Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33322d3332203d3e20323638333038.roa (raw, json)
Hash identifier:          EkLuSqvAMMrV0yMBF/JuW6Xa9UnfrIumO+4uypOl7KE=
Subject key identifier:   F1:18:00:1B:7B:A1:E4:9B:E2:CC:F6:BD:12:0E:54:8C:36:75:80:8F
Certificate issuer:       /CN=88C04555C130EFBD50B75032689878210EFAA940
Certificate serial:       0E7AADC989F6EDD9611A0BEABFFD61412C2CC4A4
Authority key identifier: 88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
Signing time:             Mon 18 Dec 2023 18:48:30 +0000
ROA not before:           Mon 18 Dec 2023 18:43:30 +0000
ROA not after:            Mon 16 Dec 2024 18:48:30 +0000
asID:                     268308
IP address blocks:        2804:4f28::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7a:ad:c9:89:f6:ed:d9:61:1a:0b:ea:bf:fd:61:41:2c:2c:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C04555C130EFBD50B75032689878210EFAA940
        Validity
            Not Before: Dec 18 18:43:30 2023 GMT
            Not After : Dec 16 18:48:30 2024 GMT
        Subject: CN=F118001B7BA1E49BE2CCF6BD120E548C3675808F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:18:6c:48:4d:ce:a1:a4:95:a1:7d:eb:24:
                    3f:4f:a7:5d:c6:07:7b:06:86:04:2b:44:a8:89:9a:
                    a4:a4:db:f7:1c:9f:fb:59:40:29:b7:ed:fd:a3:61:
                    78:74:d2:0b:17:77:6b:b7:d9:bf:b7:c6:f3:fb:48:
                    d6:93:13:4b:2a:ee:ab:aa:9f:1a:8e:7e:0b:bb:7a:
                    1f:5c:e4:4e:e6:06:11:56:48:80:e9:5d:84:2b:d5:
                    8a:6c:4e:24:6e:40:d4:93:b2:a9:76:f3:a6:32:67:
                    35:3b:59:a1:a5:45:a9:45:0f:1f:e1:9a:cd:39:e7:
                    71:37:e0:e0:f5:3b:73:c4:e5:05:14:e6:91:7b:ab:
                    ab:20:65:75:c2:85:d1:0a:06:73:9d:a0:30:dc:d2:
                    e5:b0:51:50:e1:26:12:ac:11:4a:7b:bd:9b:26:27:
                    6c:18:15:4b:52:6d:32:27:e4:b6:e2:43:38:15:cb:
                    44:80:0e:f2:6f:a5:4c:54:fd:4b:bd:ef:23:b4:13:
                    f8:82:9e:06:a6:78:c4:c3:bc:d3:e2:50:62:95:d3:
                    e0:81:1e:e1:b9:20:9b:4c:22:82:b8:ba:6a:b2:c1:
                    f3:e2:76:8b:fc:b7:fc:29:55:ee:05:8e:26:2a:61:
                    ec:a3:9d:19:b1:99:4c:f5:35:89:12:37:5b:62:e3:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:18:00:1B:7B:A1:E4:9B:E2:CC:F6:BD:12:0E:54:8C:36:75:80:8F
            X509v3 Authority Key Identifier:
                keyid:88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/88C04555C130EFBD50B75032689878210EFAA940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:ba:88:da:42:5e:9c:b8:84:45:14:98:f4:e3:ce:2a:69:
         0a:4b:95:a6:1e:ea:a9:c7:4d:81:af:25:ec:3f:11:15:98:85:
         3d:9b:eb:61:46:c3:4e:16:eb:6c:67:ee:b9:11:7d:4a:e9:b9:
         53:0f:db:41:26:9b:38:01:b8:69:73:0c:f6:19:b5:fb:9d:5f:
         0a:cb:c6:ee:61:d2:53:f2:48:c5:70:38:89:42:73:ba:4e:ea:
         f8:9c:38:06:79:9f:2d:7a:71:e5:2a:33:cc:da:ab:ba:f1:5d:
         19:e6:b9:00:e8:be:22:c1:cb:ef:2d:f9:2d:1a:9f:8a:fd:f5:
         4b:4c:7c:61:6d:ef:10:f0:af:08:8c:db:5b:60:7b:27:d1:f5:
         dd:3f:95:c0:10:42:40:38:e8:ca:f4:a9:91:7a:6b:78:38:91:
         67:bb:21:e8:df:06:6e:b1:50:07:00:b5:68:af:ec:d2:b5:cd:
         c0:25:5e:cb:94:a0:0c:50:13:ba:8a:8a:41:c8:a4:69:ce:92:
         c1:76:17:2f:8e:f1:2c:ec:db:0c:b7:fe:b5:61:fc:ed:27:55:
         f7:6a:99:20:97:c0:04:8c:a2:85:41:ec:f5:00:69:65:0e:f1:
         f2:fb:38:70:b4:f8:ac:7a:3e:58:17:b3:de:c2:fe:b0:26:7d:
         c3:3f:52:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDnqtyYn27dlhGgvqv/1hQSwsxKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhDMDQ1NTVDMTMwRUZCRDUwQjc1MDMyNjg5ODc4MjEw
RUZBQTk0MDAeFw0yMzEyMTgxODQzMzBaFw0yNDEyMTYxODQ4MzBaMDMxMTAvBgNV
BAMTKEYxMTgwMDFCN0JBMUU0OUJFMkNDRjZCRDEyMEU1NDhDMzY3NTgwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuxhsSE3OoaSVoX3rJD9Pp13G
B3sGhgQrRKiJmqSk2/ccn/tZQCm37f2jYXh00gsXd2u32b+3xvP7SNaTE0sq7quq
nxqOfgu7eh9c5E7mBhFWSIDpXYQr1YpsTiRuQNSTsql286YyZzU7WaGlRalFDx/h
ms0553E34OD1O3PE5QUU5pF7q6sgZXXChdEKBnOdoDDc0uWwUVDhJhKsEUp7vZsm
J2wYFUtSbTIn5LbiQzgVy0SADvJvpUxU/Uu97yO0E/iCngameMTDvNPiUGKV0+CB
HuG5IJtMIoK4umqywfPidov8t/wpVe4FjiYqYeyjnRmxmUz1NYkSN1ti46WFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8RgAG3uh5JvizPa9Eg5UjDZ1gI8wHwYDVR0j
BBgwFoAUiMBFVcEw771Qt1AyaJh4IQ76qUAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMC84OEMwNDU1NUMxMzBFRkJENTBCNzUwMzI2ODk4NzgyMTBFRkFBOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg4QzA0NTU1QzEzMEVGQkQ1
MEI3NTAzMjY4OTg3ODIxMEVGQUE5NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAv
MzIzODMwMzQzYTM0NjYzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzMzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARPKDANBgkqhkiG9w0BAQsFAAOCAQEAO4+6iNpC
Xpy4hEUUmPTjzippCkuVph7qqcdNga8l7D8RFZiFPZvrYUbDThbrbGfuuRF9Sum5
Uw/bQSabOAG4aXMM9hm1+51fCsvG7mHSU/JIxXA4iUJzuk7q+Jw4BnmfLXpx5Soz
zNqruvFdGea5AOi+IsHL7y35LRqfiv31S0x8YW3vEPCvCIzbW2B7J9H13T+VwBBC
QDjoyvSpkXpreDiRZ7sh6N8GbrFQBwC1aK/s0rXNwCVey5SgDFATuoqKQcikac6S
wXYXL47xLOzbDLf+tWH87SdV92qZIJfABIyihUHs9QBpZQ7x8vs4cLT4rHo+WBez
3sL+sCZ9wz9SYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org