Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33322d3332203d3e20323632373431.roa
File:                     323830343a326233303a3a2f33322d3332203d3e20323632373431.roa (raw, json)
Hash identifier:          Cc4tztB7onJveQLw29coPpu9YFC0dX2jFVzWlKdqDqw=
Subject key identifier:   B4:25:DA:9E:EE:9E:2E:7A:88:69:EE:B4:40:C5:BD:3E:7C:47:AC:D9
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       6DE7E8EFAD4538A73182B83C557423FACE545906
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33322d3332203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:01 +0000
ROA not before:           Tue 09 Jan 2024 20:55:01 +0000
ROA not after:            Tue 07 Jan 2025 21:00:01 +0000
asID:                     262741
IP address blocks:        2804:2b30::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:e8:ef:ad:45:38:a7:31:82:b8:3c:55:74:23:fa:ce:54:59:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:01 2024 GMT
            Not After : Jan  7 21:00:01 2025 GMT
        Subject: CN=B425DA9EEE9E2E7A8869EEB440C5BD3E7C47ACD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:9b:df:4e:08:27:20:aa:94:22:4d:05:56:
                    b5:84:0d:c1:44:97:26:69:eb:21:0c:18:5f:c2:e3:
                    b6:3a:25:c2:62:d8:95:b4:87:f4:07:dd:4a:99:ac:
                    95:90:92:90:ed:0a:fa:1b:ec:b6:d8:a3:70:07:e8:
                    ed:68:8b:7e:e0:4b:45:9a:32:3a:33:4a:ef:e0:28:
                    58:05:4f:86:3f:ac:81:35:6e:18:74:aa:df:a6:60:
                    1c:d5:f3:b0:a8:53:63:12:f0:f1:1b:d3:a9:d8:fb:
                    2d:f4:d9:3c:35:15:a5:89:f2:da:93:f8:37:5e:14:
                    af:c1:a8:99:09:e6:16:53:23:f1:c6:7d:2c:2d:74:
                    87:b9:db:1d:58:90:7d:80:d5:a2:7e:d5:a3:31:eb:
                    eb:18:2a:c2:5a:9e:d4:26:4f:29:54:c9:96:dd:76:
                    1a:c3:52:20:ad:cd:5e:6c:93:86:05:00:3c:e1:28:
                    e9:b9:0f:50:d2:77:11:93:ac:a8:ec:6a:e8:9e:d6:
                    e7:8b:8a:ec:cd:b9:18:35:d0:73:42:fc:85:34:bb:
                    4d:65:78:99:f9:7c:9b:7a:aa:27:54:c1:ff:9e:75:
                    14:b1:c4:e7:06:67:64:eb:01:63:c1:40:da:91:96:
                    58:c4:34:21:2c:98:4d:2d:60:e9:c9:0f:e1:24:09:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:DA:9E:EE:9E:2E:7A:88:69:EE:B4:40:C5:BD:3E:7C:47:AC:D9
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33322d3332203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:35:01:eb:3f:f3:4e:2c:89:a9:01:01:d2:35:0e:9f:8b:77:
         1b:a4:56:3a:9e:19:59:de:12:47:c7:e5:e0:c5:bc:6d:87:95:
         15:d4:ec:4f:2e:ae:6d:1b:2a:3c:03:ed:de:19:25:bc:85:96:
         7a:42:80:8f:64:c5:37:18:fb:8b:9a:55:e6:dc:25:c9:c9:7e:
         c0:8d:f5:60:6c:b5:b0:a7:c3:d3:cd:5c:13:46:a3:6e:3a:30:
         7b:81:00:be:10:34:22:af:84:bb:56:1d:b1:91:5c:1f:51:3a:
         9b:6b:dd:7d:89:85:71:51:16:62:46:10:aa:98:73:d5:4a:82:
         55:49:ff:9d:15:58:8f:da:47:54:8d:32:2c:6f:f0:30:6e:56:
         aa:ca:b2:93:d5:f0:f0:fc:be:f2:46:fe:10:8f:e7:70:9c:ce:
         13:9e:41:68:2b:20:fe:ce:0e:dc:1d:c9:a7:32:92:af:8f:7a:
         e3:89:16:5b:80:e2:78:09:ce:ff:29:3e:04:9b:41:48:8f:f8:
         e8:b1:6a:0c:a5:de:1b:63:b7:62:d4:a2:55:a7:a1:f4:f8:9d:
         3f:17:2c:8c:ab:72:31:fb:ce:62:5a:e7:59:44:10:2b:52:e2:
         fa:84:96:50:5f:83:8a:8c:ee:55:83:14:92:73:25:81:01:aa:
         62:5e:f3:d0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbefo761FOKcxgrg8VXQj+s5UWQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yNDAxMDkyMDU1MDFaFw0yNTAxMDcyMTAwMDFaMDMxMTAvBgNV
BAMTKEI0MjVEQTlFRUU5RTJFN0E4ODY5RUVCNDQwQzVCRDNFN0M0N0FDRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1ZvfTggnIKqUIk0FVrWEDcFE
lyZp6yEMGF/C47Y6JcJi2JW0h/QH3UqZrJWQkpDtCvob7LbYo3AH6O1oi37gS0Wa
MjozSu/gKFgFT4Y/rIE1bhh0qt+mYBzV87CoU2MS8PEb06nY+y302Tw1FaWJ8tqT
+DdeFK/BqJkJ5hZTI/HGfSwtdIe52x1YkH2A1aJ+1aMx6+sYKsJantQmTylUyZbd
dhrDUiCtzV5sk4YFADzhKOm5D1DSdxGTrKjsauie1ueLiuzNuRg10HNC/IU0u01l
eJn5fJt6qidUwf+edRSxxOcGZ2TrAWPBQNqRlljENCEsmE0tYOnJD+EkCZBrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtCXanu6eLnqIae60QMW9PnxHrNkwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzIzODMwMzQzYTMyNjIzMzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzczNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQrMDANBgkqhkiG9w0BAQsFAAOCAQEAZjUB6z/z
TiyJqQEB0jUOn4t3G6RWOp4ZWd4SR8fl4MW8bYeVFdTsTy6ubRsqPAPt3hklvIWW
ekKAj2TFNxj7i5pV5twlycl+wI31YGy1sKfD081cE0ajbjowe4EAvhA0Iq+Eu1Yd
sZFcH1E6m2vdfYmFcVEWYkYQqphz1UqCVUn/nRVYj9pHVI0yLG/wMG5Wqsqyk9Xw
8Py+8kb+EI/ncJzOE55BaCsg/s4O3B3JpzKSr49644kWW4DieAnO/yk+BJtBSI/4
6LFqDKXeG2O3YtSiVaeh9PidPxcsjKtyMfvOYlrnWUQQK1Li+oSWUF+DiozuVYMU
knMlgQGqYl7z0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org