Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6665343a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a6665343a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          fKen41lFStvxx55CJ5ZOd6hUnTXlAFKuoyc0ZAHRNLA=
Subject key identifier:   BC:3A:91:67:54:2B:41:2A:1B:2E:B1:73:04:97:83:97:0F:F6:19:AB
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3A786E69FB335AFBDAF656BE92C48B835341F5CA
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6665343a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:18 +0000
ROA not before:           Thu 28 Apr 2022 13:24:18 +0000
ROA not after:            Thu 27 Apr 2023 13:29:18 +0000
asID:                     28343
IP address blocks:        2804:fe4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:78:6e:69:fb:33:5a:fb:da:f6:56:be:92:c4:8b:83:53:41:f5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:18 2022 GMT
            Not After : Apr 27 13:29:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:7d:c7:b4:94:c8:82:87:76:a9:78:3f:37:
                    df:ba:a3:50:05:3a:17:63:23:69:52:be:71:7a:8a:
                    70:d7:d6:a0:1d:14:e8:e5:7e:0c:a3:56:36:51:91:
                    1f:99:97:4a:b3:a9:90:a3:49:4f:f7:a6:df:c4:3b:
                    dd:80:ae:28:cc:35:73:87:c3:68:ec:e3:6a:4c:0a:
                    e8:d7:44:bf:d7:f2:68:c7:84:9b:0b:7b:65:8b:0e:
                    5c:7e:ec:94:98:ac:b7:bf:53:02:9a:f1:d0:62:1e:
                    37:96:d0:6f:55:79:80:5d:92:7b:97:46:d4:d5:4f:
                    91:3d:26:c2:a0:97:43:13:b1:ef:d8:fc:9a:6f:ac:
                    a4:c9:40:13:73:cb:bb:e2:23:6b:02:45:fc:65:53:
                    da:27:fe:5b:ba:64:df:56:96:b4:9a:01:01:36:fd:
                    5d:4a:fa:b9:a0:9e:41:c3:28:a1:77:57:a8:a5:af:
                    77:99:b1:4b:62:41:18:1e:b1:f4:d7:1e:46:58:eb:
                    0b:8f:46:a2:f4:e0:c8:13:4b:ec:2b:df:ad:97:58:
                    f2:b4:dc:73:ac:1c:07:de:f3:56:37:85:ff:03:c6:
                    df:6b:fb:93:eb:cf:34:d6:37:3c:89:2f:19:4f:9c:
                    43:49:e5:98:84:fe:81:5b:be:f9:bf:58:64:4a:e6:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3A:91:67:54:2B:41:2A:1B:2E:B1:73:04:97:83:97:0F:F6:19:AB
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6665343a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe4::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c6:64:dc:02:13:5b:1a:dd:15:82:2a:48:19:23:41:e5:58:
         13:48:3f:e4:0e:dd:97:4b:4a:bb:54:93:12:dd:5c:88:9b:08:
         44:6b:6a:e0:a4:fb:9a:39:d0:f8:84:b9:a4:9c:a5:4c:91:39:
         d2:8e:b0:dc:20:b2:ee:0e:f7:77:07:ea:d9:0c:c8:fc:a2:c3:
         6d:ee:d4:da:35:88:25:f4:73:a3:2c:88:ef:d9:2d:b9:bf:57:
         ee:bf:62:b0:fd:38:6a:96:63:ab:60:90:91:db:3c:13:ea:7f:
         25:a7:62:dc:58:12:97:80:3c:1d:5e:90:51:7b:85:4f:20:7f:
         13:57:83:db:67:cf:f1:e7:3a:66:6a:1a:c7:9e:15:14:16:14:
         52:e5:78:65:5b:c7:9b:2a:c3:30:c0:db:06:c9:f7:d3:3e:18:
         7e:27:05:5e:84:d2:92:1a:16:9e:04:79:92:b8:26:f6:8d:c0:
         72:89:c0:6f:b0:49:00:46:78:33:79:c9:0f:3a:90:2f:04:90:
         17:cf:21:c1:50:72:86:5b:b0:f5:fa:61:7e:c3:99:96:b0:6e:
         3b:8c:4f:44:10:b7:9a:f6:a0:9f:78:14:83:be:1a:4b:14:8f:
         41:d8:b6:19:26:de:58:28:68:2b:96:60:8f:7a:c2:68:6d:a8:
         11:82:8e:3e
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUOnhuafszWvva9la+ksSLg1NB9cowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QjRGQzQwMEY4NjQ4MEM4Nzk3QkJCQzJEMDk3NDVG
MjBGNzE4ODAeFw0yMjA0MjgxMzI0MThaFw0yMzA0MjcxMzI5MThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdBNzdEQzdCNDk0Qzg4Mjg3
NzZBOTc4M0YzN0RGQkFBMzUwMDUzQTE3NjMyMzY5NTJCRTcxN0E4QTcwRDdENkEw
MUQxNEU4RTU3RTBDQTM1NjM2NTE5MTFGOTk5NzRBQjNBOTkwQTM0OTRGRjdBNkRG
QzQzQkREODBBRTI4Q0MzNTczODdDMzY4RUNFMzZBNEMwQUU4RDc0NEJGRDdGMjY4
Qzc4NDlCMEI3QjY1OEIwRTVDN0VFQzk0OThBQ0I3QkY1MzAyOUFGMUQwNjIxRTM3
OTZEMDZGNTU3OTgwNUQ5MjdCOTc0NkQ0RDU0RjkxM0QyNkMyQTA5NzQzMTNCMUVG
RDhGQzlBNkZBQ0E0Qzk0MDEzNzNDQkJCRTIyMzZCMDI0NUZDNjU1M0RBMjdGRTVC
QkE2NERGNTY5NkI0OUEwMTAxMzZGRDVENEFGQUI5QTA5RTQxQzMyOEExNzc1N0E4
QTVBRjc3OTlCMTRCNjI0MTE4MUVCMUY0RDcxRTQ2NThFQjBCOEY0NkEyRjRFMEM4
MTM0QkVDMkJERkFEOTc1OEYyQjREQzczQUMxQzA3REVGMzU2Mzc4NUZGMDNDNkRG
NkJGQjkzRUJDRjM0RDYzNzNDODkyRjE5NEY5QzQzNDlFNTk4ODRGRTgxNUJCRUY5
QkY1ODY0NEFFNjQ4QUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt6d9x7SUyIKHdql4PzffuqNQBToXYyNpUr5xeopw19agHRTo5X4M
o1Y2UZEfmZdKs6mQo0lP96bfxDvdgK4ozDVzh8No7ONqTAro10S/1/Jox4SbC3tl
iw5cfuyUmKy3v1MCmvHQYh43ltBvVXmAXZJ7l0bU1U+RPSbCoJdDE7Hv2Pyab6yk
yUATc8u74iNrAkX8ZVPaJ/5bumTfVpa0mgEBNv1dSvq5oJ5Bwyihd1eopa93mbFL
YkEYHrH01x5GWOsLj0ai9ODIE0vsK9+tl1jytNxzrBwH3vNWN4X/A8bfa/uT6880
1jc8iS8ZT5xDSeWYhP6BW775v1hkSuZIrwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FLw6kWdUK0EqGy6xcwSXg5cP9hmrMB8GA1UdIwQYMBaAFBxbT8QA+GSAyHl7u8LQ
l0XyD3GIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzAvMUM1QjRGQzQwMEY4NjQ4
MEM4Nzk3QkJCQzJEMDk3NDVGMjBGNzE4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xQzVCNEZDNDAwRjg2NDgwQzg3OTdCQkJDMkQwOTc0NUYyMEY3
MTg4LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8wLzMyMzgzMDM0M2E2NjY1MzQzYTNh
MmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAQP5DAN
BgkqhkiG9w0BAQsFAAOCAQEAAsZk3AITWxrdFYIqSBkjQeVYE0g/5A7dl0tKu1ST
Et1ciJsIRGtq4KT7mjnQ+IS5pJylTJE50o6w3CCy7g73dwfq2QzI/KLDbe7U2jWI
JfRzoyyI79ktub9X7r9isP04apZjq2CQkds8E+p/Jadi3FgSl4A8HV6QUXuFTyB/
E1eD22fP8ec6Zmoax54VFBYUUuV4ZVvHmyrDMMDbBsn30z4YficFXoTSkhoWngR5
krgm9o3AconAb7BJAEZ4M3nJDzqQLwSQF88hwVByhluw9fphfsOZlrBuO4xPRBC3
mvagn3gUg74aSxSPQdi2GSbeWChoK5Zgj3rCaG2oEYKOPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org