Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3438203d3e20323637323439.roa
File:                     323830343a346139303a3a2f33322d3438203d3e20323637323439.roa (raw, json)
Hash identifier:          8qEZy/IHvuMsB0dE30Xc26Sczqi3HuL9f9mPj8GjEjY=
Subject key identifier:   97:3B:66:45:71:28:90:3B:BD:50:F2:9B:FB:92:C8:96:26:9D:91:6E
Certificate issuer:       /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial:       5BFC7B10351EDC8F5B11D8DFCF996766AF1716A9
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3438203d3e20323637323439.roa
Signing time:             Wed 10 Apr 2024 13:13:53 +0000
ROA not before:           Wed 10 Apr 2024 13:08:53 +0000
ROA not after:            Wed 09 Apr 2025 13:13:53 +0000
asID:                     267249
IP address blocks:        2804:4a90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fc:7b:10:35:1e:dc:8f:5b:11:d8:df:cf:99:67:66:af:17:16:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
        Validity
            Not Before: Apr 10 13:08:53 2024 GMT
            Not After : Apr  9 13:13:53 2025 GMT
        Subject: CN=973B66457128903BBD50F29BFB92C896269D916E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:ad:85:74:3b:a2:e2:20:48:7e:3c:db:fa:
                    6a:91:5b:ce:e7:12:5b:6c:14:7a:c5:aa:b4:5e:e7:
                    65:7b:5a:85:24:51:e3:ae:6e:37:52:3f:58:4a:40:
                    c4:be:6a:24:7e:0f:8f:00:00:f2:b4:d5:1d:ff:ec:
                    06:31:cd:d8:d7:fe:c4:fd:4b:46:c6:b5:4d:10:25:
                    9a:66:36:33:df:ab:a6:77:03:bd:6f:4a:bd:62:cb:
                    a7:48:7c:2e:78:88:a6:27:f3:f8:15:ab:d6:48:41:
                    4b:d5:0c:94:78:e8:25:2a:cd:37:f1:62:4b:1a:51:
                    83:52:e5:40:df:e1:5d:45:b9:90:53:32:c6:15:ea:
                    bf:99:48:36:c6:cb:73:94:07:6b:a9:e2:58:ad:61:
                    67:90:99:35:42:06:0d:9c:c8:90:7f:9f:5d:83:e1:
                    ea:15:b0:ce:94:14:07:04:8b:80:55:0d:9a:9c:41:
                    d5:46:46:be:0d:72:1b:cd:f7:78:32:0d:ef:b2:05:
                    15:da:04:14:13:ca:71:37:6d:fc:43:79:fb:c1:3d:
                    8c:1f:34:49:94:09:af:14:4d:af:b4:79:7a:3c:dd:
                    05:c5:67:bd:57:2f:e7:cc:c8:f3:cd:ea:fa:d3:93:
                    be:a7:3e:86:0b:ed:05:47:a3:8a:74:ea:25:62:0a:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3B:66:45:71:28:90:3B:BD:50:F2:9B:FB:92:C8:96:26:9D:91:6E
            X509v3 Authority Key Identifier:
                keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3438203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:23:32:1a:43:e5:33:a8:bd:dc:31:7c:da:5a:5b:d3:c8:f9:
         6b:eb:b3:45:95:b9:a1:fe:e6:f3:61:c6:bc:a8:85:48:d9:79:
         8b:4c:25:88:95:73:63:89:bb:bb:2e:fa:d8:f1:05:24:17:ab:
         ab:69:2a:e7:39:a3:06:9b:30:74:d0:06:cf:f3:42:9a:5e:4d:
         b1:a6:30:2f:6f:16:eb:cf:42:43:7b:00:f5:a6:f8:30:fb:c9:
         ef:22:c2:ea:3d:48:86:09:86:59:e6:a5:76:71:2e:6b:49:52:
         1a:6c:4c:86:87:b3:a9:66:77:86:1c:1f:d0:54:a1:62:3a:72:
         49:11:e1:94:c3:2e:9f:38:ce:7a:55:06:96:b7:4f:d3:31:19:
         40:60:59:b3:33:af:b2:04:3c:af:34:32:e0:97:ec:57:d0:43:
         75:88:fb:8b:da:7f:80:b8:95:2c:9a:b9:58:43:18:ec:44:6b:
         cf:8a:31:4e:41:86:1d:4e:59:36:2f:9e:a7:f0:32:96:96:32:
         7b:36:82:10:20:d3:31:53:bd:db:15:57:1f:e6:8f:c7:1e:01:
         39:fa:51:5b:94:f9:8c:db:00:97:f2:32:33:f3:14:d0:a5:30:
         44:db:ec:a0:b8:fa:2c:f4:46:79:06:67:33:a3:4f:42:9d:85:
         75:66:83:47
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW/x7EDUe3I9bEdjfz5lnZq8XFqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThEODYwQjQyMkVDQzI3QjBGRTQ2NzJDNjI1NEQzRDEy
MkUxNUY2MDAeFw0yNDA0MTAxMzA4NTNaFw0yNTA0MDkxMzEzNTNaMDMxMTAvBgNV
BAMTKDk3M0I2NjQ1NzEyODkwM0JCRDUwRjI5QkZCOTJDODk2MjY5RDkxNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpLK2FdDui4iBIfjzb+mqRW87n
EltsFHrFqrRe52V7WoUkUeOubjdSP1hKQMS+aiR+D48AAPK01R3/7AYxzdjX/sT9
S0bGtU0QJZpmNjPfq6Z3A71vSr1iy6dIfC54iKYn8/gVq9ZIQUvVDJR46CUqzTfx
YksaUYNS5UDf4V1FuZBTMsYV6r+ZSDbGy3OUB2up4litYWeQmTVCBg2cyJB/n12D
4eoVsM6UFAcEi4BVDZqcQdVGRr4NchvN93gyDe+yBRXaBBQTynE3bfxDefvBPYwf
NEmUCa8UTa+0eXo83QXFZ71XL+fMyPPN6vrTk76nPoYL7QVHo4p06iViCgaJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlztmRXEokDu9UPKb+5LIliadkW4wHwYDVR0j
BBgwFoAU6NhgtCLswnsP5GcsYlTT0SLhX2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGttb2lxN2hINFF0YXJLTmtZTU5UdVVMamJLYTdoNzFqdnJmV3l1RzY1
NlUvMC9FOEQ4NjBCNDIyRUNDMjdCMEZFNDY3MkM2MjU0RDNEMTIyRTE1RjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4RDg2MEI0MjJFQ0MyN0Iw
RkU0NjcyQzYyNTREM0QxMjJFMTVGNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrbW9pcTdoSDRRdGFyS05rWU1OVHVVTGpiS2E3aDcxanZyZld5dUc2NTZVLzAv
MzIzODMwMzQzYTM0NjEzOTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzIzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKkDANBgkqhkiG9w0BAQsFAAOCAQEAUiMyGkPl
M6i93DF82lpb08j5a+uzRZW5of7m82HGvKiFSNl5i0wliJVzY4m7uy762PEFJBer
q2kq5zmjBpswdNAGz/NCml5NsaYwL28W689CQ3sA9ab4MPvJ7yLC6j1IhgmGWeal
dnEua0lSGmxMhoezqWZ3hhwf0FShYjpySRHhlMMunzjOelUGlrdP0zEZQGBZszOv
sgQ8rzQy4JfsV9BDdYj7i9p/gLiVLJq5WEMY7ERrz4oxTkGGHU5ZNi+ep/AylpYy
ezaCECDTMVO92xVXH+aPxx4BOfpRW5T5jNsAl/IyM/MU0KUwRNvsoLj6LPRGeQZn
M6NPQp2FdWaDRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org