Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
File:                     323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (raw, json)
Hash identifier:          amAqW2svboQgRqCR/aFs86wKHWKjJOmozQZ1rIQXxlU=
Subject key identifier:   D8:F7:97:5F:35:B7:26:10:96:89:B7:FC:9D:F1:0A:2F:C0:1F:BE:2D
Certificate issuer:       /CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
Certificate serial:       6C0112065A2886A638B7E9CFEE9538B87D347FB1
Authority key identifier: 4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
Signing time:             Fri 12 Apr 2024 20:00:00 +0000
ROA not before:           Fri 12 Apr 2024 19:55:00 +0000
ROA not after:            Fri 11 Apr 2025 20:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:fe00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:01:12:06:5a:28:86:a6:38:b7:e9:cf:ee:95:38:b8:7d:34:7f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
        Validity
            Not Before: Apr 12 19:55:00 2024 GMT
            Not After : Apr 11 20:00:00 2025 GMT
        Subject: CN=D8F7975F35B726109689B7FC9DF10A2FC01FBE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:57:49:bf:fd:90:85:79:5f:37:b7:66:6c:
                    5a:06:24:4f:bd:d4:72:55:1c:cc:40:7e:43:aa:5b:
                    19:a6:29:5f:c7:81:53:2f:c9:b6:3d:fb:46:11:fc:
                    67:c9:78:55:6b:49:b8:4e:66:16:e5:a5:04:14:2f:
                    14:7f:93:0b:c2:83:da:e2:0b:d2:27:da:19:47:f3:
                    c5:e5:66:c5:18:48:e7:87:02:3b:07:54:93:28:0c:
                    ca:4f:e8:d8:e3:e2:86:dc:a0:29:4c:2a:a6:cb:ec:
                    c0:36:c1:d4:62:95:c3:d7:31:3d:21:1c:dd:1b:06:
                    1d:4d:49:10:85:62:7a:86:36:14:f3:bd:e9:d5:c7:
                    45:e5:56:16:2d:85:7c:17:7b:84:18:30:6a:fc:85:
                    f8:43:92:32:c4:22:28:5b:1b:bd:d4:c3:cb:82:3e:
                    12:22:bb:9c:bd:9b:43:7b:3b:42:32:46:f9:37:03:
                    71:08:d9:e6:15:6f:27:44:de:28:13:01:a1:9d:31:
                    98:95:cc:20:e8:7d:4d:b4:da:16:c1:40:b5:9d:ef:
                    2e:92:11:e7:d7:8e:66:0a:3a:d9:1a:08:16:d2:67:
                    7d:7c:30:7f:e5:c7:1b:6f:e2:10:d4:f3:f6:86:3e:
                    c7:8c:62:d2:8c:e1:45:8d:76:7e:de:35:4d:b7:0a:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F7:97:5F:35:B7:26:10:96:89:B7:FC:9D:F1:0A:2F:C0:1F:BE:2D
            X509v3 Authority Key Identifier:
                keyid:4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:f1:8a:bc:0e:0f:17:19:f8:06:f1:93:b4:72:db:aa:24:
         03:85:75:fd:d4:19:21:e5:84:ef:f4:ee:35:3e:65:13:ba:95:
         55:7a:3a:db:d4:c9:bc:e4:0a:f9:42:a8:17:5a:8d:40:ce:96:
         06:da:25:a6:de:08:94:64:22:67:61:f4:21:f9:ec:65:73:6b:
         5e:18:fc:81:82:76:2e:aa:8d:45:a6:0a:ce:e2:d2:d6:e6:76:
         20:3f:52:f2:ca:5b:3a:7e:08:6e:94:36:ca:dc:bf:51:60:83:
         b3:40:99:6f:78:09:be:ff:f3:34:38:d6:0c:8b:fe:ba:96:e5:
         53:ac:f1:c8:c3:a9:17:f6:da:53:31:7a:22:36:05:a5:fe:1d:
         be:38:49:a9:7f:dd:ec:62:31:7e:1c:a1:7c:66:03:a7:ef:60:
         c2:10:e6:42:e4:80:9d:3d:ba:fb:82:6a:23:35:d0:21:63:94:
         99:2d:50:24:8e:8c:9f:c4:20:3e:20:fe:66:bb:d9:a7:42:0d:
         f0:fd:d7:47:2a:a3:bd:8d:2a:b4:21:38:83:dd:73:5d:e5:9e:
         1a:3a:90:41:ca:08:8c:ee:03:69:1b:c4:b5:73:b9:03:4d:31:
         25:d7:24:67:9b:06:48:5b:56:49:72:de:64:ed:6f:c5:62:b2:
         83:54:73:04
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbAESBloohqY4t+nP7pU4uH00f7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY3QzY1OTlGODBCNjRBRkMyQTMzOTY1MTgzNEQ4RkJC
NTNDMUI4NTAeFw0yNDA0MTIxOTU1MDBaFw0yNTA0MTEyMDAwMDBaMDMxMTAvBgNV
BAMTKEQ4Rjc5NzVGMzVCNzI2MTA5Njg5QjdGQzlERjEwQTJGQzAxRkJFMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf/ldJv/2QhXlfN7dmbFoGJE+9
1HJVHMxAfkOqWxmmKV/HgVMvybY9+0YR/GfJeFVrSbhOZhblpQQULxR/kwvCg9ri
C9In2hlH88XlZsUYSOeHAjsHVJMoDMpP6Njj4obcoClMKqbL7MA2wdRilcPXMT0h
HN0bBh1NSRCFYnqGNhTzvenVx0XlVhYthXwXe4QYMGr8hfhDkjLEIihbG73Uw8uC
PhIiu5y9m0N7O0IyRvk3A3EI2eYVbydE3igTAaGdMZiVzCDofU202hbBQLWd7y6S
EefXjmYKOtkaCBbSZ318MH/lxxtv4hDU8/aGPseMYtKM4UWNdn7eNU23CldbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU2PeXXzW3JhCWibf8nfEKL8Afvi0wHwYDVR0j
BBgwFoAUT3xlmfgLZK/CozllGDTY+7U8G4UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj
RXUvMC80RjdDNjU5OUY4MEI2NEFGQzJBMzM5NjUxODM0RDhGQkI1M0MxQjg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGN0M2NTk5RjgwQjY0QUZD
MkEzMzk2NTE4MzREOEZCQjUzQzFCODUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhZEQ0VzJBeW9ucEQ0Rk1Wb3hDRUNmdnNlZzd4REhpa2FBanNkdFhBY0V1LzAv
MzIzODMwMzQzYTMxNjYzNTM0M2E2NjY1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMjMyMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEH1T+MA0GCSqGSIb3DQEBCwUA
A4IBAQAS1fGKvA4PFxn4BvGTtHLbqiQDhXX91Bkh5YTv9O41PmUTupVVejrb1Mm8
5Ar5QqgXWo1AzpYG2iWm3giUZCJnYfQh+exlc2teGPyBgnYuqo1FpgrO4tLW5nYg
P1Lyyls6fghulDbK3L9RYIOzQJlveAm+//M0ONYMi/66luVTrPHIw6kX9tpTMXoi
NgWl/h2+OEmpf93sYjF+HKF8ZgOn72DCEOZC5ICdPbr7gmojNdAhY5SZLVAkjoyf
xCA+IP5mu9mnQg3w/ddHKqO9jSq0ITiD3XNd5Z4aOpBBygiM7gNpG8S1c7kDTTEl
1yRnmwZIW1ZJct5k7W/FYrKDVHME
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org