Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a383030303a3a2f33342d3334203d3e20323639353234.roa
File:                     323830343a363566303a383030303a3a2f33342d3334203d3e20323639353234.roa (raw, json)
Hash identifier:          hRn215j2dnFw9XeLBR9Wjsf6vf2OQgAM4q1UaAA+jQg=
Subject key identifier:   EF:41:88:9A:5F:39:09:94:6A:70:75:63:B0:6A:29:4E:96:DA:FF:85
Certificate issuer:       /CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
Certificate serial:       0F690D69357B33E4CE572411EA01891B34B3F5FB
Authority key identifier: 5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a383030303a3a2f33342d3334203d3e20323639353234.roa
Signing time:             Mon 08 Apr 2024 17:09:33 +0000
ROA not before:           Mon 08 Apr 2024 17:04:33 +0000
ROA not after:            Mon 07 Apr 2025 17:09:33 +0000
asID:                     269524
IP address blocks:        2804:65f0:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:69:0d:69:35:7b:33:e4:ce:57:24:11:ea:01:89:1b:34:b3:f5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
        Validity
            Not Before: Apr  8 17:04:33 2024 GMT
            Not After : Apr  7 17:09:33 2025 GMT
        Subject: CN=EF41889A5F3909946A707563B06A294E96DAFF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:53:c9:71:5f:25:de:44:6a:04:38:34:72:
                    b7:4c:3b:89:f8:a7:c0:59:da:45:a6:e1:82:9c:8a:
                    c8:ca:83:79:28:ba:24:9c:b7:93:27:e1:c9:12:a1:
                    b3:22:72:f2:2d:fd:e2:7c:89:58:04:80:43:93:3f:
                    63:0d:d1:1f:c3:43:21:a8:d0:49:e6:03:0c:d2:5a:
                    ca:ad:6d:cc:e1:cd:d2:b8:16:7c:85:2b:b8:2f:ff:
                    a2:ca:dd:e3:20:e8:37:75:c2:5f:61:ce:cc:c8:98:
                    8a:07:2b:db:88:4d:62:c6:2a:1f:1d:37:58:14:0a:
                    7c:5f:18:95:b8:fe:38:91:92:fd:a0:95:17:10:90:
                    b9:41:3c:80:f3:19:e3:bb:a0:ab:8b:b4:58:01:d7:
                    2d:33:e8:16:e9:31:89:e0:ac:da:5f:05:92:c6:0f:
                    71:31:ff:c4:40:a8:fb:1e:a9:ad:78:ad:16:f0:f3:
                    20:e4:81:25:88:c4:9c:db:e2:12:fb:ce:87:22:d5:
                    cf:47:29:79:a2:b0:11:57:dd:ec:5c:ac:63:c6:cc:
                    20:0f:5f:55:da:ad:2c:3a:95:ea:90:47:e1:72:73:
                    b1:8a:67:a5:a8:bd:94:24:73:2a:be:ba:f9:ed:b9:
                    88:90:14:3b:7f:b6:9d:0e:3e:16:c1:fe:2d:b7:68:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:41:88:9A:5F:39:09:94:6A:70:75:63:B0:6A:29:4E:96:DA:FF:85
            X509v3 Authority Key Identifier:
                keyid:5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a383030303a3a2f33342d3334203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:f4:ff:9b:a5:1c:a0:b3:c6:70:5f:24:d1:fa:94:d3:17:
         3d:ca:a2:b4:9b:40:cb:32:08:d3:e4:a5:02:ae:2f:02:dd:7f:
         6b:8a:56:41:b1:d9:d8:e6:35:57:fe:5c:b2:b6:ee:19:91:58:
         b7:f8:6a:90:72:eb:3d:43:fc:d0:4d:df:1d:20:b7:a0:c7:86:
         8c:13:91:2e:21:e6:6b:1a:8d:33:72:39:6b:ff:c8:45:54:b1:
         cc:97:72:de:26:c5:df:d4:59:7b:50:60:a3:ed:16:74:76:46:
         c8:c6:47:9a:40:da:56:b0:dc:c9:92:56:80:33:ab:bc:e6:fb:
         8d:4d:59:26:72:1f:4f:72:10:14:73:a5:84:f4:f3:46:f3:bc:
         8f:77:d6:73:cf:ec:4d:fa:3b:b3:6c:bf:e0:88:41:15:fa:34:
         06:aa:47:db:8b:51:5e:8f:d0:d2:8a:4e:45:94:b9:b1:9f:03:
         32:11:17:92:2e:e6:22:dc:a6:1d:0f:d6:c5:b4:bd:18:64:00:
         5e:db:40:d8:c5:be:6e:9a:20:01:df:97:ca:cd:1e:90:ea:9d:
         a0:5f:41:2b:8b:a9:d8:46:d6:5d:4a:be:3d:62:5c:e9:d0:b2:
         31:a4:fd:62:d8:32:13:ed:3b:3f:e0:c8:22:59:b5:e2:de:6c:
         5e:7e:0d:79
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUD2kNaTV7M+TOVyQR6gGJGzSz9fswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGRDRCRDgzNTdGNTA1RDZDQjFBNDdFOUMxNTNENTcx
Mjk1OTJCNjAeFw0yNDA0MDgxNzA0MzNaFw0yNTA0MDcxNzA5MzNaMDMxMTAvBgNV
BAMTKEVGNDE4ODlBNUYzOTA5OTQ2QTcwNzU2M0IwNkEyOTRFOTZEQUZGODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+I1PJcV8l3kRqBDg0crdMO4n4
p8BZ2kWm4YKcisjKg3kouiSct5Mn4ckSobMicvIt/eJ8iVgEgEOTP2MN0R/DQyGo
0EnmAwzSWsqtbczhzdK4FnyFK7gv/6LK3eMg6Dd1wl9hzszImIoHK9uITWLGKh8d
N1gUCnxfGJW4/jiRkv2glRcQkLlBPIDzGeO7oKuLtFgB1y0z6BbpMYngrNpfBZLG
D3Ex/8RAqPseqa14rRbw8yDkgSWIxJzb4hL7zoci1c9HKXmisBFX3excrGPGzCAP
X1XarSw6leqQR+Fyc7GKZ6WovZQkcyq+uvntuYiQFDt/tp0OPhbB/i23aPbZAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU70GIml85CZRqcHVjsGopTpba/4UwHwYDVR0j
BBgwFoAUXP1L2DV/UF1ssaR+nBU9VxKVkrYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94RzNtVFUzV1pyTTU4akJ1VEtiSnJ4azhpcWNldXpCWFo2M0VWTU05WnJL
LzAvNUNGRDRCRDgzNTdGNTA1RDZDQjFBNDdFOUMxNTNENTcxMjk1OTJCNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0ZENEJEODM1N0Y1MDVENkNC
MUE0N0U5QzE1M0Q1NzEyOTU5MkI2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
RzNtVFUzV1pyTTU4akJ1VEtiSnJ4azhpcWNldXpCWFo2M0VWTU05WnJLLzAvMzIz
ODMwMzQzYTM2MzU2NjMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzOTM1MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZfCAMA0GCSqGSIb3DQEBCwUAA4IB
AQAT9/T/m6UcoLPGcF8k0fqU0xc9yqK0m0DLMgjT5KUCri8C3X9rilZBsdnY5jVX
/lyytu4ZkVi3+GqQcus9Q/zQTd8dILegx4aME5EuIeZrGo0zcjlr/8hFVLHMl3Le
JsXf1Fl7UGCj7RZ0dkbIxkeaQNpWsNzJklaAM6u85vuNTVkmch9PchAUc6WE9PNG
87yPd9Zzz+xN+juzbL/giEEV+jQGqkfbi1Fej9DSik5FlLmxnwMyEReSLuYi3KYd
D9bFtL0YZABe20DYxb5umiAB35fKzR6Q6p2gX0Eri6nYRtZdSr49Ylzp0LIxpP1i
2DIT7Ts/4MgiWbXi3mxefg15
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org