Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a3a2f33322d3332203d3e20323730343036.roa
File:                     323830343a366238383a3a2f33322d3332203d3e20323730343036.roa (raw, json)
Hash identifier:          2ong1G66joDRS2H8ZWGTtKkdYVpGq1ngPRv9tMS2Q+c=
Subject key identifier:   3D:B3:F2:89:4C:39:FE:9D:AD:E9:C4:03:8C:6A:D1:2B:E9:95:50:E0
Certificate issuer:       /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial:       05F969C05A4ECD44820B78C86E8192F49D46EDD1
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a3a2f33322d3332203d3e20323730343036.roa
Signing time:             Wed 03 Apr 2024 20:33:50 +0000
ROA not before:           Wed 03 Apr 2024 20:28:50 +0000
ROA not after:            Wed 02 Apr 2025 20:33:50 +0000
asID:                     270406
IP address blocks:        2804:6b88::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f9:69:c0:5a:4e:cd:44:82:0b:78:c8:6e:81:92:f4:9d:46:ed:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Validity
            Not Before: Apr  3 20:28:50 2024 GMT
            Not After : Apr  2 20:33:50 2025 GMT
        Subject: CN=3DB3F2894C39FE9DADE9C4038C6AD12BE99550E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:8a:cf:61:b0:32:0c:28:81:01:6e:d4:12:
                    b2:8d:fa:f0:3c:42:67:f6:29:7f:1d:98:68:43:96:
                    83:be:7b:b7:4e:51:c4:05:a9:a4:cf:28:82:1f:c2:
                    cf:14:e4:03:a4:a4:cc:a9:b2:fd:6d:4e:eb:84:e6:
                    07:7c:7e:d4:2c:75:2b:10:01:bf:6e:a4:23:27:63:
                    b9:b0:cd:12:70:9c:01:bc:ed:92:aa:2f:bd:d0:0e:
                    de:ad:22:db:2b:0a:02:16:0a:7a:b8:b9:c1:1c:99:
                    c6:45:43:b9:e1:ec:d8:54:46:cb:09:37:7c:3b:f3:
                    ce:9d:1f:2d:cf:30:e0:c6:ae:81:67:69:6e:ad:8a:
                    9e:91:7e:f5:5c:e9:7c:a0:ee:e3:f5:50:31:0b:1f:
                    4f:29:58:97:61:18:26:63:ec:5b:17:97:f8:e4:d8:
                    7f:2f:10:97:b5:7f:4b:fb:ee:ba:a3:56:14:ef:7a:
                    48:6b:f2:8b:08:3c:a5:c7:ea:c3:55:32:55:03:44:
                    ef:1a:a0:76:75:6e:63:7c:78:80:7a:c7:8f:06:bf:
                    3d:f9:82:e3:df:d8:92:5f:f1:cd:42:8b:ba:8c:de:
                    ed:95:9d:17:d2:83:37:1e:e9:da:e2:89:d5:83:64:
                    ed:e1:e1:6d:24:2e:d0:7c:7a:2d:5f:e1:a9:d4:c3:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:F2:89:4C:39:FE:9D:AD:E9:C4:03:8C:6A:D1:2B:E9:95:50:E0
            X509v3 Authority Key Identifier:
                keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a3a2f33322d3332203d3e20323730343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:83:9f:d4:e4:f9:c2:b1:26:99:a4:aa:32:4b:a8:08:9d:af:
         71:1a:0f:a2:cc:cd:d0:76:fd:b6:c7:4d:74:3d:16:ef:21:83:
         6b:5c:a7:02:6c:b7:08:91:f3:59:a8:48:06:fb:23:c3:07:05:
         a4:58:90:fb:1d:e8:fe:ee:5d:88:82:11:0a:ac:38:47:78:34:
         5f:7a:d3:ed:3f:73:c2:d6:9c:c1:17:3e:0c:58:6e:51:94:5d:
         01:03:76:c5:e7:04:7b:b9:f6:60:34:d3:6e:2e:ea:de:a1:73:
         6f:0c:4b:c2:b2:af:14:e5:7d:14:e6:6b:05:43:06:25:22:db:
         a5:5a:33:fb:63:91:d7:ed:3b:7a:3d:d4:50:76:40:a1:be:8b:
         74:5c:02:95:24:97:77:52:84:bb:51:d6:7d:29:bc:8a:a2:26:
         d8:fe:d7:bf:30:db:6b:b6:8a:e6:1b:3e:5f:37:40:a6:b9:5b:
         73:43:b2:96:40:79:4a:07:f1:f7:91:b9:19:b2:c2:38:19:5f:
         4f:37:57:4d:95:a1:93:01:ef:1e:be:73:db:fa:08:92:78:d2:
         d5:53:43:8f:55:24:9c:d4:b8:21:41:56:e4:0d:3c:e3:94:0e:
         11:21:b5:ca:5d:8b:94:ad:c4:63:99:65:be:24:fd:fe:b4:88:
         8a:2a:51:7e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBflpwFpOzUSCC3jIboGS9J1G7dEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4RjVFQTY2MDU2NzBDRkNDRTVFMjEyNDU3REM0QUJG
OTI5RjNEQjAeFw0yNDA0MDMyMDI4NTBaFw0yNTA0MDIyMDMzNTBaMDMxMTAvBgNV
BAMTKDNEQjNGMjg5NEMzOUZFOURBREU5QzQwMzhDNkFEMTJCRTk5NTUwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj3orPYbAyDCiBAW7UErKN+vA8
Qmf2KX8dmGhDloO+e7dOUcQFqaTPKIIfws8U5AOkpMypsv1tTuuE5gd8ftQsdSsQ
Ab9upCMnY7mwzRJwnAG87ZKqL73QDt6tItsrCgIWCnq4ucEcmcZFQ7nh7NhURssJ
N3w7886dHy3PMODGroFnaW6tip6RfvVc6Xyg7uP1UDELH08pWJdhGCZj7FsXl/jk
2H8vEJe1f0v77rqjVhTvekhr8osIPKXH6sNVMlUDRO8aoHZ1bmN8eIB6x48Gvz35
guPf2JJf8c1Ci7qM3u2VnRfSgzce6driidWDZO3h4W0kLtB8ei1f4anUw+rJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPbPyiUw5/p2t6cQDjGrRK+mVUOAwHwYDVR0j
BBgwFoAUVY9epmBWcM/M5eISRX3Eq/kp89swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dzRThpaVA4M2p6ZGhGMzZSVGc1YTJkWW1KRndZOU5iblNKejVtOExn
UVQvMS81NThGNUVBNjYwNTY3MENGQ0NFNUUyMTI0NTdEQzRBQkY5MjlGM0RCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1OEY1RUE2NjA1NjcwQ0ZD
Q0U1RTIxMjQ1N0RDNEFCRjkyOUYzREIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHc0U4aWlQODNqemRoRjM2UlRnNWEyZFltSkZ3WTlOYm5TSno1bThMZ1FULzEv
MzIzODMwMzQzYTM2NjIzODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzQzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARriDANBgkqhkiG9w0BAQsFAAOCAQEAHYOf1OT5
wrEmmaSqMkuoCJ2vcRoPoszN0Hb9tsdNdD0W7yGDa1ynAmy3CJHzWahIBvsjwwcF
pFiQ+x3o/u5diIIRCqw4R3g0X3rT7T9zwtacwRc+DFhuUZRdAQN2xecEe7n2YDTT
bi7q3qFzbwxLwrKvFOV9FOZrBUMGJSLbpVoz+2OR1+07ej3UUHZAob6LdFwClSSX
d1KEu1HWfSm8iqIm2P7XvzDba7aK5hs+XzdAprlbc0OylkB5Sgfx95G5GbLCOBlf
TzdXTZWhkwHvHr5z2/oIknjS1VNDj1UknNS4IUFW5A0845QOESG1yl2LlK3EY5ll
viT9/rSIiipRfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org