Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3438203d3e203238313432.roa
File:                     323830343a66633a3a2f33322d3438203d3e203238313432.roa (raw, json)
Hash identifier:          Udn9ZijU5s1dh+UUEt/60mE87B4ZK3K6kt1c31jOEko=
Subject key identifier:   51:4E:E5:0B:96:A3:99:12:AE:2A:56:14:A2:F2:FC:F0:20:FC:D6:EE
Certificate issuer:       /CN=CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7
Certificate serial:       35D06FCA92ED7FB218078092E070206942363A90
Authority key identifier: CC:1E:FB:B5:CC:B3:70:D8:64:0B:DF:F9:A7:EA:05:46:3E:1E:B8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3438203d3e203238313432.roa
Signing time:             Fri 12 Nov 2021 17:56:33 +0000
ROA not before:           Fri 12 Nov 2021 17:51:33 +0000
ROA not after:            Sat 12 Nov 2022 17:56:33 +0000
asID:                     28142
IP address blocks:        2804:fc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d0:6f:ca:92:ed:7f:b2:18:07:80:92:e0:70:20:69:42:36:3a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7
        Validity
            Not Before: Nov 12 17:51:33 2021 GMT
            Not After : Nov 12 17:56:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:43:6c:9f:c9:5a:af:96:65:68:a2:64:84:
                    22:38:bc:ad:1e:d8:73:eb:f6:a3:84:cb:0d:0e:e7:
                    08:e4:4b:81:67:8b:5f:d3:77:65:fa:26:3e:67:c7:
                    76:21:66:0a:95:ed:7a:12:8b:77:8d:db:32:d0:9f:
                    f8:8f:db:ac:b4:01:12:ba:e8:02:24:2e:02:1d:96:
                    da:14:70:b3:9b:40:ba:02:8d:87:3e:88:40:92:72:
                    06:86:b3:f3:24:16:79:a0:70:e4:4d:47:b9:e0:e5:
                    e2:e5:a3:f3:9f:69:08:c7:c6:b0:5c:6f:53:f9:01:
                    c9:23:0e:b8:ca:0d:7e:bd:72:0e:3d:85:8b:0c:ff:
                    53:d1:6a:cd:cb:cf:b0:c6:ef:db:84:90:3d:31:d1:
                    de:77:11:89:8f:2d:f1:0a:ad:14:db:fb:7e:69:83:
                    c4:5a:dc:7c:61:3b:a6:a3:95:9b:3d:26:02:1e:6f:
                    76:35:81:27:65:96:58:42:22:7b:c9:3c:89:9b:0b:
                    c5:68:9c:71:3c:a9:7b:16:e8:d1:7f:6c:2b:ea:ce:
                    de:8f:4a:8c:d3:4a:31:83:cd:44:ac:1c:04:87:64:
                    81:70:42:b4:19:22:ab:66:9c:18:89:81:4d:0d:ff:
                    2a:f5:10:a7:4b:52:e8:60:e8:0b:46:88:9d:0e:47:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:E5:0B:96:A3:99:12:AE:2A:56:14:A2:F2:FC:F0:20:FC:D6:EE
            X509v3 Authority Key Identifier:
                keyid:CC:1E:FB:B5:CC:B3:70:D8:64:0B:DF:F9:A7:EA:05:46:3E:1E:B8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/323830343a66633a3a2f33322d3438203d3e203238313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:97:3e:36:ec:16:8d:52:d4:77:3b:dc:ec:94:c2:6b:93:2b:
         f5:52:3b:8a:d4:8c:fd:7b:1d:fe:ff:74:09:1c:a1:a4:9d:43:
         6f:e3:38:eb:82:41:34:b3:dd:36:0e:82:ff:0f:f8:58:26:0c:
         be:1b:17:ff:b9:13:5f:90:2f:6d:26:f4:06:c1:03:9e:70:25:
         b0:70:96:5e:f8:54:df:89:04:62:1c:7e:0c:4c:4d:f5:5e:52:
         8c:b5:c8:44:65:28:b5:99:fe:9e:34:6b:da:87:26:db:cf:fc:
         1e:4c:93:ef:e3:aa:ef:3e:fa:1e:35:b5:cb:60:6b:aa:7d:fb:
         d4:a7:cf:03:15:29:df:8a:88:e3:f2:a7:da:2d:38:04:49:67:
         d4:61:86:f0:09:e0:75:98:45:1a:f3:b8:bb:37:8e:07:02:0b:
         2d:e1:85:e9:ad:90:54:47:84:22:ac:a5:15:57:26:fb:aa:50:
         72:80:08:ed:aa:e3:82:48:3c:3b:f7:2c:0d:21:a7:73:52:dc:
         6a:ab:34:01:93:3f:23:e0:06:2c:b2:c9:b9:2f:3a:0d:8d:7f:
         da:31:af:14:00:ae:01:8f:1e:ca:24:91:df:f6:f7:e3:bd:72:
         36:7d:e0:cf:23:ba:6e:a5:52:87:cf:79:87:84:76:ba:6e:bb:
         51:94:07:c3
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUNdBvypLtf7IYB4CS4HAgaUI2OpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxRUZCQjVDQ0IzNzBEODY0MEJERkY5QTdFQTA1NDYz
RTFFQjhCNzAeFw0yMTExMTIxNzUxMzNaFw0yMjExMTIxNzU2MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY3RjQzNkM5RkM5NUFBRjk2
NjU2OEEyNjQ4NDIyMzhCQ0FEMUVEODczRUJGNkEzODRDQjBEMEVFNzA4RTQ0Qjgx
Njc4QjVGRDM3NzY1RkEyNjNFNjdDNzc2MjE2NjBBOTVFRDdBMTI4Qjc3OEREQjMy
RDA5RkY4OEZEQkFDQjQwMTEyQkFFODAyMjQyRTAyMUQ5NkRBMTQ3MEIzOUI0MEJB
MDI4RDg3M0U4ODQwOTI3MjA2ODZCM0YzMjQxNjc5QTA3MEU0NEQ0N0I5RTBFNUUy
RTVBM0YzOUY2OTA4QzdDNkIwNUM2RjUzRjkwMUM5MjMwRUI4Q0EwRDdFQkQ3MjBF
M0Q4NThCMENGRjUzRDE2QUNEQ0JDRkIwQzZFRkRCODQ5MDNEMzFEMURFNzcxMTg5
OEYyREYxMEFBRDE0REJGQjdFNjk4M0M0NUFEQzdDNjEzQkE2QTM5NTlCM0QyNjAy
MUU2Rjc2MzU4MTI3NjU5NjU4NDIyMjdCQzkzQzg5OUIwQkM1Njg5QzcxM0NBOTdC
MTZFOEQxN0Y2QzJCRUFDRURFOEY0QThDRDM0QTMxODNDRDQ0QUMxQzA0ODc2NDgx
NzA0MkI0MTkyMkFCNjY5QzE4ODk4MTREMERGRjJBRjUxMEE3NEI1MkU4NjBFODBC
NDY4ODlEMEU0NzUxM0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv39DbJ/JWq+WZWiiZIQiOLytHthz6/ajhMsNDucI5EuBZ4tf03dl
+iY+Z8d2IWYKle16Eot3jdsy0J/4j9ustAESuugCJC4CHZbaFHCzm0C6Ao2HPohA
knIGhrPzJBZ5oHDkTUe54OXi5aPzn2kIx8awXG9T+QHJIw64yg1+vXIOPYWLDP9T
0WrNy8+wxu/bhJA9MdHedxGJjy3xCq0U2/t+aYPEWtx8YTumo5WbPSYCHm92NYEn
ZZZYQiJ7yTyJmwvFaJxxPKl7FujRf2wr6s7ej0qM00oxg81ErBwEh2SBcEK0GSKr
ZpwYiYFNDf8q9RCnS1LoYOgLRoidDkdRPQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FFFO5QuWo5kSripWFKLy/PAg/NbuMB8GA1UdIwQYMBaAFMwe+7XMs3DYZAvf+afq
BUY+Hri3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V2WGhpMmdiRjgyNndq
YVJiUGdhRzZEYlluTU5rVDZnWHp0WUszNmpWVnNqLzAvQ0MxRUZCQjVDQ0IzNzBE
ODY0MEJERkY5QTdFQTA1NDYzRTFFQjhCNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DQzFFRkJCNUNDQjM3MEQ4NjQwQkRGRjlBN0VBMDU0NjNFMUVC
OEI3LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FdlhoaTJnYkY4MjZ3amFSYlBn
YUc2RGJZbk1Oa1Q2Z1h6dFlLMzZqVlZzai8wLzMyMzgzMDM0M2E2NjYzM2EzYTJm
MzMzMjJkMzQzODIwM2QzZTIwMzIzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEAPwwDQYJ
KoZIhvcNAQELBQADggEBAImXPjbsFo1S1Hc73OyUwmuTK/VSO4rUjP17Hf7/dAkc
oaSdQ2/jOOuCQTSz3TYOgv8P+FgmDL4bF/+5E1+QL20m9AbBA55wJbBwll74VN+J
BGIcfgxMTfVeUoy1yERlKLWZ/p40a9qHJtvP/B5Mk+/jqu8++h41tctga6p9+9Sn
zwMVKd+KiOPyp9otOARJZ9RhhvAJ4HWYRRrzuLs3jgcCCy3hhemtkFRHhCKspRVX
JvuqUHKACO2q44JIPDv3LA0hp3NS3GqrNAGTPyPgBiyyybkvOg2Nf9oxrxQArgGP
Hsokkd/29+O9cjZ94M8jum6lUofPeYeEdrpuu1GUB8M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org