Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a313131633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          1Dngvjk3aD07C64w2NnECjew2KSylo+tMrOhKJzYiYc=
Subject key identifier:   A9:29:8C:B5:1F:8E:A6:07:D0:F1:4E:EA:15:A2:65:98:33:E4:FC:FF
Certificate issuer:       /CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
Certificate serial:       5176CBB81E3CB4EF757C12A368EC3661572D14C2
Authority key identifier: 6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Wed 13 Dec 2023 14:29:04 +0000
ROA not before:           Wed 13 Dec 2023 14:24:04 +0000
ROA not after:            Wed 11 Dec 2024 14:29:04 +0000
asID:                     264485
IP address blocks:        2804:2050:111c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:76:cb:b8:1e:3c:b4:ef:75:7c:12:a3:68:ec:36:61:57:2d:14:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
        Validity
            Not Before: Dec 13 14:24:04 2023 GMT
            Not After : Dec 11 14:29:04 2024 GMT
        Subject: CN=A9298CB51F8EA607D0F14EEA15A2659833E4FCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:05:a8:52:a3:e5:67:88:ef:db:39:6b:bb:
                    85:d9:f1:a9:16:92:5c:d2:bb:6a:d3:93:10:71:14:
                    8a:9e:5f:ba:b0:fa:b0:cf:b7:de:13:8b:ae:13:b0:
                    0c:fd:32:60:13:4c:61:ff:fe:4e:36:f9:17:3b:ec:
                    9a:30:0e:2d:fe:6b:89:e4:5e:21:32:98:f4:0d:4f:
                    e8:d7:97:aa:87:7b:44:18:c7:cc:f8:bf:c9:4d:29:
                    2f:63:0c:29:60:ad:8f:cf:b8:0d:77:63:c1:25:83:
                    12:0f:e8:95:9f:41:d2:0d:da:ca:7c:f6:b6:0e:6c:
                    56:d7:7b:89:c7:17:be:a9:f9:0d:5c:ad:89:1b:19:
                    28:d2:d0:fc:86:98:e4:a0:fa:3a:21:ee:d1:63:36:
                    4b:97:71:30:9b:f6:67:8e:38:78:e1:14:6e:ec:ee:
                    1d:de:5a:29:9f:b6:a0:68:35:fe:01:b3:85:3c:fc:
                    a6:7c:be:16:25:5b:07:84:1b:1e:15:f0:d3:64:a4:
                    d6:a9:fb:d4:f7:d8:a5:52:fc:49:39:51:df:c8:ca:
                    fc:48:bc:0f:d0:b5:00:21:c2:99:17:69:b4:5e:91:
                    a2:bd:4d:f6:82:03:3f:80:af:1d:fd:fb:d8:cb:e1:
                    d8:80:72:c9:ac:42:d9:6b:32:4e:91:b4:ea:00:18:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:29:8C:B5:1F:8E:A6:07:D0:F1:4E:EA:15:A2:65:98:33:E4:FC:FF
            X509v3 Authority Key Identifier:
                keyid:6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:111c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:5a:67:f7:0c:a1:7f:7a:2f:e5:7d:eb:67:e9:c9:93:ed:
         d6:76:8b:cb:80:f2:2d:5a:54:1c:c1:91:a0:af:7f:ca:50:8e:
         ae:a3:83:f3:17:0b:32:52:c3:5f:d8:ba:21:9a:54:88:06:49:
         1d:b6:d0:82:70:77:78:ee:7e:d6:9b:0d:75:d8:c6:3a:ec:4b:
         8d:e2:2a:af:47:31:cb:95:bc:0a:39:9e:e1:19:9e:f4:33:66:
         27:6d:e9:1c:8c:33:54:f7:1c:c3:5b:21:57:eb:35:da:b9:41:
         b0:ac:48:72:1d:69:1c:56:12:75:de:27:be:42:49:d7:85:07:
         c7:a7:74:f1:a5:1c:59:14:b3:a7:2c:e0:92:97:ae:0a:1d:cb:
         24:b0:5c:13:ed:82:cc:33:01:43:13:22:ba:ba:65:b6:98:d3:
         2c:95:66:18:29:42:99:c2:77:45:f7:9d:86:aa:6f:9b:5b:0e:
         b4:b3:ad:c8:8b:ce:f4:2d:cb:af:2b:c5:40:c3:ee:b6:bc:c1:
         cd:20:79:9d:49:f0:d7:bb:1d:25:ff:10:04:13:ed:26:57:ce:
         a0:9c:25:6c:e1:59:fd:12:b9:5a:93:5d:e1:a1:37:f3:39:6a:
         1a:09:6d:8c:31:b2:eb:8e:9b:4f:01:49:5d:07:24:9b:4e:b8:
         66:8b:d4:2d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUUXbLuB48tO91fBKjaOw2YVctFMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVFREVFODMyN0NBNUUyNTRCNjA4NEE2RUVGNjkwOTAw
RkRCRTg4NzAeFw0yMzEyMTMxNDI0MDRaFw0yNDEyMTExNDI5MDRaMDMxMTAvBgNV
BAMTKEE5Mjk4Q0I1MUY4RUE2MDdEMEYxNEVFQTE1QTI2NTk4MzNFNEZDRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0wWoUqPlZ4jv2zlru4XZ8akW
klzSu2rTkxBxFIqeX7qw+rDPt94Ti64TsAz9MmATTGH//k42+Rc77JowDi3+a4nk
XiEymPQNT+jXl6qHe0QYx8z4v8lNKS9jDClgrY/PuA13Y8ElgxIP6JWfQdIN2sp8
9rYObFbXe4nHF76p+Q1crYkbGSjS0PyGmOSg+joh7tFjNkuXcTCb9meOOHjhFG7s
7h3eWimftqBoNf4Bs4U8/KZ8vhYlWweEGx4V8NNkpNap+9T32KVS/Ek5Ud/IyvxI
vA/QtQAhwpkXabRekaK9TfaCAz+Arx39+9jL4diAcsmsQtlrMk6RtOoAGHz1AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUqSmMtR+OpgfQ8U7qFaJlmDPk/P8wHwYDVR0j
BBgwFoAUbu3ugyfKXiVLYISm7vaQkA/b6IcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC82RUVERUU4MzI3Q0E1RTI1NEI2MDg0QTZFRUY2OTA5MDBGREJFODg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZFRURFRTgzMjdDQTVFMjU0
QjYwODRBNkVFRjY5MDkwMEZEQkU4ODcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzIzODMwMzQzYTMyMzAzNTMwM2EzMTMxMzE2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEIFARHDANBgkqhkiG9w0BAQsF
AAOCAQEAnQdaZ/cMoX96L+V962fpyZPt1naLy4DyLVpUHMGRoK9/ylCOrqOD8xcL
MlLDX9i6IZpUiAZJHbbQgnB3eO5+1psNddjGOuxLjeIqr0cxy5W8Cjme4Rme9DNm
J23pHIwzVPccw1shV+s12rlBsKxIch1pHFYSdd4nvkJJ14UHx6d08aUcWRSzpyzg
kpeuCh3LJLBcE+2CzDMBQxMiurpltpjTLJVmGClCmcJ3Rfedhqpvm1sOtLOtyIvO
9C3LryvFQMPutrzBzSB5nUnw17sdJf8QBBPtJlfOoJwlbOFZ/RK5WpNd4aE38zlq
GgltjDGy646bTwFJXQckm064ZovULQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org