Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33342d3334203d3e20323632373938.roa
File:                     323830343a3234303a3a2f33342d3334203d3e20323632373938.roa (raw, json)
Hash identifier:          VCGDX0QSr1OoDwSGevaKmVWDJOzXqe/aTYpllPVSI0k=
Subject key identifier:   23:3B:30:28:B9:81:8D:5E:69:27:31:F9:4F:43:D1:B4:0D:61:EF:9B
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       619461AA66651549E9D56F2226F013655AF0D4EF
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33342d3334203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:21:48 +0000
ROA not before:           Fri 11 Feb 2022 19:16:48 +0000
ROA not after:            Fri 10 Feb 2023 19:21:48 +0000
asID:                     262798
IP address blocks:        2804:240::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:94:61:aa:66:65:15:49:e9:d5:6f:22:26:f0:13:65:5a:f0:d4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:16:48 2022 GMT
            Not After : Feb 10 19:21:48 2023 GMT
        Subject: CN=233B3028B9818D5E692731F94F43D1B40D61EF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:2d:59:5e:9c:84:66:0d:d2:a2:fb:49:6c:
                    11:4e:55:a0:83:5f:25:af:73:04:df:e8:16:21:78:
                    b4:47:8e:1a:54:84:b9:0f:40:0b:37:43:6f:c8:85:
                    1b:03:58:7e:9f:05:4c:c3:0b:32:18:b9:a6:f3:d6:
                    51:d5:4f:73:95:00:43:7c:96:08:fc:36:4c:d4:65:
                    41:22:86:4d:30:f9:b5:c2:c5:c1:11:2a:a3:fc:88:
                    23:75:a6:bb:d6:5a:06:10:77:85:bd:13:af:02:d4:
                    d6:84:0c:0d:c4:c6:9f:c4:f5:48:8d:0b:b4:58:a4:
                    00:64:40:3e:93:de:6c:47:2a:bc:c3:37:5f:4a:1c:
                    98:e0:27:12:0f:e1:0b:39:a2:37:41:17:63:dd:4f:
                    7b:34:37:56:25:78:4b:58:52:b3:56:a4:ac:73:cc:
                    6b:3f:8d:73:f7:61:a7:d7:34:89:54:27:12:0a:5f:
                    f5:8c:f6:68:1b:c8:3a:74:6b:1a:b3:60:15:f3:9e:
                    db:7f:ee:c5:ac:52:82:b1:31:87:21:26:e4:a4:96:
                    51:79:38:06:6b:48:87:f4:d2:e9:b2:20:da:a8:12:
                    bb:2f:a7:0f:8a:66:dc:0e:13:a9:66:2f:65:3b:d7:
                    c6:38:f2:5d:c5:23:8a:07:fc:07:71:63:e1:24:59:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:30:28:B9:81:8D:5E:69:27:31:F9:4F:43:D1:B4:0D:61:EF:9B
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33342d3334203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:23:93:be:d6:6a:2e:eb:5c:e1:77:25:32:c4:ba:a8:49:
         54:d6:0a:5a:0e:b9:ac:07:63:66:17:ba:d2:d7:b5:83:fd:74:
         ee:b4:0f:c0:80:14:3b:8b:e9:03:cf:98:af:74:b1:fc:d3:0a:
         89:69:58:69:2b:71:d4:bc:cd:f0:39:6f:b3:30:cd:23:0a:c6:
         c7:af:ff:88:4a:3d:cd:79:8d:4f:b7:34:9b:a0:00:04:83:a2:
         ea:ba:1f:5f:46:67:f7:2e:41:e9:25:76:02:cd:f2:a5:0e:49:
         a1:63:4e:d6:0a:c7:3d:44:c2:a8:d3:7b:88:c8:8b:8b:01:49:
         09:83:86:9c:36:65:49:9c:89:d2:52:f8:24:2e:83:9f:8a:1d:
         e1:a6:e0:47:8f:d2:83:6c:91:c6:69:be:b1:a7:a5:68:1b:d8:
         a5:27:67:f6:86:1d:fa:c0:d0:ca:f8:e5:eb:e0:d7:a1:2b:ed:
         7f:d7:da:94:a1:06:71:0e:88:cf:4d:42:a8:f6:e2:43:18:6a:
         65:85:20:8a:90:3d:07:f7:a7:79:1c:14:50:96:db:ff:f3:9c:
         52:0e:f4:8d:e7:6d:c4:ea:88:34:6e:7b:97:30:95:6e:1d:c7:
         72:35:a9:b3:f9:be:72:d9:31:ae:64:85:12:30:29:4e:d5:0c:
         59:96:af:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYZRhqmZlFUnp1W8iJvATZVrw1O8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4NzNDQzVERUYwRkZDQTFDQjNBMUI4QUZDMENCMEQx
NkFGMDdFMjAeFw0yMjAyMTExOTE2NDhaFw0yMzAyMTAxOTIxNDhaMDMxMTAvBgNV
BAMTKDIzM0IzMDI4Qjk4MThENUU2OTI3MzFGOTRGNDNEMUI0MEQ2MUVGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oi1ZXpyEZg3SovtJbBFOVaCD
XyWvcwTf6BYheLRHjhpUhLkPQAs3Q2/IhRsDWH6fBUzDCzIYuabz1lHVT3OVAEN8
lgj8NkzUZUEihk0w+bXCxcERKqP8iCN1prvWWgYQd4W9E68C1NaEDA3Exp/E9UiN
C7RYpABkQD6T3mxHKrzDN19KHJjgJxIP4Qs5ojdBF2PdT3s0N1YleEtYUrNWpKxz
zGs/jXP3YafXNIlUJxIKX/WM9mgbyDp0axqzYBXzntt/7sWsUoKxMYchJuSkllF5
OAZrSIf00umyINqoErsvpw+KZtwOE6lmL2U718Y48l3FI4oH/AdxY+EkWTt5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIzswKLmBjV5pJzH5T0PRtA1h75swHwYDVR0j
BBgwFoAUVYc8xd7w/8ocs6G4r8DLDRavB+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMC81NTg3M0NDNURFRjBGRkNBMUNCM0ExQjhBRkMwQ0IwRDE2QUYwN0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1ODczQ0M1REVGMEZGQ0Ex
Q0IzQTFCOEFGQzBDQjBEMTZBRjA3RTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzAv
MzIzODMwMzQzYTMyMzQzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzMjM3
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigEAkAAMA0GCSqGSIb3DQEBCwUAA4IBAQBnpCOTvtZq
Lutc4XclMsS6qElU1gpaDrmsB2NmF7rS17WD/XTutA/AgBQ7i+kDz5ivdLH80wqJ
aVhpK3HUvM3wOW+zMM0jCsbHr/+ISj3NeY1PtzSboAAEg6Lquh9fRmf3LkHpJXYC
zfKlDkmhY07WCsc9RMKo03uIyIuLAUkJg4acNmVJnInSUvgkLoOfih3hpuBHj9KD
bJHGab6xp6VoG9ilJ2f2hh36wNDK+OXr4NehK+1/19qUoQZxDojPTUKo9uJDGGpl
hSCKkD0H96d5HBRQltv/85xSDvSN523E6og0bnuXMJVuHcdyNamz+b5y2TGuZIUS
MClO1QxZlq/F
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org