Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a633030303a3a2f33342d3438203d3e20323635323938.roa
File:                     323830343a326462343a633030303a3a2f33342d3438203d3e20323635323938.roa (raw, json)
Hash identifier:          KA2IzCIWHWo7aqh9K6VkJ+WcAEGhBx9FK3N8G6h6xsk=
Subject key identifier:   A7:57:54:21:71:38:70:C7:6A:4E:E5:FA:C1:79:59:5C:45:65:EB:D5
Certificate issuer:       /CN=88A082BE1C98D97C00715C6C1BE2D1424D5957C0
Certificate serial:       172D6DBFAF734EEEF9F8E48F141C8ADEB2BDC0EE
Authority key identifier: 88:A0:82:BE:1C:98:D9:7C:00:71:5C:6C:1B:E2:D1:42:4D:59:57:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88A082BE1C98D97C00715C6C1BE2D1424D5957C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a633030303a3a2f33342d3438203d3e20323635323938.roa
Signing time:             Fri 17 Nov 2023 18:14:59 +0000
ROA not before:           Fri 17 Nov 2023 18:09:59 +0000
ROA not after:            Fri 15 Nov 2024 18:14:59 +0000
asID:                     265298
IP address blocks:        2804:2db4:c000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2d:6d:bf:af:73:4e:ee:f9:f8:e4:8f:14:1c:8a:de:b2:bd:c0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88A082BE1C98D97C00715C6C1BE2D1424D5957C0
        Validity
            Not Before: Nov 17 18:09:59 2023 GMT
            Not After : Nov 15 18:14:59 2024 GMT
        Subject: CN=A7575421713870C76A4EE5FAC179595C4565EBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:46:11:da:39:42:d5:e1:b9:90:a4:81:0d:
                    6d:69:c2:aa:f5:1d:ba:ff:83:45:da:1b:cb:6b:17:
                    85:9e:5a:cf:95:7f:d6:fe:7c:91:80:79:03:3e:7c:
                    16:47:90:ea:5d:07:5b:92:77:e6:6a:b0:7d:e1:f5:
                    b7:c7:94:25:2a:e4:cb:b6:40:a2:aa:4b:b4:18:91:
                    76:ea:73:fb:53:0e:d1:5a:0b:9b:90:a9:a4:c8:91:
                    f2:14:c8:66:99:65:a6:80:dd:e8:cc:c5:c0:51:89:
                    18:d6:f3:ee:aa:b4:6c:63:16:3b:79:90:89:b7:97:
                    4e:1b:38:b8:76:bd:9e:d0:96:60:1e:ae:04:e1:2e:
                    ea:0a:94:9f:8e:bd:fb:d1:ec:e3:e3:bc:8e:2d:89:
                    0d:b8:8f:c0:db:6f:02:15:2c:cb:97:a3:18:40:3f:
                    24:16:0c:98:ea:8d:5e:ac:c5:ca:5d:32:d9:bb:29:
                    a6:f4:2b:23:a3:d3:a7:67:d2:0d:75:34:e7:dd:4c:
                    28:5b:20:28:6d:a0:fb:ec:ad:8a:5f:f8:d6:31:ce:
                    60:cb:4e:34:fa:d5:2e:99:66:34:d2:6e:dd:81:c9:
                    19:d4:98:16:27:02:65:ca:68:6f:f5:6f:b3:04:26:
                    bb:19:7b:d7:db:01:58:fb:14:2b:a1:be:62:35:b5:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:54:21:71:38:70:C7:6A:4E:E5:FA:C1:79:59:5C:45:65:EB:D5
            X509v3 Authority Key Identifier:
                keyid:88:A0:82:BE:1C:98:D9:7C:00:71:5C:6C:1B:E2:D1:42:4D:59:57:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/88A082BE1C98D97C00715C6C1BE2D1424D5957C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88A082BE1C98D97C00715C6C1BE2D1424D5957C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a633030303a3a2f33342d3438203d3e20323635323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2db4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d0:49:23:56:43:5a:67:b7:f3:da:de:9b:4b:7e:d1:43:a2:ad:
         db:85:2b:d6:0f:6d:79:3d:80:d7:f4:a7:12:9f:2a:c3:7d:44:
         75:c4:db:5f:fc:dd:d1:8b:1e:c6:bd:a7:cc:42:dd:1f:f3:59:
         5f:4f:35:04:85:4e:f2:df:20:10:4f:c4:cc:7e:e2:42:08:35:
         a6:13:09:31:fd:2a:61:49:ca:53:e8:ea:55:26:8d:1b:5e:c6:
         41:5a:16:1b:0f:ce:c1:f9:43:0d:69:b1:c7:78:be:8b:53:3b:
         63:5e:d4:5a:d6:7f:59:e8:62:68:93:bd:12:02:6f:6d:91:c4:
         ab:9d:54:db:54:41:5a:e0:12:73:9a:0f:ad:d7:bb:f6:1c:c7:
         bb:29:91:79:f1:16:98:b9:fa:e7:d3:68:fd:59:fb:ec:55:da:
         b7:56:a0:c6:5f:a2:bd:e8:9a:3a:68:d5:11:f2:05:4e:03:ad:
         c2:23:9b:b4:83:5f:c5:ed:49:61:1f:67:1b:73:27:df:03:ae:
         66:c8:94:29:1f:79:16:7d:79:83:3d:39:6b:62:ca:cf:16:c7:
         2f:f7:7a:75:a0:d5:c5:6b:41:94:ef:e4:ff:99:a4:f4:ae:cb:
         f2:20:32:be:c3:e4:9a:3d:76:ed:51:ad:c8:ce:b8:3c:78:a2:
         df:b7:56:f1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFy1tv69zTu75+OSPFByK3rK9wO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhBMDgyQkUxQzk4RDk3QzAwNzE1QzZDMUJFMkQxNDI0
RDU5NTdDMDAeFw0yMzExMTcxODA5NTlaFw0yNDExMTUxODE0NTlaMDMxMTAvBgNV
BAMTKEE3NTc1NDIxNzEzODcwQzc2QTRFRTVGQUMxNzk1OTVDNDU2NUVCRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0RUYR2jlC1eG5kKSBDW1pwqr1
Hbr/g0XaG8trF4WeWs+Vf9b+fJGAeQM+fBZHkOpdB1uSd+ZqsH3h9bfHlCUq5Mu2
QKKqS7QYkXbqc/tTDtFaC5uQqaTIkfIUyGaZZaaA3ejMxcBRiRjW8+6qtGxjFjt5
kIm3l04bOLh2vZ7QlmAergThLuoKlJ+OvfvR7OPjvI4tiQ24j8DbbwIVLMuXoxhA
PyQWDJjqjV6sxcpdMtm7Kab0KyOj06dn0g11NOfdTChbIChtoPvsrYpf+NYxzmDL
TjT61S6ZZjTSbt2ByRnUmBYnAmXKaG/1b7MEJrsZe9fbAVj7FCuhvmI1tTRHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUp1dUIXE4cMdqTuX6wXlZXEVl69UwHwYDVR0j
BBgwFoAUiKCCvhyY2XwAcVxsG+LRQk1ZV8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzhYUW95d1Z3eHAzWlJGeXBEWXdjcjNTcWNXTnd3b1pDc2JwSmlpaHUy
OEsvMC84OEEwODJCRTFDOThEOTdDMDA3MTVDNkMxQkUyRDE0MjRENTk1N0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg4QTA4MkJFMUM5OEQ5N0Mw
MDcxNUM2QzFCRTJEMTQyNEQ1OTU3QzAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM4WFFveXdWd3hwM1pSRnlwRFl3Y3IzU3FjV053d29aQ3NicEppaWh1MjhLLzAv
MzIzODMwMzQzYTMyNjQ2MjM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDM0MzgyMDNk
M2UyMDMyMzYzNTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigELbTAMA0GCSqGSIb3DQEBCwUA
A4IBAQDQSSNWQ1pnt/Pa3ptLftFDoq3bhSvWD215PYDX9KcSnyrDfUR1xNtf/N3R
ix7GvafMQt0f81lfTzUEhU7y3yAQT8TMfuJCCDWmEwkx/SphScpT6OpVJo0bXsZB
WhYbD87B+UMNabHHeL6LUztjXtRa1n9Z6GJok70SAm9tkcSrnVTbVEFa4BJzmg+t
17v2HMe7KZF58RaYufrn02j9WfvsVdq3VqDGX6K96Jo6aNUR8gVOA63CI5u0g1/F
7UlhH2cbcyffA65myJQpH3kWfXmDPTlrYsrPFscv93p1oNXFa0GU7+T/maT0rsvy
IDK+w+SaPXbtUa3Izrg8eKLft1bx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org