Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33322d313238203d3e20323731343739.roa
File:                     323830343a376332383a3a2f33322d313238203d3e20323731343739.roa (raw, json)
Hash identifier:          fxzW7lvHOEi3g+Gm6fZkWvd7KIZNwlfSzMRM/5A7+Pg=
Subject key identifier:   9F:11:50:E0:3D:01:1F:DE:49:A5:0C:7A:72:3B:58:BA:21:E2:43:31
Certificate issuer:       /CN=0E1716F26A112DCECF5028FF8275AC7C14903B6A
Certificate serial:       7DCAEB969A614627C8802779D35DB5792C6BBEAA
Authority key identifier: 0E:17:16:F2:6A:11:2D:CE:CF:50:28:FF:82:75:AC:7C:14:90:3B:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E1716F26A112DCECF5028FF8275AC7C14903B6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33322d313238203d3e20323731343739.roa
Signing time:             Mon 24 Apr 2023 18:36:13 +0000
ROA not before:           Mon 24 Apr 2023 18:31:13 +0000
ROA not after:            Mon 22 Apr 2024 18:36:13 +0000
asID:                     271479
IP address blocks:        2804:7c28::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ca:eb:96:9a:61:46:27:c8:80:27:79:d3:5d:b5:79:2c:6b:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E1716F26A112DCECF5028FF8275AC7C14903B6A
        Validity
            Not Before: Apr 24 18:31:13 2023 GMT
            Not After : Apr 22 18:36:13 2024 GMT
        Subject: CN=9F1150E03D011FDE49A50C7A723B58BA21E24331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:ee:42:e3:cd:7b:ab:21:ec:f6:f0:d8:67:
                    d4:5a:e1:cf:4b:e9:04:9b:c0:e5:4b:07:c2:36:e1:
                    79:96:c7:e0:86:fc:aa:b1:e3:30:48:b1:94:45:64:
                    0c:aa:c4:bc:66:dd:da:f1:b2:f1:5d:36:fc:2d:b5:
                    9c:25:7e:71:fc:61:96:48:fa:f6:79:13:d0:fe:72:
                    7d:2f:51:b0:69:90:66:53:e0:2b:fc:bd:1f:17:58:
                    ce:7e:97:1f:41:cd:b1:d3:15:a5:0c:2b:93:4e:5c:
                    6a:98:a3:7e:46:bf:79:58:b1:cf:7a:20:27:ef:6e:
                    59:c2:e4:8c:d6:06:3e:d0:14:35:d0:05:87:01:38:
                    f7:c8:08:89:a2:47:3f:f9:49:20:95:f8:70:31:73:
                    40:ad:49:c4:31:ae:b6:b7:35:1f:ec:bd:21:ae:4a:
                    01:ea:7c:a5:de:a6:04:2b:bc:14:7e:a4:2b:7f:2a:
                    33:bd:4c:ff:db:64:9b:98:22:16:86:22:40:eb:61:
                    e4:29:69:42:df:03:a8:10:67:7d:85:6a:00:9e:ef:
                    d7:c9:0a:72:0e:9a:0d:44:45:05:e9:b9:39:7e:07:
                    75:b9:0d:db:9e:2b:54:4a:b6:ce:7b:85:7d:c9:55:
                    9c:a2:e4:16:d3:b0:5e:d4:e1:8f:29:00:42:90:1b:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:11:50:E0:3D:01:1F:DE:49:A5:0C:7A:72:3B:58:BA:21:E2:43:31
            X509v3 Authority Key Identifier:
                keyid:0E:17:16:F2:6A:11:2D:CE:CF:50:28:FF:82:75:AC:7C:14:90:3B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/0E1716F26A112DCECF5028FF8275AC7C14903B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E1716F26A112DCECF5028FF8275AC7C14903B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33322d313238203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c28::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:f4:5c:ee:ff:50:f0:a6:c6:6a:8d:37:d3:11:51:fe:2c:b0:
         4b:02:ab:e7:67:af:cb:4d:9a:5f:38:f2:cb:5e:2f:c7:b9:d3:
         54:22:59:72:e2:31:92:f5:fa:85:be:36:57:2e:13:cd:1c:08:
         3a:e6:ac:a7:1e:29:fc:a7:b9:04:9d:33:3b:0c:f3:8f:93:2c:
         42:02:ca:20:ca:97:9c:ca:39:f1:f0:cc:30:fb:cb:ab:a5:3e:
         30:e5:d8:f8:90:a1:3a:eb:e8:21:f9:77:15:0d:73:e6:8d:d0:
         2e:30:57:66:1a:a9:49:8f:6e:0f:8c:52:ec:3c:0f:00:af:b0:
         23:6b:7a:65:60:63:2f:1d:58:0b:fc:b7:3b:bc:16:b1:61:dc:
         2d:11:27:56:2c:49:f2:5d:ad:8e:ba:7a:c5:9e:21:ba:46:c4:
         77:88:10:61:61:45:67:04:10:4c:08:31:7f:b9:e9:3d:f6:fd:
         47:21:70:f5:6e:46:88:e2:f3:54:c5:0a:45:a7:11:78:f6:22:
         3a:d7:7a:6f:25:3e:9f:66:39:92:28:4f:80:9e:30:c2:13:da:
         12:04:13:7d:29:f5:fc:a3:c9:a9:18:3c:87:ac:b3:c3:f0:0c:
         4b:35:6e:12:6f:56:51:a0:c5:d5:2d:66:eb:f2:d0:fd:da:fc:
         a3:42:54:53
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUfcrrlpphRifIgCd50121eSxrvqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUxNzE2RjI2QTExMkRDRUNGNTAyOEZGODI3NUFDN0Mx
NDkwM0I2QTAeFw0yMzA0MjQxODMxMTNaFw0yNDA0MjIxODM2MTNaMDMxMTAvBgNV
BAMTKDlGMTE1MEUwM0QwMTFGREU0OUE1MEM3QTcyM0I1OEJBMjFFMjQzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwu5C4817qyHs9vDYZ9Ra4c9L
6QSbwOVLB8I24XmWx+CG/Kqx4zBIsZRFZAyqxLxm3drxsvFdNvwttZwlfnH8YZZI
+vZ5E9D+cn0vUbBpkGZT4Cv8vR8XWM5+lx9BzbHTFaUMK5NOXGqYo35Gv3lYsc96
ICfvblnC5IzWBj7QFDXQBYcBOPfICImiRz/5SSCV+HAxc0CtScQxrra3NR/svSGu
SgHqfKXepgQrvBR+pCt/KjO9TP/bZJuYIhaGIkDrYeQpaULfA6gQZ32FagCe79fJ
CnIOmg1ERQXpuTl+B3W5DdueK1RKts57hX3JVZyi5BbTsF7U4Y8pAEKQG+9rAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUnxFQ4D0BH95JpQx6cjtYuiHiQzEwHwYDVR0j
BBgwFoAUDhcW8moRLc7PUCj/gnWsfBSQO2owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3AxVWRxQVRhcTNGbzlVVEpiNEdzMkNrSDVzem9wWU00THhhaHpvN2RZ
bW8vMC8wRTE3MTZGMjZBMTEyRENFQ0Y1MDI4RkY4Mjc1QUM3QzE0OTAzQjZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBFMTcxNkYyNkExMTJEQ0VD
RjUwMjhGRjgyNzVBQzdDMTQ5MDNCNkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwMVVkcUFUYXEzRm85VVRKYjRHczJDa0g1c3pvcFlNNEx4YWh6bzdkWW1vLzAv
MzIzODMwMzQzYTM3NjMzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHwoMA0GCSqGSIb3DQEBCwUAA4IBAQB79Fzu
/1DwpsZqjTfTEVH+LLBLAqvnZ6/LTZpfOPLLXi/HudNUIlly4jGS9fqFvjZXLhPN
HAg65qynHin8p7kEnTM7DPOPkyxCAsogypecyjnx8Mww+8urpT4w5dj4kKE66+gh
+XcVDXPmjdAuMFdmGqlJj24PjFLsPA8Ar7Aja3plYGMvHVgL/Lc7vBaxYdwtESdW
LEnyXa2OunrFniG6RsR3iBBhYUVnBBBMCDF/uek99v1HIXD1bkaI4vNUxQpFpxF4
9iI613pvJT6fZjmSKE+AnjDCE9oSBBN9KfX8o8mpGDyHrLPD8AxLNW4Sb1ZRoMXV
LWbr8tD92vyjQlRT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org