Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/323830343a343a3a2f33322d3438203d3e203238363637.roa
File:                     323830343a343a3a2f33322d3438203d3e203238363637.roa (raw, json)
Hash identifier:          ODBa3phkojcT3WOcxtvhobKHGpCoZDACxxJ4dbP+GXo=
Subject key identifier:   44:27:E4:81:EC:07:A1:6F:AB:2F:D5:90:7E:75:13:1B:E1:65:06:E7
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       1F8D87CA66A50DDB79F0FCC0CF43CFC4A7174206
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/323830343a343a3a2f33322d3438203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:05 +0000
ROA not before:           Thu 04 Apr 2024 16:01:05 +0000
ROA not after:            Thu 03 Apr 2025 16:06:05 +0000
asID:                     28667
IP address blocks:        2804:4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8d:87:ca:66:a5:0d:db:79:f0:fc:c0:cf:43:cf:c4:a7:17:42:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:05 2024 GMT
            Not After : Apr  3 16:06:05 2025 GMT
        Subject: CN=4427E481EC07A16FAB2FD5907E75131BE16506E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:ad:ed:be:c1:5e:16:9c:f8:12:80:64:66:
                    0a:d0:51:c8:48:68:34:45:fa:d4:01:34:d2:4c:6d:
                    24:48:19:07:0a:61:87:96:f1:ef:f4:e5:c7:eb:24:
                    0a:84:52:b9:25:5e:c7:88:cb:5f:77:9c:71:61:7e:
                    e6:ff:87:0f:63:a6:2d:23:29:48:2a:17:b5:8f:30:
                    71:1d:82:f9:59:c6:9d:6c:17:6a:be:a1:c7:27:0c:
                    0b:7f:a0:9a:36:92:d2:3b:ea:ba:cc:5a:48:ce:c7:
                    f8:0f:79:c7:c4:8c:50:13:44:71:4d:58:00:9e:64:
                    a5:c9:39:0c:1f:6d:d9:fe:72:0b:95:9a:6b:50:5c:
                    58:87:51:05:4f:2e:f4:2f:2e:da:31:80:aa:86:ab:
                    27:2e:97:fa:f5:1d:f1:7b:32:29:77:d8:4a:60:74:
                    97:b1:ac:47:e8:97:ed:d8:5b:2b:89:31:01:a0:5a:
                    1b:76:d8:ec:46:88:6c:59:92:46:8e:fe:c0:ba:c1:
                    a0:f2:96:09:bc:51:2a:07:08:6e:f5:d2:b4:aa:19:
                    e3:c4:ea:f8:84:e3:81:b7:91:ce:9d:d5:41:f7:eb:
                    d0:75:86:ca:00:fc:03:25:54:4c:95:98:22:7d:43:
                    88:4e:e9:03:e9:c9:c4:dc:e4:33:fe:03:64:b1:c9:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:27:E4:81:EC:07:A1:6F:AB:2F:D5:90:7E:75:13:1B:E1:65:06:E7
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/323830343a343a3a2f33322d3438203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:9d:61:9d:ef:38:2d:2c:4b:23:1c:9c:56:0c:8e:bf:26:17:
         a2:dd:7a:35:13:38:3f:b9:5f:67:03:41:2b:9e:20:97:96:c4:
         9f:6d:32:50:52:4b:db:d1:4a:c7:6c:d0:a8:bf:94:28:25:00:
         62:62:35:33:f9:74:65:9d:ce:ee:aa:d5:cb:9b:84:f9:88:63:
         70:0b:3c:a3:72:5a:d4:63:65:57:33:65:b6:8d:46:62:77:ad:
         66:74:6b:28:22:45:1a:40:48:e2:9f:88:13:f6:ca:18:44:57:
         4f:55:05:f7:0c:c4:e4:43:71:5f:68:76:5e:e8:a5:95:d1:af:
         91:57:98:64:92:87:18:12:e9:0f:6b:a4:58:5d:77:d7:61:1d:
         80:2b:cb:84:02:41:6b:bf:b3:5b:fe:3a:0c:8a:48:46:8c:53:
         25:25:5d:ce:bf:76:5b:ac:95:b1:be:4e:c8:f3:19:94:d3:5c:
         f1:c5:22:e5:f6:38:0f:b9:be:96:29:41:8c:42:3b:fd:ad:20:
         a7:c9:0e:52:77:af:b4:b1:98:09:dd:55:6a:ce:ff:59:7d:67:
         e0:18:6c:c0:1b:f5:a0:be:b5:b3:8b:d9:31:18:33:b5:10:bd:
         36:15:56:34:dc:85:6c:a0:e2:b5:30:2f:f3:22:00:9e:c3:9d:
         39:2d:58:00
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUH42HymalDdt58PzAz0PPxKcXQgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFREMxOEFGNjYwRDU1QjVEM0FCOTI1QTEzNzFFNTRF
RURENzUxMDAeFw0yNDA0MDQxNjAxMDVaFw0yNTA0MDMxNjA2MDVaMDMxMTAvBgNV
BAMTKDQ0MjdFNDgxRUMwN0ExNkZBQjJGRDU5MDdFNzUxMzFCRTE2NTA2RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqa3tvsFeFpz4EoBkZgrQUchI
aDRF+tQBNNJMbSRIGQcKYYeW8e/05cfrJAqEUrklXseIy193nHFhfub/hw9jpi0j
KUgqF7WPMHEdgvlZxp1sF2q+occnDAt/oJo2ktI76rrMWkjOx/gPecfEjFATRHFN
WACeZKXJOQwfbdn+cguVmmtQXFiHUQVPLvQvLtoxgKqGqycul/r1HfF7Mil32Epg
dJexrEfol+3YWyuJMQGgWht22OxGiGxZkkaO/sC6waDylgm8USoHCG710rSqGePE
6viE44G3kc6d1UH369B1hsoA/AMlVEyVmCJ9Q4hO6QPpycTc5DP+A2SxyRr5AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQURCfkgewHoW+rL9WQfnUTG+FlBucwHwYDVR0j
BBgwFoAUyu3BivZg1VtdOrkloTceVO7ddRAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMS9DQUVEQzE4QUY2NjBENTVCNUQzQUI5MjVBMTM3MUU1NEVFREQ3NTEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRURDMThBRjY2MEQ1NUI1
RDNBQjkyNUExMzcxRTU0RUVERDc1MTAuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCB
kQYIKwYBBQUHMAuGgYRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzEv
MzIzODMwMzQzYTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODM2MzYzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACgEAAQwDQYJKoZIhvcNAQELBQADggEBAAKdYZ3vOC0sSyMcnFYM
jr8mF6LdejUTOD+5X2cDQSueIJeWxJ9tMlBSS9vRSsds0Ki/lCglAGJiNTP5dGWd
zu6q1cubhPmIY3ALPKNyWtRjZVczZbaNRmJ3rWZ0aygiRRpASOKfiBP2yhhEV09V
BfcMxORDcV9odl7opZXRr5FXmGSShxgS6Q9rpFhdd9dhHYAry4QCQWu/s1v+OgyK
SEaMUyUlXc6/dluslbG+TsjzGZTTXPHFIuX2OA+5vpYpQYxCO/2tIKfJDlJ3r7Sx
mAndVWrO/1l9Z+AYbMAb9aC+tbOL2TEYM7UQvTYVVjTchWyg4rUwL/MiAJ7DnTkt
WAA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org