Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a383030303a3a2f34302d3430203d3e20323636303931.roa
File:                     323830343a336137383a383030303a3a2f34302d3430203d3e20323636303931.roa (raw, json)
Hash identifier:          BV5OUbc41FF2Oq6r+8O/ZI26LgZ2icbVm2G4KVPsBzI=
Subject key identifier:   2A:6F:C3:45:AE:1A:BF:46:6D:D6:4A:F2:EB:50:81:35:5F:08:53:66
Certificate issuer:       /CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
Certificate serial:       2CC1956A5B0536392DCADE6670E7333BAF76AB25
Authority key identifier: 54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a383030303a3a2f34302d3430203d3e20323636303931.roa
Signing time:             Wed 28 Feb 2024 14:11:13 +0000
ROA not before:           Wed 28 Feb 2024 14:06:13 +0000
ROA not after:            Wed 26 Feb 2025 14:11:13 +0000
asID:                     266091
IP address blocks:        2804:3a78:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c1:95:6a:5b:05:36:39:2d:ca:de:66:70:e7:33:3b:af:76:ab:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5450FAFA57000D5AA61AEF7BE39D21C01883EA85
        Validity
            Not Before: Feb 28 14:06:13 2024 GMT
            Not After : Feb 26 14:11:13 2025 GMT
        Subject: CN=2A6FC345AE1ABF466DD64AF2EB5081355F085366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:00:5e:5d:f5:18:fa:6f:b0:ad:33:20:ec:
                    64:da:ce:00:45:49:fa:6d:29:39:53:07:01:88:ae:
                    5d:d8:54:6c:72:2c:99:9e:86:28:32:fa:99:b7:81:
                    92:2c:53:f9:30:48:38:92:7f:10:85:4c:8f:09:5a:
                    c7:0e:76:db:7e:22:0b:bb:97:b7:a2:bc:be:26:37:
                    26:6b:d2:12:b6:da:2d:95:d3:cf:87:99:80:da:50:
                    28:e2:bd:42:e6:94:42:bb:ea:e5:53:23:da:50:10:
                    d3:cc:3e:8e:17:dc:ac:11:20:91:0e:77:5e:ee:00:
                    0e:b9:75:8f:f7:73:c8:ef:de:ce:33:5d:4b:d0:da:
                    14:8a:ad:2f:a5:21:06:4d:ab:9b:02:e4:5c:2c:9c:
                    8b:e4:4f:6b:11:c0:2f:dc:4a:79:4e:aa:ac:6a:d2:
                    13:d2:b3:06:bc:80:c3:26:92:69:3e:12:cf:c3:3c:
                    4c:88:34:d4:e7:d6:d6:ee:5a:80:6a:c1:af:26:3b:
                    ee:50:50:e1:fa:68:c9:57:62:a2:2a:89:d7:1d:41:
                    80:65:e6:20:1e:bd:35:cb:da:c3:5f:10:83:b9:e4:
                    a4:1d:ba:e5:ce:76:64:1a:0a:fa:f2:68:f6:fe:74:
                    53:88:25:1b:b6:21:e1:38:d6:14:95:04:0b:85:54:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:C3:45:AE:1A:BF:46:6D:D6:4A:F2:EB:50:81:35:5F:08:53:66
            X509v3 Authority Key Identifier:
                keyid:54:50:FA:FA:57:00:0D:5A:A6:1A:EF:7B:E3:9D:21:C0:18:83:EA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5450FAFA57000D5AA61AEF7BE39D21C01883EA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/323830343a336137383a383030303a3a2f34302d3430203d3e20323636303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a78:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:91:35:96:94:e0:ee:00:1f:ba:2d:e1:77:92:3f:00:66:9c:
         64:9a:49:40:30:8e:20:c9:07:af:3b:dc:79:fb:c9:b5:7d:68:
         2c:82:53:3b:c6:32:18:6e:1c:80:b2:84:37:ec:f1:f8:09:3c:
         6c:65:db:e3:f7:e4:59:48:4f:4c:05:fe:b1:ec:be:98:b9:b7:
         da:be:9c:eb:d1:5e:1a:d8:41:a8:81:40:c7:28:3e:0a:a3:5f:
         bc:02:e5:9d:21:c0:0f:43:e6:df:fb:1c:b1:e6:38:f0:bc:4a:
         cb:49:67:21:d5:4c:73:8b:78:b9:32:12:24:95:36:95:d7:d7:
         98:49:a3:26:48:9b:07:25:76:db:ab:9e:23:fc:59:aa:37:5c:
         43:ff:08:18:6c:ea:fb:a2:e3:ac:dc:3e:e6:ce:27:c1:e4:93:
         41:57:c8:3c:ba:10:3c:ce:8c:84:39:46:33:5f:80:2e:78:5e:
         99:34:4c:92:2d:21:cc:ce:43:f7:1a:0f:be:95:3c:5e:be:03:
         17:d0:bd:b1:dd:07:46:91:fc:d1:94:4f:11:3c:bb:f8:b0:f9:
         5e:d4:04:01:98:ca:b6:c1:53:d0:06:fe:8b:4d:f7:d8:24:aa:
         9a:2b:03:f8:e8:e6:6c:e7:0b:af:a3:fc:3b:e6:35:b4:e1:91:
         6b:99:25:7e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULMGValsFNjktyt5mcOczO692qyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ1MEZBRkE1NzAwMEQ1QUE2MUFFRjdCRTM5RDIxQzAx
ODgzRUE4NTAeFw0yNDAyMjgxNDA2MTNaFw0yNTAyMjYxNDExMTNaMDMxMTAvBgNV
BAMTKDJBNkZDMzQ1QUUxQUJGNDY2REQ2NEFGMkVCNTA4MTM1NUYwODUzNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mABeXfUY+m+wrTMg7GTazgBF
SfptKTlTBwGIrl3YVGxyLJmehigy+pm3gZIsU/kwSDiSfxCFTI8JWscOdtt+Igu7
l7eivL4mNyZr0hK22i2V08+HmYDaUCjivULmlEK76uVTI9pQENPMPo4X3KwRIJEO
d17uAA65dY/3c8jv3s4zXUvQ2hSKrS+lIQZNq5sC5FwsnIvkT2sRwC/cSnlOqqxq
0hPSswa8gMMmkmk+Es/DPEyINNTn1tbuWoBqwa8mO+5QUOH6aMlXYqIqidcdQYBl
5iAevTXL2sNfEIO55KQduuXOdmQaCvryaPb+dFOIJRu2IeE41hSVBAuFVM+FAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUKm/DRa4av0Zt1kry61CBNV8IU2YwHwYDVR0j
BBgwFoAUVFD6+lcADVqmGu97450hwBiD6oUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpW
d1QvMC81NDUwRkFGQTU3MDAwRDVBQTYxQUVGN0JFMzlEMjFDMDE4ODNFQTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0NTBGQUZBNTcwMDBENUFB
NjFBRUY3QkUzOUQyMUMwMTg4M0VBODUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1dlY3WEI3Zmp3QXZNOFJ2RkVnN0M0d1RyaVFudzY3V25Bd1BTeTl6VndULzAv
MzIzODMwMzQzYTMzNjEzNzM4M2EzODMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEOniAMA0GCSqGSIb3DQEBCwUA
A4IBAQAkkTWWlODuAB+6LeF3kj8AZpxkmklAMI4gyQevO9x5+8m1fWgsglM7xjIY
bhyAsoQ37PH4CTxsZdvj9+RZSE9MBf6x7L6Yubfavpzr0V4a2EGogUDHKD4Ko1+8
AuWdIcAPQ+bf+xyx5jjwvErLSWch1Uxzi3i5MhIklTaV19eYSaMmSJsHJXbbq54j
/FmqN1xD/wgYbOr7ouOs3D7mzifB5JNBV8g8uhA8zoyEOUYzX4AueF6ZNEySLSHM
zkP3Gg++lTxevgMX0L2x3QdGkfzRlE8RPLv4sPle1AQBmMq2wVPQBv6LTffYJKqa
KwP46OZs5wuvo/w75jW04ZFrmSV+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org