Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f34382d3438203d3e203533313138.roa
File:                     323830343a3266343a3a2f34382d3438203d3e203533313138.roa (raw, json)
Hash identifier:          ex/zL3UeLYWq1NBn2JjMncn3ANeHSaPwZGg/6Kjbv7o=
Subject key identifier:   D7:40:82:D5:34:A1:F7:BE:3D:15:72:71:6D:1A:D6:F1:C9:B7:B9:DD
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       3A6F1D2A63BB5DE2CE94B745E1D28F00B37792A4
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f34382d3438203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 14:24:08 +0000
ROA not before:           Thu 27 Jul 2023 14:19:08 +0000
ROA not after:            Thu 25 Jul 2024 14:24:08 +0000
asID:                     53118
IP address blocks:        2804:2f4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6f:1d:2a:63:bb:5d:e2:ce:94:b7:45:e1:d2:8f:00:b3:77:92:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 14:19:08 2023 GMT
            Not After : Jul 25 14:24:08 2024 GMT
        Subject: CN=D74082D534A1F7BE3D1572716D1AD6F1C9B7B9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:eb:fd:0f:50:53:c0:65:99:87:40:3a:16:db:
                    0d:cb:c0:bb:67:34:31:31:d8:28:0f:0a:5a:a7:83:
                    2c:2d:63:e0:c9:4a:44:4a:a8:fe:48:eb:6f:b4:54:
                    c4:ed:65:fd:21:99:07:8e:94:f2:11:27:22:58:4b:
                    69:81:1c:4d:26:0c:d8:3f:64:2f:5f:23:31:5e:19:
                    fd:72:54:24:00:e9:8d:9c:ca:17:ce:d1:ba:9c:75:
                    95:a5:34:cc:e3:29:21:80:84:65:31:43:72:48:dc:
                    b2:52:81:0b:9a:e3:d4:3c:6a:aa:ec:d5:5b:6f:64:
                    83:b6:3b:32:f8:c8:be:30:27:56:b1:2b:5f:4b:e9:
                    91:ff:9a:fc:f8:22:48:a6:f1:86:cd:31:24:6b:18:
                    a9:7b:d9:b5:62:58:a5:62:07:b8:75:8f:34:81:de:
                    35:00:8f:c9:2c:f9:fb:32:a1:a4:c6:c7:5f:ec:11:
                    3a:52:6b:33:a7:ad:9d:9b:9c:ec:b5:5a:89:33:da:
                    ec:63:48:63:72:46:b0:9e:9f:c2:cb:fc:05:25:bc:
                    dd:d4:d4:30:2a:7b:c4:74:ab:7f:46:a1:0c:81:4f:
                    9a:eb:be:21:13:f4:d0:d3:e2:70:c3:fb:3d:61:9e:
                    98:5b:c5:d7:34:23:3e:ee:c0:81:2a:ee:92:08:d4:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:40:82:D5:34:A1:F7:BE:3D:15:72:71:6D:1A:D6:F1:C9:B7:B9:DD
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f34382d3438203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:29:04:a6:dc:ff:bf:91:2b:98:3f:74:bf:ac:3c:88:2f:
         f0:86:e2:e1:3f:88:70:9d:2c:39:57:a2:19:19:c3:fc:1d:61:
         f8:23:bb:09:e3:54:52:90:96:88:4e:ad:19:94:2b:98:fb:80:
         0c:1e:f6:18:3f:d5:b6:bc:53:2b:3c:2e:ea:f7:46:c2:54:7d:
         e3:e5:b5:a8:85:01:15:fd:94:df:18:15:3d:43:8e:55:0d:7f:
         9f:12:b9:d2:ae:2c:b4:53:64:f3:b2:f5:14:63:23:4c:ab:08:
         5b:1f:37:d3:61:ad:a8:31:d7:6b:c6:9e:af:f1:b0:96:85:b3:
         b3:88:a0:b2:d0:82:d9:80:0a:a6:ab:bc:b2:97:1f:5a:ff:a3:
         bf:93:31:28:26:22:2c:6a:fd:78:60:0c:e9:42:02:d9:3d:04:
         ac:b4:bf:c0:8c:b3:57:2d:44:e3:71:9e:03:bb:15:f5:63:b9:
         5b:2f:77:37:10:a2:3f:5a:f9:e5:02:07:5d:15:fe:ab:75:e1:
         31:6e:da:d0:ac:9b:f5:3f:53:66:85:13:83:2f:e9:72:84:dd:
         9a:4c:92:ca:a1:4d:c5:05:ff:16:63:d3:bf:ea:56:49:33:bc:
         b3:6d:30:14:7a:54:a6:ba:21:4b:fc:06:63:b3:7f:9b:66:9c:
         5d:b5:eb:20
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUOm8dKmO7XeLOlLdF4dKPALN3kqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVFRDFEQUMxNjZGNzFEQzQ2Rjk3QzYxNUU5Mjg3RDdE
NkY5RUE5MTAeFw0yMzA3MjcxNDE5MDhaFw0yNDA3MjUxNDI0MDhaMDMxMTAvBgNV
BAMTKEQ3NDA4MkQ1MzRBMUY3QkUzRDE1NzI3MTZEMUFENkYxQzlCN0I5REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt6/0PUFPAZZmHQDoW2w3LwLtn
NDEx2CgPClqngywtY+DJSkRKqP5I62+0VMTtZf0hmQeOlPIRJyJYS2mBHE0mDNg/
ZC9fIzFeGf1yVCQA6Y2cyhfO0bqcdZWlNMzjKSGAhGUxQ3JI3LJSgQua49Q8aqrs
1VtvZIO2OzL4yL4wJ1axK19L6ZH/mvz4Ikim8YbNMSRrGKl72bViWKViB7h1jzSB
3jUAj8ks+fsyoaTGx1/sETpSazOnrZ2bnOy1Wokz2uxjSGNyRrCen8LL/AUlvN3U
1DAqe8R0q39GoQyBT5rrviET9NDT4nDD+z1hnphbxdc0Iz7uwIEq7pII1LzlAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU10CC1TSh9749FXJxbRrW8cm3ud0wHwYDVR0j
BBgwFoAUle0drBZvcdxG+XxhXpKH19b56pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ
Y2ovMC85NUVEMURBQzE2NkY3MURDNDZGOTdDNjE1RTkyODdEN0Q2RjlFQTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1RUQxREFDMTY2RjcxREM0
NkY5N0M2MTVFOTI4N0Q3RDZGOUVBOTEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FURzFzTDlyRFg2aGpYUjM3YXhzWG5TaHJFUWh1alpnVndCU0phaWFKUGNqLzAv
MzIzODMwMzQzYTMyNjYzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzMzMTMx
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAoBAL0AAAwDQYJKoZIhvcNAQELBQADggEBADO6KQSm3P+/
kSuYP3S/rDyIL/CG4uE/iHCdLDlXohkZw/wdYfgjuwnjVFKQlohOrRmUK5j7gAwe
9hg/1ba8Uys8Lur3RsJUfePltaiFARX9lN8YFT1DjlUNf58SudKuLLRTZPOy9RRj
I0yrCFsfN9Nhragx12vGnq/xsJaFs7OIoLLQgtmACqarvLKXH1r/o7+TMSgmIixq
/XhgDOlCAtk9BKy0v8CMs1ctRONxngO7FfVjuVsvdzcQoj9a+eUCB10V/qt14TFu
2tCsm/U/U2aFE4Mv6XKE3ZpMksqhTcUF/xZj07/qVkkzvLNtMBR6VKa6IUv8BmOz
f5tmnF216yA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org