Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa
File:                     323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa (raw, json)
Hash identifier:          AO9TUKzIROHGwW6t7eHNQrJl2FhUTrAtpyLqz8BtIL8=
Subject key identifier:   FD:F7:AD:B2:D4:9C:4A:75:F2:B6:FF:93:CC:73:31:A4:1F:1A:6A:63
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       3E0600D829087AA86C936C1494B5CE1B6B028AA9
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa
Signing time:             Sun 24 Sep 2023 21:58:55 +0000
ROA not before:           Sun 24 Sep 2023 21:53:55 +0000
ROA not after:            Sun 22 Sep 2024 21:58:55 +0000
asID:                     61602
IP address blocks:        2804:7004:61::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:06:00:d8:29:08:7a:a8:6c:93:6c:14:94:b5:ce:1b:6b:02:8a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:55 2023 GMT
            Not After : Sep 22 21:58:55 2024 GMT
        Subject: CN=FDF7ADB2D49C4A75F2B6FF93CC7331A41F1A6A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:b9:e8:f1:b1:37:a4:e6:6d:3f:47:5a:44:
                    ad:90:e3:ed:9b:cf:b2:20:f5:61:77:bb:52:82:c4:
                    5f:c8:80:4f:de:03:6a:f8:aa:97:92:38:9d:10:4e:
                    e4:b4:64:e4:25:79:ea:df:15:81:d9:70:cc:cf:f5:
                    55:30:71:34:d8:9a:a9:10:5e:0e:a8:59:15:b5:a6:
                    ca:b8:1b:13:ba:d7:71:e3:e8:5b:81:11:ef:11:b9:
                    fe:96:cc:7e:c6:85:27:66:f3:43:47:68:5f:dc:64:
                    ae:b1:b1:8d:3d:09:f6:7b:a9:4b:27:01:05:92:64:
                    1c:0c:cb:9d:b2:fc:4a:44:c5:a2:3f:5b:2d:ea:b2:
                    ce:a3:20:da:42:d1:a0:d6:d8:b9:e4:15:cb:04:17:
                    e0:4e:d3:b1:d2:50:99:cd:da:07:2d:54:0c:92:f0:
                    21:08:33:0e:3c:6b:9d:29:75:e2:79:eb:50:1a:c0:
                    0d:3e:23:bc:9e:64:06:1c:f1:bc:f5:8d:fc:db:d6:
                    ba:a0:cc:38:d4:82:ba:c5:83:03:53:96:87:c5:5b:
                    7d:7e:2c:ae:7d:a2:17:41:aa:ff:dc:99:c4:d6:26:
                    e2:80:12:e9:79:a1:dd:5a:6e:a2:52:92:b3:8b:5e:
                    45:86:9e:a7:05:c9:68:61:86:e3:fe:61:c3:4c:c1:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F7:AD:B2:D4:9C:4A:75:F2:B6:FF:93:CC:73:31:A4:1F:1A:6A:63
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a36313a3a2f34382d3438203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7004:61::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:50:f0:b0:75:6a:cb:85:1e:c8:b0:97:59:4b:c9:58:32:93:
         30:ea:f1:0f:63:1c:c0:0a:32:35:19:88:11:f6:9f:25:0d:d3:
         18:40:fc:e5:08:79:91:9d:58:77:74:07:79:89:f3:65:4e:47:
         72:df:51:b2:eb:2c:21:4e:3d:e7:df:20:2e:16:73:3f:66:93:
         67:5d:0b:ec:9e:e5:de:47:fc:be:b0:98:0d:30:93:31:aa:fb:
         d5:fa:9d:8b:7d:52:06:0b:1a:6b:b2:75:b3:37:26:b4:7f:6f:
         eb:bf:1c:7d:ab:6a:ed:89:2d:ea:c3:1f:03:95:00:7f:6f:85:
         0c:05:6a:ea:6c:da:66:53:18:38:e9:40:66:21:c4:bc:3b:0a:
         2d:8d:7f:0f:31:f0:d9:9d:6f:06:dc:9f:3a:5c:84:42:9b:d0:
         40:66:10:d3:bb:6f:46:6d:39:e0:32:d1:67:86:5c:c9:a4:6b:
         70:70:a9:3d:fe:07:ba:5e:f4:78:f1:7b:68:35:19:1f:6d:d3:
         a5:62:32:c5:50:79:14:4c:a0:76:15:2c:7a:fa:aa:79:d0:0a:
         03:72:28:e2:4e:ab:4f:c0:15:7a:0a:d9:08:81:e6:11:ac:61:
         e2:2f:98:7b:00:a6:4c:b4:45:9f:f0:0b:59:30:4e:c4:3d:3b:
         48:2e:74:25
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUPgYA2CkIeqhsk2wUlLXOG2sCiqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURBNTg2QzJCMkREMEE3RjBENDQ2OEMzN0IzMjQ2NDIw
M0I0QzAwNzAeFw0yMzA5MjQyMTUzNTVaFw0yNDA5MjIyMTU4NTVaMDMxMTAvBgNV
BAMTKEZERjdBREIyRDQ5QzRBNzVGMkI2RkY5M0NDNzMzMUE0MUYxQTZBNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8t7no8bE3pOZtP0daRK2Q4+2b
z7Ig9WF3u1KCxF/IgE/eA2r4qpeSOJ0QTuS0ZOQleerfFYHZcMzP9VUwcTTYmqkQ
Xg6oWRW1psq4GxO613Hj6FuBEe8Ruf6WzH7GhSdm80NHaF/cZK6xsY09CfZ7qUsn
AQWSZBwMy52y/EpExaI/Wy3qss6jINpC0aDW2LnkFcsEF+BO07HSUJnN2gctVAyS
8CEIMw48a50pdeJ561AawA0+I7yeZAYc8bz1jfzb1rqgzDjUgrrFgwNTlofFW31+
LK59ohdBqv/cmcTWJuKAEul5od1abqJSkrOLXkWGnqcFyWhhhuP+YcNMwSkfAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU/fetstScSnXytv+TzHMxpB8aamMwHwYDVR0j
BBgwFoAUHaWGwrLdCn8NRGjDezJGQgO0wAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMC8xREE1ODZDMkIyREQwQTdGMEQ0NDY4QzM3QjMyNDY0MjAzQjRDMDA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFEQTU4NkMyQjJERDBBN0Yw
RDQ0NjhDMzdCMzI0NjQyMDNCNEMwMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzAv
MzIzODMwMzQzYTM3MzAzMDM0M2EzNjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzYzMTM2MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEcAQAYTANBgkqhkiG9w0BAQsFAAOCAQEA
h1DwsHVqy4UeyLCXWUvJWDKTMOrxD2McwAoyNRmIEfafJQ3TGED85Qh5kZ1Yd3QH
eYnzZU5Hct9RsussIU49598gLhZzP2aTZ10L7J7l3kf8vrCYDTCTMar71fqdi31S
Bgsaa7J1szcmtH9v678cfatq7Ykt6sMfA5UAf2+FDAVq6mzaZlMYOOlAZiHEvDsK
LY1/DzHw2Z1vBtyfOlyEQpvQQGYQ07tvRm054DLRZ4ZcyaRrcHCpPf4Hul70ePF7
aDUZH23TpWIyxVB5FEygdhUsevqqedAKA3Io4k6rT8AVegrZCIHmEaxh4i+YewCm
TLRFn/ALWTBOxD07SC50JQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org