Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030353a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a663030353a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          qjQrTHqx8NsO8CHsu++dtrGwbIYzx2PdzbU6sHKL8hg=
Subject key identifier:   DA:87:12:AF:E3:9D:33:EC:A4:FD:0C:A0:57:77:BC:BF:73:95:21:62
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       59E423105378FD2FCEDDB9CB53A70E2BCF33A1C5
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030353a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:05:58 +0000
ROA not before:           Thu 08 Feb 2024 14:00:58 +0000
ROA not after:            Thu 06 Feb 2025 14:05:58 +0000
asID:                     271014
IP address blocks:        2804:74f4:f005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e4:23:10:53:78:fd:2f:ce:dd:b9:cb:53:a7:0e:2b:cf:33:a1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:00:58 2024 GMT
            Not After : Feb  6 14:05:58 2025 GMT
        Subject: CN=DA8712AFE39D33ECA4FD0CA05777BCBF73952162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:32:2c:f1:e4:3a:f8:1d:12:bf:77:b4:70:
                    2e:11:07:4a:c3:31:92:ee:b1:68:af:36:4b:8e:1d:
                    62:b0:1f:0a:e6:63:98:3a:51:c0:78:5f:c3:59:bd:
                    e1:68:b2:d2:71:74:dc:7a:f2:43:20:90:61:c2:68:
                    94:0c:e3:78:19:55:87:a4:70:50:e8:fc:0a:f5:b6:
                    c5:9d:d6:d2:98:81:ed:07:95:e9:6e:5e:59:f9:3d:
                    06:65:3f:6b:b3:7a:73:3f:21:9e:be:94:b3:0b:23:
                    bd:72:98:7d:28:fa:ad:36:c5:a4:16:b9:3e:ae:5a:
                    5a:09:48:c3:c4:1d:96:52:bf:c1:e0:05:8f:f4:31:
                    fa:b5:2b:2a:72:c7:c0:c4:a1:91:5b:57:b0:31:c4:
                    fd:b1:1d:26:93:93:8b:06:2c:76:13:fa:dd:f0:ea:
                    92:8e:91:b0:58:d9:6a:00:ac:63:ea:dd:01:24:57:
                    6f:ad:0e:d7:9d:3f:dc:96:71:09:a8:e4:af:54:5e:
                    27:95:f0:21:08:2b:6c:f2:78:51:d8:9f:4a:89:e6:
                    4f:65:1a:c2:18:2c:76:0d:6c:99:8f:1b:55:0c:3a:
                    a3:70:07:2a:46:96:27:f7:d4:82:4c:41:1c:05:4a:
                    87:4e:4a:27:2c:57:7e:2e:95:ec:d1:91:c2:a9:5a:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:12:AF:E3:9D:33:EC:A4:FD:0C:A0:57:77:BC:BF:73:95:21:62
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a663030353a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:f005::/48

    Signature Algorithm: sha256WithRSAEncryption
         e5:80:0c:c0:58:f9:cc:8f:3d:91:08:aa:ff:7d:2f:c1:06:0d:
         ef:24:38:e7:ce:d0:b6:3e:cb:01:d5:80:4b:d7:22:b6:d9:ee:
         e7:7c:d6:86:f4:1e:ed:ef:b9:88:fa:77:90:8b:0c:0d:9d:77:
         8e:19:d2:30:e6:ba:9e:16:f7:c9:6d:2d:ce:33:d7:6b:69:73:
         3c:06:8a:02:b1:65:46:ed:3c:70:0a:41:fe:78:b2:b5:c8:e8:
         0a:27:b9:81:5b:c4:68:50:e1:b2:c3:3b:5d:dc:59:35:70:35:
         16:1b:cb:b5:3b:6b:c0:0f:c5:97:bf:cc:ac:b4:14:bf:b5:ba:
         e7:bc:85:ee:6c:d4:d0:9c:dd:ab:66:28:d7:6c:12:71:a1:72:
         9a:4a:bf:d3:d4:f1:e0:73:05:ee:9c:53:70:ac:ee:a9:a6:9e:
         6f:44:b1:90:fb:6a:f5:ec:6f:f9:3e:a3:29:a6:64:28:0d:f7:
         81:29:28:e3:3f:47:d1:6a:11:b7:16:e1:77:db:2a:6e:c4:3b:
         fd:f1:0c:b3:a2:41:27:be:6a:30:8b:4c:96:45:94:68:70:e1:
         39:c7:2c:18:fe:dc:36:6a:9b:38:da:09:75:95:58:b9:e1:18:
         40:91:e9:2a:77:c3:db:37:7b:6b:b9:23:44:a5:22:78:a4:41:
         f5:ec:c5:2a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUWeQjEFN4/S/O3bnLU6cOK88zocUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDQUY0QzE0RDc5N0VFMTcxRTZBNkM1QzExOTg4QUVB
ODRCQzM1MjAeFw0yNDAyMDgxNDAwNThaFw0yNTAyMDYxNDA1NThaMDMxMTAvBgNV
BAMTKERBODcxMkFGRTM5RDMzRUNBNEZEMENBMDU3NzdCQ0JGNzM5NTIxNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIjIs8eQ6+B0Sv3e0cC4RB0rD
MZLusWivNkuOHWKwHwrmY5g6UcB4X8NZveFostJxdNx68kMgkGHCaJQM43gZVYek
cFDo/Ar1tsWd1tKYge0HleluXln5PQZlP2uzenM/IZ6+lLMLI71ymH0o+q02xaQW
uT6uWloJSMPEHZZSv8HgBY/0Mfq1Kypyx8DEoZFbV7AxxP2xHSaTk4sGLHYT+t3w
6pKOkbBY2WoArGPq3QEkV2+tDtedP9yWcQmo5K9UXieV8CEIK2zyeFHYn0qJ5k9l
GsIYLHYNbJmPG1UMOqNwBypGlif31IJMQRwFSodOSicsV34ulezRkcKpWr+9AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU2ocSr+OdM+yk/QygV3e8v3OVIWIwHwYDVR0j
BBgwFoAUJMr0wU15fuFx5qbFwRmIrqhLw1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdn
RHcvMC8yNENBRjRDMTRENzk3RUUxNzFFNkE2QzVDMTE5ODhBRUE4NEJDMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0Q0FGNEMxNEQ3OTdFRTE3
MUU2QTZDNUMxMTk4OEFFQTg0QkMzNTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U0M0dkYm1peGNQWDg3eGlBUzN5dFdqZmY0c3ViQnVrZzZ0b2NVRExHZ0R3LzAv
MzIzODMwMzQzYTM3MzQ2NjM0M2E2NjMwMzAzNTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMTMwMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEdPTwBTANBgkqhkiG9w0BAQsF
AAOCAQEA5YAMwFj5zI89kQiq/30vwQYN7yQ4587Qtj7LAdWAS9cittnu53zWhvQe
7e+5iPp3kIsMDZ13jhnSMOa6nhb3yW0tzjPXa2lzPAaKArFlRu08cApB/niytcjo
Cie5gVvEaFDhssM7XdxZNXA1FhvLtTtrwA/Fl7/MrLQUv7W657yF7mzU0Jzdq2Yo
12wScaFymkq/09Tx4HMF7pxTcKzuqaaeb0SxkPtq9exv+T6jKaZkKA33gSko4z9H
0WoRtxbhd9sqbsQ7/fEMs6JBJ75qMItMlkWUaHDhOccsGP7cNmqbONoJdZVYueEY
QJHpKnfD2zd7a7kjRKUieKRB9ezFKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org