Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/323830343a353235383a633030303a3a2f33342d3334203d3e20323638353132.roa
File:                     323830343a353235383a633030303a3a2f33342d3334203d3e20323638353132.roa (raw, json)
Hash identifier:          T4yj7GUeGlrV/jhEGUcWuI7pOqo+xnERyRcKGC/sMSQ=
Subject key identifier:   42:B3:C6:5E:0C:E2:36:04:F5:8F:70:DC:F1:0E:BF:D1:CD:83:42:6B
Certificate issuer:       /CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
Certificate serial:       20480F1DEC8D71865C21E0235EA457FF9217271D
Authority key identifier: EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/323830343a353235383a633030303a3a2f33342d3334203d3e20323638353132.roa
Signing time:             Wed 08 Nov 2023 10:38:29 +0000
ROA not before:           Wed 08 Nov 2023 10:33:29 +0000
ROA not after:            Wed 06 Nov 2024 10:38:29 +0000
asID:                     268512
IP address blocks:        2804:5258:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:48:0f:1d:ec:8d:71:86:5c:21:e0:23:5e:a4:57:ff:92:17:27:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
        Validity
            Not Before: Nov  8 10:33:29 2023 GMT
            Not After : Nov  6 10:38:29 2024 GMT
        Subject: CN=42B3C65E0CE23604F58F70DCF10EBFD1CD83426B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:f0:0a:d8:65:26:80:fc:c0:d8:b5:6b:15:
                    0e:37:96:53:dd:9d:e8:53:79:ab:88:fa:fc:0a:64:
                    a0:15:38:24:d4:d2:27:27:61:de:c0:50:d8:30:fd:
                    52:2b:a3:ba:57:b8:e6:02:b4:03:72:ae:8a:dc:2e:
                    de:51:3d:58:1e:60:7c:6d:43:66:12:b4:0c:bd:e8:
                    03:eb:89:94:49:66:21:ba:f3:71:31:3a:6d:9c:d7:
                    d3:bc:ab:91:5d:80:54:a7:5e:36:b9:9a:26:df:e4:
                    2d:75:63:8b:32:22:d1:27:ce:c8:83:2a:fa:9d:33:
                    5a:fc:a1:43:40:ea:95:59:c2:86:8d:6e:e1:a7:f4:
                    d6:20:1a:bc:9e:81:23:16:5e:07:05:b3:b3:2c:25:
                    17:b1:5b:86:f1:0c:8e:70:e9:5b:e2:5e:36:eb:77:
                    e5:8f:32:92:be:16:01:f0:e2:bb:3c:63:39:e4:c8:
                    68:82:a9:0a:62:c7:24:63:3f:6b:60:ff:19:a6:1f:
                    ad:13:cd:4e:75:74:3f:50:1b:17:b4:d9:d3:44:37:
                    18:3a:b5:48:88:67:34:49:af:6e:61:70:d9:c8:c5:
                    66:4c:fe:4c:85:6a:21:f9:28:cb:d8:c0:bd:f8:d1:
                    e5:60:38:24:65:d2:0e:ba:d2:c8:d3:63:a4:d5:74:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B3:C6:5E:0C:E2:36:04:F5:8F:70:DC:F1:0E:BF:D1:CD:83:42:6B
            X509v3 Authority Key Identifier:
                keyid:EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/323830343a353235383a633030303a3a2f33342d3334203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5258:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:60:81:13:48:bc:ca:25:f8:75:d1:89:9a:db:6c:ac:6d:ec:
         5a:b4:e7:18:b8:f6:8a:a6:89:e3:74:9b:ff:1c:b8:d0:e4:c5:
         33:fa:05:0d:bb:1d:38:c9:11:99:4d:df:31:98:ae:ed:d6:b1:
         3f:ce:dc:4d:a8:24:16:46:68:e1:db:4d:e4:c8:53:03:e8:c8:
         aa:d8:c8:89:6d:8a:9c:26:e4:09:81:40:d0:f4:4e:f9:74:08:
         db:51:7c:26:9b:0c:42:33:c9:1e:69:a7:21:06:ae:9c:40:c2:
         8d:3e:59:da:fb:55:a1:de:20:1e:e7:73:be:fc:b5:3e:33:94:
         b1:a4:c6:d8:5e:18:47:3b:7a:4f:22:f2:3d:2e:e8:1e:8f:eb:
         fa:f4:54:24:4d:68:29:38:08:a4:b0:cc:48:f2:bb:7c:2c:33:
         9b:c8:59:3b:fb:3f:26:62:8e:3a:d3:63:f0:ce:02:7a:1b:43:
         71:71:9b:df:c4:ea:c1:40:b6:51:d5:fb:f6:5a:17:25:3f:95:
         52:ed:4f:19:48:2e:34:ce:04:41:09:cc:9a:7a:f7:ea:0d:2b:
         c8:93:cf:8d:bb:87:46:15:ba:80:40:97:47:03:d0:3a:5b:a7:
         7e:8e:a4:e9:57:45:71:74:d6:1f:42:85:81:3e:d3:0b:2f:1f:
         f1:4b:8d:7c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIEgPHeyNcYZcIeAjXqRX/5IXJx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZBQzM3Q0FEQzZDQTlEN0QwQzNCOTUyRDBFNkY5Qzcw
Qjk4OTU3OTAeFw0yMzExMDgxMDMzMjlaFw0yNDExMDYxMDM4MjlaMDMxMTAvBgNV
BAMTKDQyQjNDNjVFMENFMjM2MDRGNThGNzBEQ0YxMEVCRkQxQ0Q4MzQyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSPAK2GUmgPzA2LVrFQ43llPd
nehTeauI+vwKZKAVOCTU0icnYd7AUNgw/VIro7pXuOYCtANyrorcLt5RPVgeYHxt
Q2YStAy96APriZRJZiG683ExOm2c19O8q5FdgFSnXja5mibf5C11Y4syItEnzsiD
KvqdM1r8oUNA6pVZwoaNbuGn9NYgGryegSMWXgcFs7MsJRexW4bxDI5w6VviXjbr
d+WPMpK+FgHw4rs8YznkyGiCqQpixyRjP2tg/xmmH60TzU51dD9QGxe02dNENxg6
tUiIZzRJr25hcNnIxWZM/kyFaiH5KMvYwL340eVgOCRl0g660sjTY6TVdLKHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQrPGXgziNgT1j3Dc8Q6/0c2DQmswHwYDVR0j
BBgwFoAU76w3ytxsqdfQw7lS0Ob5xwuYlXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3pyV3RHTW1ieW1veVJlUk1pYk56NlRVVHdZSDh3VG40RGs3U1BWWFky
WTUvMC9FRkFDMzdDQURDNkNBOUQ3RDBDM0I5NTJEMEU2RjlDNzBCOTg5NTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGQUMzN0NBREM2Q0E5RDdE
MEMzQjk1MkQwRTZGOUM3MEI5ODk1NzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd6cld0R01tYnltb3lSZVJNaWJOejZUVVR3WUg4d1RuNERrN1NQVlhZMlk1LzAv
MzIzODMwMzQzYTM1MzIzNTM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUljAMA0GCSqGSIb3DQEBCwUA
A4IBAQCZYIETSLzKJfh10Yma22ysbexatOcYuPaKponjdJv/HLjQ5MUz+gUNux04
yRGZTd8xmK7t1rE/ztxNqCQWRmjh203kyFMD6Miq2MiJbYqcJuQJgUDQ9E75dAjb
UXwmmwxCM8keaachBq6cQMKNPlna+1Wh3iAe53O+/LU+M5SxpMbYXhhHO3pPIvI9
Lugej+v69FQkTWgpOAiksMxI8rt8LDObyFk7+z8mYo4602PwzgJ6G0NxcZvfxOrB
QLZR1fv2WhclP5VS7U8ZSC40zgRBCcyaevfqDSvIk8+Nu4dGFbqAQJdHA9A6W6d+
jqTpV0VxdNYfQoWBPtMLLx/xS418
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org