Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3430203d3e203532363737.roa
File:                     323830343a6331383a3a2f33322d3430203d3e203532363737.roa (raw, json)
Hash identifier:          ffzTGhepMXXKJWZGDNYnqYIYr17LC7azjMv/PwH+Ydk=
Subject key identifier:   BF:C2:15:3F:DC:D0:A9:BA:13:07:C9:9C:39:58:80:FF:32:77:1E:1B
Certificate issuer:       /CN=88FE00A126CA3E9C621FECD65CECFA36649E9BA2
Certificate serial:       483BCEAF9D34F9F117A98BF085CBE36ECAFFA97A
Authority key identifier: 88:FE:00:A1:26:CA:3E:9C:62:1F:EC:D6:5C:EC:FA:36:64:9E:9B:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3430203d3e203532363737.roa
Signing time:             Thu 17 Aug 2023 20:19:05 +0000
ROA not before:           Thu 17 Aug 2023 20:14:05 +0000
ROA not after:            Thu 15 Aug 2024 20:19:05 +0000
asID:                     52677
IP address blocks:        2804:c18::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3b:ce:af:9d:34:f9:f1:17:a9:8b:f0:85:cb:e3:6e:ca:ff:a9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88FE00A126CA3E9C621FECD65CECFA36649E9BA2
        Validity
            Not Before: Aug 17 20:14:05 2023 GMT
            Not After : Aug 15 20:19:05 2024 GMT
        Subject: CN=BFC2153FDCD0A9BA1307C99C395880FF32771E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:bb:86:21:a3:2c:7b:e9:38:5f:01:bf:a0:
                    87:9b:66:bc:f6:4d:79:cc:a0:c1:ab:8f:20:f5:08:
                    f8:38:c5:b6:55:71:24:2b:7b:62:91:17:0c:75:31:
                    ac:59:90:ed:59:da:15:1d:c4:23:2f:31:dd:5c:e7:
                    ec:7b:67:ed:67:ea:82:ef:99:38:b9:72:a0:90:a4:
                    b8:64:b8:81:4c:1b:fe:d2:b8:9e:9f:fe:32:42:95:
                    dc:53:d2:9e:ac:df:f0:54:33:87:06:40:d9:79:96:
                    85:5b:07:44:cc:81:29:55:36:4c:29:ac:cd:cf:80:
                    2d:e0:67:51:64:d6:48:46:36:5c:4f:e5:dd:b7:9e:
                    35:03:2c:51:4c:95:4c:2a:17:76:a3:8b:6e:ee:22:
                    05:ee:ff:45:a6:77:73:13:d2:80:f7:6d:5f:09:cd:
                    03:5d:8b:d6:07:53:16:a7:32:95:6c:a8:7d:36:d9:
                    12:ed:93:23:c2:d9:55:ab:73:b2:29:5e:61:3b:9d:
                    30:29:5b:6e:5a:55:ca:56:8b:d3:00:a4:2a:83:22:
                    7f:7b:60:e2:3e:e7:91:8b:40:82:52:0a:67:ae:6c:
                    72:d8:7b:50:0b:bc:aa:45:85:cd:a8:87:89:27:19:
                    a2:95:1f:53:68:e4:0e:9a:83:d3:e8:1b:b0:36:88:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C2:15:3F:DC:D0:A9:BA:13:07:C9:9C:39:58:80:FF:32:77:1E:1B
            X509v3 Authority Key Identifier:
                keyid:88:FE:00:A1:26:CA:3E:9C:62:1F:EC:D6:5C:EC:FA:36:64:9E:9B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/323830343a6331383a3a2f33322d3430203d3e203532363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:14:3d:af:4a:7e:31:48:89:63:6c:fe:8f:2a:93:a7:11:a3:
         dc:78:47:51:60:ac:e9:d9:82:c5:31:a3:fb:90:6e:ee:ff:f8:
         82:fa:91:4b:d9:c6:08:d3:6d:97:4e:7c:11:06:ea:e1:9f:e3:
         0d:5a:71:79:ac:c6:57:e5:9d:e8:1b:de:9d:09:29:f7:91:86:
         9b:e1:95:b7:be:98:80:be:ee:f2:8c:46:ee:e1:5d:6e:41:3e:
         7e:b7:10:b8:f5:e9:fb:58:5c:24:c4:97:61:37:4a:f7:5d:40:
         c0:c9:89:bf:86:1b:4e:57:ed:65:39:39:fe:13:41:de:49:44:
         be:c7:f1:35:e7:6d:ed:9e:22:5e:3d:50:a2:15:42:4c:7b:41:
         2b:dc:c3:0d:3d:2a:bc:30:2c:d8:0b:16:69:2a:18:ad:b9:17:
         6d:61:05:3e:91:87:15:46:82:76:b6:72:03:c0:bc:5a:d8:58:
         bb:c4:5a:e4:a0:3a:4f:39:dc:43:29:84:42:f9:83:c1:09:da:
         b7:b6:cc:60:35:58:4b:ca:67:c4:ed:6c:b1:7d:7d:f0:a2:17:
         ca:d4:45:82:c3:42:b0:d5:70:e1:d2:8f:47:a8:84:c0:33:69:
         cc:25:bb:19:9e:60:b4:c4:cb:e2:5c:8f:34:80:65:51:25:00:
         36:9a:08:d1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUSDvOr500+fEXqYvwhcvjbsr/qXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGRTAwQTEyNkNBM0U5QzYyMUZFQ0Q2NUNFQ0ZBMzY2
NDlFOUJBMjAeFw0yMzA4MTcyMDE0MDVaFw0yNDA4MTUyMDE5MDVaMDMxMTAvBgNV
BAMTKEJGQzIxNTNGRENEMEE5QkExMzA3Qzk5QzM5NTg4MEZGMzI3NzFFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ubuGIaMse+k4XwG/oIebZrz2
TXnMoMGrjyD1CPg4xbZVcSQre2KRFwx1MaxZkO1Z2hUdxCMvMd1c5+x7Z+1n6oLv
mTi5cqCQpLhkuIFMG/7SuJ6f/jJCldxT0p6s3/BUM4cGQNl5loVbB0TMgSlVNkwp
rM3PgC3gZ1Fk1khGNlxP5d23njUDLFFMlUwqF3aji27uIgXu/0Wmd3MT0oD3bV8J
zQNdi9YHUxanMpVsqH022RLtkyPC2VWrc7IpXmE7nTApW25aVcpWi9MApCqDIn97
YOI+55GLQIJSCmeubHLYe1ALvKpFhc2oh4knGaKVH1No5A6ag9PoG7A2iFPvAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUv8IVP9zQqboTB8mcOViA/zJ3HhswHwYDVR0j
BBgwFoAUiP4AoSbKPpxiH+zWXOz6NmSem6IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz
Q2kvMC84OEZFMDBBMTI2Q0EzRTlDNjIxRkVDRDY1Q0VDRkEzNjY0OUU5QkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg4RkUwMEExMjZDQTNFOUM2
MjFGRUNENjVDRUNGQTM2NjQ5RTlCQTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNyUlc0QThGa29vZnBSRWNrMkFjNVRUZlhkNXY1QTZDRlFzS0JxeVU5M0NpLzAv
MzIzODMwMzQzYTYzMzEzODNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDM1MzIzNjM3
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAwYMA0GCSqGSIb3DQEBCwUAA4IBAQAjFD2vSn4xSIlj
bP6PKpOnEaPceEdRYKzp2YLFMaP7kG7u//iC+pFL2cYI022XTnwRBurhn+MNWnF5
rMZX5Z3oG96dCSn3kYab4ZW3vpiAvu7yjEbu4V1uQT5+txC49en7WFwkxJdhN0r3
XUDAyYm/hhtOV+1lOTn+E0HeSUS+x/E1523tniJePVCiFUJMe0Er3MMNPSq8MCzY
CxZpKhituRdtYQU+kYcVRoJ2tnIDwLxa2Fi7xFrkoDpPOdxDKYRC+YPBCdq3tsxg
NVhLymfE7WyxfX3wohfK1EWCw0Kw1XDh0o9HqITAM2nMJbsZnmC0xMviXI80gGVR
JQA2mgjR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org