Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
File:                     323830343a6461303a3a2f33322d3332203d3e203238353837.roa (raw, json)
Hash identifier:          QQ1hRWDGEXc9Py18LbHPyRb/uj4DU8KKaCXxdEgcGho=
Subject key identifier:   1B:53:CC:FC:B9:F1:43:42:FE:73:40:BE:36:C8:38:81:CD:88:A4:F1
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       4700B08C53595D615C9864C0309018E03D4AB566
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa
Signing time:             Mon 15 Jul 2024 15:21:34 +0000
ROA not before:           Mon 15 Jul 2024 15:16:34 +0000
ROA not after:            Mon 14 Jul 2025 15:21:34 +0000
asID:                     28587
IP address blocks:        2804:da0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:00:b0:8c:53:59:5d:61:5c:98:64:c0:30:90:18:e0:3d:4a:b5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 15 15:16:34 2024 GMT
            Not After : Jul 14 15:21:34 2025 GMT
        Subject: CN=1B53CCFCB9F14342FE7340BE36C83881CD88A4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ee:45:34:80:ad:e4:d7:de:5a:68:f4:ab:06:
                    e7:8e:cd:62:6f:7a:08:01:63:ca:c8:02:c6:33:e5:
                    53:8e:50:42:a7:48:15:e8:7f:35:a7:ad:d0:de:5b:
                    d8:ee:e8:6d:03:06:14:ab:18:af:e2:f4:1b:31:67:
                    ea:4a:b2:0f:ce:b5:47:7b:77:20:af:75:0c:06:8c:
                    4a:bd:18:2e:75:a7:ba:30:c0:2b:60:8c:be:dc:b0:
                    c5:1f:79:55:62:69:8b:7c:fe:dc:df:27:7a:01:b2:
                    a9:58:41:29:07:0e:72:7b:f4:fd:f8:85:f7:cf:26:
                    dc:e7:66:79:fd:2e:0f:56:5e:59:c2:2a:19:50:f5:
                    41:8f:7b:0a:b1:c4:72:5e:72:1a:3f:f9:5b:34:9c:
                    48:3d:b6:1d:b5:4e:ad:26:58:5f:23:a3:f2:24:c4:
                    de:2b:7c:f0:74:d1:a1:83:6b:55:12:8a:87:44:24:
                    26:fb:3a:25:52:6b:8e:a8:8a:20:35:db:25:74:ea:
                    a2:e9:8b:25:84:34:58:08:2c:41:84:52:6c:03:1c:
                    a6:f6:3e:3a:4e:75:e3:8e:ef:30:ad:ef:86:a4:05:
                    0e:b9:61:c8:5e:6c:b6:c0:5f:81:33:0d:50:cf:ed:
                    a7:a4:5b:17:3c:06:35:77:64:f5:41:2a:ff:e8:f2:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:53:CC:FC:B9:F1:43:42:FE:73:40:BE:36:C8:38:81:CD:88:A4:F1
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/323830343a6461303a3a2f33322d3332203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:61:e4:70:a9:0e:99:64:94:d1:2c:35:df:41:de:4d:c2:
         82:f5:27:6a:42:7c:db:cc:9b:e9:34:f6:41:a8:c1:c3:0d:32:
         ca:9f:4a:dd:de:70:17:45:2a:5c:54:a0:bc:b2:22:eb:8f:9f:
         dc:4a:2d:b5:81:1c:a1:28:23:c7:2e:01:77:44:b0:f9:ec:2d:
         e6:b6:00:dd:ff:59:fa:36:5b:42:1c:41:8c:4d:56:cd:e7:72:
         25:7a:c3:87:6c:fd:6a:93:02:86:07:f7:be:e5:6b:3d:07:ad:
         f8:45:60:35:db:78:e4:52:f7:3d:29:67:88:d3:02:9f:6e:88:
         d7:bf:23:a6:82:28:93:a4:e8:74:06:28:41:22:13:87:b0:28:
         13:13:d5:25:3b:70:c4:56:30:18:71:bc:8c:94:af:a9:c7:23:
         48:9e:70:76:a6:8c:91:4c:eb:fe:4d:45:88:b8:e6:fa:87:8d:
         5e:d7:bc:8a:d6:b5:6f:4b:cc:07:a1:3f:2d:e3:20:f4:83:42:
         20:de:4b:5e:65:2c:b7:1c:d7:94:2d:c1:0b:b5:a5:54:62:ab:
         af:59:00:cf:9a:30:8e:45:4d:58:dc:23:6e:f4:54:e3:c8:f0:
         c2:aa:3f:98:72:23:8f:c4:98:37:8f:85:64:58:72:6a:76:44:
         4b:b5:50:ca
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIURwCwjFNZXWFcmGTAMJAY4D1KtWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4OEZGMDM0MTk1MEE2M0E2MjE1QzAxRjJGRjlEOTI5
MUZFQjk0NjAeFw0yNDA3MTUxNTE2MzRaFw0yNTA3MTQxNTIxMzRaMDMxMTAvBgNV
BAMTKDFCNTNDQ0ZDQjlGMTQzNDJGRTczNDBCRTM2QzgzODgxQ0Q4OEE0RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD17kU0gK3k195aaPSrBueOzWJv
eggBY8rIAsYz5VOOUEKnSBXofzWnrdDeW9ju6G0DBhSrGK/i9BsxZ+pKsg/OtUd7
dyCvdQwGjEq9GC51p7owwCtgjL7csMUfeVViaYt8/tzfJ3oBsqlYQSkHDnJ79P34
hffPJtznZnn9Lg9WXlnCKhlQ9UGPewqxxHJecho/+Vs0nEg9th21Tq0mWF8jo/Ik
xN4rfPB00aGDa1USiodEJCb7OiVSa46oiiA12yV06qLpiyWENFgILEGEUmwDHKb2
PjpOdeOO7zCt74akBQ65YchebLbAX4EzDVDP7aekWxc8BjV3ZPVBKv/o8pM1AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUG1PM/LnxQ0L+c0C+Nsg4gc2IpPEwHwYDVR0j
BBgwFoAUIoj/A0GVCmOmIVwB8v+dkpH+uUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnBFZUJpM0R4NGZScU5iRmJiUFc0NVNzcUNDQk1TTTdmQmt5R1FOSEN5
M3ovMC8yMjg4RkYwMzQxOTUwQTYzQTYyMTVDMDFGMkZGOUQ5MjkxRkVCOTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyODhGRjAzNDE5NTBBNjNB
NjIxNUMwMUYyRkY5RDkyOTFGRUI5NDYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJwRWVCaTNEeDRmUnFOYkZiYlBXNDVTc3FDQ0JNU003ZkJreUdRTkhDeTN6LzAv
MzIzODMwMzQzYTY0NjEzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzgzNTM4
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA2gMA0GCSqGSIb3DQEBCwUAA4IBAQBSvWHkcKkOmWSU
0Sw130HeTcKC9SdqQnzbzJvpNPZBqMHDDTLKn0rd3nAXRSpcVKC8siLrj5/cSi21
gRyhKCPHLgF3RLD57C3mtgDd/1n6NltCHEGMTVbN53IlesOHbP1qkwKGB/e+5Ws9
B634RWA123jkUvc9KWeI0wKfbojXvyOmgiiTpOh0BihBIhOHsCgTE9UlO3DEVjAY
cbyMlK+pxyNInnB2poyRTOv+TUWIuOb6h41e17yK1rVvS8wHoT8t4yD0g0Ig3kte
ZSy3HNeULcELtaVUYquvWQDPmjCORU1Y3CNu9FTjyPDCqj+YciOPxJg3j4VkWHJq
dkRLtVDK
-----END CERTIFICATE-----
Generated at Thu Jul 25 18:59:58 2024 by rpki-client on console-fra.rpki-client.org