Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33322d3334203d3e20323731363234.roa
File:                     323830343a376537303a3a2f33322d3334203d3e20323731363234.roa (raw, json)
Hash identifier:          DLTn6jIqAlZ5t2NCgj4gQI6t6LhKFv4RLrRaI5uNQDA=
Subject key identifier:   5D:42:46:EF:19:9E:D5:5A:DC:51:21:94:7D:E8:6B:23:03:EB:5E:6D
Certificate issuer:       /CN=541AC3986432D14D4ED651A3CC606EEB3E9EFCEE
Certificate serial:       50686F0511510DBC26097DBBDB4C23825687E57A
Authority key identifier: 54:1A:C3:98:64:32:D1:4D:4E:D6:51:A3:CC:60:6E:EB:3E:9E:FC:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33322d3334203d3e20323731363234.roa
Signing time:             Fri 06 Oct 2023 14:51:35 +0000
ROA not before:           Fri 06 Oct 2023 14:46:35 +0000
ROA not after:            Fri 04 Oct 2024 14:51:35 +0000
asID:                     271624
IP address blocks:        2804:7e70::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:68:6f:05:11:51:0d:bc:26:09:7d:bb:db:4c:23:82:56:87:e5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541AC3986432D14D4ED651A3CC606EEB3E9EFCEE
        Validity
            Not Before: Oct  6 14:46:35 2023 GMT
            Not After : Oct  4 14:51:35 2024 GMT
        Subject: CN=5D4246EF199ED55ADC5121947DE86B2303EB5E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:13:43:29:94:3f:95:97:b4:fd:84:de:23:
                    15:6f:0a:3a:3a:4c:a7:dd:44:62:eb:01:df:64:7f:
                    52:f9:41:b7:bb:c1:94:31:b7:b1:c7:33:b4:2d:f7:
                    da:ef:bb:61:73:19:01:cd:29:e6:60:4d:93:4f:3d:
                    cf:76:40:c9:f4:c7:90:9d:08:39:9d:b5:97:38:d3:
                    24:c5:48:f6:9a:57:73:e4:f7:75:ab:6b:83:dd:42:
                    e6:87:31:07:df:e0:64:73:e8:bd:20:bb:f8:20:1a:
                    4a:04:69:6d:9d:01:48:80:b3:83:5b:5f:2e:ab:fb:
                    fd:e4:f4:04:48:5a:9b:98:8e:ca:39:ac:6f:c5:f2:
                    ca:89:0d:79:e6:e2:fb:84:c2:0f:2e:ff:48:38:1a:
                    96:0a:84:f5:d2:4c:7a:ea:98:21:bf:33:0b:5e:90:
                    2d:ba:52:c9:e9:b4:71:0a:82:f9:79:66:ec:74:68:
                    5f:a2:95:71:8b:6a:d3:e3:0d:17:a0:cf:c4:27:7a:
                    46:71:e2:7b:9f:a7:12:7a:33:b6:a3:46:ea:13:21:
                    d0:b1:1e:5a:4b:5b:81:f4:d8:dc:81:c8:91:86:b6:
                    03:3b:53:6c:bf:76:1b:c6:27:32:d2:1d:1e:a2:42:
                    b8:94:bf:95:82:b9:16:66:be:13:b4:c4:a4:a7:63:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:42:46:EF:19:9E:D5:5A:DC:51:21:94:7D:E8:6B:23:03:EB:5E:6D
            X509v3 Authority Key Identifier:
                keyid:54:1A:C3:98:64:32:D1:4D:4E:D6:51:A3:CC:60:6E:EB:3E:9E:FC:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33322d3334203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:40:bd:d7:df:a1:44:46:2d:92:75:c5:d1:5c:3f:d1:d3:
         f6:2b:fd:e2:46:f8:4e:75:95:35:a7:23:9a:ad:da:41:a1:36:
         3c:af:75:10:10:37:58:95:09:28:c6:8a:1a:4d:2b:a5:59:52:
         90:99:78:f9:1e:62:d5:86:f1:e4:1b:13:49:3c:d2:6f:42:71:
         43:51:ae:53:9d:5d:10:fe:6d:2f:0f:b6:90:54:ce:d5:84:a5:
         f7:1d:ee:91:db:d8:71:83:61:53:7d:49:0f:86:07:f4:b6:af:
         47:fd:91:8d:f1:1e:9d:df:06:ea:19:d7:be:5f:9a:74:53:91:
         ab:3e:d0:4d:d3:e4:38:69:25:66:8a:33:c8:93:dc:95:b1:dd:
         77:ff:83:7a:e5:09:e9:36:67:72:f5:44:82:eb:63:33:34:ff:
         e9:b0:d8:35:34:f7:da:d7:18:3a:fe:f6:99:79:cd:15:32:d6:
         e7:50:ab:52:cf:07:12:17:5d:3b:14:0d:59:55:20:bd:e3:7f:
         5a:88:60:83:f1:d6:a0:22:47:9a:1a:a8:ef:f6:7d:16:f8:77:
         3c:c6:11:17:ce:ce:93:b3:3d:63:e1:e7:ef:5c:77:f8:28:c2:
         ab:02:30:bb:b1:29:4b:ee:35:64:46:72:ea:13:11:6b:6e:84:
         a9:bd:56:55
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUGhvBRFRDbwmCX2720wjglaH5XowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQxQUMzOTg2NDMyRDE0RDRFRDY1MUEzQ0M2MDZFRUIz
RTlFRkNFRTAeFw0yMzEwMDYxNDQ2MzVaFw0yNDEwMDQxNDUxMzVaMDMxMTAvBgNV
BAMTKDVENDI0NkVGMTk5RUQ1NUFEQzUxMjE5NDdERTg2QjIzMDNFQjVFNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOxNDKZQ/lZe0/YTeIxVvCjo6
TKfdRGLrAd9kf1L5Qbe7wZQxt7HHM7Qt99rvu2FzGQHNKeZgTZNPPc92QMn0x5Cd
CDmdtZc40yTFSPaaV3Pk93Wra4PdQuaHMQff4GRz6L0gu/ggGkoEaW2dAUiAs4Nb
Xy6r+/3k9ARIWpuYjso5rG/F8sqJDXnm4vuEwg8u/0g4GpYKhPXSTHrqmCG/Mwte
kC26UsnptHEKgvl5Zux0aF+ilXGLatPjDRegz8QnekZx4nufpxJ6M7ajRuoTIdCx
HlpLW4H02NyByJGGtgM7U2y/dhvGJzLSHR6iQriUv5WCuRZmvhO0xKSnY3cxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXUJG7xme1VrcUSGUfehrIwPrXm0wHwYDVR0j
BBgwFoAUVBrDmGQy0U1O1lGjzGBu6z6e/O4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp
N3IvMC81NDFBQzM5ODY0MzJEMTRENEVENjUxQTNDQzYwNkVFQjNFOUVGQ0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0MUFDMzk4NjQzMkQxNEQ0
RUQ2NTFBM0NDNjA2RUVCM0U5RUZDRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VybkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAv
MzIzODMwMzQzYTM3NjUzNzMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMx
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR+cDANBgkqhkiG9w0BAQsFAAOCAQEADfpAvdff
oURGLZJ1xdFcP9HT9iv94kb4TnWVNacjmq3aQaE2PK91EBA3WJUJKMaKGk0rpVlS
kJl4+R5i1Ybx5BsTSTzSb0JxQ1GuU51dEP5tLw+2kFTO1YSl9x3ukdvYcYNhU31J
D4YH9LavR/2RjfEend8G6hnXvl+adFORqz7QTdPkOGklZoozyJPclbHdd/+DeuUJ
6TZncvVEgutjMzT/6bDYNTT32tcYOv72mXnNFTLW51CrUs8HEhddOxQNWVUgveN/
Wohgg/HWoCJHmhqo7/Z9Fvh3PMYRF87Ok7M9Y+Hn71x3+CjCqwIwu7EpS+41ZEZy
6hMRa26Eqb1WVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org