Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a313030303a3a2f34302d3430203d3e20323634303031.roa
File:                     323830343a323934383a313030303a3a2f34302d3430203d3e20323634303031.roa (raw, json)
Hash identifier:          WCbqkD/NQ6vo7A7NXyLTKj+lcXjl8ZDrG1/Mf14CG5Y=
Subject key identifier:   9E:3D:E7:3B:87:81:C7:1E:BA:6F:7F:DB:A9:21:1B:49:7E:6F:E3:BF
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       1133682992C3BA822F31892F6BA69C8C4D9293CD
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a313030303a3a2f34302d3430203d3e20323634303031.roa
Signing time:             Tue 18 Apr 2023 13:46:34 +0000
ROA not before:           Tue 18 Apr 2023 13:41:34 +0000
ROA not after:            Tue 16 Apr 2024 13:46:34 +0000
asID:                     264001
IP address blocks:        2804:2948:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:33:68:29:92:c3:ba:82:2f:31:89:2f:6b:a6:9c:8c:4d:92:93:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Apr 18 13:41:34 2023 GMT
            Not After : Apr 16 13:46:34 2024 GMT
        Subject: CN=9E3DE73B8781C71EBA6F7FDBA9211B497E6FE3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:7c:21:6b:c3:51:77:47:43:0d:02:3c:f6:
                    93:81:af:cd:72:78:2b:32:ca:39:5a:21:3c:87:f7:
                    85:ed:dc:31:e8:62:f7:04:13:43:5d:08:5a:7e:c8:
                    2e:24:ea:23:db:37:f7:9f:b0:0c:5b:06:e3:8c:e2:
                    3a:d7:d6:59:cd:1c:b5:ca:8e:4c:a0:a6:50:f0:95:
                    99:9b:4c:ee:24:e4:a3:b1:0b:f5:6c:15:6a:44:74:
                    1c:99:f4:24:bb:58:62:25:c8:23:45:6f:66:52:18:
                    eb:35:46:24:ab:18:15:cd:7b:a5:07:0e:1a:30:1b:
                    bd:64:e9:af:22:db:41:6a:8f:d0:23:34:4f:39:c6:
                    b4:10:fc:6f:3e:39:ea:48:ae:7b:09:b6:87:eb:86:
                    f1:3b:1f:59:67:70:12:9c:21:6c:8f:2e:35:2c:4d:
                    c3:e5:b5:0e:e7:99:c3:ef:60:0c:6a:60:f8:46:40:
                    f8:0c:55:a5:2d:1b:5e:c4:50:be:b3:52:ed:fe:77:
                    25:a8:d3:d7:4a:a7:d4:56:e2:33:59:ff:1b:7b:ff:
                    b5:5c:b0:24:e8:85:ca:11:1e:0a:9b:77:e3:1e:ae:
                    83:cd:76:c1:6e:ab:00:b9:e7:4c:ec:c1:dc:9a:cd:
                    fa:84:56:8a:83:9a:16:f9:6d:8b:9b:c5:8c:1b:e8:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3D:E7:3B:87:81:C7:1E:BA:6F:7F:DB:A9:21:1B:49:7E:6F:E3:BF
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/323830343a323934383a313030303a3a2f34302d3430203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2948:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:53:4c:54:74:2d:62:72:b3:9f:a4:b4:b5:84:e6:5b:91:eb:
         6f:25:c8:8e:ba:c1:69:25:98:ff:bc:2e:f6:d3:ff:8e:b4:97:
         38:b5:4c:ba:d0:6d:8f:ee:70:63:12:e2:2a:b0:fe:fa:8d:cc:
         a4:ee:d9:0e:0e:66:c1:84:46:76:df:16:9a:6a:3c:cc:a0:67:
         c3:c7:89:3c:8f:ba:e1:3c:e7:89:d1:c4:9a:1a:20:98:46:87:
         97:b0:2b:a2:15:a4:36:cd:b5:d6:70:9b:51:6a:91:5c:7c:ea:
         9d:ed:63:43:83:a5:a6:1a:b2:ab:fe:cb:5c:e1:e6:c5:54:cf:
         ba:da:7e:d0:02:35:3a:43:76:4c:44:bf:2d:f9:04:26:1f:69:
         8c:c0:ce:8c:21:68:fa:97:1b:8c:91:2f:2e:83:9e:e9:52:c4:
         07:f5:27:93:a0:a2:24:49:59:0c:48:3b:66:78:4c:38:43:ff:
         b8:ab:eb:d3:ef:3d:b7:21:13:d3:1a:9b:69:37:c1:25:09:ec:
         c7:7a:f0:f6:56:3b:d9:ec:8b:d5:6a:4f:2a:6d:d3:38:84:85:
         ae:cb:ac:e9:23:ce:9d:92:d8:d9:36:87:27:e4:18:42:4f:af:
         88:f9:7e:de:89:93:58:8c:8e:0f:aa:75:0f:ea:dc:48:cf:3c:
         ae:03:cd:d7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUETNoKZLDuoIvMYkva6acjE2Sk80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEOUMzN0Y1NjE3NjAzMTdEQTc3MERBNkI2RTVFM0ND
NzJBOUZFMTAeFw0yMzA0MTgxMzQxMzRaFw0yNDA0MTYxMzQ2MzRaMDMxMTAvBgNV
BAMTKDlFM0RFNzNCODc4MUM3MUVCQTZGN0ZEQkE5MjExQjQ5N0U2RkUzQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8e3wha8NRd0dDDQI89pOBr81y
eCsyyjlaITyH94Xt3DHoYvcEE0NdCFp+yC4k6iPbN/efsAxbBuOM4jrX1lnNHLXK
jkygplDwlZmbTO4k5KOxC/VsFWpEdByZ9CS7WGIlyCNFb2ZSGOs1RiSrGBXNe6UH
DhowG71k6a8i20Fqj9AjNE85xrQQ/G8+OepIrnsJtofrhvE7H1lncBKcIWyPLjUs
TcPltQ7nmcPvYAxqYPhGQPgMVaUtG17EUL6zUu3+dyWo09dKp9RW4jNZ/xt7/7Vc
sCTohcoRHgqbd+MeroPNdsFuqwC550zswdyazfqEVoqDmhb5bYubxYwb6EEVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnj3nO4eBxx66b3/bqSEbSX5v478wHwYDVR0j
BBgwFoAUW9nDf1YXYDF9p3Daa25ePMcqn+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREc5cURBZHZQbkJxMnJNeFQ4NEVOUG51WU5RRzZ5RDlyS1NYeDNrNmlC
OGovMC81QkQ5QzM3RjU2MTc2MDMxN0RBNzcwREE2QjZFNUUzQ0M3MkE5RkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCRDlDMzdGNTYxNzYwMzE3
REE3NzBEQTZCNkU1RTNDQzcyQTlGRTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RHOXFEQWR2UG5CcTJyTXhUODRFTlBudVlOUUc2eUQ5cktTWHgzazZpQjhqLzAv
MzIzODMwMzQzYTMyMzkzNDM4M2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMwMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEKUgQMA0GCSqGSIb3DQEBCwUA
A4IBAQASU0xUdC1icrOfpLS1hOZbketvJciOusFpJZj/vC720/+OtJc4tUy60G2P
7nBjEuIqsP76jcyk7tkODmbBhEZ23xaaajzMoGfDx4k8j7rhPOeJ0cSaGiCYRoeX
sCuiFaQ2zbXWcJtRapFcfOqd7WNDg6WmGrKr/stc4ebFVM+62n7QAjU6Q3ZMRL8t
+QQmH2mMwM6MIWj6lxuMkS8ug57pUsQH9SeToKIkSVkMSDtmeEw4Q/+4q+vT7z23
IRPTGptpN8ElCezHevD2VjvZ7IvVak8qbdM4hIWuy6zpI86dktjZNocn5BhCT6+I
+X7eiZNYjI4PqnUP6txIzzyuA83X
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org