Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d3438203d3e203532353830.roa
File:                     323830343a6366383a633030323a3a2f34382d3438203d3e203532353830.roa (raw, json)
Hash identifier:          oKltwqtnHpA0FgjQSLmONkA3dIybkV1SbrHZ2SzrRy8=
Subject key identifier:   F3:68:5A:39:28:2D:52:B7:61:15:A2:BC:C1:85:02:EF:63:38:C4:FC
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       7C6AD4C49A37D547238640D45EC50F7F6974EE11
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d3438203d3e203532353830.roa
Signing time:             Tue 09 Apr 2024 22:52:01 +0000
ROA not before:           Tue 09 Apr 2024 22:47:01 +0000
ROA not after:            Tue 08 Apr 2025 22:52:01 +0000
asID:                     52580
IP address blocks:        2804:cf8:c002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6a:d4:c4:9a:37:d5:47:23:86:40:d4:5e:c5:0f:7f:69:74:ee:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Apr  9 22:47:01 2024 GMT
            Not After : Apr  8 22:52:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:16:65:58:6f:f4:25:18:22:c7:70:89:ac:
                    5b:db:bc:1e:32:cc:19:06:72:69:8e:af:90:69:76:
                    03:e2:b6:89:b1:dc:e7:b5:60:d4:72:f6:8e:6e:8c:
                    38:23:0c:25:1b:21:3d:fd:15:36:8e:75:25:aa:a7:
                    6a:a4:74:c8:0f:a5:c9:8a:1b:0f:2e:dc:f5:24:17:
                    e5:eb:ee:bb:10:f4:ee:d8:5e:c8:80:e2:76:74:eb:
                    82:01:01:e0:91:c8:f4:ae:48:c0:14:bb:7b:33:e1:
                    49:d0:d4:f6:24:7f:ac:53:b5:54:a8:8b:ae:ba:09:
                    c3:17:ae:dd:1e:ea:27:97:dc:dd:7a:3b:da:d7:b0:
                    d1:f3:97:74:af:bb:c6:ee:f7:b8:89:29:5b:f1:35:
                    ff:b4:58:a8:7b:c6:20:90:53:5d:a5:03:65:39:fb:
                    e9:38:6e:dd:7f:85:2c:10:2a:a3:05:f8:9b:b5:d1:
                    cf:6d:c7:c7:d2:5c:d6:65:d9:9e:ff:49:64:04:5b:
                    aa:a4:c5:fa:25:ae:14:fc:3c:e4:da:10:3c:ae:3b:
                    dc:f3:0d:fe:e5:d8:ba:a4:2d:86:ba:13:2d:86:41:
                    e1:68:87:17:9d:2a:d4:96:91:3e:51:02:ac:f2:2c:
                    a6:89:41:a4:06:25:3e:26:b9:b4:a1:f9:9a:ad:f0:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:68:5A:39:28:2D:52:B7:61:15:A2:BC:C1:85:02:EF:63:38:C4:FC
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d3438203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:1d:db:ee:67:42:a3:a1:72:ef:ca:1e:aa:8c:bd:15:f2:
         8a:e0:95:37:d9:5e:89:4e:91:cd:39:c3:95:15:0a:81:43:ad:
         d2:58:03:e9:e0:b1:6e:90:af:44:40:de:eb:cc:7c:5d:15:62:
         78:a4:79:fb:da:94:14:44:71:dc:ab:ab:3f:ce:d7:2c:0e:3a:
         93:37:6d:20:38:37:5a:37:cf:55:16:b9:e6:cb:f0:a7:df:0b:
         93:22:aa:7b:d1:a3:6d:0a:fc:f6:67:32:2d:c5:ce:98:be:80:
         65:26:2c:1b:a6:04:6d:ce:1c:da:b1:0b:29:a4:56:79:9a:4b:
         41:9b:8c:f0:2c:a5:83:ba:f3:6c:6f:d2:b9:28:95:2f:81:27:
         b6:08:0a:c3:ec:ef:e9:d3:54:07:02:01:a2:92:fc:27:4a:2d:
         c8:83:fc:3b:88:f2:97:a7:3d:93:66:07:fe:64:c6:68:60:29:
         dc:59:77:89:63:13:0b:0f:ec:4e:fc:82:41:72:a8:6a:3b:b2:
         93:fa:ff:83:c6:81:76:c1:c9:cd:45:20:11:e5:0f:94:0b:73:
         c3:fe:01:34:d0:eb:3a:47:1b:bc:7e:44:32:10:9b:fe:f9:85:
         7d:72:2a:1a:c0:c3:82:e0:eb:7a:05:b6:c9:24:f8:81:1f:65:
         c7:f0:56:cb
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUfGrUxJo31UcjhkDUXsUPf2l07hEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGQzExMzU1MjdBRjk2NDVBNzNDOUFFMDI4MkFFNzdB
REM5RTI1QzAeFw0yNDA0MDkyMjQ3MDFaFw0yNTA0MDgyMjUyMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJDRjE2NjU1ODZGRjQyNTE4
MjJDNzcwODlBQzVCREJCQzFFMzJDQzE5MDY3MjY5OEVBRjkwNjk3NjAzRTJCNjg5
QjFEQ0U3QjU2MEQ0NzJGNjhFNkU4QzM4MjMwQzI1MUIyMTNERkQxNTM2OEU3NTI1
QUFBNzZBQTQ3NEM4MEZBNUM5OEExQjBGMkVEQ0Y1MjQxN0U1RUJFRUJCMTBGNEVF
RDg1RUM4ODBFMjc2NzRFQjgyMDEwMUUwOTFDOEY0QUU0OEMwMTRCQjdCMzNFMTQ5
RDBENEY2MjQ3RkFDNTNCNTU0QTg4QkFFQkEwOUMzMTdBRUREMUVFQTI3OTdEQ0RE
N0EzQkRBRDdCMEQxRjM5Nzc0QUZCQkM2RUVGN0I4ODkyOTVCRjEzNUZGQjQ1OEE4
N0JDNjIwOTA1MzVEQTUwMzY1MzlGQkU5Mzg2RUREN0Y4NTJDMTAyQUEzMDVGODlC
QjVEMUNGNkRDN0M3RDI1Q0Q2NjVEOTlFRkY0OTY0MDQ1QkFBQTRDNUZBMjVBRTE0
RkMzQ0U0REExMDNDQUUzQkRDRjMwREZFRTVEOEJBQTQyRDg2QkExMzJEODY0MUUx
Njg4NzE3OUQyQUQ0OTY5MTNFNTEwMkFDRjIyQ0E2ODk0MUE0MDYyNTNFMjZCOUI0
QTFGOTlBQURGMDkzOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAws8WZVhv9CUYIsdwiaxb27weMswZBnJpjq+QaXYD4raJsdzntWDU
cvaObow4IwwlGyE9/RU2jnUlqqdqpHTID6XJihsPLtz1JBfl6+67EPTu2F7IgOJ2
dOuCAQHgkcj0rkjAFLt7M+FJ0NT2JH+sU7VUqIuuugnDF67dHuonl9zdejva17DR
85d0r7vG7ve4iSlb8TX/tFioe8YgkFNdpQNlOfvpOG7df4UsECqjBfibtdHPbcfH
0lzWZdme/0lkBFuqpMX6Ja4U/Dzk2hA8rjvc8w3+5di6pC2GuhMthkHhaIcXnSrU
lpE+UQKs8iymiUGkBiU+Jrm0ofmarfCTiwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FPNoWjkoLVK3YRWivMGFAu9jOMT8MB8GA1UdIwQYMBaAFOL8ETVSevlkWnPJrgKC
rnetyeJcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwVDhqaUJXbXlOM1J4
bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvRTJGQzExMzU1MjdBRjk2
NDVBNzNDOUFFMDI4MkFFNzdBREM5RTI1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkZDMTEzNTUyN0FGOTY0NUE3M0M5QUUwMjgyQUU3N0FEQzlF
MjVDLmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcFQ4amlCV215TjNSeG5qR29Q
Y1lHcFZSd3VWRjNkTVZ3UmV2M0ZOenRpMS8wLzMyMzgzMDM0M2E2MzY2MzgzYTYz
MzAzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjM1MzgzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACgEDPjAAjANBgkqhkiG9w0BAQsFAAOCAQEAjlcd2+5nQqOhcu/KHqqMvRXy
iuCVN9leiU6RzTnDlRUKgUOt0lgD6eCxbpCvREDe68x8XRVieKR5+9qUFERx3Kur
P87XLA46kzdtIDg3WjfPVRa55svwp98LkyKqe9GjbQr89mcyLcXOmL6AZSYsG6YE
bc4c2rELKaRWeZpLQZuM8Cylg7rzbG/SuSiVL4EntggKw+zv6dNUBwIBopL8J0ot
yIP8O4jyl6c9k2YH/mTGaGAp3Fl3iWMTCw/sTvyCQXKoajuyk/r/g8aBdsHJzUUg
EeUPlAtzw/4BNNDrOkcbvH5EMhCb/vmFfXIqGsDDguDregW2yST4gR9lx/BWyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org