Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030313a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a633030313a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          VAhMy6ggzdbsjn7QIjWdO87Pi5HN6UzRVXJkQntw1zg=
Subject key identifier:   11:92:B4:6F:C9:E3:82:98:DD:9B:D6:A8:FD:14:8F:80:94:C1:E1:32
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       7617132F0F8E860ACF2C98A4D4EBEAB71226971E
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030313a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:54 +0000
ROA not before:           Thu 09 Mar 2023 20:12:54 +0000
ROA not after:            Thu 07 Mar 2024 20:17:54 +0000
asID:                     28260
IP address blocks:        2804:28e4:c001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:17:13:2f:0f:8e:86:0a:cf:2c:98:a4:d4:eb:ea:b7:12:26:97:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:54 2023 GMT
            Not After : Mar  7 20:17:54 2024 GMT
        Subject: CN=1192B46FC9E38298DD9BD6A8FD148F8094C1E132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:e0:53:a1:cb:71:73:9d:85:d2:60:5a:09:
                    dd:6b:d4:5d:32:e7:10:57:3c:b0:82:e0:91:ca:9f:
                    ef:5f:3b:9c:56:53:2d:91:90:12:36:f3:37:d8:7f:
                    85:86:79:07:cb:58:24:d4:0c:c0:9b:2b:63:5d:26:
                    3a:42:90:75:6a:40:3e:98:a8:4f:18:00:5d:e6:4a:
                    9a:4f:31:d1:2b:47:e0:14:12:60:6c:fa:df:d2:62:
                    75:29:65:2f:62:b8:14:7b:5b:40:17:20:fb:d3:6b:
                    b4:d0:8e:73:a2:2e:e2:c9:98:c2:dc:2b:39:9e:35:
                    39:1e:b9:7d:92:d6:36:75:65:97:2d:89:08:b5:7b:
                    88:99:2e:8d:16:68:bc:37:26:f7:5f:12:88:ae:5c:
                    3c:ca:16:04:5d:c8:af:59:02:5d:32:50:1e:f0:f0:
                    3e:3d:1c:41:49:09:a1:3e:77:eb:27:37:54:f2:39:
                    47:18:a6:aa:43:50:0e:b0:31:98:45:9f:f1:b3:7e:
                    f7:bc:5e:9f:95:69:7b:05:f3:cd:a8:cd:eb:b2:c5:
                    da:14:f1:23:97:2a:4d:86:2b:31:e8:bb:a6:f5:ec:
                    8f:60:73:44:17:2e:c1:4e:c6:e8:56:23:83:1e:b4:
                    80:f2:05:b7:2b:7b:e2:76:cc:30:65:83:ee:46:5a:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:92:B4:6F:C9:E3:82:98:DD:9B:D6:A8:FD:14:8F:80:94:C1:E1:32
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030313a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:51:61:f7:c5:f8:ca:9a:ae:a9:fc:ce:f5:c8:89:32:15:
         a8:4c:c5:3b:21:dd:97:40:4a:9b:b3:db:05:4b:d9:76:97:b3:
         17:42:03:7e:3c:3b:b1:48:9e:77:07:d2:66:2d:fb:e8:84:65:
         25:fb:cb:e6:e5:7a:0f:2a:37:26:3a:31:72:39:32:52:43:e9:
         2f:ed:5d:f4:aa:e3:c3:45:8b:86:ee:61:4c:2f:b9:10:d5:2e:
         65:3e:4e:85:c0:db:63:c3:17:ef:da:c3:a0:41:4a:6a:6a:ad:
         18:b3:31:f9:77:42:ad:1e:86:9e:82:e7:df:59:b5:8f:17:4c:
         93:fc:69:da:b8:f9:89:b0:26:70:da:69:22:87:2f:6d:8c:c8:
         94:1f:f8:47:c5:fe:79:18:af:07:6e:cf:fa:be:af:7a:a9:c5:
         7c:f0:e2:d6:a6:53:f7:83:9d:c6:0f:9a:34:57:83:fe:e2:eb:
         d7:eb:9b:d8:b0:15:95:14:8b:b2:48:ab:f8:fe:59:e4:91:b4:
         2d:86:e2:9c:eb:0c:c9:cc:05:b9:32:4d:85:51:c7:09:04:38:
         05:fc:40:89:cf:32:58:37:cb:07:f5:64:48:75:b6:50:88:a7:
         04:3f:39:ae:f1:8a:fc:e4:49:64:9c:37:75:9d:16:d3:d6:69:
         08:44:63:6c
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUdhcTLw+OhgrPLJik1OvqtxImlx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNTRaFw0yNDAzMDcyMDE3NTRaMDMxMTAvBgNV
BAMTKDExOTJCNDZGQzlFMzgyOThERDlCRDZBOEZEMTQ4RjgwOTRDMUUxMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAuBToctxc52F0mBaCd1r1F0y
5xBXPLCC4JHKn+9fO5xWUy2RkBI28zfYf4WGeQfLWCTUDMCbK2NdJjpCkHVqQD6Y
qE8YAF3mSppPMdErR+AUEmBs+t/SYnUpZS9iuBR7W0AXIPvTa7TQjnOiLuLJmMLc
KzmeNTkeuX2S1jZ1ZZctiQi1e4iZLo0WaLw3JvdfEoiuXDzKFgRdyK9ZAl0yUB7w
8D49HEFJCaE+d+snN1TyOUcYpqpDUA6wMZhFn/Gzfve8Xp+VaXsF882ozeuyxdoU
8SOXKk2GKzHou6b17I9gc0QXLsFOxuhWI4MetIDyBbcre+J2zDBlg+5GWj2xAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUEZK0b8njgpjdm9ao/RSPgJTB4TIwHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzIzODMwMzQzYTMyMzg2NTM0M2E2MzMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCjkwAEwDQYJKoZIhvcNAQELBQAD
ggEBACVKUWH3xfjKmq6p/M71yIkyFahMxTsh3ZdASpuz2wVL2XaXsxdCA348O7FI
nncH0mYt++iEZSX7y+bleg8qNyY6MXI5MlJD6S/tXfSq48NFi4buYUwvuRDVLmU+
ToXA22PDF+/aw6BBSmpqrRizMfl3Qq0ehp6C599ZtY8XTJP8adq4+YmwJnDaaSKH
L22MyJQf+EfF/nkYrwduz/q+r3qpxXzw4tamU/eDncYPmjRXg/7i69frm9iwFZUU
i7JIq/j+WeSRtC2G4pzrDMnMBbkyTYVRxwkEOAX8QInPMlg3ywf1ZEh1tlCIpwQ/
Oa7xivzkSWScN3WdFtPWaQhEY2w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org