Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3330303a3a2f34302d3430203d3e20323638383538.roa
File:                     323830343a356239633a3330303a3a2f34302d3430203d3e20323638383538.roa (raw, json)
Hash identifier:          /VkEGvvBvhT4eAa26Ty3aXQ+hUqd7iRGMFygvNdFiv4=
Subject key identifier:   E4:7F:1B:8C:3A:7C:9C:F5:3C:EE:7B:EA:3C:61:1C:AD:71:D9:B5:22
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       5033173B562E15A8273490B1DD99D1BC65D4C649
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3330303a3a2f34302d3430203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:27 +0000
ROA not before:           Tue 05 Mar 2024 20:05:27 +0000
ROA not after:            Tue 04 Mar 2025 20:10:27 +0000
asID:                     268858
IP address blocks:        2804:5b9c:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:17:3b:56:2e:15:a8:27:34:90:b1:dd:99:d1:bc:65:d4:c6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:27 2024 GMT
            Not After : Mar  4 20:10:27 2025 GMT
        Subject: CN=E47F1B8C3A7C9CF53CEE7BEA3C611CAD71D9B522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:e7:83:64:0e:76:f5:25:a8:d0:56:49:b6:
                    a5:36:16:f8:d9:79:bc:07:68:d8:fe:11:e6:83:e6:
                    59:e6:db:36:36:9d:3c:ec:45:5f:34:fb:68:0f:4b:
                    56:0d:73:bf:a0:a8:c4:0d:6d:ed:ef:91:14:fa:f3:
                    92:8e:25:65:85:d9:d5:36:b0:64:16:f1:83:f4:7c:
                    b2:6a:64:31:d0:e9:c8:63:1f:59:36:8a:26:ff:18:
                    52:65:10:77:49:0e:d6:5d:60:73:7f:70:01:1d:3b:
                    47:a7:e8:6f:f8:f6:a1:57:e6:8e:f2:49:d7:38:80:
                    a7:c1:37:b8:f4:df:7a:86:49:37:c5:2e:07:d6:33:
                    5f:6a:ad:ba:97:53:ce:14:d7:20:9e:4a:43:82:8f:
                    32:b7:e6:95:83:54:7e:ee:c5:e2:8e:ba:a9:2e:1d:
                    47:57:4d:1c:28:65:a3:dd:11:ca:7e:40:2a:b6:7e:
                    50:22:67:c4:2c:e3:4d:9e:66:34:ab:eb:c8:3e:82:
                    e1:2d:90:d0:a8:88:bc:b5:40:11:96:5a:30:09:43:
                    52:cd:16:91:51:c8:32:67:88:66:99:e7:f9:35:e7:
                    51:07:63:6c:52:1c:26:63:43:c2:de:6c:11:c0:3e:
                    44:42:54:75:dd:03:38:7c:7e:9e:4c:be:cf:9f:d5:
                    39:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7F:1B:8C:3A:7C:9C:F5:3C:EE:7B:EA:3C:61:1C:AD:71:D9:B5:22
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a3330303a3a2f34302d3430203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:89:9e:5b:27:0b:6f:45:7a:94:34:28:d3:8f:ec:de:63:4d:
         21:17:77:8e:42:47:54:5e:94:5c:2f:84:38:49:11:eb:11:11:
         09:31:89:7f:ab:1e:fc:7e:dc:92:ef:12:64:4b:5c:1f:21:ce:
         df:90:7f:c9:64:c6:8e:b5:6b:27:7e:0d:9a:8e:5b:f0:23:a7:
         b3:45:10:5b:73:4f:2e:b1:18:a2:95:98:e5:fc:16:9a:56:a2:
         67:cc:d9:45:d9:a3:c9:79:7c:78:3a:b8:f4:f5:49:37:58:dc:
         47:97:b5:eb:a3:b4:0d:8f:04:bd:19:da:07:d6:b7:3f:c3:8f:
         45:55:eb:8f:f2:bf:97:49:82:45:4e:68:fd:47:00:00:23:4f:
         af:b8:4a:a0:2d:ec:94:0e:ef:c7:fb:c3:87:1b:32:02:d6:5d:
         43:f9:14:b8:c5:c9:66:e3:cb:6b:51:af:f5:d7:ef:f7:f1:94:
         95:5b:4e:f2:91:b5:10:f1:1a:31:a4:b5:a4:af:1f:6e:55:4e:
         6a:e9:c3:8f:e1:14:54:e5:5c:c0:5d:c1:72:db:b5:2f:a3:57:
         79:eb:be:67:a4:5e:43:9a:01:72:d3:3e:15:27:29:f1:6a:05:
         b5:26:d6:38:31:1d:75:9e:95:40:ea:6d:25:74:7e:3a:e9:a6:
         60:f6:3f:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUDMXO1YuFagnNJCx3ZnRvGXUxkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxNEQwOEVCNjY4QUQ2RDU2OUI1MkYzNjNERkZCMEQ2
RDVCQjIxMjAeFw0yNDAzMDUyMDA1MjdaFw0yNTAzMDQyMDEwMjdaMDMxMTAvBgNV
BAMTKEU0N0YxQjhDM0E3QzlDRjUzQ0VFN0JFQTNDNjExQ0FENzFEOUI1MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnqOeDZA529SWo0FZJtqU2FvjZ
ebwHaNj+EeaD5lnm2zY2nTzsRV80+2gPS1YNc7+gqMQNbe3vkRT685KOJWWF2dU2
sGQW8YP0fLJqZDHQ6chjH1k2iib/GFJlEHdJDtZdYHN/cAEdO0en6G/49qFX5o7y
Sdc4gKfBN7j033qGSTfFLgfWM19qrbqXU84U1yCeSkOCjzK35pWDVH7uxeKOuqku
HUdXTRwoZaPdEcp+QCq2flAiZ8Qs402eZjSr68g+guEtkNCoiLy1QBGWWjAJQ1LN
FpFRyDJniGaZ5/k151EHY2xSHCZjQ8LebBHAPkRCVHXdAzh8fp5Mvs+f1TmVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5H8bjDp8nPU87nvqPGEcrXHZtSIwHwYDVR0j
BBgwFoAUxRTQjrZorW1Wm1LzY9/7DW1bshIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NtM2liQXRCZG5rdDFZRGs5d3p5NmRCNllVYXpmOFJLU2dVTFVQekdh
QnkvMC9DNTE0RDA4RUI2NjhBRDZENTY5QjUyRjM2M0RGRkIwRDZENUJCMjEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MTREMDhFQjY2OEFENkQ1
NjlCNTJGMzYzREZGQjBENkQ1QkIyMTIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djbTNpYkF0QmRua3QxWURrOXd6eTZkQjZZVWF6ZjhSS1NnVUxVUHpHYUJ5LzAv
MzIzODMwMzQzYTM1NjIzOTYzM2EzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzgzODM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBFucAzANBgkqhkiG9w0BAQsFAAOC
AQEAcomeWycLb0V6lDQo04/s3mNNIRd3jkJHVF6UXC+EOEkR6xERCTGJf6se/H7c
ku8SZEtcHyHO35B/yWTGjrVrJ34Nmo5b8COns0UQW3NPLrEYopWY5fwWmlaiZ8zZ
RdmjyXl8eDq49PVJN1jcR5e166O0DY8EvRnaB9a3P8OPRVXrj/K/l0mCRU5o/UcA
ACNPr7hKoC3slA7vx/vDhxsyAtZdQ/kUuMXJZuPLa1Gv9dfv9/GUlVtO8pG1EPEa
MaS1pK8fblVOaunDj+EUVOVcwF3Bctu1L6NXeeu+Z6ReQ5oBctM+FScp8WoFtSbW
ODEddZ6VQOptJXR+OummYPY/Hw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org