Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          BXDvMq7HKoQbTwD514hAV0pwKbmEFBMOpLOON3PzXEc=
Subject key identifier:   48:08:8C:06:B3:85:4D:52:AE:43:01:EE:D6:3B:7A:E9:03:0C:EC:79
Certificate issuer:       /CN=A537C256EA0CE31BF05A91887303244145ACE8AD
Certificate serial:       321255678E4E4B043221B5506B0FA3DA02580FD7
Authority key identifier: A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Sat 27 Apr 2024 14:57:46 +0000
ROA not before:           Sat 27 Apr 2024 14:52:46 +0000
ROA not after:            Sat 26 Apr 2025 14:57:46 +0000
asID:                     265300
IP address blocks:        2804:2dbc:a400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:12:55:67:8e:4e:4b:04:32:21:b5:50:6b:0f:a3:da:02:58:0f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537C256EA0CE31BF05A91887303244145ACE8AD
        Validity
            Not Before: Apr 27 14:52:46 2024 GMT
            Not After : Apr 26 14:57:46 2025 GMT
        Subject: CN=48088C06B3854D52AE4301EED63B7AE9030CEC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:75:b9:a2:26:d6:94:1b:28:76:6f:fb:cc:
                    99:92:da:6f:6f:7c:d8:b8:69:ed:56:cd:1e:ba:a0:
                    08:3f:ed:c2:5f:b9:db:b0:06:48:87:db:50:94:6b:
                    c0:da:71:6b:ca:c9:b4:f6:0c:9c:08:31:3a:90:84:
                    e0:0c:68:89:75:fb:86:53:35:db:b7:b8:ad:ae:f4:
                    08:29:f6:7f:81:c6:0f:0a:d7:7f:0b:aa:8b:b4:47:
                    ab:0b:d6:8c:51:98:3a:9e:db:d6:a6:88:68:1a:85:
                    ee:38:28:6d:e5:ba:43:a6:6d:09:dd:36:a6:f9:12:
                    ef:f3:9a:e7:87:e5:aa:c0:cf:c0:3c:e3:38:6f:20:
                    17:83:54:8c:66:0c:da:59:d2:6d:cb:4d:fd:56:4e:
                    e4:19:00:66:0a:cf:7a:84:41:fc:76:1a:78:cb:bb:
                    6e:d5:ac:5d:20:66:c8:7f:62:d7:16:37:1b:3d:2c:
                    e3:c2:83:b5:0e:4f:7a:2a:af:11:a4:5c:ac:01:e7:
                    34:eb:8a:7b:8d:96:7f:38:2c:fa:ef:1f:94:0f:e0:
                    00:b1:f8:7c:56:9b:83:d6:52:e6:d0:bd:85:f2:a0:
                    c8:85:8d:92:e4:8e:04:b6:e0:c0:ce:0d:e9:ff:a8:
                    46:2f:f6:e9:b8:72:d6:95:f2:93:9e:96:ba:cb:73:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:08:8C:06:B3:85:4D:52:AE:43:01:EE:D6:3B:7A:E9:03:0C:EC:79
            X509v3 Authority Key Identifier:
                keyid:A5:37:C2:56:EA:0C:E3:1B:F0:5A:91:88:73:03:24:41:45:AC:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/A537C256EA0CE31BF05A91887303244145ACE8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A537C256EA0CE31BF05A91887303244145ACE8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a613430303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         06:b4:45:85:f2:21:3a:55:69:98:44:43:3b:91:87:74:74:7b:
         37:7e:22:d5:a2:d3:23:0c:ac:63:dd:5b:29:31:c9:ef:6d:9c:
         cb:52:5d:1e:40:6b:ba:55:01:7a:c4:ce:f5:79:d0:c3:79:0a:
         1e:0c:88:3a:51:1d:b4:4c:f9:14:ac:01:15:ca:06:f1:92:34:
         69:9a:46:4f:1f:c0:7c:42:ae:7e:ec:ef:66:33:72:23:6d:14:
         43:2e:36:ab:da:d9:8f:95:01:35:e1:fa:e6:d3:71:59:17:04:
         f4:a3:9b:6e:c2:d6:90:1f:67:6a:73:a4:d9:c8:24:68:6e:a2:
         30:0e:32:93:02:fb:c2:5d:be:0e:a1:85:ef:56:3c:88:2b:59:
         fe:a7:d5:ba:0b:82:1f:59:60:e6:43:6a:85:b5:8a:6d:9c:19:
         3f:8a:75:7a:4e:be:1f:dd:8c:0e:0b:e3:e6:1d:c9:6c:61:c9:
         6f:81:10:c9:a0:a9:c8:f3:9b:e0:84:86:81:18:ae:17:d6:00:
         1a:4d:cd:02:87:63:e7:14:a5:cb:06:77:47:2e:82:3e:f7:a8:
         ee:dc:d5:0d:cd:e5:e6:88:63:fd:f1:8f:6f:73:0a:fc:ea:45:
         40:6c:fe:a6:68:b1:4d:bd:5a:99:82:84:30:52:e8:27:c5:2e:
         0b:05:6f:1c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMhJVZ45OSwQyIbVQaw+j2gJYD9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUzN0MyNTZFQTBDRTMxQkYwNUE5MTg4NzMwMzI0NDE0
NUFDRThBRDAeFw0yNDA0MjcxNDUyNDZaFw0yNTA0MjYxNDU3NDZaMDMxMTAvBgNV
BAMTKDQ4MDg4QzA2QjM4NTRENTJBRTQzMDFFRUQ2M0I3QUU5MDMwQ0VDNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9nW5oibWlBsodm/7zJmS2m9v
fNi4ae1WzR66oAg/7cJfuduwBkiH21CUa8DacWvKybT2DJwIMTqQhOAMaIl1+4ZT
Ndu3uK2u9Agp9n+Bxg8K138Lqou0R6sL1oxRmDqe29amiGgahe44KG3lukOmbQnd
Nqb5Eu/zmueH5arAz8A84zhvIBeDVIxmDNpZ0m3LTf1WTuQZAGYKz3qEQfx2GnjL
u27VrF0gZsh/YtcWNxs9LOPCg7UOT3oqrxGkXKwB5zTrinuNln84LPrvH5QP4ACx
+HxWm4PWUubQvYXyoMiFjZLkjgS24MDODen/qEYv9um4ctaV8pOelrrLcyGTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSAiMBrOFTVKuQwHu1jt66QMM7HkwHwYDVR0j
BBgwFoAUpTfCVuoM4xvwWpGIcwMkQUWs6K0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMS9BNTM3QzI1NkVBMENFMzFCRjA1QTkxODg3MzAzMjQ0MTQ1QUNFOEFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MzdDMjU2RUEwQ0UzMUJG
MDVBOTE4ODczMDMyNDQxNDVBQ0U4QUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzEv
MzIzODMwMzQzYTMyNjQ2MjYzM2E2MTM0MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzNTMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigELbykMA0GCSqGSIb3DQEBCwUA
A4IBAQAGtEWF8iE6VWmYREM7kYd0dHs3fiLVotMjDKxj3VspMcnvbZzLUl0eQGu6
VQF6xM71edDDeQoeDIg6UR20TPkUrAEVygbxkjRpmkZPH8B8Qq5+7O9mM3IjbRRD
Ljar2tmPlQE14frm03FZFwT0o5tuwtaQH2dqc6TZyCRobqIwDjKTAvvCXb4OoYXv
VjyIK1n+p9W6C4IfWWDmQ2qFtYptnBk/inV6Tr4f3YwOC+PmHclsYclvgRDJoKnI
85vghIaBGK4X1gAaTc0Ch2PnFKXLBndHLoI+96ju3NUNzeXmiGP98Y9vcwr86kVA
bP6maLFNvVqZgoQwUugnxS4LBW8c
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org