Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          OILK5Pmo99xWKnySE44poC9+8jKH1yf3qwb9saiu33o=
Subject key identifier:   BF:9E:B4:CB:A2:EB:FD:5B:37:50:8D:76:78:30:F8:FF:53:F9:E0:E2
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       53611E2360E245517623061B024A275DEC40991B
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:58 +0000
ROA not before:           Mon 29 Jan 2024 15:01:58 +0000
ROA not after:            Mon 27 Jan 2025 15:06:58 +0000
asID:                     266437
IP address blocks:        2804:37d0:7002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:61:1e:23:60:e2:45:51:76:23:06:1b:02:4a:27:5d:ec:40:99:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:58 2024 GMT
            Not After : Jan 27 15:06:58 2025 GMT
        Subject: CN=BF9EB4CBA2EBFD5B37508D767830F8FF53F9E0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:08:34:43:bb:fb:dc:4c:3e:08:f1:b0:6f:
                    9e:8c:00:c9:5e:0f:8c:bd:63:95:de:88:49:3c:08:
                    98:20:44:19:7f:54:af:ca:86:21:f4:bf:a3:03:22:
                    aa:c9:cd:6b:37:67:62:f0:bd:52:5b:b7:32:f6:dc:
                    f1:06:e9:9b:7e:04:67:1e:46:21:46:93:58:a6:3a:
                    91:bb:22:0d:2e:6e:67:25:2c:fe:ff:a6:f9:1d:fb:
                    77:b9:ab:89:aa:4d:30:2b:1f:01:fd:ed:8c:14:16:
                    f2:1f:54:b7:e4:26:00:4a:61:66:a7:26:ec:bb:26:
                    7b:cc:b7:5a:73:7e:50:2d:6b:ea:e5:0e:cb:fa:9a:
                    86:7f:35:22:61:6f:9e:06:35:e3:75:7e:93:91:30:
                    1f:d0:46:78:e4:03:96:3c:32:3f:d9:6b:12:8c:a5:
                    cd:cb:b5:cb:72:2b:e3:68:fc:e3:ff:0f:57:c5:10:
                    c1:64:ba:9b:04:59:8d:b7:93:f5:55:ee:7b:f9:de:
                    43:92:9c:f0:87:bf:8c:1c:f0:6b:b0:d9:8d:13:9a:
                    0a:fc:86:53:bf:06:31:19:90:86:b4:af:a3:d3:f1:
                    b3:77:a9:e6:56:ee:fa:91:8b:04:d3:7b:b0:2c:6d:
                    a1:19:ce:fd:26:80:56:52:04:c6:01:bf:18:38:08:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:B4:CB:A2:EB:FD:5B:37:50:8D:76:78:30:F8:FF:53:F9:E0:E2
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:33:97:94:27:d1:92:42:b1:e2:7c:fe:dd:f1:fb:b4:96:2f:
         3b:37:ba:0e:4f:fc:03:62:b3:90:d4:05:a0:e9:5c:9c:20:0b:
         8b:3f:c3:b5:c1:a5:3d:08:6c:2a:24:8d:5b:a8:0b:76:54:bd:
         36:89:6a:3a:13:4b:d9:32:de:96:96:63:12:ed:ba:f3:28:2c:
         2e:8a:a6:4e:00:81:34:b8:df:80:27:51:20:11:de:f1:96:90:
         b6:a9:da:ec:59:a9:05:ea:ef:d8:04:1f:b6:96:13:20:c7:78:
         0d:d1:ff:9f:67:5a:91:0a:a7:01:96:1b:66:2e:69:f4:c7:c7:
         f9:1b:e4:a0:65:7c:ff:54:ef:fe:de:06:d4:0c:12:d2:12:2a:
         55:cc:37:78:f2:ae:c8:cd:37:c0:8b:8a:45:c2:8d:1f:6c:52:
         a5:91:31:6a:06:d0:70:17:f5:1a:e0:4c:db:20:b6:65:47:2d:
         4d:eb:f0:d9:92:55:96:c5:72:d6:7e:df:09:17:fe:08:36:37:
         d9:81:7b:40:bd:5a:e9:99:d0:9f:0f:4f:0a:46:58:bc:5a:f7:
         af:0b:48:70:10:4a:1a:ad:82:f3:61:24:94:69:cb:cc:0e:8f:
         93:49:92:39:36:d0:61:18:b8:29:f6:b9:78:92:ed:8a:14:15:
         1f:0b:1a:3a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUU2EeI2DiRVF2IwYbAkonXexAmRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEzNUMwOEQ1MjdEMDI3QThCOUU5ODQyN0I2ODM0MEFC
QUVEMDk2MjAeFw0yNDAxMjkxNTAxNThaFw0yNTAxMjcxNTA2NThaMDMxMTAvBgNV
BAMTKEJGOUVCNENCQTJFQkZENUIzNzUwOEQ3Njc4MzBGOEZGNTNGOUUwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOQg0Q7v73Ew+CPGwb56MAMle
D4y9Y5XeiEk8CJggRBl/VK/KhiH0v6MDIqrJzWs3Z2LwvVJbtzL23PEG6Zt+BGce
RiFGk1imOpG7Ig0ubmclLP7/pvkd+3e5q4mqTTArHwH97YwUFvIfVLfkJgBKYWan
Juy7JnvMt1pzflAta+rlDsv6moZ/NSJhb54GNeN1fpORMB/QRnjkA5Y8Mj/ZaxKM
pc3LtctyK+No/OP/D1fFEMFkupsEWY23k/VV7nv53kOSnPCHv4wc8Guw2Y0Tmgr8
hlO/BjEZkIa0r6PT8bN3qeZW7vqRiwTTe7AsbaEZzv0mgFZSBMYBvxg4CO8lAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUv560y6Lr/Vs3UI12eDD4/1P54OIwHwYDVR0j
BBgwFoAUkTXAjVJ9AnqLnphCe2g0CrrtCWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMC85MTM1QzA4RDUyN0QwMjdBOEI5RTk4NDI3QjY4MzQwQUJBRUQwOTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxMzVDMDhENTI3RDAyN0E4
QjlFOTg0MjdCNjgzNDBBQkFFRDA5NjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzAv
MzIzODMwMzQzYTMzMzc2NDMwM2EzNzMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEN9BwAjANBgkqhkiG9w0BAQsF
AAOCAQEAATOXlCfRkkKx4nz+3fH7tJYvOze6Dk/8A2KzkNQFoOlcnCALiz/DtcGl
PQhsKiSNW6gLdlS9NolqOhNL2TLelpZjEu268ygsLoqmTgCBNLjfgCdRIBHe8ZaQ
tqna7FmpBerv2AQftpYTIMd4DdH/n2dakQqnAZYbZi5p9MfH+RvkoGV8/1Tv/t4G
1AwS0hIqVcw3ePKuyM03wIuKRcKNH2xSpZExagbQcBf1GuBM2yC2ZUctTevw2ZJV
lsVy1n7fCRf+CDY32YF7QL1a6ZnQnw9PCkZYvFr3rwtIcBBKGq2C82EklGnLzA6P
k0mSOTbQYRi4Kfa5eJLtihQVHwsaOg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-ams.rpki-client.org