Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a323665303a3a2f33322d3536203d3e203238313436.roa
File:                     323830343a323665303a3a2f33322d3536203d3e203238313436.roa (raw, json)
Hash identifier:          u4uuCjYXozV5p/rGp19UKDkrNS/QrAOEKUNYmlg418k=
Subject key identifier:   8A:DE:60:96:0E:60:9C:75:56:B3:2A:C1:D3:D0:C5:CC:C5:3B:4A:F0
Certificate issuer:       /CN=7B0D48B72953BA7287B21009BCDB530E46D53271
Certificate serial:       4B100321EB1AD3D32B0FCAE1FE6339490DADDB2B
Authority key identifier: 7B:0D:48:B7:29:53:BA:72:87:B2:10:09:BC:DB:53:0E:46:D5:32:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B0D48B72953BA7287B21009BCDB530E46D53271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a323665303a3a2f33322d3536203d3e203238313436.roa
Signing time:             Mon 12 Apr 2021 13:41:57 +0000
ROA not before:           Mon 12 Apr 2021 13:36:57 +0000
ROA not after:            Mon 11 Apr 2022 13:41:57 +0000
asID:                     28146
IP address blocks:        2804:26e0::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:10:03:21:eb:1a:d3:d3:2b:0f:ca:e1:fe:63:39:49:0d:ad:db:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B0D48B72953BA7287B21009BCDB530E46D53271
        Validity
            Not Before: Apr 12 13:36:57 2021 GMT
            Not After : Apr 11 13:41:57 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:e6:32:33:ab:f5:0b:ca:f2:85:4b:49:8c:
                    a7:79:a4:da:54:1c:5c:c0:1d:e9:14:fc:fd:41:cf:
                    e0:f0:9c:3d:7a:69:0b:f6:8c:84:e2:4a:c4:5f:42:
                    80:a4:0a:1f:fa:32:74:9d:1e:a9:43:ab:12:e5:f6:
                    bc:89:4c:43:c6:bd:b3:b6:6e:dc:4c:7b:10:1b:9c:
                    65:5c:85:13:f3:47:7a:eb:80:9c:b8:3a:ac:ed:7d:
                    2e:10:e6:01:69:a2:ee:e9:31:c7:fd:b8:9e:0f:a6:
                    1e:a8:09:72:06:f7:0a:66:c4:e2:96:fe:e6:57:e5:
                    d5:4f:a1:3f:8f:39:9b:46:f9:0d:9b:28:3d:df:37:
                    18:80:ad:af:d2:35:90:cc:46:7a:c3:0e:77:15:bf:
                    c1:e0:39:b0:6c:bf:9b:39:d9:c1:cf:4e:6e:45:b0:
                    05:6e:fc:ef:cf:4a:5b:3e:92:c7:5a:d5:d5:36:66:
                    75:4d:f0:ad:e5:ff:ea:3a:37:31:59:c6:9a:7a:5f:
                    94:15:1b:51:a5:9e:4d:b6:54:93:82:b4:34:b9:fd:
                    6d:45:82:c9:72:0a:53:8f:21:84:ab:23:26:5b:d2:
                    4b:56:f1:f8:8e:12:54:54:ea:b0:47:e5:0c:22:3e:
                    6c:77:39:0e:cc:ed:58:09:3f:37:e4:42:88:de:e6:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DE:60:96:0E:60:9C:75:56:B3:2A:C1:D3:D0:C5:CC:C5:3B:4A:F0
            X509v3 Authority Key Identifier:
                keyid:7B:0D:48:B7:29:53:BA:72:87:B2:10:09:BC:DB:53:0E:46:D5:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7B0D48B72953BA7287B21009BCDB530E46D53271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B0D48B72953BA7287B21009BCDB530E46D53271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a323665303a3a2f33322d3536203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:4d:1c:6e:9f:40:64:38:4e:b8:a6:d4:7e:cf:c3:38:e9:7d:
         8a:ef:e2:32:eb:69:48:27:8e:f8:90:81:d3:02:77:9a:82:32:
         e1:ce:41:c6:62:19:81:75:f0:ec:69:bd:a1:32:a6:53:ce:e4:
         b1:a1:33:cf:72:ee:13:30:cc:f6:64:c0:b6:e4:46:b3:a5:50:
         74:b9:19:b8:32:f8:2a:06:04:49:14:7c:06:f0:b3:1c:4b:67:
         ba:78:5a:01:18:3c:d1:f5:92:63:82:ff:91:48:b4:77:77:39:
         bb:8e:9d:3f:4e:c8:8f:70:7e:f5:e7:05:32:88:54:eb:47:83:
         1e:1c:ee:01:46:4e:0e:46:3d:8a:cc:83:d1:ae:cf:d4:62:f2:
         72:bd:45:bc:50:83:77:76:f5:70:5b:03:14:7f:e1:e6:2d:1c:
         8e:e8:57:0d:67:be:94:b7:c9:6c:b4:0f:2e:e3:c8:c1:d3:00:
         ca:3d:d4:42:85:3f:16:2b:1d:7e:74:11:b6:90:12:b5:ad:b5:
         5e:1d:2e:a5:0c:a7:cc:ec:fa:6f:5b:ac:1f:32:44:53:8c:07:
         a5:ad:50:d6:4e:a2:04:84:84:3f:84:b1:24:bb:f2:55:76:78:
         4a:2d:53:91:bb:74:7f:54:53:96:42:a0:b8:5f:ab:13:8f:19:
         d7:f7:92:dc
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUSxADIesa09MrD8rh/mM5SQ2t2yswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwRDQ4QjcyOTUzQkE3Mjg3QjIxMDA5QkNEQjUzMEU0
NkQ1MzI3MTAeFw0yMTA0MTIxMzM2NTdaFw0yMjA0MTExMzQxNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE4N0U2MzIzM0FCRjUwQkNB
RjI4NTRCNDk4Q0E3NzlBNERBNTQxQzVDQzAxREU5MTRGQ0ZENDFDRkUwRjA5QzNE
N0E2OTBCRjY4Qzg0RTI0QUM0NUY0MjgwQTQwQTFGRkEzMjc0OUQxRUE5NDNBQjEy
RTVGNkJDODk0QzQzQzZCREIzQjY2RURDNEM3QjEwMUI5QzY1NUM4NTEzRjM0NzdB
RUI4MDlDQjgzQUFDRUQ3RDJFMTBFNjAxNjlBMkVFRTkzMUM3RkRCODlFMEZBNjFF
QTgwOTcyMDZGNzBBNjZDNEUyOTZGRUU2NTdFNUQ1NEZBMTNGOEYzOTlCNDZGOTBE
OUIyODNEREYzNzE4ODBBREFGRDIzNTkwQ0M0NjdBQzMwRTc3MTVCRkMxRTAzOUIw
NkNCRjlCMzlEOUMxQ0Y0RTZFNDVCMDA1NkVGQ0VGQ0Y0QTVCM0U5MkM3NUFENUQ1
MzY2Njc1NERGMEFERTVGRkVBM0EzNzMxNTlDNjlBN0E1Rjk0MTUxQjUxQTU5RTRE
QjY1NDkzODJCNDM0QjlGRDZENDU4MkM5NzIwQTUzOEYyMTg0QUIyMzI2NUJEMjRC
NTZGMUY4OEUxMjU0NTRFQUIwNDdFNTBDMjIzRTZDNzczOTBFQ0NFRDU4MDkzRjM3
RTQ0Mjg4REVFNkY3NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwYfmMjOr9QvK8oVLSYyneaTaVBxcwB3pFPz9Qc/g8Jw9emkL9oyE
4krEX0KApAof+jJ0nR6pQ6sS5fa8iUxDxr2ztm7cTHsQG5xlXIUT80d664CcuDqs
7X0uEOYBaaLu6THH/bieD6YeqAlyBvcKZsTilv7mV+XVT6E/jzmbRvkNmyg93zcY
gK2v0jWQzEZ6ww53Fb/B4DmwbL+bOdnBz05uRbAFbvzvz0pbPpLHWtXVNmZ1TfCt
5f/qOjcxWcaael+UFRtRpZ5NtlSTgrQ0uf1tRYLJcgpTjyGEqyMmW9JLVvH4jhJU
VOqwR+UMIj5sdzkOzO1YCT835EKI3ub3YwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FIreYJYOYJx1VrMqwdPQxczFO0rwMB8GA1UdIwQYMBaAFHsNSLcpU7pyh7IQCbzb
Uw5G1TJxMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhGRENoNlg1eXJLZDdD
WVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAvN0IwRDQ4QjcyOTUzQkE3
Mjg3QjIxMDA5QkNEQjUzMEU0NkQ1MzI3MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83QjBENDhCNzI5NTNCQTcyODdCMjEwMDlCQ0RCNTMwRTQ2RDUz
MjcxLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84RkRDaDZYNXlyS2Q3Q1lZdlpw
REw5U3FTek1BQmpQYWE2ZHMxS1JLNnFLNi8wLzMyMzgzMDM0M2EzMjM2NjUzMDNh
M2EyZjMzMzIyZDM1MzYyMDNkM2UyMDMyMzgzMTM0MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBCbg
MA0GCSqGSIb3DQEBCwUAA4IBAQA6TRxun0BkOE64ptR+z8M46X2K7+Iy62lIJ474
kIHTAneagjLhzkHGYhmBdfDsab2hMqZTzuSxoTPPcu4TMMz2ZMC25EazpVB0uRm4
MvgqBgRJFHwG8LMcS2e6eFoBGDzR9ZJjgv+RSLR3dzm7jp0/TsiPcH715wUyiFTr
R4MeHO4BRk4ORj2KzIPRrs/UYvJyvUW8UIN3dvVwWwMUf+HmLRyO6FcNZ76Ut8ls
tA8u48jB0wDKPdRChT8WKx1+dBG2kBK1rbVeHS6lDKfM7PpvW6wfMkRTjAelrVDW
TqIEhIQ/hLEku/JVdnhKLVORu3R/VFOWQqC4X6sTjxnX95Lc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org