Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a633030303a3a2f33342d3438203d3e203430333536.roa
File:                     323030313a313261343a633030303a3a2f33342d3438203d3e203430333536.roa (raw, json)
Hash identifier:          fFumv+9ml5NHPwQ3HeOGJRt4EHuVIJy62OKQGDZjzVc=
Subject key identifier:   CE:F1:33:EC:C6:DF:BB:5B:D7:D2:06:27:F7:9C:78:9E:2F:D1:4F:8C
Certificate issuer:       /CN=FFE926797ED6B4B77254E574E1E76238A7293520
Certificate serial:       17F966238BD5302FBE0E572D7C1C11AC06768DB9
Authority key identifier: FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a633030303a3a2f33342d3438203d3e203430333536.roa
Signing time:             Fri 13 May 2022 12:55:50 +0000
ROA not before:           Fri 13 May 2022 12:50:50 +0000
ROA not after:            Fri 12 May 2023 12:55:50 +0000
asID:                     40356
IP address blocks:        2001:12a4:c000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f9:66:23:8b:d5:30:2f:be:0e:57:2d:7c:1c:11:ac:06:76:8d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE926797ED6B4B77254E574E1E76238A7293520
        Validity
            Not Before: May 13 12:50:50 2022 GMT
            Not After : May 12 12:55:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:fd:20:c1:e5:6d:01:0f:0f:74:cb:b0:1a:
                    4e:1d:cb:47:b4:9a:40:e9:82:0b:12:c6:12:bd:67:
                    2a:fe:63:82:9e:d5:b5:a1:6f:9f:8a:cd:d2:f9:83:
                    06:77:d0:a8:a5:49:a7:50:3d:1f:6f:f0:3b:65:ad:
                    37:ac:fc:c7:36:aa:8f:31:19:80:63:df:ee:72:6e:
                    57:03:65:3e:52:94:79:82:71:8c:e8:9d:c1:14:33:
                    7f:25:e8:01:bb:fa:32:50:26:cd:c8:98:1a:ff:4c:
                    d9:48:17:87:c0:1c:25:bf:7f:c9:2d:01:01:e6:99:
                    c9:1c:b9:99:b4:f6:8a:b3:b7:27:c8:74:a6:3c:1a:
                    50:11:79:92:da:27:f4:f6:ff:e4:0f:25:b2:b1:40:
                    49:dc:e1:b0:48:2a:ef:25:ea:cb:c6:27:76:e5:04:
                    69:02:78:bc:79:3e:03:cc:13:1b:ba:31:a6:b6:94:
                    cd:9d:b7:b4:7c:33:e9:16:45:30:8a:23:c8:32:50:
                    9e:ca:e1:30:76:aa:51:b1:f0:f5:47:0d:6f:08:c9:
                    95:cc:7d:9c:2f:3d:3b:2c:71:70:a0:ec:c6:ae:63:
                    51:79:9d:82:06:d8:c1:f2:bd:ad:22:e7:d4:60:8e:
                    67:70:c5:07:23:5c:a7:99:33:c8:d7:2b:5b:41:f0:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:33:EC:C6:DF:BB:5B:D7:D2:06:27:F7:9C:78:9E:2F:D1:4F:8C
            X509v3 Authority Key Identifier:
                keyid:FF:E9:26:79:7E:D6:B4:B7:72:54:E5:74:E1:E7:62:38:A7:29:35:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/FFE926797ED6B4B77254E574E1E76238A7293520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE926797ED6B4B77254E574E1E76238A7293520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/0/323030313a313261343a633030303a3a2f33342d3438203d3e203430333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:a1:69:f1:4b:d2:6e:be:cb:dc:b6:fd:e1:72:d3:43:47:4e:
         29:c8:a7:ed:b0:59:15:5b:e2:ff:24:b8:1d:00:1a:fe:53:b2:
         97:ac:ae:26:0e:c4:6d:50:1e:0e:7e:85:0c:a4:9f:f6:70:d0:
         3a:4c:ad:eb:d6:55:6e:b2:df:10:61:81:a1:b0:4b:d7:d3:40:
         d3:63:f5:63:d4:83:8d:de:83:ed:91:88:ce:cd:7c:7f:8b:2d:
         ad:bf:ac:8c:e8:8f:3a:6f:d0:4c:59:46:81:77:58:f3:60:eb:
         59:8a:e7:1c:ca:67:0a:49:92:58:ae:e2:b5:26:c4:93:96:d5:
         93:bb:59:95:56:3a:c0:ff:86:25:09:1f:28:e6:0b:ff:88:53:
         9f:39:bb:67:17:bc:03:50:b3:6a:e5:26:e2:8f:b9:20:ca:13:
         7a:da:4f:25:d0:75:63:ec:b0:ae:6c:32:1f:88:39:fb:b9:35:
         ca:d0:41:48:3c:b6:25:bc:22:fb:f5:34:32:77:b0:a4:7f:5f:
         24:80:3c:26:e4:c9:d9:67:db:01:be:a7:76:7d:66:14:e2:b1:
         c0:83:ea:eb:ba:9c:a6:07:34:b3:18:72:c6:0a:f8:5f:d1:57:
         00:45:cb:d0:84:db:1c:60:e1:6e:0e:11:a7:8c:25:e7:25:39:
         6c:4f:97:93
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUF/lmI4vVMC++DlctfBwRrAZ2jbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZFOTI2Nzk3RUQ2QjRCNzcyNTRFNTc0RTFFNzYyMzhB
NzI5MzUyMDAeFw0yMjA1MTMxMjUwNTBaFw0yMzA1MTIxMjU1NTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQ2MEZEMjBDMUU1NkQwMTBG
MEY3NENCQjAxQTRFMURDQjQ3QjQ5QTQwRTk4MjBCMTJDNjEyQkQ2NzJBRkU2Mzgy
OUVENUI1QTE2RjlGOEFDREQyRjk4MzA2NzdEMEE4QTU0OUE3NTAzRDFGNkZGMDNC
NjVBRDM3QUNGQ0M3MzZBQThGMzExOTgwNjNERkVFNzI2RTU3MDM2NTNFNTI5NDc5
ODI3MThDRTg5REMxMTQzMzdGMjVFODAxQkJGQTMyNTAyNkNEQzg5ODFBRkY0Q0Q5
NDgxNzg3QzAxQzI1QkY3RkM5MkQwMTAxRTY5OUM5MUNCOTk5QjRGNjhBQjNCNzI3
Qzg3NEE2M0MxQTUwMTE3OTkyREEyN0Y0RjZGRkU0MEYyNUIyQjE0MDQ5RENFMUIw
NDgyQUVGMjVFQUNCQzYyNzc2RTUwNDY5MDI3OEJDNzkzRTAzQ0MxMzFCQkEzMUE2
QjY5NENEOURCN0I0N0MzM0U5MTY0NTMwOEEyM0M4MzI1MDlFQ0FFMTMwNzZBQTUx
QjFGMEY1NDcwRDZGMDhDOTk1Q0M3RDlDMkYzRDNCMkM3MTcwQTBFQ0M2QUU2MzUx
Nzk5RDgyMDZEOEMxRjJCREFEMjJFN0Q0NjA4RTY3NzBDNTA3MjM1Q0E3OTkzM0M4
RDcyQjVCNDFGMDdCMTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvWD9IMHlbQEPD3TLsBpOHctHtJpA6YILEsYSvWcq/mOCntW1oW+f
is3S+YMGd9CopUmnUD0fb/A7Za03rPzHNqqPMRmAY9/ucm5XA2U+UpR5gnGM6J3B
FDN/JegBu/oyUCbNyJga/0zZSBeHwBwlv3/JLQEB5pnJHLmZtPaKs7cnyHSmPBpQ
EXmS2if09v/kDyWysUBJ3OGwSCrvJerLxid25QRpAni8eT4DzBMbujGmtpTNnbe0
fDPpFkUwiiPIMlCeyuEwdqpRsfD1Rw1vCMmVzH2cLz07LHFwoOzGrmNReZ2CBtjB
8r2tIufUYI5ncMUHI1ynmTPI1ytbQfB7FQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FM7xM+zG37tb19IGJ/eceJ4v0U+MMB8GA1UdIwQYMBaAFP/pJnl+1rS3clTldOHn
YjinKTUgMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RwYksxM1R6cWRXS2ZY
cHJNREhIeDlLWkNKNnd2dllHMkdkTnRmcGZEYlhQLzAvRkZFOTI2Nzk3RUQ2QjRC
NzcyNTRFNTc0RTFFNzYyMzhBNzI5MzUyMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRkU5MjY3OTdFRDZCNEI3NzI1NEU1NzRFMUU3NjIzOEE3Mjkz
NTIwLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EcGJLMTNUenFkV0tmWHByTURI
SHg5S1pDSjZ3dnZZRzJHZE50ZnBmRGJYUC8wLzMyMzAzMDMxM2EzMTMyNjEzNDNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzNDM4MjAzZDNlMjAzNDMwMzMzNTM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYGIAESpMAwDQYJKoZIhvcNAQELBQADggEBAJOhafFL0m6+y9y2/eFy00NH
TinIp+2wWRVb4v8kuB0AGv5TspesriYOxG1QHg5+hQykn/Zw0DpMrevWVW6y3xBh
gaGwS9fTQNNj9WPUg43eg+2RiM7NfH+LLa2/rIzojzpv0ExZRoF3WPNg61mK5xzK
ZwpJkliu4rUmxJOW1ZO7WZVWOsD/hiUJHyjmC/+IU585u2cXvANQs2rlJuKPuSDK
E3raTyXQdWPssK5sMh+IOfu5NcrQQUg8tiW8Ivv1NDJ3sKR/XySAPCbkydln2wG+
p3Z9ZhTiscCD6uu6nKYHNLMYcsYK+F/RVwBFy9CE2xxg4W4OEaeMJeclOWxPl5M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org