3:da:ba:9d:85:4d:13:60:04:43:0a:d6:
                    61:3f:9f:87:d3:83:12:bd:7e:35:de:12:69:d8:08:
                    b1:9e:5c:08:b0:5a:6b:2c:1c:fa:4c:67:da:15:80:
                    56:c4:27:58:24:d7:2e:33:26:9f:ee:e1:e8:6f:7f:
                    60:bb:e7:10:86:70:aa:e0:ec:98:38:5f:01:d9:45:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:71:94:8C:78:E4:B9:36:14:A9:FA:9F:14:E2:3E:02:DD:1F:6F:CC
            X509v3 Authority Key Identifier:
                keyid:C7:2C:05:59:FB:1F:31:B4:25:FE:D9:9C:06:F7:F8:9D:1E:DC:D4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/C72C0559FB1F31B425FED99C06F7F89D1EDCD484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C72C0559FB1F31B425FED99C06F7F89D1EDCD484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/323830343a373030633a3a2f33322d3438203d3e20323730373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:700c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:4a:1a:bd:28:bc:04:c2:69:be:9b:d7:34:e1:8b:c4:19:71:
         43:a8:8a:e7:e2:2a:e2:c0:d8:59:a1:51:dc:c9:68:99:d9:1a:
         fd:07:6d:69:02:d9:f5:9b:6b:25:63:7f:08:0b:4d:e9:e0:7e:
         61:b8:5f:f3:da:99:2d:49:67:a4:b1:5f:b8:55:45:ae:3d:17:
         7e:91:cc:0f:82:8f:00:38:8c:94:5a:51:4d:fe:a2:3c:cb:1f:
         09:d0:b0:a5:2a:8f:6b:b9:f5:de:0b:97:31:49:56:82:72:1d:
         d9:3a:f8:17:fd:33:76:03:a0:12:90:47:12:47:31:74:ac:57:
         32:c9:66:65:61:5f:8a:2b:62:10:70:02:8e:73:b5:87:39:2b:
         8a:f3:4e:86:a4:07:cc:35:f5:f5:ab:9c:1c:f6:62:71:bd:74:
         c2:4a:74:0c:5f:dc:26:63:6d:b4:c7:a1:6e:9e:56:22:16:7e:
         e9:95:cc:59:11:27:57:06:f7:e3:88:93:1c:de:ac:59:42:3c:
         42:d7:0a:e3:a6:2c:dc:dd:8c:00:0c:f5:28:aa:50:6b:e7:c7:
         90:bf:58:83:ed:27:76:8a:2b:f7:9a:82:6e:0d:13:9e:1b:00:
         c1:e3:b3:71:05:ec:20:31:f1:65:58:cc:c1:e1:2e:ab:94:ef:
         b5:b5:d3:51
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD+K6H6+Zhb85rDS5+VIVANfvRc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcyQzA1NTlGQjFGMzFCNDI1RkVEOTlDMDZGN0Y4OUQx
RURDRDQ4NDAeFw0yMzA2MDcxMDU5MjZaFw0yNDA2MDUxMTA0MjZaMDMxMTAvBgNV
BAMTKDg1NzE5NDhDNzhFNEI5MzYxNEE5RkE5RjE0RTIzRTAyREQxRjZGQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yQx4SY0rh+BpNBdgBcVvL1Zo
gH+X+pTGMPQgR6C7AqnGYnL38WtDo6zKFMF6iyAT6l2z3yCrY4UZZ7NC3FDnPEmT
xPhfC/3rY6zO2hnDAmc/6ri7u9OUQlol/zVDvUtWbDZYfSbcVhQ0DVIP2M67Up/t
QUaQp/HhmzcYy7WAxRVLSwTHEBqcudIbUT2JhaWSDowTx1wzv6Kxx59LZ8erh/SJ
vhYQZ4Udskx6uii/kEsHiiaJJMPaup2FTRNgBEMK1mE/n4fTgxK9fjXeEmnYCLGe
XAiwWmssHPpMZ9oVgFbEJ1gk1y4zJp/u4ehvf2C75xCGcKrg7Jg4XwHZRRJ1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhXGUjHjkuTYUqfqfFOI+At0fb8wwHwYDVR0j
BBgwFoAUxywFWfsfMbQl/tmcBvf4nR7c1IQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVaaTlSV3M3aDFVQ0xQV0h0b2ZNUmR2WVJIWEZ5OHdBZ0RlV0FtcmI0
SFYvMC9DNzJDMDU1OUZCMUYzMUI0MjVGRUQ5OUMwNkY3Rjg5RDFFRENENDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M3MkMwNTU5RkIxRjMxQjQy
NUZFRDk5QzA2RjdGODlEMUVEQ0Q0ODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1Wmk5UldzN2gxVUNMUFdIdG9mTVJkdllSSFhGeTh3QWdEZVdBbXJiNEhWLzAv
MzIzODMwMzQzYTM3MzAzMDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzczMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARwDDANBgkqhkiG9w0BAQsFAAOCAQEATEoavSi8
BMJpvpvXNOGLxBlxQ6iK5+Iq4sDYWaFR3Mlomdka/QdtaQLZ9ZtrJWN/CAtN6eB+
Ybhf89qZLUlnpLFfuFVFrj0XfpHMD4KPADiMlFpRTf6iPMsfCdCwpSqPa7n13guX
MUlWgnId2Tr4F/0zdgOgEpBHEkcxdKxXMslmZWFfiitiEHACjnO1hzkrivNOhqQH
zDX19aucHPZicb10wkp0DF/cJmNttMehbp5WIhZ+6ZXMWREnVwb344iTHN6sWUI8
QtcK46Ys3N2MAAz1KKpQa+fHkL9Yg+0ndoor95qCbg0TnhsAweOzcQXsIDHxZVjM
weEuq5TvtbXTUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org