Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3438203d3e20323639303438.roa
File:                     323830343a356561383a3a2f33322d3438203d3e20323639303438.roa (raw, json)
Hash identifier:          phtHWr5xdfB5CaqxEboS1E6iPuW/B+9nRan5Z7c9+as=
Subject key identifier:   DB:FA:94:E6:D2:8D:18:54:9B:47:F9:AC:7C:A0:B9:C5:A8:DC:92:B6
Certificate issuer:       /CN=C489597740A9E4C1603DE92C6C64FEAA487A010E
Certificate serial:       5CBEBCA1B2D6FB9F6ABB02734E3CEE0BB0B03C3C
Authority key identifier: C4:89:59:77:40:A9:E4:C1:60:3D:E9:2C:6C:64:FE:AA:48:7A:01:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C489597740A9E4C1603DE92C6C64FEAA487A010E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3438203d3e20323639303438.roa
Signing time:             Mon 19 Aug 2024 13:01:09 +0000
ROA not before:           Mon 19 Aug 2024 12:56:09 +0000
ROA not after:            Mon 18 Aug 2025 13:01:09 +0000
asID:                     269048
IP address blocks:        2804:5ea8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:be:bc:a1:b2:d6:fb:9f:6a:bb:02:73:4e:3c:ee:0b:b0:b0:3c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C489597740A9E4C1603DE92C6C64FEAA487A010E
        Validity
            Not Before: Aug 19 12:56:09 2024 GMT
            Not After : Aug 18 13:01:09 2025 GMT
        Subject: CN=DBFA94E6D28D18549B47F9AC7CA0B9C5A8DC92B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:59:20:2e:39:5d:2c:27:e4:54:f0:a8:28:
                    3a:7d:5f:f1:45:79:dd:7f:dd:04:fd:c9:54:c0:44:
                    0d:02:4f:86:83:b7:9f:50:a0:f3:76:fb:97:0d:66:
                    84:95:a0:38:cc:a8:2c:11:ee:bc:ed:aa:2d:ab:14:
                    31:8a:42:a5:a1:24:f7:a1:2d:46:5e:dd:c8:a8:58:
                    22:56:45:aa:ad:f8:1a:da:c3:72:5a:92:90:d3:db:
                    06:f9:96:cc:b0:f9:89:c6:24:34:ce:c3:bd:18:bb:
                    3e:3c:d4:02:29:e9:7d:25:e5:23:cc:51:8e:db:55:
                    89:1c:d6:f9:29:bb:68:9a:c6:31:f2:99:09:42:01:
                    af:1f:6c:f9:36:97:bc:e6:99:ed:34:8c:93:dd:ab:
                    5d:73:d8:0b:85:b6:f1:8d:d4:07:c7:04:6a:f3:8c:
                    a9:58:ec:b1:25:69:3e:d5:90:40:9f:76:b4:e2:e1:
                    6a:9f:fb:7a:ed:30:45:87:01:9d:77:78:8d:d2:45:
                    08:80:53:b2:4e:fd:40:08:0a:a4:c5:3e:a6:91:02:
                    c3:3e:f8:ae:c9:8e:0e:2e:93:d6:06:4b:b3:b6:d7:
                    28:ac:76:4b:c8:3f:35:65:51:c1:ad:df:67:33:cf:
                    3f:7d:d6:54:2a:49:1d:9c:48:9e:f8:07:5a:c9:f3:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FA:94:E6:D2:8D:18:54:9B:47:F9:AC:7C:A0:B9:C5:A8:DC:92:B6
            X509v3 Authority Key Identifier:
                keyid:C4:89:59:77:40:A9:E4:C1:60:3D:E9:2C:6C:64:FE:AA:48:7A:01:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/C489597740A9E4C1603DE92C6C64FEAA487A010E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C489597740A9E4C1603DE92C6C64FEAA487A010E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qQSbpPkebKFA2KFsbTfNk5eFxKDq5TFh57TXDTpSH5x/0/323830343a356561383a3a2f33322d3438203d3e20323639303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:83:03:89:0b:c3:7c:aa:d6:52:62:0e:b8:27:1d:db:01:16:
         2a:b5:8e:ee:a9:f7:13:68:fa:d5:5a:f4:26:8f:f0:54:09:bc:
         ec:11:4a:ec:ae:3f:37:a4:25:a1:5f:2f:24:9d:66:76:7f:94:
         8b:6b:0a:81:de:cc:be:86:b1:40:18:7b:69:fc:11:44:f0:86:
         ed:be:5a:02:2a:40:d7:fb:41:bf:ad:f3:7e:32:9e:8e:1f:78:
         b9:e2:fa:bb:af:39:89:fa:a3:f5:8c:8e:56:8d:c0:4e:6b:3f:
         c8:80:6f:de:8c:63:b8:fd:c1:bf:20:c3:e5:84:92:85:5d:0e:
         43:ac:be:b7:b6:76:8a:38:e1:35:80:3d:04:7d:81:6f:65:e2:
         25:70:27:53:1f:bc:30:d6:5f:b8:5a:86:70:22:9c:32:ca:a8:
         ee:16:94:d1:5b:d8:ad:99:36:96:54:82:4d:7b:41:a1:cf:c6:
         52:25:5b:36:ca:1a:7a:6b:de:17:46:04:e0:c8:7c:be:51:be:
         e6:01:cd:f6:36:9f:0e:c7:1a:13:98:1b:a1:5a:8e:16:43:15:
         0e:c3:3e:81:32:98:7e:36:a1:e9:c5:54:68:51:cc:ef:38:2f:
         88:85:99:13:01:3e:5a:ca:e8:4a:8c:2d:35:84:35:12:7e:56:
         c3:05:ff:0f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXL68obLW+59quwJzTjzuC7CwPDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4OTU5Nzc0MEE5RTRDMTYwM0RFOTJDNkM2NEZFQUE0
ODdBMDEwRTAeFw0yNDA4MTkxMjU2MDlaFw0yNTA4MTgxMzAxMDlaMDMxMTAvBgNV
BAMTKERCRkE5NEU2RDI4RDE4NTQ5QjQ3RjlBQzdDQTBCOUM1QThEQzkyQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMc1kgLjldLCfkVPCoKDp9X/FF
ed1/3QT9yVTARA0CT4aDt59QoPN2+5cNZoSVoDjMqCwR7rztqi2rFDGKQqWhJPeh
LUZe3cioWCJWRaqt+Braw3JakpDT2wb5lsyw+YnGJDTOw70Yuz481AIp6X0l5SPM
UY7bVYkc1vkpu2iaxjHymQlCAa8fbPk2l7zmme00jJPdq11z2AuFtvGN1AfHBGrz
jKlY7LElaT7VkECfdrTi4Wqf+3rtMEWHAZ13eI3SRQiAU7JO/UAICqTFPqaRAsM+
+K7Jjg4uk9YGS7O21yisdkvIPzVlUcGt32czzz991lQqSR2cSJ74B1rJ83WRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2/qU5tKNGFSbR/msfKC5xajckrYwHwYDVR0j
BBgwFoAUxIlZd0Cp5MFgPeksbGT+qkh6AQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3FRU2JwUGtlYktGQTJLRnNiVGZOazVlRnhLRHE1VEZoNTdUWERUcFNI
NXgvMC9DNDg5NTk3NzQwQTlFNEMxNjAzREU5MkM2QzY0RkVBQTQ4N0EwMTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0ODk1OTc3NDBBOUU0QzE2
MDNERTkyQzZDNjRGRUFBNDg3QTAxMEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdxUVNicFBrZWJLRkEyS0ZzYlRmTms1ZUZ4S0RxNVRGaDU3VFhEVHBTSDV4LzAv
MzIzODMwMzQzYTM1NjU2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzAzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAReqDANBgkqhkiG9w0BAQsFAAOCAQEAN4MDiQvD
fKrWUmIOuCcd2wEWKrWO7qn3E2j61Vr0Jo/wVAm87BFK7K4/N6QloV8vJJ1mdn+U
i2sKgd7MvoaxQBh7afwRRPCG7b5aAipA1/tBv63zfjKejh94ueL6u685ifqj9YyO
Vo3ATms/yIBv3oxjuP3BvyDD5YSShV0OQ6y+t7Z2ijjhNYA9BH2Bb2XiJXAnUx+8
MNZfuFqGcCKcMsqo7haU0VvYrZk2llSCTXtBoc/GUiVbNsoaemveF0YE4Mh8vlG+
5gHN9jafDscaE5gboVqOFkMVDsM+gTKYfjah6cVUaFHM7zgviIWZEwE+WsroSowt
NYQ1En5WwwX/Dw==
-----END CERTIFICATE-----
Generated at Thu Sep 19 18:52:21 2024 by rpki-client on console-fra.rpki-client.org