Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a613030303a3a2f33352d3335203d3e20323632363037.roa
File:                     323830343a3663633a613030303a3a2f33352d3335203d3e20323632363037.roa (raw, json)
Hash identifier:          /MBW2KjcyCukw4GJlEb3ZUBuxSny+wmCc+7xpOzKUxc=
Subject key identifier:   C4:33:20:BA:7C:29:31:BF:A1:CC:90:17:70:32:C7:5E:3D:94:8E:69
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       15EF84C6D2342889C12B8BB80F364909BDCFAD05
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a613030303a3a2f33352d3335203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:16:59 +0000
ROA not before:           Thu 06 Oct 2022 15:11:59 +0000
ROA not after:            Thu 05 Oct 2023 15:16:59 +0000
asID:                     262607
IP address blocks:        2804:6cc:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ef:84:c6:d2:34:28:89:c1:2b:8b:b8:0f:36:49:09:bd:cf:ad:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:11:59 2022 GMT
            Not After : Oct  5 15:16:59 2023 GMT
        Subject: CN=C43320BA7C2931BFA1CC90177032C75E3D948E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:f3:cd:e1:2e:f5:6a:22:73:32:20:66:6a:
                    e2:25:86:4a:25:ad:77:c0:4e:5d:2c:1a:9d:a4:b1:
                    09:87:7c:17:0c:15:6f:73:36:55:14:2f:c3:37:4d:
                    f9:8f:a7:76:4f:c8:a8:36:3a:57:5c:a2:13:9d:d8:
                    6a:ef:fa:27:cb:23:e4:80:4f:ab:9f:db:17:2b:4a:
                    cd:97:04:be:82:37:a7:e2:a4:a8:57:3a:e9:a3:18:
                    e5:54:3f:fc:d6:3a:d2:f3:19:2c:06:09:e9:65:cd:
                    02:c6:27:e9:2e:22:d0:95:fa:cd:cd:4a:77:ad:42:
                    5d:f1:7d:16:e7:a8:7c:e9:cd:71:36:48:95:df:61:
                    77:b1:7d:15:dc:d8:ac:1c:8c:15:78:3c:4e:de:88:
                    b9:3f:c4:4a:e6:49:84:88:45:fe:ad:aa:79:90:3c:
                    08:84:2e:e6:aa:42:49:36:65:0a:27:22:e0:2f:3a:
                    dd:c8:72:49:95:e9:e3:17:ba:f7:89:6b:e5:c3:d9:
                    e9:4a:2c:88:1c:31:27:54:a2:d1:84:24:65:85:f7:
                    45:ea:98:1e:89:a6:ca:01:44:67:4f:af:dc:51:c5:
                    31:3f:6a:15:07:6d:4e:0b:ab:f7:a5:99:45:b2:e5:
                    2b:49:a1:16:c9:07:d0:4d:ad:a1:8c:80:4f:07:08:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:33:20:BA:7C:29:31:BF:A1:CC:90:17:70:32:C7:5E:3D:94:8E:69
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a613030303a3a2f33352d3335203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         55:be:0d:a4:2a:62:71:83:bd:5f:cc:58:4e:b7:1b:d1:06:c1:
         8e:d2:06:92:14:3a:a1:d6:bf:f4:13:c6:21:50:cf:90:31:16:
         02:3c:c6:22:e6:54:44:17:62:56:56:33:92:77:35:dd:26:69:
         0f:92:c9:1c:19:23:97:e3:fb:68:72:cd:85:5e:93:c5:a0:92:
         81:67:0b:84:0f:94:fb:3e:a0:47:c6:07:2d:96:79:b0:8c:58:
         16:61:8d:f8:80:61:c2:1d:7a:c3:f2:b9:a8:c9:50:ca:ce:c4:
         88:2d:b8:cc:d0:e4:c9:f6:d6:03:34:61:60:ff:5f:86:29:70:
         c3:d4:07:81:7e:92:fb:81:cf:ae:84:34:12:d8:47:36:c1:34:
         d7:10:49:1f:9e:cd:57:71:e5:2b:76:90:d2:1f:9c:b3:ea:c2:
         9f:44:0a:0c:22:68:14:c9:56:10:d6:e1:35:a6:19:2f:f7:d7:
         32:15:59:78:84:5e:46:c0:34:e0:53:11:f2:b2:7c:94:d1:4e:
         6c:90:4c:0f:bf:35:88:67:19:31:99:85:ab:ce:dd:c1:a5:10:
         d7:97:28:a3:eb:bc:20:73:51:21:3e:2a:9c:6c:fe:a7:89:8a:
         8f:c3:41:a9:e6:c2:e9:92:60:77:92:16:10:74:75:93:70:cb:
         a8:eb:6b:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFe+ExtI0KInBK4u4DzZJCb3PrQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZEOUExMjAxODg5NjUwRENBQjc0MDg1QjNBMDQzMzM1
N0EzNzJDMjAeFw0yMjEwMDYxNTExNTlaFw0yMzEwMDUxNTE2NTlaMDMxMTAvBgNV
BAMTKEM0MzMyMEJBN0MyOTMxQkZBMUNDOTAxNzcwMzJDNzVFM0Q5NDhFNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9fPN4S71aiJzMiBmauIlhkol
rXfATl0sGp2ksQmHfBcMFW9zNlUUL8M3TfmPp3ZPyKg2OldcohOd2Grv+ifLI+SA
T6uf2xcrSs2XBL6CN6fipKhXOumjGOVUP/zWOtLzGSwGCellzQLGJ+kuItCV+s3N
SnetQl3xfRbnqHzpzXE2SJXfYXexfRXc2KwcjBV4PE7eiLk/xErmSYSIRf6tqnmQ
PAiELuaqQkk2ZQonIuAvOt3IckmV6eMXuveJa+XD2elKLIgcMSdUotGEJGWF90Xq
mB6JpsoBRGdPr9xRxTE/ahUHbU4Lq/elmUWy5StJoRbJB9BNraGMgE8HCHrpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxDMgunwpMb+hzJAXcDLHXj2UjmkwHwYDVR0j
BBgwFoAUVtmhIBiJZQ3Kt0CFs6BDM1ejcsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2tuc0ptc2ZMb2dLRlVna01ua0J5WGtucXFmczdqQUJtV0VkQ24yNXZa
MXYvMC81NkQ5QTEyMDE4ODk2NTBEQ0FCNzQwODVCM0EwNDMzMzU3QTM3MkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU2RDlBMTIwMTg4OTY1MERD
QUI3NDA4NUIzQTA0MzMzNTdBMzcyQzIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdrbnNKbXNmTG9nS0ZVZ2tNbmtCeVhrbnFxZnM3akFCbVdFZENuMjV2WjF2LzAv
MzIzODMwMzQzYTM2NjM2MzNhNjEzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzMjM2MzIzNjMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAbMoDANBgkqhkiG9w0BAQsFAAOC
AQEAVb4NpCpicYO9X8xYTrcb0QbBjtIGkhQ6oda/9BPGIVDPkDEWAjzGIuZURBdi
VlYzknc13SZpD5LJHBkjl+P7aHLNhV6TxaCSgWcLhA+U+z6gR8YHLZZ5sIxYFmGN
+IBhwh16w/K5qMlQys7EiC24zNDkyfbWAzRhYP9fhilww9QHgX6S+4HProQ0EthH
NsE01xBJH57NV3HlK3aQ0h+cs+rCn0QKDCJoFMlWENbhNaYZL/fXMhVZeIReRsA0
4FMR8rJ8lNFObJBMD781iGcZMZmFq87dwaUQ15coo+u8IHNRIT4qnGz+p4mKj8NB
qebC6ZJgd5IWEHR1k3DLqOtrmQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org