Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a333030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a333030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          cnG7AKVtWqtwfowHzWmtYC4R8srCMLI5kDUaE9igARI=
Subject key identifier:   37:F8:88:E8:C2:11:F7:F9:77:95:24:D7:EB:7A:10:E0:81:5E:3A:0B
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       7CD9F028D38A5747CEC2A87799FF5D929E4382F7
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a333030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:01:35 +0000
ROA not before:           Thu 25 Jul 2024 13:56:35 +0000
ROA not after:            Fri 25 Jul 2025 14:01:35 +0000
asID:                     268235
IP address blocks:        2804:4e08:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d9:f0:28:d3:8a:57:47:ce:c2:a8:77:99:ff:5d:92:9e:43:82:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 13:56:35 2024 GMT
            Not After : Jul 25 14:01:35 2025 GMT
        Subject: CN=3082010A0282010100AAF6FD6E8CD6CA19F4269B83B33F3A92B19B55D8FDD9C289C3B102C378CE0E9CAFB6D3E85DCB113E5208F4E498F5B4B3545AE2841E7F639B798E25E2ECB29FEAACCC36D4E5DAC67D2C06FE4EA9A75EAFC4691A826631AF7576DFD21E74EEC6EEBEA5612F97EE25FC278E541822C412C2706055DD3F8867751BC957594C52EA170DB912E2CE7E317D73488DD37CA4D016A2B485FA742BB3C7D1449519BDE8C07C7701BC9D376A57135CBB76D114F03A133869FC38EDFE09865A73BED84CF04736DB3C72CC76538DB83F2D06A5DA9329436F1B1013AC701B9B710B06CFF62809B2120C987BF95B4BDE38B0428BB2FD60E71DC592BCF4EE30497886ADD67ABA7F8B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:fd:6e:8c:d6:ca:19:f4:26:9b:83:b3:3f:
                    3a:92:b1:9b:55:d8:fd:d9:c2:89:c3:b1:02:c3:78:
                    ce:0e:9c:af:b6:d3:e8:5d:cb:11:3e:52:08:f4:e4:
                    98:f5:b4:b3:54:5a:e2:84:1e:7f:63:9b:79:8e:25:
                    e2:ec:b2:9f:ea:ac:cc:36:d4:e5:da:c6:7d:2c:06:
                    fe:4e:a9:a7:5e:af:c4:69:1a:82:66:31:af:75:76:
                    df:d2:1e:74:ee:c6:ee:be:a5:61:2f:97:ee:25:fc:
                    27:8e:54:18:22:c4:12:c2:70:60:55:dd:3f:88:67:
                    75:1b:c9:57:59:4c:52:ea:17:0d:b9:12:e2:ce:7e:
                    31:7d:73:48:8d:d3:7c:a4:d0:16:a2:b4:85:fa:74:
                    2b:b3:c7:d1:44:95:19:bd:e8:c0:7c:77:01:bc:9d:
                    37:6a:57:13:5c:bb:76:d1:14:f0:3a:13:38:69:fc:
                    38:ed:fe:09:86:5a:73:be:d8:4c:f0:47:36:db:3c:
                    72:cc:76:53:8d:b8:3f:2d:06:a5:da:93:29:43:6f:
                    1b:10:13:ac:70:1b:9b:71:0b:06:cf:f6:28:09:b2:
                    12:0c:98:7b:f9:5b:4b:de:38:b0:42:8b:b2:fd:60:
                    e7:1d:c5:92:bc:f4:ee:30:49:78:86:ad:d6:7a:ba:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F8:88:E8:C2:11:F7:F9:77:95:24:D7:EB:7A:10:E0:81:5E:3A:0B
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a333030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:30:82:ff:45:bd:9a:98:a4:fc:07:f6:3b:26:d5:25:0e:17:
         43:50:2d:a3:b5:1f:d8:03:2e:72:16:1d:0c:98:50:ac:2f:b8:
         a8:6c:ba:7e:a1:db:3c:cf:bc:5b:41:3d:2d:b9:02:94:1f:08:
         48:c8:fb:d0:5f:6c:a8:9c:46:1c:d5:c2:98:e3:dc:e1:47:e3:
         11:08:db:64:db:30:d8:2f:b9:1d:3b:6d:28:28:04:e8:07:67:
         99:db:99:73:57:3d:2c:43:d3:75:5b:fb:95:b2:d2:86:5e:9b:
         f7:35:e2:34:c8:c8:c3:bb:cf:10:91:8f:27:3b:7e:51:7e:25:
         d0:fb:cd:41:45:2d:31:67:76:f8:06:61:01:3a:f1:52:50:68:
         ce:45:ee:5c:0b:be:a0:40:63:02:cd:c3:58:56:f3:72:e5:c0:
         01:d7:87:2e:0e:51:d1:c0:4d:2a:ad:9f:3b:39:3b:ae:e8:65:
         47:3a:02:eb:d8:e3:b8:9e:b5:b8:f3:a7:ed:24:c9:7c:00:f1:
         e1:c4:a2:21:ec:41:d4:c4:7b:51:09:f7:61:57:41:f5:f0:bc:
         eb:83:47:61:f9:41:9b:e9:63:de:aa:4c:c1:cc:0e:53:4d:ae:
         e3:48:b1:5a:82:6f:40:3f:d7:e1:44:b5:60:ed:ce:7d:6a:51:
         a7:9f:ef:4a
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUfNnwKNOKV0fOwqh3mf9dkp5DgvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCOUNEQkUyMjZDQjY2NkQ4MjcyQjNDMTY2NzEzQjFG
MTBBNTZDNTAeFw0yNDA3MjUxMzU2MzVaFw0yNTA3MjUxNDAxMzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUFGNkZENkU4Q0Q2Q0ExOUY0
MjY5QjgzQjMzRjNBOTJCMTlCNTVEOEZERDlDMjg5QzNCMTAyQzM3OENFMEU5Q0FG
QjZEM0U4NURDQjExM0U1MjA4RjRFNDk4RjVCNEIzNTQ1QUUyODQxRTdGNjM5Qjc5
OEUyNUUyRUNCMjlGRUFBQ0NDMzZENEU1REFDNjdEMkMwNkZFNEVBOUE3NUVBRkM0
NjkxQTgyNjYzMUFGNzU3NkRGRDIxRTc0RUVDNkVFQkVBNTYxMkY5N0VFMjVGQzI3
OEU1NDE4MjJDNDEyQzI3MDYwNTVERDNGODg2Nzc1MUJDOTU3NTk0QzUyRUExNzBE
QjkxMkUyQ0U3RTMxN0Q3MzQ4OEREMzdDQTREMDE2QTJCNDg1RkE3NDJCQjNDN0Qx
NDQ5NTE5QkRFOEMwN0M3NzAxQkM5RDM3NkE1NzEzNUNCQjc2RDExNEYwM0ExMzM4
NjlGQzM4RURGRTA5ODY1QTczQkVEODRDRjA0NzM2REIzQzcyQ0M3NjUzOERCODNG
MkQwNkE1REE5MzI5NDM2RjFCMTAxM0FDNzAxQjlCNzEwQjA2Q0ZGNjI4MDlCMjEy
MEM5ODdCRjk1QjRCREUzOEIwNDI4QkIyRkQ2MEU3MURDNTkyQkNGNEVFMzA0OTc4
ODZBREQ2N0FCQTdGOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqvb9bozWyhn0JpuDsz86krGbVdj92cKJw7ECw3jODpyvttPoXcsR
PlII9OSY9bSzVFrihB5/Y5t5jiXi7LKf6qzMNtTl2sZ9LAb+TqmnXq/EaRqCZjGv
dXbf0h507sbuvqVhL5fuJfwnjlQYIsQSwnBgVd0/iGd1G8lXWUxS6hcNuRLizn4x
fXNIjdN8pNAWorSF+nQrs8fRRJUZvejAfHcBvJ03alcTXLt20RTwOhM4afw47f4J
hlpzvthM8Ec22zxyzHZTjbg/LQal2pMpQ28bEBOscBubcQsGz/YoCbISDJh7+VtL
3jiwQouy/WDnHcWSvPTuMEl4hq3Werp/iwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FDf4iOjCEff5d5Uk1+t6EOCBXjoLMB8GA1UdIwQYMBaAFFq5zb4ibLZm2CcrPBZn
E7HxClbFMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0czbmtKTGc2c0Nva3FZ
cUZWSzYzYTE5eHNFaWhyRzFMTW9OWDhHNUtNNktyLzEvNUFCOUNEQkUyMjZDQjY2
NkQ4MjcyQjNDMTY2NzEzQjFGMTBBNTZDNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81QUI5Q0RCRTIyNkNCNjY2RDgyNzJCM0MxNjY3MTNCMUYxMEE1
NkM1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HM25rSkxnNnNDb2txWXFGVks2
M2ExOXhzRWlockcxTE1vTlg4RzVLTTZLci8xLzMyMzgzMDM0M2EzNDY1MzAzODNh
MzMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzgzMjMzMzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBE4IMDANBgkqhkiG9w0BAQsFAAOCAQEAdjCC/0W9mpik/Af2OybV
JQ4XQ1Ato7Uf2AMuchYdDJhQrC+4qGy6fqHbPM+8W0E9LbkClB8ISMj70F9sqJxG
HNXCmOPc4UfjEQjbZNsw2C+5HTttKCgE6AdnmduZc1c9LEPTdVv7lbLShl6b9zXi
NMjIw7vPEJGPJzt+UX4l0PvNQUUtMWd2+AZhATrxUlBozkXuXAu+oEBjAs3DWFbz
cuXAAdeHLg5R0cBNKq2fOzk7ruhlRzoC69jjuJ61uPOn7STJfADx4cSiIexB1MR7
UQn3YVdB9fC864NHYflBm+lj3qpMwcwOU02u40ixWoJvQD/X4US1YO3OfWpRp5/v
Sg==
-----END CERTIFICATE-----
Generated at Wed Oct 9 06:32:57 2024 by rpki-client on console-fra.rpki-client.org