Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/323830343a353564303a3a2f33322d3332203d3e20323637393538.roa
File:                     323830343a353564303a3a2f33322d3332203d3e20323637393538.roa (raw, json)
Hash identifier:          fMly4uVb7ClNEZHPft5XUbYA5ig696Ou6bKcWaaNxYk=
Subject key identifier:   21:C9:28:A7:86:F3:C3:F9:E2:C6:4A:0D:5D:50:61:CD:C8:47:65:6A
Certificate issuer:       /CN=86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A
Certificate serial:       2228BE610AFAB9EDD14505FAAA24AD9C29BB6F75
Authority key identifier: 86:B2:2A:1A:16:17:DF:F7:DC:2C:61:D6:B4:83:C5:C3:E8:C9:99:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/323830343a353564303a3a2f33322d3332203d3e20323637393538.roa
Signing time:             Thu 14 Jul 2022 12:13:18 +0000
ROA not before:           Thu 14 Jul 2022 12:08:18 +0000
ROA not after:            Thu 13 Jul 2023 12:13:18 +0000
asID:                     267958
IP address blocks:        2804:55d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:28:be:61:0a:fa:b9:ed:d1:45:05:fa:aa:24:ad:9c:29:bb:6f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A
        Validity
            Not Before: Jul 14 12:08:18 2022 GMT
            Not After : Jul 13 12:13:18 2023 GMT
        Subject: CN=21C928A786F3C3F9E2C64A0D5D5061CDC847656A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:31:47:a7:7a:42:84:e6:75:50:fb:82:0d:
                    49:0d:d5:45:b6:8d:94:99:d2:44:8d:61:ac:2c:ff:
                    1d:d9:84:43:20:79:cf:ea:7b:e3:55:fc:2c:77:6d:
                    e6:92:d5:bc:80:b0:13:4f:5f:db:5e:a4:4e:03:c4:
                    86:87:d2:31:dd:55:c6:21:22:88:74:29:a2:00:ff:
                    99:c9:01:b9:ae:35:c1:12:37:7b:f3:63:0c:db:23:
                    56:a7:b8:65:89:d4:29:3b:6e:a1:9f:66:4b:d8:0b:
                    a0:23:e0:08:52:53:27:77:c1:15:98:f3:8c:6b:7a:
                    26:24:8a:b5:b7:a2:da:c7:bb:47:0d:9e:76:93:7f:
                    94:a6:1a:58:56:4f:46:a2:fa:ed:38:07:01:2f:53:
                    83:cd:fa:1e:c4:f6:9f:7d:30:25:f1:ca:97:7e:af:
                    f2:90:5a:97:37:f1:79:e8:bf:e8:e9:bd:f2:1c:06:
                    7a:cf:25:36:80:c2:ef:fa:3d:1b:f5:60:5c:66:35:
                    9c:78:ce:7e:20:05:6d:28:ad:f0:4e:5d:cd:33:fd:
                    ce:c0:81:26:54:ea:77:43:0e:e7:80:3d:af:eb:48:
                    bd:25:a8:23:02:80:83:25:6a:cb:7a:b5:0a:e1:79:
                    18:16:ef:02:65:e3:d6:92:3d:f5:0c:1d:81:44:07:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:28:A7:86:F3:C3:F9:E2:C6:4A:0D:5D:50:61:CD:C8:47:65:6A
            X509v3 Authority Key Identifier:
                keyid:86:B2:2A:1A:16:17:DF:F7:DC:2C:61:D6:B4:83:C5:C3:E8:C9:99:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/323830343a353564303a3a2f33322d3332203d3e20323637393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:98:93:0e:8d:cd:8a:a4:b7:6e:4d:6a:cd:b8:3c:2e:0d:
         a1:00:10:9e:02:26:d8:3c:db:a0:7c:ef:17:96:97:df:c9:8b:
         ec:8b:37:1a:03:6b:77:7d:ad:1f:3c:f8:c8:34:31:55:5d:af:
         d6:97:9b:f4:ce:c5:64:d8:08:62:5e:0e:ab:83:06:78:5f:99:
         e6:50:93:95:c7:f4:66:6a:22:41:66:5d:b5:a8:c7:a3:f9:20:
         2c:a3:f7:94:78:02:e5:87:bd:7a:d4:4a:21:6c:29:74:18:25:
         c3:61:75:17:ea:3a:bc:a1:10:ee:6b:33:2c:9a:8f:6a:cd:a6:
         2f:b0:f3:55:f1:ea:7a:f9:b0:a0:78:c8:e5:0b:e9:ac:11:f6:
         3e:ce:c3:98:5f:0c:18:9e:46:7c:47:61:44:7c:b1:0c:43:fe:
         27:45:a6:2a:cf:87:39:c0:46:95:61:fd:cd:d1:cf:be:e0:84:
         ff:32:c2:e6:02:52:01:33:6a:a4:cc:e2:61:7e:a0:36:ec:07:
         92:7a:e8:4e:56:48:a5:ce:c0:fe:ea:95:b8:21:6a:2d:79:56:
         84:60:ed:e0:1a:4f:9b:a0:06:0c:4e:cb:c1:c3:46:08:e6:30:
         00:71:2c:dd:03:00:47:91:31:7d:6a:e1:9f:05:cb:82:b6:67:
         82:bd:6e:5b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIii+YQr6ue3RRQX6qiStnCm7b3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCMjJBMUExNjE3REZGN0RDMkM2MUQ2QjQ4M0M1QzNF
OEM5OTk1QTAeFw0yMjA3MTQxMjA4MThaFw0yMzA3MTMxMjEzMThaMDMxMTAvBgNV
BAMTKDIxQzkyOEE3ODZGM0MzRjlFMkM2NEEwRDVENTA2MUNEQzg0NzY1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoTFHp3pChOZ1UPuCDUkN1UW2
jZSZ0kSNYaws/x3ZhEMgec/qe+NV/Cx3beaS1byAsBNPX9tepE4DxIaH0jHdVcYh
Ioh0KaIA/5nJAbmuNcESN3vzYwzbI1anuGWJ1Ck7bqGfZkvYC6Aj4AhSUyd3wRWY
84xreiYkirW3otrHu0cNnnaTf5SmGlhWT0ai+u04BwEvU4PN+h7E9p99MCXxypd+
r/KQWpc38Xnov+jpvfIcBnrPJTaAwu/6PRv1YFxmNZx4zn4gBW0orfBOXc0z/c7A
gSZU6ndDDueAPa/rSL0lqCMCgIMlast6tQrheRgW7wJl49aSPfUMHYFEB9qXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIckop4bzw/nixkoNXVBhzchHZWowHwYDVR0j
BBgwFoAUhrIqGhYX3/fcLGHWtIPFw+jJmVowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTREQWcyZ0ZQN1U1Y2dFWHBmSlVhc3lkVDd0bVJzS2JGV3p3Y1ZFV01a
cTEvMC84NkIyMkExQTE2MTdERkY3REMyQzYxRDZCNDgzQzVDM0U4Qzk5OTVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg2QjIyQTFBMTYxN0RGRjdE
QzJDNjFENkI0ODNDNUMzRThDOTk5NUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk0REFnMmdGUDdVNWNnRVhwZkpVYXN5ZFQ3dG1Sc0tiRld6d2NWRVdNWnExLzAv
MzIzODMwMzQzYTM1MzU2NDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARV0DANBgkqhkiG9w0BAQsFAAOCAQEActSYkw6N
zYqkt25Nas24PC4NoQAQngIm2DzboHzvF5aX38mL7Is3GgNrd32tHzz4yDQxVV2v
1peb9M7FZNgIYl4Oq4MGeF+Z5lCTlcf0ZmoiQWZdtajHo/kgLKP3lHgC5Ye9etRK
IWwpdBglw2F1F+o6vKEQ7mszLJqPas2mL7DzVfHqevmwoHjI5QvprBH2Ps7DmF8M
GJ5GfEdhRHyxDEP+J0WmKs+HOcBGlWH9zdHPvuCE/zLC5gJSATNqpMziYX6gNuwH
knroTlZIpc7A/uqVuCFqLXlWhGDt4BpPm6AGDE7LwcNGCOYwAHEs3QMAR5ExfWrh
nwXLgrZngr1uWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org