Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/1/323830343a383135633a3a2f33322d3335203d3e20323732343439.roa
File:                     323830343a383135633a3a2f33322d3335203d3e20323732343439.roa (raw, json)
Hash identifier:          vcaMQAkGjIepkaf80ZV68MLOZygeeUIV12Ms/8CYNxA=
Subject key identifier:   A8:00:80:20:24:2F:36:9A:D2:BD:7A:C5:A0:16:2A:E1:08:DD:71:57
Certificate issuer:       /CN=51B3DBEC4E1ECC588AAEFAE07678A511BD2004B3
Certificate serial:       4563F1BDCF6C4D7DBC8A5B37B2FDD9A5B61F4E8F
Authority key identifier: 51:B3:DB:EC:4E:1E:CC:58:8A:AE:FA:E0:76:78:A5:11:BD:20:04:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51B3DBEC4E1ECC588AAEFAE07678A511BD2004B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/1/323830343a383135633a3a2f33322d3335203d3e20323732343439.roa
Signing time:             Tue 14 Mar 2023 17:51:10 +0000
ROA not before:           Tue 14 Mar 2023 17:46:10 +0000
ROA not after:            Tue 12 Mar 2024 17:51:10 +0000
asID:                     272449
IP address blocks:        2804:815c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:63:f1:bd:cf:6c:4d:7d:bc:8a:5b:37:b2:fd:d9:a5:b6:1f:4e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51B3DBEC4E1ECC588AAEFAE07678A511BD2004B3
        Validity
            Not Before: Mar 14 17:46:10 2023 GMT
            Not After : Mar 12 17:51:10 2024 GMT
        Subject: CN=A8008020242F369AD2BD7AC5A0162AE108DD7157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:52:d6:f6:f3:89:36:6f:e8:36:c6:65:50:
                    fc:d4:2e:cf:d9:37:d4:ed:72:e0:a8:dd:69:55:d0:
                    c4:1a:70:2b:75:a4:61:92:65:5e:ee:57:c9:2f:84:
                    0b:fc:84:d0:16:31:02:8f:29:3b:8b:4a:28:fc:81:
                    d5:96:af:ac:b2:07:08:1f:ec:b0:f9:a0:da:7d:26:
                    85:d4:d8:99:2f:6e:8d:cd:99:47:15:e9:66:2a:cd:
                    c9:98:53:c7:a6:9e:d0:7a:ec:96:43:52:d4:ba:8f:
                    60:8a:f8:d3:32:5c:31:51:94:76:25:c2:4f:76:c5:
                    73:13:4d:2e:bc:89:a4:4f:e0:e4:c8:f3:8f:61:b6:
                    9b:2d:8a:21:d1:32:a1:98:70:7f:af:73:63:ce:7d:
                    ec:70:ac:ef:f5:0b:e1:62:5b:af:12:5e:9b:14:3a:
                    69:92:b6:e8:91:bb:9e:23:2d:48:25:0c:82:b3:a3:
                    7d:6b:3d:1b:56:e0:34:11:90:09:d0:3c:66:37:79:
                    61:16:d8:82:d3:f9:c1:7d:94:57:77:9f:04:cd:9d:
                    55:0d:9b:5d:03:a4:93:9b:58:8c:cc:55:fb:24:43:
                    00:44:68:d6:25:4e:be:47:40:fd:99:50:3b:1b:51:
                    d6:1d:23:c4:fe:64:5a:96:cf:39:b1:fc:36:9b:75:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:00:80:20:24:2F:36:9A:D2:BD:7A:C5:A0:16:2A:E1:08:DD:71:57
            X509v3 Authority Key Identifier:
                keyid:51:B3:DB:EC:4E:1E:CC:58:8A:AE:FA:E0:76:78:A5:11:BD:20:04:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/1/51B3DBEC4E1ECC588AAEFAE07678A511BD2004B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51B3DBEC4E1ECC588AAEFAE07678A511BD2004B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/1/323830343a383135633a3a2f33322d3335203d3e20323732343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:815c::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:29:02:b4:4e:57:c8:9f:20:c1:15:c2:35:01:48:73:25:c3:
         75:55:28:e0:4d:18:f1:f0:b3:a1:88:4c:08:76:09:71:65:1f:
         0e:6d:de:1d:4c:7c:71:b3:b5:fc:d8:b9:05:5f:5c:4b:22:11:
         10:d0:70:b2:97:29:17:06:cf:9a:0b:b0:01:56:20:c1:fd:0a:
         ed:d1:71:5b:ea:7f:33:f6:33:75:86:17:33:4c:11:4b:04:2d:
         55:6a:9f:48:a6:c5:5a:a4:57:18:ee:8e:5a:cc:1d:98:0d:64:
         ad:0e:79:1f:0b:63:6e:94:94:a6:ce:e2:5f:21:aa:86:aa:3a:
         28:67:20:a5:2b:f9:c4:ba:00:f6:fa:5c:11:28:47:3c:d3:bc:
         7f:fc:1f:51:b2:7e:24:e5:ef:5a:ec:a6:9c:57:83:2d:bd:08:
         91:f9:70:9d:5e:0c:d0:33:8a:aa:06:a9:7e:3b:60:3f:42:3f:
         ec:b3:d8:42:93:03:92:36:26:e6:86:df:10:e0:86:24:a0:c9:
         31:92:c0:3e:cc:b2:f4:42:0d:d6:91:e8:94:4f:eb:cd:09:5f:
         6e:7e:71:9b:29:a2:40:5c:aa:ca:45:a0:ab:03:ed:60:de:20:
         98:ed:92:d2:4c:3c:db:15:ba:de:c2:08:1d:77:76:34:63:9b:
         ba:5f:f9:94
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURWPxvc9sTX28ils3sv3ZpbYfTo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFCM0RCRUM0RTFFQ0M1ODhBQUVGQUUwNzY3OEE1MTFC
RDIwMDRCMzAeFw0yMzAzMTQxNzQ2MTBaFw0yNDAzMTIxNzUxMTBaMDMxMTAvBgNV
BAMTKEE4MDA4MDIwMjQyRjM2OUFEMkJEN0FDNUEwMTYyQUUxMDhERDcxNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7h1LW9vOJNm/oNsZlUPzULs/Z
N9TtcuCo3WlV0MQacCt1pGGSZV7uV8kvhAv8hNAWMQKPKTuLSij8gdWWr6yyBwgf
7LD5oNp9JoXU2Jkvbo3NmUcV6WYqzcmYU8emntB67JZDUtS6j2CK+NMyXDFRlHYl
wk92xXMTTS68iaRP4OTI849htpstiiHRMqGYcH+vc2POfexwrO/1C+FiW68SXpsU
OmmStuiRu54jLUglDIKzo31rPRtW4DQRkAnQPGY3eWEW2ILT+cF9lFd3nwTNnVUN
m10DpJObWIzMVfskQwBEaNYlTr5HQP2ZUDsbUdYdI8T+ZFqWzzmx/DabdSMRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUqACAICQvNprSvXrFoBYq4QjdcVcwHwYDVR0j
BBgwFoAUUbPb7E4ezFiKrvrgdnilEb0gBLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXI1UmdnS2s1V3lZc1VrcXk5VHhiZGFCQ3lNWjU3d3loVnh6WVRkRWhF
UFMvMS81MUIzREJFQzRFMUVDQzU4OEFBRUZBRTA3Njc4QTUxMUJEMjAwNEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxQjNEQkVDNEUxRUNDNTg4
QUFFRkFFMDc2NzhBNTExQkQyMDA0QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyNVJnZ0trNVd5WXNVa3F5OVR4YmRhQkN5TVo1N3d5aFZ4ellUZEVoRVBTLzEv
MzIzODMwMzQzYTM4MzEzNTYzM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNzMy
MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASBXDANBgkqhkiG9w0BAQsFAAOCAQEA4ykCtE5X
yJ8gwRXCNQFIcyXDdVUo4E0Y8fCzoYhMCHYJcWUfDm3eHUx8cbO1/Ni5BV9cSyIR
ENBwspcpFwbPmguwAVYgwf0K7dFxW+p/M/YzdYYXM0wRSwQtVWqfSKbFWqRXGO6O
WswdmA1krQ55HwtjbpSUps7iXyGqhqo6KGcgpSv5xLoA9vpcEShHPNO8f/wfUbJ+
JOXvWuymnFeDLb0IkflwnV4M0DOKqgapfjtgP0I/7LPYQpMDkjYm5obfEOCGJKDJ
MZLAPsyy9EIN1pHolE/rzQlfbn5xmymiQFyqykWgqwPtYN4gmO2S0kw82xW63sII
HXd2NGObul/5lA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org