Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa
File:                     323830343a386134383a3a2f33322d3332203d3e20323733363539.roa (raw, json)
Hash identifier:          jsQwfSDGJSzHRnIfVxRevUhCxX5rbOI9HcDGpMvBDJM=
Subject key identifier:   63:13:23:CD:0B:D2:A1:71:9F:22:AC:6D:A8:B2:E0:24:64:95:98:51
Certificate issuer:       /CN=799372584DE905C52995CC3CD944046D683219DB
Certificate serial:       489BBAACBA0F91C20E2D17E977CD53D2511B5D02
Authority key identifier: 79:93:72:58:4D:E9:05:C5:29:95:CC:3C:D9:44:04:6D:68:32:19:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/799372584DE905C52995CC3CD944046D683219DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa
Signing time:             Fri 26 Jan 2024 20:57:36 +0000
ROA not before:           Fri 26 Jan 2024 20:52:36 +0000
ROA not after:            Fri 24 Jan 2025 20:57:36 +0000
asID:                     273659
IP address blocks:        2804:8a48::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9b:ba:ac:ba:0f:91:c2:0e:2d:17:e9:77:cd:53:d2:51:1b:5d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799372584DE905C52995CC3CD944046D683219DB
        Validity
            Not Before: Jan 26 20:52:36 2024 GMT
            Not After : Jan 24 20:57:36 2025 GMT
        Subject: CN=631323CD0BD2A1719F22AC6DA8B2E02464959851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:77:d2:c9:d7:40:1d:6b:14:a0:7d:e2:f4:4d:
                    01:a5:54:23:16:5e:ad:e9:5f:d3:7d:04:dc:3d:85:
                    0e:98:bb:07:9e:c3:ad:06:21:c3:7f:9a:58:b2:9c:
                    fe:c4:5a:21:6d:d2:95:68:ad:e4:5b:69:c9:9a:e1:
                    32:9b:a1:2a:b1:37:d0:09:14:46:2d:fc:b7:60:c3:
                    28:aa:20:9d:69:ed:e8:96:2a:25:50:8f:33:99:6d:
                    75:c7:8e:77:b8:8a:71:9f:1d:65:ae:70:02:8d:86:
                    62:4c:6d:f3:34:b5:fd:e5:d9:e7:21:25:aa:be:65:
                    b2:59:ac:5a:95:82:7e:8c:04:48:8b:7c:51:8d:03:
                    8a:40:81:e3:fb:07:6b:1b:fa:90:b7:6a:df:1a:cb:
                    0d:30:1e:ca:84:5b:a4:9a:78:ce:dd:a3:3b:17:6f:
                    b5:0d:f2:28:76:4d:34:89:da:df:e7:ab:fd:86:a1:
                    aa:19:17:f4:cd:a9:60:94:dc:5d:b4:f2:ea:0f:39:
                    3b:5c:60:11:be:19:a7:84:5d:01:fb:d7:11:fc:40:
                    3c:65:ad:8b:5e:ce:46:c0:39:d5:e6:39:5c:17:52:
                    76:6c:28:5f:a8:85:64:d8:dc:1f:fb:59:31:70:ff:
                    48:f9:0c:a0:f3:0f:3b:83:1c:db:d9:93:fa:cf:0a:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:13:23:CD:0B:D2:A1:71:9F:22:AC:6D:A8:B2:E0:24:64:95:98:51
            X509v3 Authority Key Identifier:
                keyid:79:93:72:58:4D:E9:05:C5:29:95:CC:3C:D9:44:04:6D:68:32:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/799372584DE905C52995CC3CD944046D683219DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/799372584DE905C52995CC3CD944046D683219DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:bc:ac:61:75:92:f4:c7:cc:74:5a:0a:91:eb:d8:43:74:90:
         39:8e:83:15:31:67:92:e9:7c:38:bd:0c:ce:2c:64:f3:51:a7:
         4a:24:b8:44:c8:c6:c4:c0:73:30:95:fa:71:94:08:50:c0:e5:
         00:9c:d4:02:74:12:18:3c:8a:4a:8c:88:ae:24:81:22:d0:c5:
         c7:f5:eb:40:73:52:b0:ab:cc:43:2d:7c:13:b6:d5:04:cc:22:
         8b:7d:9b:d9:01:fe:8a:4b:46:45:2b:75:c0:0d:48:1e:c8:f7:
         1b:d3:3a:7a:29:22:88:17:d4:ac:15:ab:17:90:82:a1:d1:dc:
         a6:f4:59:fc:e6:24:5a:16:65:7e:0f:12:9f:62:de:45:24:26:
         cf:f2:da:a9:36:d7:4f:2d:88:87:b0:cf:32:44:cc:d1:cf:06:
         c9:53:a1:59:3a:1f:3f:49:9f:5c:b9:b3:bf:b7:24:fe:4b:c6:
         0b:ea:21:21:18:1c:26:26:a7:1d:07:f5:d2:08:ec:c5:2a:40:
         3c:30:93:3e:29:6d:1b:b0:9c:00:de:cd:71:1e:94:73:5f:49:
         1f:05:b6:cb:26:47:80:0b:35:bf:88:b2:bf:e2:c0:68:9b:97:
         ba:3c:27:f3:e3:61:1d:6e:c1:64:63:e4:ab:a2:1f:71:31:91:
         58:c5:e2:c6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSJu6rLoPkcIOLRfpd81T0lEbXQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5MzcyNTg0REU5MDVDNTI5OTVDQzNDRDk0NDA0NkQ2
ODMyMTlEQjAeFw0yNDAxMjYyMDUyMzZaFw0yNTAxMjQyMDU3MzZaMDMxMTAvBgNV
BAMTKDYzMTMyM0NEMEJEMkExNzE5RjIyQUM2REE4QjJFMDI0NjQ5NTk4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqd9LJ10AdaxSgfeL0TQGlVCMW
Xq3pX9N9BNw9hQ6Yuweew60GIcN/mliynP7EWiFt0pVoreRbacma4TKboSqxN9AJ
FEYt/LdgwyiqIJ1p7eiWKiVQjzOZbXXHjne4inGfHWWucAKNhmJMbfM0tf3l2ech
Jaq+ZbJZrFqVgn6MBEiLfFGNA4pAgeP7B2sb+pC3at8ayw0wHsqEW6SaeM7dozsX
b7UN8ih2TTSJ2t/nq/2GoaoZF/TNqWCU3F208uoPOTtcYBG+GaeEXQH71xH8QDxl
rYtezkbAOdXmOVwXUnZsKF+ohWTY3B/7WTFw/0j5DKDzDzuDHNvZk/rPCutLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYxMjzQvSoXGfIqxtqLLgJGSVmFEwHwYDVR0j
BBgwFoAUeZNyWE3pBcUplcw82UQEbWgyGdswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlp4M0NUTDZwRHluZzJxQ1dtSmY3NVVtY3VmdGh3UEVWblF5N3B4bkF6
cG4vMC83OTkzNzI1ODRERTkwNUM1Mjk5NUNDM0NEOTQ0MDQ2RDY4MzIxOURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5OTM3MjU4NERFOTA1QzUy
OTk1Q0MzQ0Q5NDQwNDZENjgzMjE5REIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaeDNDVEw2cER5bmcycUNXbUpmNzVVbWN1ZnRod1BFVm5ReTdweG5BenBuLzAv
MzIzODMwMzQzYTM4NjEzNDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzYzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASKSDANBgkqhkiG9w0BAQsFAAOCAQEAjLysYXWS
9MfMdFoKkevYQ3SQOY6DFTFnkul8OL0Mzixk81GnSiS4RMjGxMBzMJX6cZQIUMDl
AJzUAnQSGDyKSoyIriSBItDFx/XrQHNSsKvMQy18E7bVBMwii32b2QH+iktGRSt1
wA1IHsj3G9M6eikiiBfUrBWrF5CCodHcpvRZ/OYkWhZlfg8Sn2LeRSQmz/LaqTbX
Ty2Ih7DPMkTM0c8GyVOhWTofP0mfXLmzv7ck/kvGC+ohIRgcJianHQf10gjsxSpA
PDCTPiltG7CcAN7NcR6Uc19JHwW2yyZHgAs1v4iyv+LAaJuXujwn8+NhHW7BZGPk
q6IfcTGRWMXixg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org