Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f33342d3334203d3e20323633363631.roa
File:                     323830343a313132383a383030303a3a2f33342d3334203d3e20323633363631.roa (raw, json)
Hash identifier:          yJLp1syR5N7528ZuUxrBPHNlJ+SSdM5o/wbKh1gHtcc=
Subject key identifier:   A3:B9:1D:9D:EF:86:23:A3:17:D6:DE:48:81:2E:15:38:32:B6:B8:ED
Certificate issuer:       /CN=1F461E0163E83106F84ADF1433865326051B09F5
Certificate serial:       2C4313335955C58AD10EB8B4EF653B703037512F
Authority key identifier: 1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f33342d3334203d3e20323633363631.roa
Signing time:             Thu 28 Mar 2024 18:44:59 +0000
ROA not before:           Thu 28 Mar 2024 18:39:59 +0000
ROA not after:            Thu 27 Mar 2025 18:44:59 +0000
asID:                     263661
IP address blocks:        2804:1128:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:43:13:33:59:55:c5:8a:d1:0e:b8:b4:ef:65:3b:70:30:37:51:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Validity
            Not Before: Mar 28 18:39:59 2024 GMT
            Not After : Mar 27 18:44:59 2025 GMT
        Subject: CN=A3B91D9DEF8623A317D6DE48812E153832B6B8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:ee:fd:05:01:d5:8e:8f:d4:68:61:b1:c3:
                    d7:85:ec:57:ff:e8:50:76:23:dd:4b:d8:3a:f4:dc:
                    41:f5:96:44:1d:8b:7b:83:87:15:2d:0c:65:a0:36:
                    50:45:a7:d3:18:c0:35:35:5e:4c:84:a4:43:ab:50:
                    9b:c3:30:30:44:ac:05:11:3a:7c:a4:5f:bd:f8:32:
                    8f:91:2d:f3:eb:08:38:69:9e:b4:bc:cb:80:79:01:
                    77:fb:1b:f6:ca:53:87:ae:06:1e:4f:3d:7a:03:ef:
                    ec:c7:5d:12:10:cd:2f:f3:00:35:fa:83:72:5c:d5:
                    1a:e9:2a:c5:26:12:5e:4e:42:d2:ac:5d:78:ba:78:
                    e6:20:1b:1b:fd:b1:a1:04:14:a9:cb:31:9c:89:39:
                    84:08:12:07:3e:88:f0:b3:34:2e:b6:fa:5f:d0:17:
                    ce:bc:24:9e:89:d5:ae:fc:ce:19:9e:ec:e0:e6:f5:
                    cd:a6:58:d6:96:c3:2f:79:39:de:0b:03:e1:c8:4a:
                    94:84:7a:89:b7:3e:97:73:16:e9:5b:3e:1e:e2:c0:
                    0c:40:0c:2d:ee:d7:ba:8f:da:95:de:e3:a0:45:66:
                    29:eb:7a:6d:8d:c3:0c:b9:32:9a:f5:dd:9d:4a:63:
                    d0:e8:38:23:3a:c3:01:3a:08:ce:e6:07:ea:b8:8a:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B9:1D:9D:EF:86:23:A3:17:D6:DE:48:81:2E:15:38:32:B6:B8:ED
            X509v3 Authority Key Identifier:
                keyid:1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f33342d3334203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:d0:29:9a:3b:39:8c:8f:6f:b1:af:23:fe:23:e4:6d:eb:e8:
         b4:e6:01:9d:fa:6d:45:25:2e:75:65:d3:c1:36:3d:a7:0b:70:
         b2:40:66:ff:6c:42:1f:7e:dd:e9:d5:0c:b1:38:a6:34:0e:8e:
         5c:ef:40:8b:bd:ba:eb:d1:de:00:18:8e:6c:5b:92:89:5f:57:
         c3:2f:79:93:e2:1e:f8:81:ce:24:2b:75:fb:b8:5f:0a:9a:a8:
         e8:4e:89:a3:b4:d6:f5:c4:b5:14:b3:ab:0b:ca:71:f5:c5:b2:
         31:94:ce:0c:55:90:9d:47:a2:e1:c7:21:36:86:f2:ed:8c:b6:
         89:45:81:c3:31:79:8d:5b:d4:fa:40:df:5f:01:5e:f5:78:5a:
         f9:90:0d:76:13:85:70:79:18:55:b6:57:da:89:7e:e8:cf:64:
         96:5e:74:db:0e:53:22:74:12:10:8c:cc:21:0b:d3:ce:95:46:
         29:3d:d7:20:3b:93:47:20:c2:ba:9e:62:89:d1:50:eb:7f:16:
         4a:37:da:48:d3:4b:84:09:1b:62:df:9f:92:35:5e:80:2f:da:
         10:38:47:c6:8f:2f:ec:7e:d3:5a:c0:02:d1:2a:12:5d:44:ac:
         f6:f9:4c:47:63:82:54:0a:ca:e9:f5:f5:c6:bf:14:99:de:5e:
         68:fa:17:9e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULEMTM1lVxYrRDri072U7cDA3US8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0NjFFMDE2M0U4MzEwNkY4NEFERjE0MzM4NjUzMjYw
NTFCMDlGNTAeFw0yNDAzMjgxODM5NTlaFw0yNTAzMjcxODQ0NTlaMDMxMTAvBgNV
BAMTKEEzQjkxRDlERUY4NjIzQTMxN0Q2REU0ODgxMkUxNTM4MzJCNkI4RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgO79BQHVjo/UaGGxw9eF7Ff/
6FB2I91L2Dr03EH1lkQdi3uDhxUtDGWgNlBFp9MYwDU1XkyEpEOrUJvDMDBErAUR
OnykX734Mo+RLfPrCDhpnrS8y4B5AXf7G/bKU4euBh5PPXoD7+zHXRIQzS/zADX6
g3Jc1RrpKsUmEl5OQtKsXXi6eOYgGxv9saEEFKnLMZyJOYQIEgc+iPCzNC62+l/Q
F868JJ6J1a78zhme7ODm9c2mWNaWwy95Od4LA+HISpSEeom3PpdzFulbPh7iwAxA
DC3u17qP2pXe46BFZinrem2Nwwy5Mpr13Z1KY9DoOCM6wwE6CM7mB+q4ikrlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUo7kdne+GI6MX1t5IgS4VODK2uO0wHwYDVR0j
BBgwFoAUH0YeAWPoMQb4St8UM4ZTJgUbCfUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMS8xRjQ2MUUwMTYzRTgzMTA2Rjg0QURGMTQzMzg2NTMyNjA1MUIwOUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGNDYxRTAxNjNFODMxMDZG
ODRBREYxNDMzODY1MzI2MDUxQjA5RjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzEv
MzIzODMwMzQzYTMxMzEzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEESiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAb0CmaOzmMj2+xryP+I+Rt6+i05gGd+m1FJS51ZdPBNj2nC3CyQGb/bEIf
ft3p1QyxOKY0Do5c70CLvbrr0d4AGI5sW5KJX1fDL3mT4h74gc4kK3X7uF8Kmqjo
TomjtNb1xLUUs6sLynH1xbIxlM4MVZCdR6LhxyE2hvLtjLaJRYHDMXmNW9T6QN9f
AV71eFr5kA12E4VweRhVtlfaiX7oz2SWXnTbDlMidBIQjMwhC9POlUYpPdcgO5NH
IMK6nmKJ0VDrfxZKN9pI00uECRti35+SNV6AL9oQOEfGjy/sftNawALRKhJdRKz2
+UxHY4JUCsrp9fXGvxSZ3l5o+hee
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org