Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a343030313a3a2f34382d3438203d3e203532363431.roa
File:                     323830343a313931633a343030313a3a2f34382d3438203d3e203532363431.roa (raw, json)
Hash identifier:          tO5VdB9qQMUqLfs+x2nInkaHBDzbEvYyKG5PEOyk9ns=
Subject key identifier:   55:03:71:F0:7E:3E:D3:83:3E:B6:D1:65:D1:AC:B8:37:46:5A:FF:14
Certificate issuer:       /CN=B40E0E8364390F2D35C0AFE6006575BE61886B2F
Certificate serial:       6FE6F81A69E9CB0DFF4BF9457D39DAA8DCEE8C5E
Authority key identifier: B4:0E:0E:83:64:39:0F:2D:35:C0:AF:E6:00:65:75:BE:61:88:6B:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a343030313a3a2f34382d3438203d3e203532363431.roa
Signing time:             Tue 07 Feb 2023 20:13:43 +0000
ROA not before:           Tue 07 Feb 2023 20:08:43 +0000
ROA not after:            Tue 06 Feb 2024 20:13:43 +0000
asID:                     52641
IP address blocks:        2804:191c:4001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e6:f8:1a:69:e9:cb:0d:ff:4b:f9:45:7d:39:da:a8:dc:ee:8c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B40E0E8364390F2D35C0AFE6006575BE61886B2F
        Validity
            Not Before: Feb  7 20:08:43 2023 GMT
            Not After : Feb  6 20:13:43 2024 GMT
        Subject: CN=550371F07E3ED3833EB6D165D1ACB837465AFF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bb:b5:9f:fd:da:8c:21:42:4b:b9:56:98:03:
                    ed:ba:60:d0:0a:25:98:d1:df:f0:be:68:6b:22:6e:
                    d1:ab:a0:50:8f:0e:90:45:b9:6a:76:f5:af:2e:bf:
                    65:a9:47:f2:61:a2:3d:71:15:b3:cd:8f:05:24:ed:
                    66:a2:d0:77:97:a3:8c:d2:0a:33:d9:7d:f6:d7:6c:
                    36:72:53:22:e6:82:02:61:3b:04:67:fb:f8:f3:71:
                    64:e6:28:41:84:9e:a0:08:55:3f:d5:1c:bd:ad:1a:
                    86:2f:a6:f8:42:79:d8:57:56:1a:84:66:29:98:db:
                    df:83:f6:ea:bf:e4:98:7d:8f:98:0f:a8:e9:5f:cd:
                    44:cc:77:22:35:13:91:41:ab:18:d3:2e:5f:49:76:
                    ee:6a:b2:ea:97:88:94:c3:69:bf:b3:31:bf:09:bb:
                    bb:e5:23:93:80:12:c6:fc:40:41:63:e9:ba:45:f3:
                    03:f2:ba:34:3a:f3:f1:0f:ab:d1:c8:f2:c6:19:e8:
                    21:cf:46:52:3b:42:9d:dd:88:2f:cb:08:65:e5:10:
                    27:d3:3b:11:4e:e7:d9:1f:70:2d:1b:63:ab:e3:fc:
                    db:6f:e7:94:ee:3f:a6:6e:66:70:ff:4c:d3:cb:31:
                    b9:25:df:86:85:3b:d6:8d:16:b2:2c:d7:ac:b4:09:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:03:71:F0:7E:3E:D3:83:3E:B6:D1:65:D1:AC:B8:37:46:5A:FF:14
            X509v3 Authority Key Identifier:
                keyid:B4:0E:0E:83:64:39:0F:2D:35:C0:AF:E6:00:65:75:BE:61:88:6B:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/323830343a313931633a343030313a3a2f34382d3438203d3e203532363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:191c:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:67:aa:cd:cc:6b:54:e1:0b:1a:03:62:aa:84:14:3a:d7:3b:
         2b:df:7f:78:09:fc:91:9a:53:52:b9:be:4a:db:4a:c0:93:50:
         98:31:fb:da:df:06:83:18:3a:26:a7:40:1e:25:fa:41:2f:36:
         33:7a:0f:92:fd:31:1f:d9:6b:08:0f:89:c3:99:95:c5:67:60:
         67:37:6d:d1:b3:fa:1a:9d:9c:4d:f0:34:0b:b4:e1:cc:79:90:
         15:71:27:55:82:4a:a9:2f:90:b7:6e:78:9f:8a:36:3c:e9:f5:
         9e:be:6a:e5:49:bf:76:88:35:a9:6a:88:a4:d7:2f:eb:5a:a7:
         42:a8:49:12:44:04:f2:ed:a4:7f:bf:b8:56:65:17:a2:fb:02:
         e3:f7:93:26:99:f8:7d:d7:71:55:ba:93:0e:0d:fa:3d:1f:52:
         59:12:c5:04:56:1c:01:0f:f2:01:97:70:a6:6c:7f:ad:76:be:
         5e:6f:36:c7:30:61:24:34:b8:4f:74:b0:72:b3:d3:df:db:26:
         b2:19:58:15:98:49:fc:cc:e3:0c:a6:03:56:cb:27:40:6e:ed:
         c0:8a:08:e8:3d:29:54:57:d5:fd:8d:1a:9d:c3:1c:4b:fc:86:
         ef:bc:a2:b6:6f:e8:1a:8d:a6:97:3a:3d:bd:94:cb:ff:03:c4:
         31:45:ee:e4
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUb+b4Gmnpyw3/S/lFfTnaqNzujF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwRTBFODM2NDM5MEYyRDM1QzBBRkU2MDA2NTc1QkU2
MTg4NkIyRjAeFw0yMzAyMDcyMDA4NDNaFw0yNDAyMDYyMDEzNDNaMDMxMTAvBgNV
BAMTKDU1MDM3MUYwN0UzRUQzODMzRUI2RDE2NUQxQUNCODM3NDY1QUZGMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxu7Wf/dqMIUJLuVaYA+26YNAK
JZjR3/C+aGsibtGroFCPDpBFuWp29a8uv2WpR/Jhoj1xFbPNjwUk7Wai0HeXo4zS
CjPZffbXbDZyUyLmggJhOwRn+/jzcWTmKEGEnqAIVT/VHL2tGoYvpvhCedhXVhqE
ZimY29+D9uq/5Jh9j5gPqOlfzUTMdyI1E5FBqxjTLl9Jdu5qsuqXiJTDab+zMb8J
u7vlI5OAEsb8QEFj6bpF8wPyujQ68/EPq9HI8sYZ6CHPRlI7Qp3diC/LCGXlECfT
OxFO59kfcC0bY6vj/Ntv55TuP6ZuZnD/TNPLMbkl34aFO9aNFrIs16y0CV/VAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUVQNx8H4+04M+ttFl0ay4N0Za/xQwHwYDVR0j
BBgwFoAUtA4Og2Q5Dy01wK/mAGV1vmGIay8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEN3NlE5amV0TmkydjlkRjJTV1ByVjU4a1hjUmg3b3Q2WUtnampHaE5D
VmgvMC9CNDBFMEU4MzY0MzkwRjJEMzVDMEFGRTYwMDY1NzVCRTYxODg2QjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I0MEUwRTgzNjQzOTBGMkQz
NUMwQUZFNjAwNjU3NUJFNjE4ODZCMkYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDdzZROWpldE5pMnY5ZEYyU1dQclY1OGtYY1JoN290NllLZ2pqR2hOQ1ZoLzAv
MzIzODMwMzQzYTMxMzkzMTYzM2EzNDMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM1MzIzNjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBBkcQAEwDQYJKoZIhvcNAQELBQAD
ggEBAJhnqs3Ma1ThCxoDYqqEFDrXOyvff3gJ/JGaU1K5vkrbSsCTUJgx+9rfBoMY
OianQB4l+kEvNjN6D5L9MR/ZawgPicOZlcVnYGc3bdGz+hqdnE3wNAu04cx5kBVx
J1WCSqkvkLdueJ+KNjzp9Z6+auVJv3aINalqiKTXL+tap0KoSRJEBPLtpH+/uFZl
F6L7AuP3kyaZ+H3XcVW6kw4N+j0fUlkSxQRWHAEP8gGXcKZsf612vl5vNscwYSQ0
uE90sHKz09/bJrIZWBWYSfzM4wymA1bLJ0Bu7cCKCOg9KVRX1f2NGp3DHEv8hu+8
orZv6BqNppc6Pb2Uy/8DxDFF7uQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org