Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/1/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa
File:                     323830343a343238633a3a2f33322d3334203d3e20323637353037.roa (raw, json)
Hash identifier:          zNrblhF1cKXQkNLzD0mV09Kvxn3OwL28bGbd+l9dNhY=
Subject key identifier:   9A:B2:FB:E1:26:81:F7:B2:B1:E1:68:FD:55:7A:9B:97:ED:23:C8:F7
Certificate issuer:       /CN=24188908AD14A0E252B752DC6B76E300087F394D
Certificate serial:       40E19FBE0E250128D8673387C96464524F835D83
Authority key identifier: 24:18:89:08:AD:14:A0:E2:52:B7:52:DC:6B:76:E3:00:08:7F:39:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24188908AD14A0E252B752DC6B76E300087F394D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/1/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa
Signing time:             Thu 04 Jan 2024 17:02:18 +0000
ROA not before:           Thu 04 Jan 2024 16:57:18 +0000
ROA not after:            Thu 02 Jan 2025 17:02:18 +0000
asID:                     267507
IP address blocks:        2804:428c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e1:9f:be:0e:25:01:28:d8:67:33:87:c9:64:64:52:4f:83:5d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24188908AD14A0E252B752DC6B76E300087F394D
        Validity
            Not Before: Jan  4 16:57:18 2024 GMT
            Not After : Jan  2 17:02:18 2025 GMT
        Subject: CN=9AB2FBE12681F7B2B1E168FD557A9B97ED23C8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:03:d6:db:6d:ee:7e:ea:e1:75:0d:8a:d3:
                    7d:10:30:16:34:6d:9f:b4:5d:c3:e3:01:ff:b3:4b:
                    a7:0a:7a:f9:ab:4f:f4:82:64:0a:18:52:4c:65:75:
                    42:bd:84:6a:c9:b9:4c:ab:a3:13:d6:75:89:5d:cd:
                    ce:3d:ab:f5:93:13:dc:50:98:91:0c:61:8a:9f:9a:
                    b7:03:82:38:fc:40:ed:fb:a7:ee:68:f6:12:6b:99:
                    20:4e:fa:37:9d:d3:fe:42:0e:b5:55:77:e4:a6:2e:
                    fc:1a:a0:8c:dd:2e:a1:26:d3:d0:77:48:0b:ba:6f:
                    e0:83:de:35:4d:29:37:d3:51:82:ac:0e:6b:42:1b:
                    e2:8f:5c:92:17:ca:84:e6:63:68:c8:d4:29:ec:b1:
                    26:a4:b2:32:f3:7b:48:21:a8:39:a3:10:47:53:00:
                    6d:28:d5:b1:37:51:d1:b5:16:b5:41:5c:72:f5:b7:
                    76:08:d5:f7:3a:66:34:33:7b:11:58:ff:a0:7d:92:
                    65:e0:6c:65:bb:9f:9f:cd:40:fc:20:31:0a:05:9b:
                    33:e7:09:22:1d:5a:a7:03:7a:fd:2a:50:7c:f0:60:
                    21:32:fe:e8:d5:ad:2f:cb:5a:ff:97:da:aa:99:67:
                    cd:0a:34:e6:99:cc:d6:78:77:2c:c1:42:de:03:09:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:FB:E1:26:81:F7:B2:B1:E1:68:FD:55:7A:9B:97:ED:23:C8:F7
            X509v3 Authority Key Identifier:
                keyid:24:18:89:08:AD:14:A0:E2:52:B7:52:DC:6B:76:E3:00:08:7F:39:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/1/24188908AD14A0E252B752DC6B76E300087F394D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24188908AD14A0E252B752DC6B76E300087F394D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/1/323830343a343238633a3a2f33322d3334203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:428c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:2b:e7:2c:2f:7f:9a:e1:8a:b5:7f:b6:89:f0:78:d3:b9:c4:
         e5:db:41:ec:01:15:5b:e8:1a:db:ca:f2:64:a6:fc:49:f3:77:
         1d:56:59:cd:1e:99:c8:af:00:c7:b1:3f:64:b8:e4:68:91:f0:
         43:ae:8c:70:f9:e9:95:6c:9f:4a:57:71:e2:b4:c6:ce:be:27:
         a9:a9:13:fe:ac:b3:31:1d:36:47:01:e1:4f:ba:90:fe:2a:1b:
         e1:a1:2c:ec:78:a5:f0:43:ff:21:d8:2c:2f:b0:86:86:d3:20:
         4a:a5:92:10:58:b1:09:ed:89:2b:e3:94:ea:6e:da:35:96:fa:
         2b:82:4b:17:c3:52:9d:8a:42:b6:53:2b:1f:20:a7:03:a6:4b:
         14:96:fc:56:b5:f4:31:ff:f4:5c:1e:f9:a1:e8:7b:fd:bd:d1:
         b5:54:7d:cd:f1:56:bc:9f:c0:05:e8:f5:42:b5:b4:53:b5:e0:
         dd:c0:85:52:06:75:7e:28:d6:98:19:97:ff:57:a1:c9:04:1b:
         d4:36:35:9e:2c:d5:a4:95:e1:65:d0:53:c3:ff:db:d1:f6:34:
         ff:d1:62:ff:16:37:f1:de:2c:74:f0:10:50:74:25:aa:fa:6a:
         1e:54:f2:f3:f5:cf:99:34:aa:57:48:ce:6c:ae:f9:4c:05:ab:
         a3:ec:c1:d8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQOGfvg4lASjYZzOHyWRkUk+DXYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQxODg5MDhBRDE0QTBFMjUyQjc1MkRDNkI3NkUzMDAw
ODdGMzk0RDAeFw0yNDAxMDQxNjU3MThaFw0yNTAxMDIxNzAyMThaMDMxMTAvBgNV
BAMTKDlBQjJGQkUxMjY4MUY3QjJCMUUxNjhGRDU1N0E5Qjk3RUQyM0M4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfwPW223ufurhdQ2K030QMBY0
bZ+0XcPjAf+zS6cKevmrT/SCZAoYUkxldUK9hGrJuUyroxPWdYldzc49q/WTE9xQ
mJEMYYqfmrcDgjj8QO37p+5o9hJrmSBO+jed0/5CDrVVd+SmLvwaoIzdLqEm09B3
SAu6b+CD3jVNKTfTUYKsDmtCG+KPXJIXyoTmY2jI1CnssSaksjLze0ghqDmjEEdT
AG0o1bE3UdG1FrVBXHL1t3YI1fc6ZjQzexFY/6B9kmXgbGW7n5/NQPwgMQoFmzPn
CSIdWqcDev0qUHzwYCEy/ujVrS/LWv+X2qqZZ80KNOaZzNZ4dyzBQt4DCVSNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmrL74SaB97Kx4Wj9VXqbl+0jyPcwHwYDVR0j
BBgwFoAUJBiJCK0UoOJSt1Lca3bjAAh/OU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhITExYWERyYWRDd29pNlI0dVNZZW5vS0V2MXJYQnhtSnU4SFFuR25a
N0MvMS8yNDE4ODkwOEFEMTRBMEUyNTJCNzUyREM2Qjc2RTMwMDA4N0YzOTRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI0MTg4OTA4QUQxNEEwRTI1
MkI3NTJEQzZCNzZFMzAwMDg3RjM5NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4SExMWFhEcmFkQ3dvaTZSNHVTWWVub0tFdjFyWEJ4bUp1OEhRbkduWjdDLzEv
MzIzODMwMzQzYTM0MzIzODYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM3
MzUzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARCjDANBgkqhkiG9w0BAQsFAAOCAQEAEyvnLC9/
muGKtX+2ifB407nE5dtB7AEVW+ga28ryZKb8SfN3HVZZzR6ZyK8Ax7E/ZLjkaJHw
Q66McPnplWyfSldx4rTGzr4nqakT/qyzMR02RwHhT7qQ/iob4aEs7Hil8EP/Idgs
L7CGhtMgSqWSEFixCe2JK+OU6m7aNZb6K4JLF8NSnYpCtlMrHyCnA6ZLFJb8VrX0
Mf/0XB75oeh7/b3RtVR9zfFWvJ/ABej1QrW0U7Xg3cCFUgZ1fijWmBmX/1ehyQQb
1DY1nizVpJXhZdBTw//b0fY0/9Fi/xY38d4sdPAQUHQlqvpqHlTy8/XPmTSqV0jO
bK75TAWro+zB2A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org