Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666630303a3a2f34302d3430203d3e203631363333.roa
File:                     323830343a316330343a666630303a3a2f34302d3430203d3e203631363333.roa (raw, json)
Hash identifier:          4ONdSzRGsDioTNXnD4SnR9Ypbu6oV6SzBgrDamldABM=
Subject key identifier:   65:70:F6:C2:83:69:B4:E0:45:CA:4E:68:60:1E:FB:D1:0E:6A:2C:33
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       61DAF8A42D416C540A7AE2A23B7098EDC100BFA7
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666630303a3a2f34302d3430203d3e203631363333.roa
Signing time:             Thu 15 Feb 2024 13:46:58 +0000
ROA not before:           Thu 15 Feb 2024 13:41:58 +0000
ROA not after:            Thu 13 Feb 2025 13:46:58 +0000
asID:                     61633
IP address blocks:        2804:1c04:ff00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:da:f8:a4:2d:41:6c:54:0a:7a:e2:a2:3b:70:98:ed:c1:00:bf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Feb 15 13:41:58 2024 GMT
            Not After : Feb 13 13:46:58 2025 GMT
        Subject: CN=6570F6C28369B4E045CA4E68601EFBD10E6A2C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:e2:55:63:aa:e6:f9:b6:85:e1:ac:bc:e5:
                    65:7a:67:9f:37:0d:da:e2:85:42:aa:4d:94:c4:34:
                    ba:02:ff:bf:f5:ae:a5:53:68:b6:7a:d2:ca:f4:a1:
                    12:d5:81:9e:d2:e9:87:b9:eb:0f:09:50:56:05:29:
                    79:73:2a:b0:62:a8:90:bd:43:3d:88:fe:7d:a7:da:
                    aa:78:45:75:c6:76:ee:4c:17:75:35:2b:35:02:ae:
                    47:a5:36:ef:af:fd:a4:09:9f:34:da:f1:ac:0e:6e:
                    01:93:b5:6f:fa:25:95:b6:4e:1a:56:87:1b:5c:4a:
                    0f:6c:c9:c3:9d:0a:4f:ad:58:69:17:d5:74:f8:c9:
                    23:ae:5e:22:1c:a5:70:76:12:eb:37:83:2f:5a:2b:
                    79:ac:8d:46:cb:e0:07:9b:ea:1e:c8:c8:2e:ce:df:
                    7d:17:4d:f5:f1:01:4f:11:89:8b:a2:bb:33:e1:61:
                    75:37:69:de:7f:57:f9:48:09:ea:f3:0d:f4:e2:7c:
                    91:00:4f:af:b0:80:3c:e2:e8:7c:48:a8:bb:d0:75:
                    98:85:3e:bf:65:79:0f:19:68:9a:b8:cd:13:ca:c3:
                    50:33:4e:02:33:0e:ca:bb:fa:28:dc:87:d8:4d:00:
                    ed:2e:f6:40:ef:25:b9:19:e4:83:c3:c7:f0:c9:11:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:F6:C2:83:69:B4:E0:45:CA:4E:68:60:1E:FB:D1:0E:6A:2C:33
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/323830343a316330343a666630303a3a2f34302d3430203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c04:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:a3:68:5b:c0:41:28:df:f5:a5:5f:f1:93:76:d2:92:7c:26:
         e0:d0:78:20:81:5a:fe:57:37:d9:99:a6:96:6a:56:b0:8f:de:
         7e:1d:aa:eb:18:de:10:ca:bd:09:34:29:1e:38:f0:d2:80:c3:
         8e:6d:3a:66:3a:08:0e:37:bd:96:24:31:bf:60:79:fa:68:4e:
         df:69:a6:72:03:cd:a8:cb:39:cf:0c:e7:4d:37:ac:e6:94:c8:
         dd:fa:47:2d:dc:f6:12:e8:82:1e:bd:86:d6:fd:e4:69:83:7c:
         42:0d:7c:ab:b1:39:fe:21:ee:4a:0e:08:d4:1a:5a:52:c7:42:
         1d:5a:d2:32:5e:ed:5e:9b:8a:93:4e:00:83:59:70:d8:fc:17:
         7e:b5:50:27:8e:6c:f6:3d:5a:59:9d:df:ce:a0:24:da:4b:b0:
         c2:ef:c5:56:2e:bb:a5:35:b7:76:b6:22:49:02:25:87:aa:67:
         64:bd:1b:50:5c:fc:ff:63:d9:18:d2:fa:6f:29:20:42:0a:f7:
         ff:df:a7:cb:ea:10:43:32:f5:d5:a2:c1:2b:bb:dc:3b:61:47:
         f9:be:80:50:36:1e:4a:14:94:53:ad:31:1d:5a:25:15:79:56:
         98:36:2e:a6:5b:bd:04:45:44:87:d1:33:bf:b7:c2:e3:32:3f:
         e7:3c:1a:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYdr4pC1BbFQKeuKiO3CY7cEAv6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RFN0FENjE5QURFMDYxRjU0RkMzODQyNDI5MUZBMDRC
MDM0RTcwOTAeFw0yNDAyMTUxMzQxNThaFw0yNTAyMTMxMzQ2NThaMDMxMTAvBgNV
BAMTKDY1NzBGNkMyODM2OUI0RTA0NUNBNEU2ODYwMUVGQkQxMEU2QTJDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQKOJVY6rm+baF4ay85WV6Z583
DdrihUKqTZTENLoC/7/1rqVTaLZ60sr0oRLVgZ7S6Ye56w8JUFYFKXlzKrBiqJC9
Qz2I/n2n2qp4RXXGdu5MF3U1KzUCrkelNu+v/aQJnzTa8awObgGTtW/6JZW2ThpW
hxtcSg9sycOdCk+tWGkX1XT4ySOuXiIcpXB2Eus3gy9aK3msjUbL4Aeb6h7IyC7O
330XTfXxAU8RiYuiuzPhYXU3ad5/V/lICerzDfTifJEAT6+wgDzi6HxIqLvQdZiF
Pr9leQ8ZaJq4zRPKw1AzTgIzDsq7+ijch9hNAO0u9kDvJbkZ5IPDx/DJEQsbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZXD2woNptOBFyk5oYB770Q5qLDMwHwYDVR0j
BBgwFoAUzeetYZreBh9U/DhCQpH6BLA05wkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2Y5ZWRpYmhFNVh2ZTU5b3lwQnA4SlgyS29VcVhycDhOOGpEcVFOSk1p
cFMvMC9DREU3QUQ2MTlBREUwNjFGNTRGQzM4NDI0MjkxRkEwNEIwMzRFNzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NERTdBRDYxOUFERTA2MUY1
NEZDMzg0MjQyOTFGQTA0QjAzNEU3MDkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NmOWVkaWJoRTVYdmU1OW95cEJwOEpYMktvVXFYcnA4TjhqRHFRTkpNaXBTLzAv
MzIzODMwMzQzYTMxNjMzMDM0M2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM2MzEzNjMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBwE/zANBgkqhkiG9w0BAQsFAAOC
AQEAA6NoW8BBKN/1pV/xk3bSknwm4NB4IIFa/lc32ZmmlmpWsI/efh2q6xjeEMq9
CTQpHjjw0oDDjm06ZjoIDje9liQxv2B5+mhO32mmcgPNqMs5zwznTTes5pTI3fpH
Ldz2EuiCHr2G1v3kaYN8Qg18q7E5/iHuSg4I1BpaUsdCHVrSMl7tXpuKk04Ag1lw
2PwXfrVQJ45s9j1aWZ3fzqAk2kuwwu/FVi67pTW3drYiSQIlh6pnZL0bUFz8/2PZ
GNL6bykgQgr3/9+ny+oQQzL11aLBK7vcO2FH+b6AUDYeShSUU60xHVolFXlWmDYu
plu9BEVEh9Ezv7fC4zI/5zwaSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org