Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a376230303a3a2f34302d3430203d3e20323632363037.roa
File:                     323830343a3663633a376230303a3a2f34302d3430203d3e20323632363037.roa (raw, json)
Hash identifier:          4oOhcbHruzHw7NzYIy1KrODAdBI1Yg/BngA++2DsM6s=
Subject key identifier:   68:2E:A5:0D:3E:DD:FD:2B:B1:47:F4:B3:A9:E4:95:08:79:15:DD:8F
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       048D8CCF85B8705FAAD6E9704F0640CA05143463
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a376230303a3a2f34302d3430203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:17:00 +0000
ROA not before:           Thu 06 Oct 2022 15:12:00 +0000
ROA not after:            Thu 05 Oct 2023 15:17:00 +0000
asID:                     262607
IP address blocks:        2804:6cc:7b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8d:8c:cf:85:b8:70:5f:aa:d6:e9:70:4f:06:40:ca:05:14:34:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:12:00 2022 GMT
            Not After : Oct  5 15:17:00 2023 GMT
        Subject: CN=682EA50D3EDDFD2BB147F4B3A9E495087915DD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ee:e9:15:43:99:cf:47:0b:09:aa:26:7c:90:
                    42:15:54:f1:9e:3a:fd:13:93:27:2d:d6:6b:df:e7:
                    c6:5a:22:53:7d:ff:51:25:ec:ba:53:ca:cd:70:19:
                    75:a8:c9:43:1f:50:72:f2:b9:d0:90:21:97:33:6f:
                    32:10:7d:e4:ba:8a:c9:fe:e2:bd:af:e2:6e:d3:ed:
                    ba:f8:fc:58:b3:a7:45:30:2d:17:10:80:18:10:74:
                    68:eb:36:ce:5a:29:f3:d1:0d:bc:a5:a5:a4:cb:3e:
                    55:05:33:94:23:e2:ba:7c:18:de:c4:44:c3:88:78:
                    53:b4:fc:e2:c2:c5:bf:df:32:57:b0:6c:b8:d4:e8:
                    32:ea:c6:ac:74:86:19:38:6d:0b:ba:60:83:5f:fb:
                    ea:7f:1f:32:70:ad:aa:bc:93:8a:40:3b:1e:06:8d:
                    a3:1d:df:12:42:f4:64:fc:2d:25:cb:2d:fb:f1:3a:
                    f9:d5:70:ab:09:85:cd:9d:15:56:bd:91:7e:16:32:
                    7c:dd:c8:59:91:59:6f:8f:a2:81:29:f1:3b:73:5a:
                    0a:04:39:d5:a4:58:1c:35:ec:0c:7f:ca:e9:53:00:
                    4a:a4:bc:31:ef:1d:6f:39:2e:d4:84:8e:f9:a6:0d:
                    01:36:c8:94:2a:2e:04:35:5f:e4:6c:d2:42:b7:66:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2E:A5:0D:3E:DD:FD:2B:B1:47:F4:B3:A9:E4:95:08:79:15:DD:8F
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a376230303a3a2f34302d3430203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc:7b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:3d:b1:4c:23:68:a9:f3:e5:a1:a9:3d:5a:ad:52:57:33:3c:
         48:41:8c:8a:88:4e:88:c8:ce:8f:a3:dc:9e:76:9a:11:6a:41:
         d6:9b:c7:cb:86:c4:59:84:67:18:b7:90:a5:9a:a2:d8:75:d0:
         a7:ff:a6:3b:88:af:0b:e8:12:57:44:68:cc:43:a1:4d:ef:e2:
         02:bb:57:e1:3f:0d:ca:0b:92:ca:3e:a7:88:92:b2:57:47:96:
         5f:52:4d:2e:15:4b:32:ab:72:9f:b4:ed:cb:ad:0e:0d:5f:45:
         6e:a6:d1:bd:25:b0:35:09:a4:09:50:b2:22:02:fb:89:a7:47:
         c2:fc:f3:ab:6b:c9:43:dd:9d:9a:5d:4c:6b:96:50:29:7f:00:
         e8:49:56:d4:08:99:e6:4b:a6:ea:db:59:a9:e4:23:34:66:52:
         d9:64:1f:e6:c9:07:06:be:60:44:68:d5:86:57:5f:30:53:c6:
         ac:3f:e3:5d:2d:9e:b8:70:da:19:5a:2e:77:5f:08:74:98:b4:
         68:73:98:67:da:8b:13:48:2c:8e:8f:c9:f8:89:84:6d:69:a1:
         99:17:cb:c0:83:e3:61:1f:ad:7d:ba:a4:c7:15:fa:d0:80:43:
         bd:e0:8a:c2:ba:3e:89:3b:d7:76:5f:2a:b9:6d:14:dd:cd:ec:
         7a:bf:79:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBI2Mz4W4cF+q1ulwTwZAygUUNGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZEOUExMjAxODg5NjUwRENBQjc0MDg1QjNBMDQzMzM1
N0EzNzJDMjAeFw0yMjEwMDYxNTEyMDBaFw0yMzEwMDUxNTE3MDBaMDMxMTAvBgNV
BAMTKDY4MkVBNTBEM0VEREZEMkJCMTQ3RjRCM0E5RTQ5NTA4NzkxNUREOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq7ukVQ5nPRwsJqiZ8kEIVVPGe
Ov0Tkyct1mvf58ZaIlN9/1El7LpTys1wGXWoyUMfUHLyudCQIZczbzIQfeS6isn+
4r2v4m7T7br4/Fizp0UwLRcQgBgQdGjrNs5aKfPRDbylpaTLPlUFM5Qj4rp8GN7E
RMOIeFO0/OLCxb/fMlewbLjU6DLqxqx0hhk4bQu6YINf++p/HzJwraq8k4pAOx4G
jaMd3xJC9GT8LSXLLfvxOvnVcKsJhc2dFVa9kX4WMnzdyFmRWW+PooEp8TtzWgoE
OdWkWBw17Ax/yulTAEqkvDHvHW85LtSEjvmmDQE2yJQqLgQ1X+Rs0kK3Ztu5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaC6lDT7d/SuxR/SzqeSVCHkV3Y8wHwYDVR0j
BBgwFoAUVtmhIBiJZQ3Kt0CFs6BDM1ejcsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2tuc0ptc2ZMb2dLRlVna01ua0J5WGtucXFmczdqQUJtV0VkQ24yNXZa
MXYvMC81NkQ5QTEyMDE4ODk2NTBEQ0FCNzQwODVCM0EwNDMzMzU3QTM3MkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU2RDlBMTIwMTg4OTY1MERD
QUI3NDA4NUIzQTA0MzMzNTdBMzcyQzIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdrbnNKbXNmTG9nS0ZVZ2tNbmtCeVhrbnFxZnM3akFCbVdFZENuMjV2WjF2LzAv
MzIzODMwMzQzYTM2NjM2MzNhMzc2MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzIzNjMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBAbMezANBgkqhkiG9w0BAQsFAAOC
AQEANT2xTCNoqfPloak9Wq1SVzM8SEGMiohOiMjOj6PcnnaaEWpB1pvHy4bEWYRn
GLeQpZqi2HXQp/+mO4ivC+gSV0RozEOhTe/iArtX4T8NyguSyj6niJKyV0eWX1JN
LhVLMqtyn7Tty60ODV9FbqbRvSWwNQmkCVCyIgL7iadHwvzzq2vJQ92dml1Ma5ZQ
KX8A6ElW1AiZ5kum6ttZqeQjNGZS2WQf5skHBr5gRGjVhldfMFPGrD/jXS2euHDa
GVoud18IdJi0aHOYZ9qLE0gsjo/J+ImEbWmhmRfLwIPjYR+tfbqkxxX60IBDveCK
wro+iTvXdl8quW0U3c3ser95Og==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org