Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
File:                     323830343a3163633a3a2f33322d3438203d3e203238313330.roa (raw, json)
Hash identifier:          aHD+PrQZ04U/6zjVeLpTqr51k3X/cikaWa19n8ok9ZQ=
Subject key identifier:   D2:A1:28:74:E3:85:71:1A:A2:66:DA:AE:C4:E8:8F:EA:C5:6D:C5:1A
Certificate issuer:       /CN=62BD461875786A00B21F073E8D02ACCE9BC15828
Certificate serial:       58B2EDEA7965634B952C417F6AB6621486311035
Authority key identifier: 62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
Signing time:             Mon 17 Jul 2023 14:36:01 +0000
ROA not before:           Mon 17 Jul 2023 14:31:01 +0000
ROA not after:            Mon 15 Jul 2024 14:36:01 +0000
asID:                     28130
IP address blocks:        2804:1cc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b2:ed:ea:79:65:63:4b:95:2c:41:7f:6a:b6:62:14:86:31:10:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BD461875786A00B21F073E8D02ACCE9BC15828
        Validity
            Not Before: Jul 17 14:31:01 2023 GMT
            Not After : Jul 15 14:36:01 2024 GMT
        Subject: CN=D2A12874E385711AA266DAAEC4E88FEAC56DC51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:07:d5:43:5f:1e:7b:d7:d0:91:42:94:b7:
                    13:46:44:69:36:1b:98:17:2f:c0:6b:7b:2e:d1:96:
                    07:26:cb:0d:79:dc:3c:88:16:2c:6d:92:70:36:22:
                    70:56:4c:22:a6:20:cd:f2:28:f6:37:05:56:36:19:
                    73:12:3b:65:a8:06:0e:65:af:5d:83:00:a2:d7:cb:
                    0f:00:50:53:4c:8d:24:7a:6f:7e:ce:a7:6b:4f:36:
                    0c:87:1e:99:b6:5c:40:54:70:af:68:7c:31:b7:4a:
                    7f:5c:d1:ad:c0:73:76:d6:66:dd:4b:d3:bb:04:dc:
                    f1:78:fa:5c:68:84:fe:f8:40:38:63:b7:0c:20:99:
                    7d:9d:91:5d:36:4d:12:74:76:d1:0a:94:b1:87:db:
                    06:41:39:c0:59:f8:43:77:f8:f8:dd:8f:c1:7d:43:
                    cc:c4:be:17:76:66:7c:9e:46:ab:a7:d2:20:14:ad:
                    23:d9:ac:25:77:7c:12:88:b4:2f:2e:75:f6:8c:1d:
                    54:92:1b:cf:b5:c7:5e:f7:b3:9c:c5:33:c0:ea:b9:
                    92:ab:4f:f7:80:6d:26:87:f3:e2:9c:84:f2:90:65:
                    0a:4c:90:22:4e:10:57:b7:9a:b2:fc:1f:c2:78:16:
                    57:8a:bc:32:a5:c7:d2:dc:8e:b6:b9:ca:0b:d2:23:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A1:28:74:E3:85:71:1A:A2:66:DA:AE:C4:E8:8F:EA:C5:6D:C5:1A
            X509v3 Authority Key Identifier:
                keyid:62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/62BD461875786A00B21F073E8D02ACCE9BC15828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/323830343a3163633a3a2f33322d3438203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:92:f5:93:78:f7:1d:1d:0a:8f:33:2d:e7:22:83:07:a3:63:
         55:ce:3d:fa:92:32:d8:eb:f8:d0:bf:e7:f3:d5:ce:cd:ec:b4:
         02:02:48:df:36:32:1e:1f:e1:b8:4d:e5:5a:a6:b8:0b:87:22:
         71:f7:ca:01:48:f5:66:b8:a7:20:32:f0:0e:13:52:92:6b:05:
         1e:77:a5:57:0f:38:37:07:c4:9c:a6:3e:00:4b:0a:8d:91:bb:
         3a:72:5e:87:5b:98:8f:cf:7a:f0:63:91:0f:ab:7c:64:01:ca:
         2c:e7:e3:ae:8c:a2:65:a0:68:af:0b:fd:af:0b:e8:bb:48:ee:
         7e:44:3b:e9:c6:21:30:de:5c:69:46:8c:38:29:a9:ba:fe:95:
         90:ad:9b:26:e0:8f:6f:56:60:7b:ef:4a:9c:ff:61:29:f0:a5:
         d8:0b:1f:53:49:be:ac:be:a7:42:61:72:9a:1c:e0:d5:74:ed:
         5b:ec:87:50:31:6b:a2:2a:6b:a9:6a:2f:53:68:ac:f8:73:d5:
         32:76:04:8c:37:d3:38:4f:2d:ba:5e:47:05:8a:ca:58:6b:68:
         ad:3b:59:8d:59:4a:3b:f6:7c:c9:0f:66:88:9a:8f:f7:dc:62:
         69:93:8c:30:ec:24:37:2d:87:39:f3:8d:d5:ca:f5:a6:f4:2a:
         d2:d9:cc:32
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUWLLt6nllY0uVLEF/arZiFIYxEDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJCRDQ2MTg3NTc4NkEwMEIyMUYwNzNFOEQwMkFDQ0U5
QkMxNTgyODAeFw0yMzA3MTcxNDMxMDFaFw0yNDA3MTUxNDM2MDFaMDMxMTAvBgNV
BAMTKEQyQTEyODc0RTM4NTcxMUFBMjY2REFBRUM0RTg4RkVBQzU2REM1MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAkQfVQ18ee9fQkUKUtxNGRGk2
G5gXL8Brey7Rlgcmyw153DyIFixtknA2InBWTCKmIM3yKPY3BVY2GXMSO2WoBg5l
r12DAKLXyw8AUFNMjSR6b37Op2tPNgyHHpm2XEBUcK9ofDG3Sn9c0a3Ac3bWZt1L
07sE3PF4+lxohP74QDhjtwwgmX2dkV02TRJ0dtEKlLGH2wZBOcBZ+EN3+Pjdj8F9
Q8zEvhd2ZnyeRqun0iAUrSPZrCV3fBKItC8udfaMHVSSG8+1x173s5zFM8DquZKr
T/eAbSaH8+KchPKQZQpMkCJOEFe3mrL8H8J4FleKvDKlx9Lcjra5ygvSIw5VAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU0qEodOOFcRqiZtquxOiP6sVtxRowHwYDVR0j
BBgwFoAUYr1GGHV4agCyHwc+jQKszpvBWCgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzAvNjJCRDQ2MTg3NTc4NkEwMEIyMUYwNzNFOEQwMkFDQ0U5QkMxNTgyOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82MkJENDYxODc1Nzg2QTAwQjIx
RjA3M0U4RDAyQUNDRTlCQzE1ODI4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzAvMzIz
ODMwMzQzYTMxNjM2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMTMzMzAu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAoBAHMMA0GCSqGSIb3DQEBCwUAA4IBAQCIkvWTePcdHQqPMy3n
IoMHo2NVzj36kjLY6/jQv+fz1c7N7LQCAkjfNjIeH+G4TeVaprgLhyJx98oBSPVm
uKcgMvAOE1KSawUed6VXDzg3B8Scpj4ASwqNkbs6cl6HW5iPz3rwY5EPq3xkAcos
5+OujKJloGivC/2vC+i7SO5+RDvpxiEw3lxpRow4Kam6/pWQrZsm4I9vVmB770qc
/2Ep8KXYCx9TSb6svqdCYXKaHODVdO1b7IdQMWuiKmupai9TaKz4c9UydgSMN9M4
Ty26XkcFispYa2itO1mNWUo79nzJD2aImo/33GJpk4ww7CQ3LYc5843VyvWm9CrS
2cwy
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org