Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33332d3333203d3e20323638323637.roa
File:                     323830343a346538383a3a2f33332d3333203d3e20323638323637.roa (raw, json)
Hash identifier:          Uh9T33hHGKgPs4cJ8AXZiTr+TgSoy5+dIj66da0t7kg=
Subject key identifier:   E6:7F:6B:8F:3C:C5:21:38:6D:69:53:03:B3:DC:81:D0:30:BF:E3:65
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       633FB7AC70CA870575E807F39466850BA88176A5
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33332d3333203d3e20323638323637.roa
Signing time:             Fri 16 Dec 2022 15:00:01 +0000
ROA not before:           Fri 16 Dec 2022 14:55:01 +0000
ROA not after:            Fri 15 Dec 2023 15:00:01 +0000
asID:                     268267
IP address blocks:        2804:4e88::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3f:b7:ac:70:ca:87:05:75:e8:07:f3:94:66:85:0b:a8:81:76:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Dec 16 14:55:01 2022 GMT
            Not After : Dec 15 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:d7:37:47:97:b2:58:73:fa:33:d7:2f:3e:
                    e3:3a:0a:32:45:27:85:8b:97:2b:9f:25:eb:d1:38:
                    72:9d:46:cd:26:9f:00:c1:a2:35:42:81:7b:ef:82:
                    07:c1:c4:9e:92:74:61:56:a4:dd:1b:8a:dc:10:c5:
                    fe:c7:3c:a7:eb:19:bf:23:a2:dc:6a:1b:20:b6:ee:
                    ad:ef:8d:4c:d3:9d:d9:62:28:3a:04:c6:d4:35:fe:
                    14:ef:e6:56:d2:a4:06:f8:cc:ec:56:a3:a6:cc:bd:
                    c8:1f:96:be:e3:c6:ae:30:e4:30:24:3f:09:2d:a9:
                    a5:85:7b:7a:99:3c:2b:62:2c:0b:a9:18:a0:f8:1e:
                    03:3b:ea:4d:7b:f9:1f:46:0c:35:e6:99:7b:2d:b7:
                    8c:0e:16:ec:b1:b2:b0:1b:12:5f:45:8e:63:7e:51:
                    e1:71:d2:95:de:82:d2:97:46:07:66:7e:51:23:43:
                    23:08:b6:09:18:70:57:5a:ce:33:f9:97:b4:64:44:
                    79:c7:cf:b8:a4:7f:87:c0:32:66:62:95:83:41:cd:
                    79:60:cd:2e:12:2d:ce:cc:c8:fe:46:18:55:c7:b8:
                    2d:6a:76:97:60:6e:e5:07:b3:36:b0:1b:f8:ec:76:
                    bb:06:7a:89:27:fe:30:62:05:78:56:d0:c9:5d:fa:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7F:6B:8F:3C:C5:21:38:6D:69:53:03:B3:DC:81:D0:30:BF:E3:65
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33332d3333203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e88::/33

    Signature Algorithm: sha256WithRSAEncryption
         8b:a8:42:d7:01:9a:6d:7a:76:9c:ae:c8:20:c3:49:f7:69:c3:
         b9:81:45:16:af:28:f4:cf:e4:cd:fc:7c:f6:c3:97:1e:5f:2e:
         56:6f:b6:87:0b:de:95:a2:87:52:60:32:dd:ff:8e:19:3f:fa:
         48:c7:24:4a:f8:a5:b9:c0:fc:ce:42:59:fd:90:2c:9b:99:ed:
         35:73:95:ed:0d:f3:0b:46:90:0e:bd:1e:a7:25:5f:ec:85:53:
         c8:67:18:f8:85:f1:30:25:47:09:6a:21:70:40:ae:ea:9f:d0:
         45:6d:d7:3a:b2:13:9a:2a:db:d3:e6:99:fd:01:3b:a0:99:25:
         11:50:a8:e9:d8:ae:20:f5:60:4b:32:0e:e6:89:0c:69:9b:d3:
         a4:b9:c3:b7:29:85:a8:50:4a:e0:96:22:d2:1a:1e:9c:ac:1f:
         bc:b5:0e:d8:86:b0:0d:cb:02:ac:3a:36:0b:7d:9e:60:38:9b:
         ea:c7:91:08:47:ea:a3:ab:0c:f1:13:47:26:45:f7:08:78:2b:
         34:45:78:67:9a:14:b6:a9:79:09:a8:1e:b0:b6:17:51:12:a6:
         5a:1c:07:49:d1:d6:16:b0:e1:73:66:54:7b:b7:07:9d:d4:b3:
         c6:ed:33:c2:a7:d9:b4:ce:f4:49:82:39:95:0d:5c:7e:c4:23:
         63:4b:e5:cb
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUYz+3rHDKhwV16AfzlGaFC6iBdqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFQ0ZFN0I1NkM3OTU1MzVCODU1QjlENEYwQ0Q3RTAy
RTQ1MjY0OTAeFw0yMjEyMTYxNDU1MDFaFw0yMzEyMTUxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUM0N0Q3Mzc0Nzk3QjI1ODcz
RkEzM0Q3MkYzRUUzM0EwQTMyNDUyNzg1OEI5NzJCOUYyNUVCRDEzODcyOUQ0NkNE
MjY5RjAwQzFBMjM1NDI4MTdCRUY4MjA3QzFDNDlFOTI3NDYxNTZBNEREMUI4QURD
MTBDNUZFQzczQ0E3RUIxOUJGMjNBMkRDNkExQjIwQjZFRUFERUY4RDRDRDM5REQ5
NjIyODNBMDRDNkQ0MzVGRTE0RUZFNjU2RDJBNDA2RjhDQ0VDNTZBM0E2Q0NCREM4
MUY5NkJFRTNDNkFFMzBFNDMwMjQzRjA5MkRBOUE1ODU3QjdBOTkzQzJCNjIyQzBC
QTkxOEEwRjgxRTAzM0JFQTREN0JGOTFGNDYwQzM1RTY5OTdCMkRCNzhDMEUxNkVD
QjFCMkIwMUIxMjVGNDU4RTYzN0U1MUUxNzFEMjk1REU4MkQyOTc0NjA3NjY3RTUx
MjM0MzIzMDhCNjA5MTg3MDU3NUFDRTMzRjk5N0I0NjQ0NDc5QzdDRkI4QTQ3Rjg3
QzAzMjY2NjI5NTgzNDFDRDc5NjBDRDJFMTIyRENFQ0NDOEZFNDYxODU1QzdCODJE
NkE3Njk3NjA2RUU1MDdCMzM2QjAxQkY4RUM3NkJCMDY3QTg5MjdGRTMwNjIwNTc4
NTZEMEM5NURGQUUwMEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7EfXN0eXslhz+jPXLz7jOgoyRSeFi5crnyXr0ThynUbNJp8AwaI1
QoF774IHwcSeknRhVqTdG4rcEMX+xzyn6xm/I6Lcahsgtu6t741M053ZYig6BMbU
Nf4U7+ZW0qQG+MzsVqOmzL3IH5a+48auMOQwJD8JLamlhXt6mTwrYiwLqRig+B4D
O+pNe/kfRgw15pl7LbeMDhbssbKwGxJfRY5jflHhcdKV3oLSl0YHZn5RI0MjCLYJ
GHBXWs4z+Ze0ZER5x8+4pH+HwDJmYpWDQc15YM0uEi3OzMj+RhhVx7gtanaXYG7l
B7M2sBv47Ha7BnqJJ/4wYgV4VtDJXfrgDwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOZ/a488xSE4bWlTA7PcgdAwv+NlMB8GA1UdIwQYMBaAFNjs/ntWx5VTW4VbnU8M
1+AuRSZJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV3YllndEdGS0JRRjU1
aVFRRDhSemk5eHl3azZpZnEzZTJNQ05rTnRVc2syLzAvRDhFQ0ZFN0I1NkM3OTU1
MzVCODU1QjlENEYwQ0Q3RTAyRTQ1MjY0OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EOEVDRkU3QjU2Qzc5NTUzNUI4NTVCOUQ0RjBDRDdFMDJFNDUy
NjQ5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81d2JZZ3RHRktCUUY1NWlRUUQ4
UnppOXh5d2s2aWZxM2UyTUNOa050VXNrMi8wLzMyMzgzMDM0M2EzNDY1MzgzODNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzODMyMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
TogAMA0GCSqGSIb3DQEBCwUAA4IBAQCLqELXAZptenacrsggw0n3acO5gUUWryj0
z+TN/Hz2w5ceXy5Wb7aHC96VoodSYDLd/44ZP/pIxyRK+KW5wPzOQln9kCybme01
c5XtDfMLRpAOvR6nJV/shVPIZxj4hfEwJUcJaiFwQK7qn9BFbdc6shOaKtvT5pn9
ATugmSURUKjp2K4g9WBLMg7miQxpm9OkucO3KYWoUErgliLSGh6crB+8tQ7YhrAN
ywKsOjYLfZ5gOJvqx5EIR+qjqwzxE0cmRfcIeCs0RXhnmhS2qXkJqB6wthdREqZa
HAdJ0dYWsOFzZlR7twed1LPG7TPCp9m0zvRJgjmVDVx+xCNjS+XL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org