Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/323830343a3161633a3a2f33322d3438203d3e203533313735.roa
File:                     323830343a3161633a3a2f33322d3438203d3e203533313735.roa (raw, json)
Hash identifier:          EoWCCDWWvLab/SkmdmXPUcrIdZS9JqrKU8415GyWkKE=
Subject key identifier:   62:93:2D:9A:6B:CD:44:AE:F7:36:AF:27:CB:45:35:09:81:1C:79:6E
Certificate issuer:       /CN=C4C158CFE320EE02FA275E85BCC3A99E8325A739
Certificate serial:       3854B47D52EB987DF0C76E75980513EAE9937F69
Authority key identifier: C4:C1:58:CF:E3:20:EE:02:FA:27:5E:85:BC:C3:A9:9E:83:25:A7:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4C158CFE320EE02FA275E85BCC3A99E8325A739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/323830343a3161633a3a2f33322d3438203d3e203533313735.roa
Signing time:             Sun 23 Jan 2022 18:00:00 +0000
ROA not before:           Sun 23 Jan 2022 17:55:00 +0000
ROA not after:            Mon 23 Jan 2023 18:00:00 +0000
asID:                     53175
IP address blocks:        2804:1ac::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:54:b4:7d:52:eb:98:7d:f0:c7:6e:75:98:05:13:ea:e9:93:7f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4C158CFE320EE02FA275E85BCC3A99E8325A739
        Validity
            Not Before: Jan 23 17:55:00 2022 GMT
            Not After : Jan 23 18:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:84:f2:d3:de:fc:ff:04:37:ef:b0:a6:77:
                    e1:36:65:1d:97:cd:d0:84:2e:f7:77:58:00:56:98:
                    4a:64:ed:0a:2c:ed:3f:8d:8f:77:96:24:c5:fc:98:
                    e5:f7:02:32:11:90:66:5f:41:3a:d3:e4:2d:52:2f:
                    4f:2f:62:d0:ca:94:ef:3b:30:6c:95:91:a2:3b:f3:
                    7c:95:4e:fa:1c:cb:bc:9f:c1:82:25:1a:9f:6e:29:
                    89:8c:ec:06:a5:c5:57:e6:0b:69:a9:e1:d7:ae:2e:
                    bc:0e:c4:12:fb:9f:07:5f:4f:28:a9:4d:98:47:66:
                    57:d2:b9:5a:00:3f:b0:85:04:9d:cd:d5:66:e6:61:
                    ac:9e:66:47:2a:8c:25:8b:93:86:ce:70:0f:44:52:
                    76:c7:d1:a1:ef:82:48:56:f2:fb:ed:42:f8:aa:c9:
                    b1:88:32:80:85:6a:21:14:a7:f2:4c:58:7d:49:cf:
                    73:89:32:2d:11:23:d0:fc:14:cc:92:10:7d:b3:41:
                    85:4b:70:41:73:06:c9:a8:0e:8c:ef:2e:41:1c:39:
                    f3:ef:6e:e7:9d:a3:e5:30:cd:9d:66:a0:9c:38:ea:
                    1f:91:a4:cd:dc:3e:91:0c:19:ad:a6:7f:0f:10:9c:
                    bd:17:08:0d:d0:f9:b2:e4:21:90:7d:4f:80:3e:f5:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:93:2D:9A:6B:CD:44:AE:F7:36:AF:27:CB:45:35:09:81:1C:79:6E
            X509v3 Authority Key Identifier:
                keyid:C4:C1:58:CF:E3:20:EE:02:FA:27:5E:85:BC:C3:A9:9E:83:25:A7:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/C4C158CFE320EE02FA275E85BCC3A99E8325A739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4C158CFE320EE02FA275E85BCC3A99E8325A739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/323830343a3161633a3a2f33322d3438203d3e203533313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:b0:84:5a:35:25:46:1c:b8:d0:f2:00:f9:a9:a7:db:85:
         bb:50:4b:95:03:3b:d2:0a:05:49:88:54:37:b6:1a:77:0a:48:
         ab:e0:f4:07:2a:2f:7e:aa:fa:9d:ff:cb:4f:87:d7:75:f3:82:
         88:1f:89:13:45:a6:c7:aa:06:d7:29:4c:fd:d5:d4:cc:c3:1c:
         de:87:ee:6a:17:32:e3:f3:2b:81:c5:e4:b0:1b:ba:92:31:2b:
         2c:29:e8:f5:92:5b:00:c2:e9:b2:e6:71:0b:dc:d2:a1:22:29:
         e5:58:9c:a6:7c:05:2c:7d:d1:95:56:67:e8:56:77:40:94:ad:
         31:21:ce:35:18:97:3c:54:1b:ff:cc:37:cd:61:41:74:b7:7a:
         9b:7e:8b:68:5f:ff:66:c2:80:d2:51:53:bb:66:c5:be:6c:6e:
         f4:4b:02:99:01:29:cc:89:d7:ea:18:e3:41:f0:34:78:5c:bc:
         51:34:60:e1:25:fa:cc:2d:ff:71:65:b3:35:26:28:3d:b7:83:
         55:98:2e:ed:2c:60:e8:b3:ed:93:65:ee:f2:8b:41:70:0f:cf:
         ec:a6:d3:9b:4c:bc:89:a2:ef:23:3c:3d:18:58:7e:82:5e:59:
         3a:c5:be:4a:35:a8:98:8f:23:e3:37:c5:9d:95:de:b1:55:1e:
         17:4b:75:ef
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUOFS0fVLrmH3wx251mAUT6umTf2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRDMTU4Q0ZFMzIwRUUwMkZBMjc1RTg1QkNDM0E5OUU4
MzI1QTczOTAeFw0yMjAxMjMxNzU1MDBaFw0yMzAxMjMxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U0Mjg0RjJEM0RFRkNGRjA0
MzdFRkIwQTY3N0UxMzY2NTFEOTdDREQwODQyRUY3Nzc1ODAwNTY5ODRBNjRFRDBB
MkNFRDNGOEQ4Rjc3OTYyNEM1RkM5OEU1RjcwMjMyMTE5MDY2NUY0MTNBRDNFNDJE
NTIyRjRGMkY2MkQwQ0E5NEVGM0IzMDZDOTU5MUEyM0JGMzdDOTU0RUZBMUNDQkJD
OUZDMTgyMjUxQTlGNkUyOTg5OENFQzA2QTVDNTU3RTYwQjY5QTlFMUQ3QUUyRUJD
MEVDNDEyRkI5RjA3NUY0RjI4QTk0RDk4NDc2NjU3RDJCOTVBMDAzRkIwODUwNDlE
Q0RENTY2RTY2MUFDOUU2NjQ3MkE4QzI1OEI5Mzg2Q0U3MDBGNDQ1Mjc2QzdEMUEx
RUY4MjQ4NTZGMkZCRUQ0MkY4QUFDOUIxODgzMjgwODU2QTIxMTRBN0YyNEM1ODdE
NDlDRjczODkzMjJEMTEyM0QwRkMxNENDOTIxMDdEQjM0MTg1NEI3MDQxNzMwNkM5
QTgwRThDRUYyRTQxMUMzOUYzRUY2RUU3OURBM0U1MzBDRDlENjZBMDlDMzhFQTFG
OTFBNENEREMzRTkxMEMxOUFEQTY3RjBGMTA5Q0JEMTcwODBERDBGOUIyRTQyMTkw
N0Q0RjgwM0VGNUIzN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzkKE8tPe/P8EN++wpnfhNmUdl83QhC73d1gAVphKZO0KLO0/jY93
liTF/Jjl9wIyEZBmX0E60+QtUi9PL2LQypTvOzBslZGiO/N8lU76HMu8n8GCJRqf
bimJjOwGpcVX5gtpqeHXri68DsQS+58HX08oqU2YR2ZX0rlaAD+whQSdzdVm5mGs
nmZHKowli5OGznAPRFJ2x9Gh74JIVvL77UL4qsmxiDKAhWohFKfyTFh9Sc9ziTIt
ESPQ/BTMkhB9s0GFS3BBcwbJqA6M7y5BHDnz727nnaPlMM2dZqCcOOofkaTN3D6R
DBmtpn8PEJy9FwgN0Pmy5CGQfU+APvWzewIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FGKTLZprzUSu9zavJ8tFNQmBHHluMB8GA1UdIwQYMBaAFMTBWM/jIO4C+idehbzD
qZ6DJac5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RHUXNHVnJHZmcya3FU
NGtrNTdIb0pGM1pSWlk4a3BUYnhhbm56Z1R1Q1Z3LzAvQzRDMTU4Q0ZFMzIwRUUw
MkZBMjc1RTg1QkNDM0E5OUU4MzI1QTczOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DNEMxNThDRkUzMjBFRTAyRkEyNzVFODVCQ0MzQTk5RTgzMjVB
NzM5LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ER1FzR1ZyR2ZnMmtxVDRrazU3
SG9KRjNaUlpZOGtwVGJ4YW5uemdUdUNWdy8wLzMyMzgzMDM0M2EzMTYxNjMzYTNh
MmYzMzMyMmQzNDM4MjAzZDNlMjAzNTMzMzEzNzM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAQBrDAN
BgkqhkiG9w0BAQsFAAOCAQEAhn+whFo1JUYcuNDyAPmpp9uFu1BLlQM70goFSYhU
N7YadwpIq+D0Byovfqr6nf/LT4fXdfOCiB+JE0Wmx6oG1ylM/dXUzMMc3ofuahcy
4/MrgcXksBu6kjErLCno9ZJbAMLpsuZxC9zSoSIp5VicpnwFLH3RlVZn6FZ3QJSt
MSHONRiXPFQb/8w3zWFBdLd6m36LaF//ZsKA0lFTu2bFvmxu9EsCmQEpzInX6hjj
QfA0eFy8UTRg4SX6zC3/cWWzNSYoPbeDVZgu7Sxg6LPtk2Xu8otBcA/P7KbTm0y8
iaLvIzw9GFh+gl5ZOsW+SjWomI8j4zfFnZXesVUeF0t17w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org