Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a343030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a343030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          pZktHncqNUDUyFMfje2P1iBCVfYfoNpwtj2jF8V84ug=
Subject key identifier:   E9:CE:EF:CA:3A:9B:A0:D0:F2:19:58:5B:AF:95:7D:FE:98:1F:F0:4E
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       4BAD83959739D6BA197E1E34CE6C1F7810EAA23A
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a343030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:58 +0000
ROA not before:           Mon 29 Jan 2024 15:01:58 +0000
ROA not after:            Mon 27 Jan 2025 15:06:58 +0000
asID:                     266437
IP address blocks:        2804:37d0:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ad:83:95:97:39:d6:ba:19:7e:1e:34:ce:6c:1f:78:10:ea:a2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:58 2024 GMT
            Not After : Jan 27 15:06:58 2025 GMT
        Subject: CN=E9CEEFCA3A9BA0D0F219585BAF957DFE981FF04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:87:90:57:d0:3a:aa:e4:b9:d4:17:ec:11:
                    10:8b:f9:7c:17:71:4e:75:73:63:04:7f:ee:e6:57:
                    37:1c:ab:e5:ee:41:ed:dd:6c:90:80:63:db:f6:b3:
                    d6:73:0a:8f:01:98:26:7d:a5:5f:b6:c5:46:84:0e:
                    ec:57:a1:ed:90:fe:80:85:79:1f:11:e9:d7:12:ae:
                    c9:5c:41:20:46:b4:93:21:8c:f1:06:e1:7e:e4:2b:
                    12:4f:39:05:c5:e7:29:0e:09:86:93:c1:38:2c:5b:
                    6e:87:19:a5:77:2c:64:94:60:5c:fb:2b:d0:dc:eb:
                    ea:75:a9:64:e0:e1:af:aa:5d:74:39:15:c4:30:09:
                    76:f9:ae:9d:42:56:57:ee:d2:24:96:94:3e:ee:4b:
                    1f:2e:d3:f5:48:b8:95:a2:03:72:6e:56:2c:52:4e:
                    35:59:2c:a2:78:36:37:2a:8f:53:c2:8a:c0:35:4e:
                    79:15:03:f4:26:2c:09:c6:98:8e:42:fb:8c:d4:cc:
                    d8:7b:e3:5e:0f:c9:57:bd:ba:e2:58:b6:65:a4:10:
                    38:db:c2:ba:e9:8e:84:3d:17:9e:1a:a1:5b:61:06:
                    01:8c:9a:30:33:c5:75:a3:f5:47:c3:43:5b:ba:fc:
                    b2:c9:e2:e9:a5:f8:7b:2f:6b:34:8e:e9:9f:34:02:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CE:EF:CA:3A:9B:A0:D0:F2:19:58:5B:AF:95:7D:FE:98:1F:F0:4E
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a343030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:59:dc:c6:10:ba:ff:2f:66:ea:52:19:8f:19:ec:1f:79:e6:
         d0:2c:39:a5:bc:8d:42:f7:a1:2e:07:18:69:b9:44:a7:da:22:
         af:09:64:7e:11:3a:d4:3f:7a:9c:33:5b:c4:6e:aa:66:61:07:
         b7:c8:b2:f6:df:75:68:30:b2:19:bd:c6:7a:ec:67:b0:91:90:
         c0:30:b9:22:a9:72:79:45:0c:07:8a:46:cd:95:19:12:4d:32:
         4d:f9:46:06:d0:fd:45:7e:77:ff:80:f3:41:0a:dd:e4:8a:89:
         fc:b0:a1:42:6f:77:46:cb:60:9f:16:36:0c:7f:d3:34:fa:cc:
         ff:04:af:c6:fa:fb:f8:2c:60:14:25:2c:d3:a0:de:20:84:f6:
         58:31:6f:69:f3:e7:21:39:05:24:14:87:ac:15:e7:d0:cb:c2:
         31:aa:96:58:83:ea:b3:ee:0e:94:c7:d0:fa:d7:c0:e9:15:27:
         bb:3f:34:93:a6:d9:5e:9a:e2:04:51:4f:ca:0d:58:dc:a8:ca:
         4f:06:1d:56:33:5b:23:b8:27:39:6d:c1:5c:95:b3:5b:d8:19:
         2b:83:43:c9:b8:f1:cf:af:f7:f6:04:14:92:9f:38:36:4d:cc:
         9b:ce:6f:e5:c4:e4:35:bb:a7:bc:cd:5e:5e:2e:05:80:e0:1b:
         2b:2b:c2:9c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUS62DlZc51roZfh40zmwfeBDqojowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEzNUMwOEQ1MjdEMDI3QThCOUU5ODQyN0I2ODM0MEFC
QUVEMDk2MjAeFw0yNDAxMjkxNTAxNThaFw0yNTAxMjcxNTA2NThaMDMxMTAvBgNV
BAMTKEU5Q0VFRkNBM0E5QkEwRDBGMjE5NTg1QkFGOTU3REZFOTgxRkYwNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKoIeQV9A6quS51BfsERCL+XwX
cU51c2MEf+7mVzccq+XuQe3dbJCAY9v2s9ZzCo8BmCZ9pV+2xUaEDuxXoe2Q/oCF
eR8R6dcSrslcQSBGtJMhjPEG4X7kKxJPOQXF5ykOCYaTwTgsW26HGaV3LGSUYFz7
K9Dc6+p1qWTg4a+qXXQ5FcQwCXb5rp1CVlfu0iSWlD7uSx8u0/VIuJWiA3JuVixS
TjVZLKJ4Njcqj1PCisA1TnkVA/QmLAnGmI5C+4zUzNh7414PyVe9uuJYtmWkEDjb
wrrpjoQ9F54aoVthBgGMmjAzxXWj9UfDQ1u6/LLJ4uml+HsvazSO6Z80AsCDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6c7vyjqboNDyGVhbr5V9/pgf8E4wHwYDVR0j
BBgwFoAUkTXAjVJ9AnqLnphCe2g0CrrtCWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMC85MTM1QzA4RDUyN0QwMjdBOEI5RTk4NDI3QjY4MzQwQUJBRUQwOTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxMzVDMDhENTI3RDAyN0E4
QjlFOTg0MjdCNjgzNDBBQkFFRDA5NjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzAv
MzIzODMwMzQzYTMzMzc2NDMwM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEN9BAMA0GCSqGSIb3DQEBCwUA
A4IBAQCQWdzGELr/L2bqUhmPGewfeebQLDmlvI1C96EuBxhpuUSn2iKvCWR+ETrU
P3qcM1vEbqpmYQe3yLL233VoMLIZvcZ67GewkZDAMLkiqXJ5RQwHikbNlRkSTTJN
+UYG0P1Ffnf/gPNBCt3kion8sKFCb3dGy2CfFjYMf9M0+sz/BK/G+vv4LGAUJSzT
oN4ghPZYMW9p8+chOQUkFIesFefQy8IxqpZYg+qz7g6Ux9D618DpFSe7PzSTptle
muIEUU/KDVjcqMpPBh1WM1sjuCc5bcFclbNb2Bkrg0PJuPHPr/f2BBSSnzg2Tcyb
zm/lxOQ1u6e8zV5eLgWA4BsrK8Kc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-ams.rpki-client.org