Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030303a3a2f33362d3336203d3e20323731303134.roa
File:                     323830343a373466343a663030303a3a2f33362d3336203d3e20323731303134.roa (raw, json)
Hash identifier:          9Mm0V3luQwzDAa5SAoX8WIut9RZdBH52C4fYANh42R0=
Subject key identifier:   D7:8C:62:6A:A3:67:3E:02:21:E4:1B:D1:0A:B3:07:51:99:29:21:1B
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       02673DECC7E2CE251705644826B1D686E8CF96EA
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030303a3a2f33362d3336203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:58 +0000
ROA not before:           Thu 08 Feb 2024 14:00:58 +0000
ROA not after:            Thu 06 Feb 2025 14:05:58 +0000
asID:                     271014
IP address blocks:        2804:74f4:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:67:3d:ec:c7:e2:ce:25:17:05:64:48:26:b1:d6:86:e8:cf:96:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:58 2024 GMT
            Not After : Feb  6 14:05:58 2025 GMT
        Subject: CN=D78C626AA3673E0221E41BD10AB307519929211B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:66:7a:47:1c:5c:98:63:61:4f:ce:81:05:
                    fa:c9:ee:3a:ed:57:8c:e6:58:45:13:ea:e8:64:a3:
                    84:7f:b7:9a:44:74:0a:72:7d:ee:fb:a2:47:b4:e9:
                    f0:2f:ef:62:b6:8a:e8:e0:44:e3:c5:e0:78:86:e2:
                    45:a1:ef:06:52:3d:46:f3:91:3d:2f:2e:85:9c:6e:
                    30:3f:9d:d6:63:2a:1e:fb:d4:b3:3a:f3:e3:9e:e3:
                    dd:0a:fd:f0:3c:1b:61:de:ea:e6:bb:bb:7f:c7:7d:
                    53:5d:85:9d:28:dc:65:ed:fd:17:b6:06:fa:95:3d:
                    9b:ff:eb:e8:73:71:07:ca:68:0d:d9:6f:73:68:a0:
                    4a:3c:73:ad:d3:82:60:8f:da:f7:a6:8c:b4:65:cc:
                    72:b2:bd:43:b5:ae:68:c7:06:ff:c9:0a:0e:e9:52:
                    a0:61:e1:87:65:ae:1a:19:b5:d4:92:33:49:70:f3:
                    5a:b9:85:a8:78:e3:8c:da:4f:0f:b2:7f:43:78:f2:
                    e5:66:12:35:91:0c:4b:96:81:01:0b:3c:08:82:84:
                    6e:d1:a6:51:cc:fe:a4:6c:2c:b6:a2:2e:89:ff:cf:
                    b2:1c:af:2b:61:0d:ba:07:d8:5c:5b:0a:56:d9:79:
                    6d:8b:53:73:fe:e7:7a:92:75:7f:1b:29:c1:83:00:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8C:62:6A:A3:67:3E:02:21:E4:1B:D1:0A:B3:07:51:99:29:21:1B
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030303a3a2f33362d3336203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:c2:a4:47:e9:54:01:7a:e6:c5:21:0a:97:12:a7:c7:02:
         bf:df:cd:29:37:e0:7c:b5:0a:73:b4:81:6b:0a:df:f9:71:a6:
         10:53:4a:be:f7:92:60:55:cd:e5:3e:e1:3e:61:70:0d:3d:2b:
         e1:e0:db:ab:ae:f3:96:e1:b5:f5:aa:d9:77:ff:b3:d6:c3:5f:
         39:a7:91:82:90:fe:75:0b:fd:07:71:3b:a8:79:64:75:4c:92:
         81:6f:c7:36:14:df:c2:58:d4:8b:6d:7e:f1:ab:25:9e:5c:8a:
         a9:f2:ac:68:d7:0c:59:22:51:34:45:0d:c2:41:cb:3d:c6:d4:
         51:cc:2d:88:10:a2:08:00:3f:59:d6:85:71:62:fc:6e:ec:96:
         89:6b:06:28:f3:af:ec:42:0f:97:49:9d:d2:21:ef:d3:a8:57:
         9c:55:b2:27:97:f7:74:0b:99:6e:c0:3a:1d:3e:7b:2e:4e:19:
         cd:83:ae:c6:d8:ce:96:ef:b4:06:e4:45:99:8d:42:7f:8e:8a:
         ad:a2:a7:09:82:27:bf:9b:97:20:c6:26:8c:95:3c:55:69:7c:
         a8:35:a0:82:f2:12:40:45:5e:01:8c:47:ac:69:b3:f1:bf:20:
         72:c1:f6:ae:a8:e5:b1:3a:61:bb:cf:ed:e7:ad:5d:c8:b9:8e:
         2b:09:5e:64
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAmc97MfiziUXBWRIJrHWhujPluowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDQUY0QzE0RDc5N0VFMTcxRTZBNkM1QzExOTg4QUVB
ODRCQzM1MjAeFw0yNDAyMDgxNDAwNThaFw0yNTAyMDYxNDA1NThaMDMxMTAvBgNV
BAMTKEQ3OEM2MjZBQTM2NzNFMDIyMUU0MUJEMTBBQjMwNzUxOTkyOTIxMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9R2Z6RxxcmGNhT86BBfrJ7jrt
V4zmWEUT6uhko4R/t5pEdApyfe77oke06fAv72K2iujgROPF4HiG4kWh7wZSPUbz
kT0vLoWcbjA/ndZjKh771LM68+Oe490K/fA8G2He6ua7u3/HfVNdhZ0o3GXt/Re2
BvqVPZv/6+hzcQfKaA3Zb3NooEo8c63TgmCP2vemjLRlzHKyvUO1rmjHBv/JCg7p
UqBh4YdlrhoZtdSSM0lw81q5hah444zaTw+yf0N48uVmEjWRDEuWgQELPAiChG7R
plHM/qRsLLaiLon/z7IcrythDboH2FxbClbZeW2LU3P+53qSdX8bKcGDALVbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU14xiaqNnPgIh5BvRCrMHUZkpIRswHwYDVR0j
BBgwFoAUJMr0wU15fuFx5qbFwRmIrqhLw1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdn
RHcvMC8yNENBRjRDMTRENzk3RUUxNzFFNkE2QzVDMTE5ODhBRUE4NEJDMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0Q0FGNEMxNEQ3OTdFRTE3
MUU2QTZDNUMxMTk4OEFFQTg0QkMzNTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U0M0dkYm1peGNQWDg3eGlBUzN5dFdqZmY0c3ViQnVrZzZ0b2NVRExHZ0R3LzAv
MzIzODMwMzQzYTM3MzQ2NjM0M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTMwMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEdPTwMA0GCSqGSIb3DQEBCwUA
A4IBAQCT/sKkR+lUAXrmxSEKlxKnxwK/380pN+B8tQpztIFrCt/5caYQU0q+95Jg
Vc3lPuE+YXANPSvh4NurrvOW4bX1qtl3/7PWw185p5GCkP51C/0HcTuoeWR1TJKB
b8c2FN/CWNSLbX7xqyWeXIqp8qxo1wxZIlE0RQ3CQcs9xtRRzC2IEKIIAD9Z1oVx
Yvxu7JaJawYo86/sQg+XSZ3SIe/TqFecVbInl/d0C5luwDodPnsuThnNg67G2M6W
77QG5EWZjUJ/joqtoqcJgie/m5cgxiaMlTxVaXyoNaCC8hJARV4BjEesabPxvyBy
wfauqOWxOmG7z+3nrV3IuY4rCV5k
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org