Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a3a2f33342d3334203d3e20323638363633.roa
File:                     323830343a353461383a3a2f33342d3334203d3e20323638363633.roa (raw, json)
Hash identifier:          XFe4ATZyEfiakOszjAb8c+a40K3EhoCIQ0NMrwBl80M=
Subject key identifier:   F5:A8:E1:A1:39:8B:2D:35:70:8F:A1:BC:40:6A:66:0D:8A:8D:E2:AF
Certificate issuer:       /CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
Certificate serial:       53ADD07B6D5079FB0D06B4C15131E875352DF280
Authority key identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a3a2f33342d3334203d3e20323638363633.roa
Signing time:             Mon 23 Sep 2024 13:32:34 +0000
ROA not before:           Mon 23 Sep 2024 13:27:34 +0000
ROA not after:            Mon 22 Sep 2025 13:32:34 +0000
asID:                     268663
IP address blocks:        2804:54a8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ad:d0:7b:6d:50:79:fb:0d:06:b4:c1:51:31:e8:75:35:2d:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
        Validity
            Not Before: Sep 23 13:27:34 2024 GMT
            Not After : Sep 22 13:32:34 2025 GMT
        Subject: CN=F5A8E1A1398B2D35708FA1BC406A660D8A8DE2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:75:2d:1a:81:62:5b:bd:be:99:51:39:49:
                    7c:dd:4d:d4:04:b6:9e:95:08:4a:bb:ad:b0:6d:ef:
                    51:8e:ee:b2:8f:33:a7:48:27:e1:3d:57:ef:2b:c2:
                    1a:99:cd:0a:30:4d:19:c8:54:2e:67:33:52:95:5f:
                    8d:86:1b:44:a3:68:5d:51:1a:e8:3e:f0:47:cb:fa:
                    ed:84:55:b8:1d:fb:4d:dc:2e:ff:3f:f0:4a:fd:ba:
                    74:ca:85:ef:03:d5:bf:63:e4:50:94:05:a2:08:72:
                    8b:fc:4b:d4:4a:38:72:0e:90:91:74:e9:9f:ec:f3:
                    f5:64:a8:96:dd:10:aa:4e:0f:e8:65:ed:7b:e8:87:
                    86:1d:30:1e:21:e5:5c:5f:25:f4:f9:4e:5e:11:a9:
                    75:87:6a:ec:32:9c:06:a8:89:88:14:bd:00:79:28:
                    a2:da:f1:de:1e:99:4f:92:ce:01:04:5d:06:83:40:
                    c5:4d:e3:3c:f9:f2:ed:57:97:5d:34:eb:de:71:b8:
                    8f:82:d7:12:0f:3d:bd:42:7f:c2:9f:9a:30:99:9d:
                    78:f7:64:83:1a:d3:e4:8c:ef:73:54:01:96:5a:c7:
                    49:ef:44:63:a9:b0:67:ad:34:7d:20:13:e1:d7:1a:
                    f5:5e:7e:61:f6:c3:df:31:ac:72:42:64:78:37:f0:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A8:E1:A1:39:8B:2D:35:70:8F:A1:BC:40:6A:66:0D:8A:8D:E2:AF
            X509v3 Authority Key Identifier:
                keyid:8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a3a2f33342d3334203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:7d:ac:51:41:1b:de:37:00:e1:10:0b:98:2b:6d:48:cf:
         7a:d2:64:4b:75:78:06:bd:0a:ae:de:a7:7a:e8:06:19:a5:b1:
         5c:7a:83:3c:6d:cf:7a:6c:1b:bd:9a:c5:75:e3:07:1e:67:1f:
         bc:d5:5a:78:a1:9a:9d:9e:1b:01:01:1c:7a:53:db:28:80:e9:
         e3:02:df:29:a3:77:60:2c:65:40:04:23:bd:6b:f5:fb:45:fc:
         f5:7f:04:6f:26:82:39:ab:73:a7:5d:8e:7b:fb:04:3f:0b:24:
         0c:87:1c:d8:d9:d4:5b:79:32:81:91:b6:b6:59:fd:ab:2b:60:
         99:8b:59:5b:fe:f7:33:fd:4b:54:f0:a1:96:c8:0b:4b:d5:b8:
         0b:6c:d7:b6:7b:ab:7a:00:db:eb:46:4d:3b:16:9b:09:a2:d2:
         ad:9a:0b:f1:d9:5b:58:fa:67:55:a4:17:28:fe:17:53:df:3c:
         f7:14:29:69:70:39:f6:39:fa:55:66:c6:05:73:dd:a9:8d:0f:
         24:59:f1:34:40:ba:bc:cf:41:e2:76:64:59:51:c6:0d:77:ec:
         29:fe:67:8d:b5:66:77:e8:d3:83:67:f3:aa:8f:2a:2b:f9:7a:
         5a:3a:02:08:5a:dc:4f:0b:f3:03:7e:21:9a:d1:b1:90:c7:ba:
         0c:27:b2:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU63Qe21QefsNBrTBUTHodTUt8oAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENFMjRDRUI2QjE0MDE3QTAxNEIxQ0ZFODFCREM5OUFB
NzA3QjE4QTAeFw0yNDA5MjMxMzI3MzRaFw0yNTA5MjIxMzMyMzRaMDMxMTAvBgNV
BAMTKEY1QThFMUExMzk4QjJEMzU3MDhGQTFCQzQwNkE2NjBEOEE4REUyQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxHUtGoFiW72+mVE5SXzdTdQE
tp6VCEq7rbBt71GO7rKPM6dIJ+E9V+8rwhqZzQowTRnIVC5nM1KVX42GG0SjaF1R
Gug+8EfL+u2EVbgd+03cLv8/8Er9unTKhe8D1b9j5FCUBaIIcov8S9RKOHIOkJF0
6Z/s8/VkqJbdEKpOD+hl7Xvoh4YdMB4h5VxfJfT5Tl4RqXWHauwynAaoiYgUvQB5
KKLa8d4emU+SzgEEXQaDQMVN4zz58u1Xl100695xuI+C1xIPPb1Cf8KfmjCZnXj3
ZIMa0+SM73NUAZZax0nvRGOpsGetNH0gE+HXGvVefmH2w98xrHJCZHg38DC1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9ajhoTmLLTVwj6G8QGpmDYqN4q8wHwYDVR0j
BBgwFoAUjOJM62sUAXoBSxz+gb3JmqcHsYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1VhM1lDVkZrNXQ1TFVodDJVcEpQY2FoeG9rdEZoS1dHN0RSbURuNXk3
QWovMC84Q0UyNENFQjZCMTQwMTdBMDE0QjFDRkU4MUJEQzk5QUE3MDdCMThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRTI0Q0VCNkIxNDAxN0Ew
MTRCMUNGRTgxQkRDOTlBQTcwN0IxOEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NVYTNZQ1ZGazV0NUxVaHQyVXBKUGNhaHhva3RGaEtXRzdEUm1EbjV5N0FqLzAv
MzIzODMwMzQzYTM1MzQ2MTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4
MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARUqAAwDQYJKoZIhvcNAQELBQADggEBAEb9faxR
QRveNwDhEAuYK21Iz3rSZEt1eAa9Cq7ep3roBhmlsVx6gzxtz3psG72axXXjBx5n
H7zVWnihmp2eGwEBHHpT2yiA6eMC3ymjd2AsZUAEI71r9ftF/PV/BG8mgjmrc6dd
jnv7BD8LJAyHHNjZ1Ft5MoGRtrZZ/asrYJmLWVv+9zP9S1TwoZbIC0vVuAts17Z7
q3oA2+tGTTsWmwmi0q2aC/HZW1j6Z1WkFyj+F1PfPPcUKWlwOfY5+lVmxgVz3amN
DyRZ8TRAurzPQeJ2ZFlRxg137Cn+Z421Znfo04Nn86qPKiv5elo6Agha3E8L8wN+
IZrRsZDHugwnsiI=
-----END CERTIFICATE-----
Generated at Thu Oct 24 19:10:31 2024 by rpki-client on console-fra.rpki-client.org