Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa
File:                     323830343a313462633a3a2f33322d3438203d3e20323633333437.roa (raw, json)
Hash identifier:          ZFTTRXX8QRhriIR5w8sXr8wcIwSdN6d9LRMqOe1YUkw=
Subject key identifier:   55:6F:CF:A6:AB:03:81:E3:52:CB:6A:8C:EB:28:2D:60:60:64:AD:DA
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       5FE962DE22936E5EB2B6126B712FC2A8DDA736D6
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa
Signing time:             Thu 06 Jul 2023 14:05:00 +0000
ROA not before:           Thu 06 Jul 2023 14:00:00 +0000
ROA not after:            Thu 04 Jul 2024 14:05:00 +0000
asID:                     263347
IP address blocks:        2804:14bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e9:62:de:22:93:6e:5e:b2:b6:12:6b:71:2f:c2:a8:dd:a7:36:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jul  6 14:00:00 2023 GMT
            Not After : Jul  4 14:05:00 2024 GMT
        Subject: CN=556FCFA6AB0381E352CB6A8CEB282D606064ADDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:00:d5:bf:df:b9:e5:a6:fc:35:16:28:4b:
                    1e:de:17:d6:0d:ca:c8:cc:d1:ff:aa:8d:1a:df:17:
                    93:21:8b:4a:c7:d4:9e:be:e1:a0:72:0c:b2:e5:c3:
                    7e:70:a0:5d:25:68:29:76:f7:cf:8a:72:e3:45:43:
                    c3:87:8e:ff:18:f1:36:7f:7a:53:26:49:9a:10:4f:
                    2b:a5:2d:43:82:84:22:53:31:8c:23:4f:0a:97:1f:
                    a5:0f:98:81:1e:30:37:40:30:ab:15:15:2f:80:e8:
                    d9:86:70:8a:91:62:e0:80:4d:84:d5:5b:e3:38:eb:
                    e6:b5:0d:49:a0:eb:14:ab:3f:8e:2f:51:83:30:c7:
                    2e:a3:46:8d:2a:01:35:be:49:c4:08:d2:4d:6e:c5:
                    c9:b5:93:e9:ff:37:1f:79:30:57:7d:ce:e0:ea:80:
                    85:67:05:d8:58:eb:90:81:b0:3b:c2:6c:c1:67:ae:
                    b0:46:33:c5:ab:ee:8d:4d:5c:b5:2e:98:b7:45:be:
                    5a:b4:59:1a:7c:79:ba:b2:28:db:33:ad:ec:90:8a:
                    59:34:fb:21:32:ea:92:8c:87:32:76:0c:f4:ff:d5:
                    b2:68:6b:b5:ef:e4:a9:a4:80:1b:bc:d6:14:cd:21:
                    7b:5d:55:dd:ab:97:b4:8e:df:f4:15:70:a5:17:c6:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6F:CF:A6:AB:03:81:E3:52:CB:6A:8C:EB:28:2D:60:60:64:AD:DA
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a3a2f33322d3438203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:a5:4f:ca:68:ab:05:02:6d:db:7e:13:01:81:41:c9:ab:95:
         cc:c5:c5:4c:f4:c5:ab:2a:8f:db:87:42:c6:a8:b9:c9:3e:67:
         23:0b:42:09:c0:67:d3:26:c9:1f:c0:cc:3f:ff:77:8a:1e:a6:
         4c:af:78:68:74:62:e2:6b:db:b8:86:51:8e:c2:21:b5:75:86:
         d9:aa:6e:87:8d:31:cf:83:38:ca:17:e2:e7:15:f7:d5:d2:f8:
         1e:c4:6b:44:45:fe:df:ec:53:ff:f0:fd:5b:e7:40:50:dc:de:
         e1:14:89:fe:27:2d:7d:ec:d1:88:92:30:3a:27:a4:1f:6a:4a:
         f1:5c:07:65:8c:95:93:1d:bf:44:0f:cd:0c:e8:67:2d:dd:47:
         4d:74:87:b2:61:0f:72:11:79:08:42:31:36:5e:0d:4a:c3:75:
         a2:36:63:d7:51:ad:33:2f:a3:a3:69:0a:28:08:e6:a5:a3:f4:
         ae:cc:f2:9e:59:4c:7f:a7:59:3a:cd:ca:90:55:b3:33:44:39:
         e4:15:8c:f8:82:c0:f4:c1:48:8b:d5:db:95:02:0b:15:f4:a4:
         53:31:cb:70:32:e7:16:9b:0b:ce:c3:d8:4b:44:c9:1e:4b:53:
         5d:a0:dc:ae:49:b9:24:b3:bf:ee:1f:83:46:38:67:61:69:1d:
         74:06:69:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUX+li3iKTbl6ythJrcS/CqN2nNtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA3MDYxNDAwMDBaFw0yNDA3MDQxNDA1MDBaMDMxMTAvBgNV
BAMTKDU1NkZDRkE2QUIwMzgxRTM1MkNCNkE4Q0VCMjgyRDYwNjA2NEFEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqgDVv9+55ab8NRYoSx7eF9YN
ysjM0f+qjRrfF5Mhi0rH1J6+4aByDLLlw35woF0laCl298+KcuNFQ8OHjv8Y8TZ/
elMmSZoQTyulLUOChCJTMYwjTwqXH6UPmIEeMDdAMKsVFS+A6NmGcIqRYuCATYTV
W+M46+a1DUmg6xSrP44vUYMwxy6jRo0qATW+ScQI0k1uxcm1k+n/Nx95MFd9zuDq
gIVnBdhY65CBsDvCbMFnrrBGM8Wr7o1NXLUumLdFvlq0WRp8ebqyKNszreyQilk0
+yEy6pKMhzJ2DPT/1bJoa7Xv5KmkgBu81hTNIXtdVd2rl7SO3/QVcKUXxtGxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVW/PpqsDgeNSy2qM6ygtYGBkrdowHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzIzODMwMzQzYTMxMzQ2MjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUvDANBgkqhkiG9w0BAQsFAAOCAQEAvqVPymir
BQJt234TAYFByauVzMXFTPTFqyqP24dCxqi5yT5nIwtCCcBn0ybJH8DMP/93ih6m
TK94aHRi4mvbuIZRjsIhtXWG2apuh40xz4M4yhfi5xX31dL4HsRrREX+3+xT//D9
W+dAUNze4RSJ/ictfezRiJIwOiekH2pK8VwHZYyVkx2/RA/NDOhnLd1HTXSHsmEP
chF5CEIxNl4NSsN1ojZj11GtMy+jo2kKKAjmpaP0rszynllMf6dZOs3KkFWzM0Q5
5BWM+ILA9MFIi9XblQILFfSkUzHLcDLnFpsLzsPYS0TJHktTXaDcrkm5JLO/7h+D
RjhnYWkddAZpWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org