Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/1/323830343a323931383a3a2f33322d3334203d3e20323633393937.roa
File:                     323830343a323931383a3a2f33322d3334203d3e20323633393937.roa (raw, json)
Hash identifier:          mcqaNVeZMSrY2hDW/ZJMBrJl0+0V7XkbbwyB5ynZO+A=
Subject key identifier:   DD:E0:45:BD:34:08:D7:CF:F6:61:D8:6D:A5:6D:FB:34:D8:05:D7:9C
Certificate issuer:       /CN=3088B13B15C4092FAAC982C567E93535FE7C9107
Certificate serial:       3559B1F403FEC15E521F61A5C4F489F4E799256D
Authority key identifier: 30:88:B1:3B:15:C4:09:2F:AA:C9:82:C5:67:E9:35:35:FE:7C:91:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3088B13B15C4092FAAC982C567E93535FE7C9107.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/1/323830343a323931383a3a2f33322d3334203d3e20323633393937.roa
Signing time:             Thu 04 Apr 2024 03:47:14 +0000
ROA not before:           Thu 04 Apr 2024 03:42:14 +0000
ROA not after:            Thu 03 Apr 2025 03:47:14 +0000
asID:                     263997
IP address blocks:        2804:2918::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:b1:f4:03:fe:c1:5e:52:1f:61:a5:c4:f4:89:f4:e7:99:25:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3088B13B15C4092FAAC982C567E93535FE7C9107
        Validity
            Not Before: Apr  4 03:42:14 2024 GMT
            Not After : Apr  3 03:47:14 2025 GMT
        Subject: CN=DDE045BD3408D7CFF661D86DA56DFB34D805D79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:2b:d5:51:2f:f2:79:81:6e:57:45:20:d4:
                    dc:40:e4:d6:2b:02:42:c7:1c:9e:b0:36:21:ec:a8:
                    7b:cc:9b:02:d6:d7:d1:19:ed:d7:76:2d:e9:ae:33:
                    e9:2d:59:16:3a:84:7e:ff:6a:21:b0:9f:fe:9f:ef:
                    be:13:ab:f7:d1:63:f4:83:4e:c2:73:ed:05:5f:14:
                    b3:ab:e1:f8:f8:5d:b7:26:b0:db:ff:c3:df:5e:5a:
                    5a:cd:dd:82:ed:be:9e:f4:f4:35:46:d6:a6:e5:7a:
                    03:24:35:32:af:af:43:5a:68:d8:db:2e:f1:46:a4:
                    67:0d:35:16:c2:a6:1f:d1:14:e3:35:b3:04:5d:f0:
                    83:4f:18:12:83:a0:55:33:9a:6f:ee:bb:be:4c:36:
                    13:84:d1:18:8c:50:91:4a:47:61:15:76:8b:1d:a0:
                    63:30:93:7a:11:80:56:22:0f:ad:40:db:cf:32:30:
                    75:ae:87:d0:a2:53:12:f5:0f:2f:8f:4a:d8:f7:4b:
                    01:45:d5:fa:e2:f0:60:b6:bb:f2:3d:40:a9:eb:52:
                    d2:44:d5:d4:cc:48:c1:63:dd:cf:43:29:39:6e:ae:
                    56:11:28:ea:30:d2:d2:af:e5:3a:30:a8:93:15:9a:
                    29:9e:6f:e4:4a:cd:c1:14:9d:9f:5c:96:1d:aa:c8:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E0:45:BD:34:08:D7:CF:F6:61:D8:6D:A5:6D:FB:34:D8:05:D7:9C
            X509v3 Authority Key Identifier:
                keyid:30:88:B1:3B:15:C4:09:2F:AA:C9:82:C5:67:E9:35:35:FE:7C:91:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/1/3088B13B15C4092FAAC982C567E93535FE7C9107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3088B13B15C4092FAAC982C567E93535FE7C9107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/1/323830343a323931383a3a2f33322d3334203d3e20323633393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2918::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:55:9c:a5:a9:1a:4c:40:9e:ff:5b:25:36:e3:ef:8f:e5:
         6a:e2:59:d0:3a:a0:b7:c2:f0:2d:3a:93:0b:dc:57:af:d0:6e:
         67:1c:be:25:17:33:c3:1c:0c:f9:97:b5:5e:70:57:13:0b:7c:
         70:2f:2e:82:fc:34:ba:ef:5f:a0:26:94:0c:a0:5c:53:79:4d:
         1b:f6:7a:b4:81:b6:d0:42:ba:57:46:5f:cf:eb:a1:a7:42:49:
         ab:45:27:14:37:ad:33:a9:5d:ca:f1:5b:a0:a1:7a:3b:42:4c:
         db:7c:d1:eb:29:11:4b:c6:03:2a:52:4f:08:6b:d9:d4:cf:fb:
         91:f0:8c:42:03:9f:18:fa:bc:0c:15:bd:75:c0:5d:53:a9:f6:
         ec:c6:dd:09:6d:15:9e:cf:b3:96:ab:b4:56:5c:b7:a5:05:6b:
         79:60:d3:b4:4d:07:21:53:bd:74:83:aa:67:6d:ba:8d:99:44:
         8a:e9:04:84:43:3a:56:ba:ef:6c:d9:ba:ad:d0:b9:7b:f9:55:
         e6:b5:7c:56:fc:a2:0d:58:80:de:9b:f1:65:a0:b5:25:5d:72:
         3c:8c:24:ea:16:05:a8:01:b9:7a:17:05:e0:63:ad:99:9c:12:
         aa:3c:0b:e9:01:cc:d6:92:05:e3:a2:91:dc:74:05:be:2a:ed:
         21:c9:d6:5b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNVmx9AP+wV5SH2GlxPSJ9OeZJW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA4OEIxM0IxNUM0MDkyRkFBQzk4MkM1NjdFOTM1MzVG
RTdDOTEwNzAeFw0yNDA0MDQwMzQyMTRaFw0yNTA0MDMwMzQ3MTRaMDMxMTAvBgNV
BAMTKERERTA0NUJEMzQwOEQ3Q0ZGNjYxRDg2REE1NkRGQjM0RDgwNUQ3OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyivVUS/yeYFuV0Ug1NxA5NYr
AkLHHJ6wNiHsqHvMmwLW19EZ7dd2LemuM+ktWRY6hH7/aiGwn/6f774Tq/fRY/SD
TsJz7QVfFLOr4fj4XbcmsNv/w99eWlrN3YLtvp709DVG1qblegMkNTKvr0NaaNjb
LvFGpGcNNRbCph/RFOM1swRd8INPGBKDoFUzmm/uu75MNhOE0RiMUJFKR2EVdosd
oGMwk3oRgFYiD61A288yMHWuh9CiUxL1Dy+PStj3SwFF1fri8GC2u/I9QKnrUtJE
1dTMSMFj3c9DKTlurlYRKOow0tKv5TowqJMVmimeb+RKzcEUnZ9clh2qyNIzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3eBFvTQI18/2YdhtpW37NNgF15wwHwYDVR0j
BBgwFoAUMIixOxXECS+qyYLFZ+k1Nf58kQcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdudDJvQkZ3MW5rajZwM3BFS1dLekZYSjhYbnBUaGRmdGpKYUtuOVBV
VmQvMS8zMDg4QjEzQjE1QzQwOTJGQUFDOTgyQzU2N0U5MzUzNUZFN0M5MTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwODhCMTNCMTVDNDA5MkZB
QUM5ODJDNTY3RTkzNTM1RkU3QzkxMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHbnQyb0JGdzFua2o2cDNwRUtXS3pGWEo4WG5wVGhkZnRqSmFLbjlQVVZkLzEv
MzIzODMwMzQzYTMyMzkzMTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMz
MzkzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQpGDANBgkqhkiG9w0BAQsFAAOCAQEAPUtVnKWp
GkxAnv9bJTbj74/lauJZ0Dqgt8LwLTqTC9xXr9BuZxy+JRczwxwM+Ze1XnBXEwt8
cC8ugvw0uu9foCaUDKBcU3lNG/Z6tIG20EK6V0Zfz+uhp0JJq0UnFDetM6ldyvFb
oKF6O0JM23zR6ykRS8YDKlJPCGvZ1M/7kfCMQgOfGPq8DBW9dcBdU6n27MbdCW0V
ns+zlqu0Vly3pQVreWDTtE0HIVO9dIOqZ226jZlEiukEhEM6VrrvbNm6rdC5e/lV
5rV8VvyiDViA3pvxZaC1JV1yPIwk6hYFqAG5ehcF4GOtmZwSqjwL6QHM1pIF46KR
3HQFvirtIcnWWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org