Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33322d3332203d3e20323635313532.roa
File:                     323830343a326236383a3a2f33322d3332203d3e20323635313532.roa (raw, json)
Hash identifier:          YjySDJ317zof3ysh25DM7A2QWqiFMuoqrn3dlYaDCvI=
Subject key identifier:   26:13:65:3D:5E:5C:95:38:4B:35:D6:D4:69:05:7B:07:B9:80:99:54
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       55CEB75DABE3B2440944422C7986EC09311C0CD9
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33322d3332203d3e20323635313532.roa
Signing time:             Fri 17 Nov 2023 14:38:21 +0000
ROA not before:           Fri 17 Nov 2023 14:33:21 +0000
ROA not after:            Fri 15 Nov 2024 14:38:21 +0000
asID:                     265152
IP address blocks:        2804:2b68::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ce:b7:5d:ab:e3:b2:44:09:44:42:2c:79:86:ec:09:31:1c:0c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Nov 17 14:33:21 2023 GMT
            Not After : Nov 15 14:38:21 2024 GMT
        Subject: CN=2613653D5E5C95384B35D6D469057B07B9809954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:2a:85:cd:f2:f6:41:58:4d:7b:e8:43:74:
                    6e:37:11:3c:6b:61:e6:e2:8d:64:9f:83:86:db:08:
                    57:ed:28:7e:67:74:1a:67:90:07:7e:80:6a:c1:83:
                    82:d2:92:3f:39:35:a1:37:09:86:2b:44:d9:18:5f:
                    8d:b2:40:50:d1:46:af:31:ff:99:de:4c:9b:0d:12:
                    f9:a7:b4:b7:75:43:f4:09:eb:41:14:de:68:bc:61:
                    ba:8b:08:3c:db:c1:79:25:69:ef:7f:0a:ac:90:8b:
                    5d:99:31:de:53:ab:86:92:d7:52:97:8e:71:d2:e9:
                    ad:8b:b9:87:7d:0d:39:e0:3d:10:55:7b:95:b0:c9:
                    fc:28:b6:39:64:40:ab:cf:d6:db:c1:4e:f4:9a:e5:
                    66:90:ac:9c:c7:28:91:6a:f4:a6:17:b5:5d:b8:88:
                    c9:6c:82:14:62:ce:0c:21:85:58:6b:95:89:d6:6c:
                    07:9a:c5:e3:10:78:8c:da:2c:5f:0c:01:a3:39:c6:
                    b2:d1:26:3d:8f:f4:43:28:0a:99:d6:43:70:a3:7e:
                    f7:fe:f3:c0:57:ac:a4:a6:f9:f7:de:29:b9:b6:49:
                    1d:b8:6c:1a:a0:ad:1e:f1:9a:58:66:df:ff:44:2d:
                    91:c0:18:a0:8c:f2:4f:5c:bc:08:66:d0:64:24:20:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:13:65:3D:5E:5C:95:38:4B:35:D6:D4:69:05:7B:07:B9:80:99:54
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/323830343a326236383a3a2f33322d3332203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b68::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:73:3d:5f:33:74:dd:2d:f9:84:06:c1:c4:96:6a:c3:c6:f5:
         b9:0c:77:18:c9:49:60:af:b6:14:8a:b8:c6:2e:0f:b0:f1:91:
         3e:28:7f:48:25:ac:84:ce:3b:cb:9d:b8:e4:b3:04:ed:2b:78:
         1e:a7:e4:9f:9f:d5:b5:96:5f:79:3e:25:89:18:73:11:a2:c6:
         ca:25:71:82:95:ac:12:df:2a:1f:a6:b3:87:1d:f8:f0:3b:3e:
         fa:97:d3:04:15:4e:1a:a0:1a:94:9f:ea:77:50:78:03:25:23:
         3f:05:64:3f:06:da:34:6f:04:f6:1c:4d:05:19:db:ec:55:b5:
         63:15:12:7e:e4:af:c2:6f:38:09:1e:09:b4:6a:13:0f:ba:84:
         a0:36:c2:26:f6:79:fb:9f:5e:51:df:9b:ef:82:79:4b:4f:99:
         5d:30:d5:8a:cf:25:0d:52:ac:45:80:c1:b2:b9:2d:cc:03:4c:
         3e:91:f9:f9:10:12:36:88:62:5d:5c:66:90:1c:86:d4:e3:a4:
         4b:16:ee:f7:73:19:ca:3a:10:07:e3:b6:7e:f2:32:cd:e8:fe:
         b3:67:fb:3e:1c:a9:dc:24:88:2c:d1:a4:aa:3e:41:94:03:29:
         c0:2c:90:4c:65:84:da:5f:c1:d1:26:22:7a:6c:61:89:68:51:
         0e:ec:76:d0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVc63XavjskQJREIseYbsCTEcDNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZDRUE3ODQ1RDNEMUI2MEU0RUFGODFFOTlDREQ5RkYx
RDc2NTVFMjAeFw0yMzExMTcxNDMzMjFaFw0yNDExMTUxNDM4MjFaMDMxMTAvBgNV
BAMTKDI2MTM2NTNENUU1Qzk1Mzg0QjM1RDZENDY5MDU3QjA3Qjk4MDk5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXyqFzfL2QVhNe+hDdG43ETxr
YebijWSfg4bbCFftKH5ndBpnkAd+gGrBg4LSkj85NaE3CYYrRNkYX42yQFDRRq8x
/5neTJsNEvmntLd1Q/QJ60EU3mi8YbqLCDzbwXklae9/CqyQi12ZMd5Tq4aS11KX
jnHS6a2LuYd9DTngPRBVe5WwyfwotjlkQKvP1tvBTvSa5WaQrJzHKJFq9KYXtV24
iMlsghRizgwhhVhrlYnWbAeaxeMQeIzaLF8MAaM5xrLRJj2P9EMoCpnWQ3Cjfvf+
88BXrKSm+ffeKbm2SR24bBqgrR7xmlhm3/9ELZHAGKCM8k9cvAhm0GQkIGrBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJhNlPV5clThLNdbUaQV7B7mAmVQwHwYDVR0j
BBgwFoAU386nhF09G2Dk6vgemc3Z/x12VeIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0h5YmtpOG1BbkZVUHpZQ01xZXRIcmVYTTJZZnFleW81OHFQc1lRQ1VQ
dEIvMC9ERkNFQTc4NDVEM0QxQjYwRTRFQUY4MUU5OUNERDlGRjFENzY1NUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RGQ0VBNzg0NUQzRDFCNjBF
NEVBRjgxRTk5Q0REOUZGMUQ3NjU1RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIeWJraThtQW5GVVB6WUNNcWV0SHJlWE0yWWZxZXlvNThxUHNZUUNVUHRCLzAv
MzIzODMwMzQzYTMyNjIzNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzEzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQraDANBgkqhkiG9w0BAQsFAAOCAQEAkHM9XzN0
3S35hAbBxJZqw8b1uQx3GMlJYK+2FIq4xi4PsPGRPih/SCWshM47y5245LME7St4
Hqfkn5/VtZZfeT4liRhzEaLGyiVxgpWsEt8qH6azhx348Ds++pfTBBVOGqAalJ/q
d1B4AyUjPwVkPwbaNG8E9hxNBRnb7FW1YxUSfuSvwm84CR4JtGoTD7qEoDbCJvZ5
+59eUd+b74J5S0+ZXTDVis8lDVKsRYDBsrktzANMPpH5+RASNohiXVxmkByG1OOk
Sxbu93MZyjoQB+O2fvIyzej+s2f7Phyp3CSILNGkqj5BlAMpwCyQTGWE2l/B0SYi
emxhiWhRDux20A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org