Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/323830343a3361383a3a2f33322d3438203d3e203533313935.roa
File:                     323830343a3361383a3a2f33322d3438203d3e203533313935.roa (raw, json)
Hash identifier:          O699xLT1ZpEgPdni02MJ4kgdXVKRgnTeWSv61e+ceNs=
Subject key identifier:   58:E5:5A:0F:4A:D6:7D:15:73:A0:E8:F3:FA:B5:0B:F2:83:5F:3E:C5
Certificate issuer:       /CN=F2C7C640942BB39FFD15C83B538FCF1B441CEEFD
Certificate serial:       72CD437B15EDD62D7C823B252CAF0586E08DD03F
Authority key identifier: F2:C7:C6:40:94:2B:B3:9F:FD:15:C8:3B:53:8F:CF:1B:44:1C:EE:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/323830343a3361383a3a2f33322d3438203d3e203533313935.roa
Signing time:             Wed 10 Apr 2024 13:30:25 +0000
ROA not before:           Wed 10 Apr 2024 13:25:25 +0000
ROA not after:            Wed 09 Apr 2025 13:30:25 +0000
asID:                     53195
IP address blocks:        2804:3a8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cd:43:7b:15:ed:d6:2d:7c:82:3b:25:2c:af:05:86:e0:8d:d0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C7C640942BB39FFD15C83B538FCF1B441CEEFD
        Validity
            Not Before: Apr 10 13:25:25 2024 GMT
            Not After : Apr  9 13:30:25 2025 GMT
        Subject: CN=58E55A0F4AD67D1573A0E8F3FAB50BF2835F3EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:64:27:0d:07:b9:a8:12:e2:d6:ac:06:1d:
                    25:03:35:b2:13:1d:d6:81:37:1f:07:81:67:b3:81:
                    22:15:fa:cd:ce:a2:ad:d2:bf:01:96:94:d9:82:36:
                    1a:30:6a:99:94:d9:76:77:f3:2a:c7:26:3e:8f:fc:
                    43:2e:76:a4:c6:f2:d0:b3:f8:c6:b7:88:29:94:88:
                    91:3f:4f:91:9f:a3:b5:08:63:07:8f:3a:c8:05:45:
                    48:00:d0:9a:c3:da:fe:26:c4:45:1b:c2:dc:b8:0a:
                    70:4d:86:92:41:af:f2:98:5e:65:b7:b8:1f:a0:5e:
                    77:03:4c:f0:54:6a:a9:aa:08:27:d7:c3:61:7c:91:
                    d9:df:47:63:8c:03:26:0c:f3:6b:cf:78:51:68:92:
                    75:39:e7:e3:f7:44:04:a6:6c:ca:f8:89:40:a9:78:
                    94:bc:b5:40:22:3a:c3:23:ea:c2:2e:a0:46:8e:3d:
                    a9:57:62:97:4b:14:d1:fd:59:01:95:70:bc:a8:8c:
                    20:85:01:f5:67:66:7c:54:7c:2b:ce:54:fb:01:16:
                    b3:81:a9:7a:8d:a6:28:06:8a:91:ca:7b:3d:e0:2d:
                    08:c5:69:9a:84:30:38:a1:b9:f4:82:35:57:81:5b:
                    e4:5f:00:c0:ee:88:3c:b1:85:ba:10:d7:5f:37:51:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E5:5A:0F:4A:D6:7D:15:73:A0:E8:F3:FA:B5:0B:F2:83:5F:3E:C5
            X509v3 Authority Key Identifier:
                keyid:F2:C7:C6:40:94:2B:B3:9F:FD:15:C8:3B:53:8F:CF:1B:44:1C:EE:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/323830343a3361383a3a2f33322d3438203d3e203533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:39:3d:16:9d:0c:a3:a5:a7:29:7d:1d:d7:3e:60:d4:90:45:
         40:70:6a:55:2c:47:ba:28:dc:96:c1:ee:ff:cb:21:59:8e:a0:
         d9:b5:73:fe:4f:7d:2a:6d:e0:f3:de:60:ae:e5:17:82:1e:ec:
         27:10:40:2c:50:f5:a6:38:3c:f4:3b:e7:ba:aa:9e:70:92:79:
         34:cb:86:3f:78:5f:e1:6b:6f:3f:e0:52:d1:ba:b7:c6:d1:40:
         55:14:55:50:83:dd:eb:0d:db:03:db:35:d7:66:0c:9a:ba:7f:
         f2:ac:52:14:ae:f9:d9:c4:b6:af:b1:21:67:10:df:8b:7c:4a:
         0d:86:17:1a:0b:3b:76:f6:b9:d5:53:82:d0:e2:6b:ba:f3:83:
         8d:21:b5:bc:77:1b:05:b0:fc:5b:96:5d:78:58:97:6f:9b:0a:
         21:a4:ce:5c:64:d4:fe:86:90:fe:5e:ac:b8:85:08:00:1d:bc:
         98:f8:b2:17:5b:71:50:c6:0b:ac:86:dc:eb:f8:b1:0f:43:9b:
         51:85:87:23:71:b1:f1:50:bf:da:a8:3d:fd:0d:6a:ae:b9:65:
         20:f9:2c:67:1a:c9:a4:4b:07:7b:de:6d:b0:d2:57:01:aa:5b:
         64:41:e0:fe:fa:af:88:4e:22:67:2d:b6:61:9a:e7:43:d5:42:
         53:ce:4a:99
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUcs1DexXt1i18gjslLK8FhuCN0D8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDN0M2NDA5NDJCQjM5RkZEMTVDODNCNTM4RkNGMUI0
NDFDRUVGRDAeFw0yNDA0MTAxMzI1MjVaFw0yNTA0MDkxMzMwMjVaMDMxMTAvBgNV
BAMTKDU4RTU1QTBGNEFENjdEMTU3M0EwRThGM0ZBQjUwQkYyODM1RjNFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91GQnDQe5qBLi1qwGHSUDNbIT
HdaBNx8HgWezgSIV+s3Ooq3SvwGWlNmCNhowapmU2XZ38yrHJj6P/EMudqTG8tCz
+Ma3iCmUiJE/T5Gfo7UIYwePOsgFRUgA0JrD2v4mxEUbwty4CnBNhpJBr/KYXmW3
uB+gXncDTPBUaqmqCCfXw2F8kdnfR2OMAyYM82vPeFFoknU55+P3RASmbMr4iUCp
eJS8tUAiOsMj6sIuoEaOPalXYpdLFNH9WQGVcLyojCCFAfVnZnxUfCvOVPsBFrOB
qXqNpigGipHKez3gLQjFaZqEMDihufSCNVeBW+RfAMDuiDyxhboQ1183UVpVAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUWOVaD0rWfRVzoOjz+rUL8oNfPsUwHwYDVR0j
BBgwFoAU8sfGQJQrs5/9Fcg7U4/PG0Qc7v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1MYkV4a21zclFUaTNHV3BaVTVnOXBob2dwYkdiNmhKbVg3WlYyVzJN
U0ovMC9GMkM3QzY0MDk0MkJCMzlGRkQxNUM4M0I1MzhGQ0YxQjQ0MUNFRUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyQzdDNjQwOTQyQkIzOUZG
RDE1QzgzQjUzOEZDRjFCNDQxQ0VFRkQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hNTGJFeGttc3JRVGkzR1dwWlU1ZzlwaG9ncGJHYjZoSm1YN1pWMlcyTVNKLzAv
MzIzODMwMzQzYTMzNjEzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMTM5
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAOoMA0GCSqGSIb3DQEBCwUAA4IBAQAGOT0WnQyjpacp
fR3XPmDUkEVAcGpVLEe6KNyWwe7/yyFZjqDZtXP+T30qbeDz3mCu5ReCHuwnEEAs
UPWmODz0O+e6qp5wknk0y4Y/eF/ha28/4FLRurfG0UBVFFVQg93rDdsD2zXXZgya
un/yrFIUrvnZxLavsSFnEN+LfEoNhhcaCzt29rnVU4LQ4mu684ONIbW8dxsFsPxb
ll14WJdvmwohpM5cZNT+hpD+Xqy4hQgAHbyY+LIXW3FQxgushtzr+LEPQ5tRhYcj
cbHxUL/aqD39DWquuWUg+SxnGsmkSwd73m2w0lcBqltkQeD++q+ITiJnLbZhmudD
1UJTzkqZ
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org