Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/0/323830343a323834633a3a2f33322d3336203d3e20323633393534.roa
File:                     323830343a323834633a3a2f33322d3336203d3e20323633393534.roa (raw, json)
Hash identifier:          4Gg5Oj9sPhmd2/crS7wUQAiZ+d/wmEtTQ6unc5iY5SM=
Subject key identifier:   4D:D9:04:0E:86:79:EE:FD:91:CC:A2:F2:8C:84:C7:40:2E:82:7F:1C
Certificate issuer:       /CN=CBABB37308744CB8E1B798EE74BDB4F0118A1A46
Certificate serial:       5745846D71BB288B59B0317CBA2046EB959DB37A
Authority key identifier: CB:AB:B3:73:08:74:4C:B8:E1:B7:98:EE:74:BD:B4:F0:11:8A:1A:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBABB37308744CB8E1B798EE74BDB4F0118A1A46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/0/323830343a323834633a3a2f33322d3336203d3e20323633393534.roa
Signing time:             Sun 07 Nov 2021 20:42:31 +0000
ROA not before:           Sun 07 Nov 2021 20:37:31 +0000
ROA not after:            Sun 06 Nov 2022 20:42:31 +0000
asID:                     263954
IP address blocks:        2804:284c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:45:84:6d:71:bb:28:8b:59:b0:31:7c:ba:20:46:eb:95:9d:b3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBABB37308744CB8E1B798EE74BDB4F0118A1A46
        Validity
            Not Before: Nov  7 20:37:31 2021 GMT
            Not After : Nov  6 20:42:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:ea:34:c8:d7:6d:4e:f3:ab:fa:68:ba:67:
                    1e:ba:c4:87:22:a6:1e:46:dd:26:d8:1f:ad:12:bc:
                    2f:c1:0e:91:0a:16:2c:41:4a:46:bd:54:a4:be:d2:
                    08:72:5a:92:7d:41:65:2e:9e:c3:7c:23:be:74:7f:
                    17:c0:49:58:81:9b:ad:ce:90:87:53:74:97:d8:bf:
                    90:9c:ef:54:44:ce:b8:0c:ef:e3:84:00:4f:77:49:
                    9f:61:17:33:84:37:11:3d:27:25:92:82:c1:7a:f0:
                    a1:84:3e:0d:91:fa:47:86:87:69:bd:5f:64:41:35:
                    77:2b:8c:0a:c4:2c:1c:f5:1a:81:65:42:8e:a5:92:
                    13:08:bb:27:11:e4:bc:6a:42:c7:db:52:81:c4:10:
                    29:8a:e5:b6:7e:93:e4:6c:e9:99:32:af:3b:13:86:
                    b1:1a:2b:94:24:56:94:95:63:64:4a:eb:d5:e6:7f:
                    c3:99:e7:df:38:1f:db:1e:07:b2:9a:0e:75:93:09:
                    64:e3:26:c7:99:f0:71:57:c2:cf:0c:f8:55:f0:5d:
                    1f:1d:b3:f4:0a:67:02:6f:05:58:80:5f:ec:55:c7:
                    0f:62:c9:4f:75:62:7b:f8:70:e5:05:9d:1e:54:85:
                    2d:4f:1d:b0:7c:c9:94:36:15:71:b7:80:12:34:63:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D9:04:0E:86:79:EE:FD:91:CC:A2:F2:8C:84:C7:40:2E:82:7F:1C
            X509v3 Authority Key Identifier:
                keyid:CB:AB:B3:73:08:74:4C:B8:E1:B7:98:EE:74:BD:B4:F0:11:8A:1A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/0/CBABB37308744CB8E1B798EE74BDB4F0118A1A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBABB37308744CB8E1B798EE74BDB4F0118A1A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/0/323830343a323834633a3a2f33322d3336203d3e20323633393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:284c::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:70:08:17:aa:5c:ea:01:c0:a9:88:87:c0:df:d4:3e:57:ae:
         c2:1e:ca:7d:28:22:db:02:f0:71:0c:a0:56:33:b8:13:85:5d:
         41:ab:fe:f1:a0:e3:e6:3f:d8:07:37:b7:7d:37:b9:3b:dc:02:
         20:f6:11:63:72:29:bb:e1:83:2e:85:a0:9f:6f:03:b5:2c:27:
         3e:c2:c3:e9:6d:6b:a2:a6:2d:cd:55:3b:91:3c:58:4a:b1:fe:
         91:cb:2a:27:48:a5:d0:37:6d:da:67:50:77:77:fd:db:83:d5:
         b7:7b:99:49:82:4e:d4:0a:d1:4b:cc:e4:99:7a:0a:9e:87:04:
         bf:3f:63:54:15:68:92:24:d8:b2:d1:2b:95:b2:f8:79:fc:a0:
         c0:9d:73:88:0e:d0:c4:88:11:95:d5:48:f0:5b:1c:fa:82:58:
         80:0e:a0:ba:25:2f:44:21:b4:83:e9:16:a8:a7:00:87:8c:f9:
         1c:50:45:24:19:76:59:45:be:86:32:f0:23:4d:a7:5e:81:0f:
         57:cf:11:b6:7b:cd:a1:a2:e5:0f:4f:45:5c:65:84:26:10:f8:
         b7:35:96:11:e7:1a:a3:8c:68:28:1a:19:8a:07:82:fa:ff:d0:
         5c:35:94:34:4a:4a:d2:a3:29:ec:2f:12:10:84:f8:89:5b:58:
         28:15:cd:31
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUV0WEbXG7KItZsDF8uiBG65Wds3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JBQkIzNzMwODc0NENCOEUxQjc5OEVFNzRCREI0RjAx
MThBMUE0NjAeFw0yMTExMDcyMDM3MzFaFw0yMjExMDYyMDQyMzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTUxN0VBMzRDOEQ3NkQ0RUYz
QUJGQTY4QkE2NzFFQkFDNDg3MjJBNjFFNDZERDI2RDgxRkFEMTJCQzJGQzEwRTkx
MEExNjJDNDE0QTQ2QkQ1NEE0QkVEMjA4NzI1QTkyN0Q0MTY1MkU5RUMzN0MyM0JF
NzQ3RjE3QzA0OTU4ODE5QkFEQ0U5MDg3NTM3NDk3RDhCRjkwOUNFRjU0NDRDRUI4
MENFRkUzODQwMDRGNzc0OTlGNjExNzMzODQzNzExM0QyNzI1OTI4MkMxN0FGMEEx
ODQzRTBEOTFGQTQ3ODY4NzY5QkQ1RjY0NDEzNTc3MkI4QzBBQzQyQzFDRjUxQTgx
NjU0MjhFQTU5MjEzMDhCQjI3MTFFNEJDNkE0MkM3REI1MjgxQzQxMDI5OEFFNUI2
N0U5M0U0NkNFOTk5MzJBRjNCMTM4NkIxMUEyQjk0MjQ1Njk0OTU2MzY0NEFFQkQ1
RTY3RkMzOTlFN0RGMzgxRkRCMUUwN0IyOUEwRTc1OTMwOTY0RTMyNkM3OTlGMDcx
NTdDMkNGMENGODU1RjA1RDFGMURCM0Y0MEE2NzAyNkYwNTU4ODA1RkVDNTVDNzBG
NjJDOTRGNzU2MjdCRjg3MEU1MDU5RDFFNTQ4NTJENEYxREIwN0NDOTk0MzYxNTcx
Qjc4MDEyMzQ2MzAyNjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApRfqNMjXbU7zq/poumceusSHIqYeRt0m2B+tErwvwQ6RChYsQUpG
vVSkvtIIclqSfUFlLp7DfCO+dH8XwElYgZutzpCHU3SX2L+QnO9URM64DO/jhABP
d0mfYRczhDcRPSclkoLBevChhD4NkfpHhodpvV9kQTV3K4wKxCwc9RqBZUKOpZIT
CLsnEeS8akLH21KBxBApiuW2fpPkbOmZMq87E4axGiuUJFaUlWNkSuvV5n/Dmeff
OB/bHgeymg51kwlk4ybHmfBxV8LPDPhV8F0fHbP0CmcCbwVYgF/sVccPYslPdWJ7
+HDlBZ0eVIUtTx2wfMmUNhVxt4ASNGMCZQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FE3ZBA6Gee79kcyi8oyEx0Augn8cMB8GA1UdIwQYMBaAFMurs3MIdEy44beY7nS9
tPARihpGMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdxUHFreWNwMnV2d0hq
QUN6WlpRRFhHQUdCeVE2Z1Y4TDNFZkhWbU0xc1luLzAvQ0JBQkIzNzMwODc0NENC
OEUxQjc5OEVFNzRCREI0RjAxMThBMUE0Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DQkFCQjM3MzA4NzQ0Q0I4RTFCNzk4RUU3NEJEQjRGMDExOEEx
QTQ2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83cVBxa3ljcDJ1dndIakFDelpa
UURYR0FHQnlRNmdWOEwzRWZIVm1NMXNZbi8wLzMyMzgzMDM0M2EzMjM4MzQ2MzNh
M2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzMzM5MzUzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
KEwwDQYJKoZIhvcNAQELBQADggEBADdwCBeqXOoBwKmIh8Df1D5XrsIeyn0oItsC
8HEMoFYzuBOFXUGr/vGg4+Y/2Ac3t303uTvcAiD2EWNyKbvhgy6FoJ9vA7UsJz7C
w+lta6KmLc1VO5E8WEqx/pHLKidIpdA3bdpnUHd3/duD1bd7mUmCTtQK0UvM5Jl6
Cp6HBL8/Y1QVaJIk2LLRK5Wy+Hn8oMCdc4gO0MSIEZXVSPBbHPqCWIAOoLolL0Qh
tIPpFqinAIeM+RxQRSQZdllFvoYy8CNNp16BD1fPEbZ7zaGi5Q9PRVxlhCYQ+Lc1
lhHnGqOMaCgaGYoHgvr/0Fw1lDRKStKjKewvEhCE+IlbWCgVzTE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org