Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          0YUzO/agstS0+yh6k/epuWG47O5cQcC3BNrY99UWMJ0=
Subject key identifier:   DB:A7:10:0C:5A:CF:73:1F:11:3A:0B:D9:DF:BD:FC:9F:81:B8:EB:40
Certificate issuer:       /CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
Certificate serial:       0D11F032593898BD440DC5E02F977F6DA0198545
Authority key identifier: 4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Fri 12 Apr 2024 20:00:00 +0000
ROA not before:           Fri 12 Apr 2024 19:55:00 +0000
ROA not after:            Fri 11 Apr 2025 20:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:11:f0:32:59:38:98:bd:44:0d:c5:e0:2f:97:7f:6d:a0:19:85:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
        Validity
            Not Before: Apr 12 19:55:00 2024 GMT
            Not After : Apr 11 20:00:00 2025 GMT
        Subject: CN=DBA7100C5ACF731F113A0BD9DFBDFC9F81B8EB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:12:37:a9:ff:db:a7:da:39:dd:2f:84:f0:
                    c7:f1:87:d4:ae:ee:81:bc:c3:5a:54:9a:ff:78:ef:
                    d8:c8:0d:57:fe:72:b0:40:00:0e:79:be:14:23:92:
                    a5:a0:3c:bc:93:96:dd:52:f7:94:a7:4d:d4:26:66:
                    ec:b5:e4:d1:fd:13:96:d0:33:5d:50:d6:29:40:50:
                    fc:72:59:9e:bd:97:a6:c0:2e:c2:bf:91:cf:c1:23:
                    42:aa:bc:c9:8a:89:24:6b:57:11:ac:e2:2e:e9:37:
                    83:2d:e9:c3:be:cf:d9:f8:63:88:47:30:02:50:db:
                    3c:1e:23:f4:f9:1e:03:d7:67:e6:52:d8:b9:66:58:
                    a6:60:7a:96:7c:8b:7e:a1:e4:12:ec:70:0e:33:0c:
                    f7:f8:16:1e:cd:7d:ef:4e:7a:02:c2:bd:23:dc:73:
                    a9:9e:82:13:41:94:f8:84:a6:53:6f:5e:da:46:36:
                    9b:4b:0e:b1:d2:3a:1a:94:62:ed:66:d2:e4:e9:f4:
                    1a:0c:7c:37:1b:bd:01:92:32:14:45:1a:46:50:82:
                    4c:d7:4e:ea:e4:c5:35:d7:45:4d:fd:f1:7b:5f:68:
                    17:c6:74:6e:83:43:16:11:ef:c7:45:70:44:30:b3:
                    3e:3b:3e:44:c4:fe:c6:ab:cc:1c:8a:0c:58:e8:24:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A7:10:0C:5A:CF:73:1F:11:3A:0B:D9:DF:BD:FC:9F:81:B8:EB:40
            X509v3 Authority Key Identifier:
                keyid:4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:a7:d1:e9:a4:1c:73:c6:ca:85:e7:01:89:67:ee:54:5b:
         27:8a:dd:26:bd:9a:cb:c8:73:85:cb:0d:36:50:49:62:d6:38:
         9f:cb:bd:ad:ab:5c:cc:66:b1:3d:f0:03:14:3b:81:ec:c7:21:
         0c:46:0f:8e:70:05:77:2d:7f:e8:06:b3:fe:4d:f6:43:88:d5:
         8d:37:30:c5:d9:ff:d9:df:db:dc:35:d3:4d:a9:15:9f:05:44:
         fa:e9:27:7b:62:a3:6e:f3:b9:69:fd:fe:8a:40:88:e6:e0:1a:
         b4:77:be:e8:c3:a2:5b:24:f7:8a:24:62:8b:91:15:db:51:0a:
         a6:3e:3c:64:78:db:10:a8:78:8a:60:c1:6b:39:41:f3:97:02:
         4a:7f:a3:05:1f:e5:82:d6:e6:6d:a3:71:03:53:21:87:b1:30:
         e3:c2:b4:35:d0:09:6e:f3:71:04:c8:fc:33:4b:b0:57:56:1e:
         b1:a7:9f:3f:63:c2:5d:80:08:6b:7b:0b:48:08:24:d1:d2:f0:
         ad:0d:45:52:f9:c3:7c:c2:5f:15:b9:e4:59:f8:d3:e8:01:18:
         86:c0:b0:93:ed:44:99:46:98:e0:c7:2c:ff:ee:af:90:a7:9c:
         59:72:2f:21:6e:b1:69:23:d6:29:e3:dc:58:16:a0:af:40:dd:
         7f:3a:8c:f5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDRHwMlk4mL1EDcXgL5d/baAZhUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY3QzY1OTlGODBCNjRBRkMyQTMzOTY1MTgzNEQ4RkJC
NTNDMUI4NTAeFw0yNDA0MTIxOTU1MDBaFw0yNTA0MTEyMDAwMDBaMDMxMTAvBgNV
BAMTKERCQTcxMDBDNUFDRjczMUYxMTNBMEJEOURGQkRGQzlGODFCOEVCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpxI3qf/bp9o53S+E8Mfxh9Su
7oG8w1pUmv9479jIDVf+crBAAA55vhQjkqWgPLyTlt1S95SnTdQmZuy15NH9E5bQ
M11Q1ilAUPxyWZ69l6bALsK/kc/BI0KqvMmKiSRrVxGs4i7pN4Mt6cO+z9n4Y4hH
MAJQ2zweI/T5HgPXZ+ZS2LlmWKZgepZ8i36h5BLscA4zDPf4Fh7Nfe9OegLCvSPc
c6meghNBlPiEplNvXtpGNptLDrHSOhqUYu1m0uTp9BoMfDcbvQGSMhRFGkZQgkzX
TurkxTXXRU398XtfaBfGdG6DQxYR78dFcEQwsz47PkTE/sarzByKDFjoJHD7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU26cQDFrPcx8ROgvZ3738n4G460AwHwYDVR0j
BBgwFoAUT3xlmfgLZK/CozllGDTY+7U8G4UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj
RXUvMC80RjdDNjU5OUY4MEI2NEFGQzJBMzM5NjUxODM0RDhGQkI1M0MxQjg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGN0M2NTk5RjgwQjY0QUZD
MkEzMzk2NTE4MzREOEZCQjUzQzFCODUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhZEQ0VzJBeW9ucEQ0Rk1Wb3hDRUNmdnNlZzd4REhpa2FBanNkdFhBY0V1LzAv
MzIzODMwMzQzYTMxNjYzNTM0M2E2MzMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzczMjMyMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEH1TAMA0GCSqGSIb3DQEBCwUA
A4IBAQAXK6fR6aQcc8bKhecBiWfuVFsnit0mvZrLyHOFyw02UEli1jify72tq1zM
ZrE98AMUO4HsxyEMRg+OcAV3LX/oBrP+TfZDiNWNNzDF2f/Z39vcNdNNqRWfBUT6
6Sd7YqNu87lp/f6KQIjm4Bq0d77ow6JbJPeKJGKLkRXbUQqmPjxkeNsQqHiKYMFr
OUHzlwJKf6MFH+WC1uZto3EDUyGHsTDjwrQ10Alu83EEyPwzS7BXVh6xp58/Y8Jd
gAhrewtICCTR0vCtDUVS+cN8wl8VueRZ+NPoARiGwLCT7USZRpjgxyz/7q+Qp5xZ
ci8hbrFpI9Yp49xYFqCvQN1/Ooz1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org