Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa
File:                     323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa (raw, json)
Hash identifier:          NqnO3A/gAn93VRiQpc2Mw8MpyxN6v5XXEflehbLCZpg=
Subject key identifier:   FE:84:88:DF:D5:AD:A7:05:30:EA:AA:D5:CD:FD:DA:C9:22:DA:BA:71
Certificate issuer:       /CN=5AC857044932470260E44A2750076A9293F37835
Certificate serial:       18F603153886E0C8389574017028ABD1D9F84244
Authority key identifier: 5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa
Signing time:             Wed 31 Jan 2024 00:50:27 +0000
ROA not before:           Wed 31 Jan 2024 00:45:27 +0000
ROA not after:            Wed 29 Jan 2025 00:50:27 +0000
asID:                     271478
IP address blocks:        2804:7c24:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f6:03:15:38:86:e0:c8:38:95:74:01:70:28:ab:d1:d9:f8:42:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC857044932470260E44A2750076A9293F37835
        Validity
            Not Before: Jan 31 00:45:27 2024 GMT
            Not After : Jan 29 00:50:27 2025 GMT
        Subject: CN=FE8488DFD5ADA70530EAAAD5CDFDDAC922DABA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:97:ee:e4:04:25:e1:bf:cb:88:97:df:c2:
                    cc:96:52:56:60:ab:27:da:a7:b0:c4:f0:09:10:6c:
                    94:45:ec:ee:a0:41:45:1f:3c:6c:cc:77:ba:b8:78:
                    cb:21:80:82:b1:17:60:ad:11:ad:f4:1a:dd:c1:fb:
                    3a:09:34:99:cf:71:a0:c8:2a:cd:05:9b:9e:5d:ee:
                    9e:52:2b:c1:4b:76:18:3d:f7:6b:54:6e:53:ac:ea:
                    1b:b0:39:de:10:93:5e:51:9d:e5:a1:64:bd:9d:b6:
                    f9:8c:f8:b8:a3:e6:35:fa:0a:89:77:de:63:38:81:
                    7c:15:c6:2f:74:bd:d6:86:1b:f3:a9:42:cc:7a:8c:
                    52:a7:3a:08:89:1a:52:f5:e5:67:5b:e9:76:e1:d1:
                    1b:14:07:46:97:d0:a0:2b:fa:0f:9a:ae:4e:9e:ff:
                    26:54:16:49:6e:09:6c:c0:cd:84:54:68:be:36:fe:
                    ea:e6:53:45:41:40:1a:7b:02:9c:1c:c7:70:81:06:
                    38:85:d1:da:d9:e2:b4:30:61:ef:cf:4a:34:1b:0f:
                    5e:91:d4:94:e9:60:f0:c9:06:eb:50:f8:b8:9a:0f:
                    27:16:7a:c2:6c:02:18:76:a4:d4:4b:75:21:07:9f:
                    96:ce:0f:de:9e:ac:f8:8b:06:4e:34:4f:3c:22:ec:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:84:88:DF:D5:AD:A7:05:30:EA:AA:D5:CD:FD:DA:C9:22:DA:BA:71
            X509v3 Authority Key Identifier:
                keyid:5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/5AC857044932470260E44A2750076A9293F37835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:14:8b:2c:2c:4b:5b:4f:ba:32:40:11:01:63:a8:1b:79:72:
         08:99:6f:38:a5:52:1f:03:12:68:46:35:94:13:d9:f5:74:80:
         ce:15:66:52:81:8e:a5:fe:02:bf:16:35:2f:e6:8d:10:4a:28:
         30:dd:e0:41:f8:c7:92:50:67:d1:d2:d6:ab:07:59:05:f6:72:
         79:81:04:45:3f:39:41:68:6c:c9:a9:54:93:41:5a:a9:65:e4:
         cd:df:91:5d:0a:ad:4a:7f:f0:cb:90:04:18:36:aa:2b:41:f7:
         1e:e1:d9:20:5e:68:57:b6:ac:d0:67:26:a4:ff:d6:91:cc:e3:
         95:1d:8d:9d:ba:7f:6f:e5:1a:c2:2d:36:86:d7:54:6c:33:84:
         23:b0:de:c9:ae:c3:04:d0:14:f4:ad:b6:0b:5d:35:24:11:64:
         ca:83:c8:07:b6:1b:33:e1:3f:fd:0c:16:46:60:93:a0:50:62:
         54:e0:6d:a4:82:9b:60:79:cd:ca:b1:51:41:9a:f3:71:8a:ae:
         56:4b:e7:a8:10:4b:e4:c0:6c:83:3b:a3:87:01:26:1e:c8:0f:
         0f:ba:80:2d:82:d2:26:8e:84:70:38:cf:1e:67:26:aa:da:cd:
         a3:a4:57:47:bf:ed:e5:92:aa:fd:14:80:50:8d:2b:e4:27:03:
         de:67:a0:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGPYDFTiG4Mg4lXQBcCir0dn4QkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDODU3MDQ0OTMyNDcwMjYwRTQ0QTI3NTAwNzZBOTI5
M0YzNzgzNTAeFw0yNDAxMzEwMDQ1MjdaFw0yNTAxMjkwMDUwMjdaMDMxMTAvBgNV
BAMTKEZFODQ4OERGRDVBREE3MDUzMEVBQUFENUNERkREQUM5MjJEQUJBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlZfu5AQl4b/LiJffwsyWUlZg
qyfap7DE8AkQbJRF7O6gQUUfPGzMd7q4eMshgIKxF2CtEa30Gt3B+zoJNJnPcaDI
Ks0Fm55d7p5SK8FLdhg992tUblOs6huwOd4Qk15RneWhZL2dtvmM+Lij5jX6Col3
3mM4gXwVxi90vdaGG/OpQsx6jFKnOgiJGlL15Wdb6Xbh0RsUB0aX0KAr+g+ark6e
/yZUFkluCWzAzYRUaL42/urmU0VBQBp7Apwcx3CBBjiF0drZ4rQwYe/PSjQbD16R
1JTpYPDJButQ+LiaDycWesJsAhh2pNRLdSEHn5bOD96erPiLBk40Tzwi7DmDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/oSI39WtpwUw6qrVzf3aySLaunEwHwYDVR0j
BBgwFoAUWshXBEkyRwJg5EonUAdqkpPzeDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9ENHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZS
UHcvMC81QUM4NTcwNDQ5MzI0NzAyNjBFNDRBMjc1MDA3NkE5MjkzRjM3ODM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBQzg1NzA0NDkzMjQ3MDI2
MEU0NEEyNzUwMDc2QTkyOTNGMzc4MzUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvRDR6MWtRS0ZyQzltZGlrWFZuU0xrbXZjQlozdW1uOUwzZmdRQ3BmUlB3LzAv
MzIzODMwMzQzYTM3NjMzMjM0M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTM0MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEfCTAMA0GCSqGSIb3DQEBCwUA
A4IBAQAkFIssLEtbT7oyQBEBY6gbeXIImW84pVIfAxJoRjWUE9n1dIDOFWZSgY6l
/gK/FjUv5o0QSigw3eBB+MeSUGfR0tarB1kF9nJ5gQRFPzlBaGzJqVSTQVqpZeTN
35FdCq1Kf/DLkAQYNqorQfce4dkgXmhXtqzQZyak/9aRzOOVHY2dun9v5RrCLTaG
11RsM4QjsN7JrsME0BT0rbYLXTUkEWTKg8gHthsz4T/9DBZGYJOgUGJU4G2kgptg
ec3KsVFBmvNxiq5WS+eoEEvkwGyDO6OHASYeyA8PuoAtgtImjoRwOM8eZyaq2s2j
pFdHv+3lkqr9FIBQjSvkJwPeZ6A/
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org