Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a633030303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a633030303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          bNk+wY/+dhUYdHqQc3smhBXaMngJzBfRl9QcDsqZnv8=
Subject key identifier:   AE:B6:1F:7B:4B:65:01:6F:1F:44:D6:58:D6:8E:82:78:94:4D:35:4B
Certificate issuer:       /CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
Certificate serial:       1A297679B4A24CF20A88E2431E04DAE16295E283
Authority key identifier: 55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a633030303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Fri 11 Feb 2022 19:29:35 +0000
ROA not before:           Fri 11 Feb 2022 19:24:35 +0000
ROA not after:            Fri 10 Feb 2023 19:29:35 +0000
asID:                     262798
IP address blocks:        2804:240:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:29:76:79:b4:a2:4c:f2:0a:88:e2:43:1e:04:da:e1:62:95:e2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2
        Validity
            Not Before: Feb 11 19:24:35 2022 GMT
            Not After : Feb 10 19:29:35 2023 GMT
        Subject: CN=AEB61F7B4B65016F1F44D658D68E8278944D354B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:17:34:84:39:98:cc:3a:d7:d4:dd:24:19:
                    3b:30:9b:19:99:e3:04:b2:2a:1f:dd:0e:19:a0:80:
                    27:1f:8b:8c:fc:28:73:28:24:40:7f:0c:b8:b7:73:
                    0d:0b:f2:16:cd:a4:95:1f:aa:bf:d1:1a:fa:f9:0b:
                    7c:14:63:cc:75:12:43:0c:91:7a:7b:89:55:e2:81:
                    49:b7:41:b9:4f:ac:d8:90:74:34:d2:e5:eb:04:15:
                    80:58:52:2a:15:4d:1e:90:57:db:c9:ba:12:99:73:
                    4e:fa:e9:63:00:0d:32:2e:40:eb:a9:91:82:9e:67:
                    a7:5b:17:fe:27:2a:84:50:3a:4a:36:e1:85:7a:9c:
                    bd:be:b4:c0:c2:76:f1:84:00:f4:25:b2:f8:60:3f:
                    31:4a:44:9e:d2:e3:f9:f8:b9:35:07:18:34:ef:aa:
                    a8:de:cc:db:a4:dd:6a:fc:c7:bb:82:9e:74:21:66:
                    8f:c3:bd:0a:56:73:7a:ad:ce:35:3a:31:96:ad:e6:
                    c4:00:a0:0a:e6:09:29:9c:67:39:f1:29:a1:9f:a6:
                    51:df:7f:70:55:2e:dd:58:cf:16:8d:6f:8d:5e:81:
                    6b:3f:11:e5:d5:6c:dc:78:57:99:62:d7:55:77:7e:
                    a5:6c:21:fe:9f:b0:ee:dd:5e:48:3f:04:d6:a8:f2:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B6:1F:7B:4B:65:01:6F:1F:44:D6:58:D6:8E:82:78:94:4D:35:4B
            X509v3 Authority Key Identifier:
                keyid:55:87:3C:C5:DE:F0:FF:CA:1C:B3:A1:B8:AF:C0:CB:0D:16:AF:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55873CC5DEF0FFCA1CB3A1B8AFC0CB0D16AF07E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a633030303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:51:6d:b1:05:03:ae:4b:fe:8a:6c:d3:73:07:e4:8f:24:d7:
         ce:b8:46:1c:b1:20:5d:a0:a5:f1:b5:2f:22:ae:31:c2:05:70:
         59:a9:2b:0e:b5:56:45:a4:43:d7:6d:b9:e5:f7:b4:39:73:4f:
         b4:93:b2:4b:0f:ef:34:b9:b4:cc:1f:2f:33:5d:56:c2:ef:f4:
         10:d8:e8:92:8c:1e:e2:41:bd:ec:cb:58:68:5a:85:ac:48:be:
         23:66:5d:62:fa:aa:13:f4:07:2c:e3:0d:ba:25:50:2c:73:f8:
         15:a3:3b:33:90:c0:40:99:0e:66:a7:fa:25:55:87:0c:61:df:
         f9:f8:35:26:f8:8f:f1:14:e0:eb:13:b1:02:8e:8a:53:16:cc:
         56:0a:55:07:fc:47:fe:38:8a:a6:4e:73:ae:3a:78:f9:57:a9:
         5d:9f:81:02:93:c7:47:30:6c:aa:fe:9d:ee:b1:09:0e:57:f2:
         19:d9:9d:44:a6:bf:df:e0:5f:ad:1b:83:61:ad:2c:4e:4b:2a:
         1f:71:87:37:07:e5:b1:ca:81:2d:fd:66:10:1b:88:1d:82:f4:
         84:1e:1b:dc:c2:a0:2f:16:d4:8e:97:d2:46:8d:a9:ed:5d:73:
         cd:c3:6f:46:00:9c:75:ac:e5:dd:c7:65:8c:f5:a5:2f:f8:61:
         b0:61:b2:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGil2ebSiTPIKiOJDHgTa4WKV4oMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4NzNDQzVERUYwRkZDQTFDQjNBMUI4QUZDMENCMEQx
NkFGMDdFMjAeFw0yMjAyMTExOTI0MzVaFw0yMzAyMTAxOTI5MzVaMDMxMTAvBgNV
BAMTKEFFQjYxRjdCNEI2NTAxNkYxRjQ0RDY1OEQ2OEU4Mjc4OTQ0RDM1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Lxc0hDmYzDrX1N0kGTswmxmZ
4wSyKh/dDhmggCcfi4z8KHMoJEB/DLi3cw0L8hbNpJUfqr/RGvr5C3wUY8x1EkMM
kXp7iVXigUm3QblPrNiQdDTS5esEFYBYUioVTR6QV9vJuhKZc0766WMADTIuQOup
kYKeZ6dbF/4nKoRQOko24YV6nL2+tMDCdvGEAPQlsvhgPzFKRJ7S4/n4uTUHGDTv
qqjezNuk3Wr8x7uCnnQhZo/DvQpWc3qtzjU6MZat5sQAoArmCSmcZznxKaGfplHf
f3BVLt1YzxaNb41egWs/EeXVbNx4V5li11V3fqVsIf6fsO7dXkg/BNao8n11AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrrYfe0tlAW8fRNZY1o6CeJRNNUswHwYDVR0j
BBgwFoAUVYc8xd7w/8ocs6G4r8DLDRavB+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMC81NTg3M0NDNURFRjBGRkNBMUNCM0ExQjhBRkMwQ0IwRDE2QUYwN0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1ODczQ0M1REVGMEZGQ0Ex
Q0IzQTFCOEFGQzBDQjBEMTZBRjA3RTIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzAv
MzIzODMwMzQzYTMyMzQzMDNhNjMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAJAwDANBgkqhkiG9w0BAQsFAAOC
AQEAJVFtsQUDrkv+imzTcwfkjyTXzrhGHLEgXaCl8bUvIq4xwgVwWakrDrVWRaRD
12255fe0OXNPtJOySw/vNLm0zB8vM11Wwu/0ENjokowe4kG97MtYaFqFrEi+I2Zd
YvqqE/QHLOMNuiVQLHP4FaM7M5DAQJkOZqf6JVWHDGHf+fg1JviP8RTg6xOxAo6K
UxbMVgpVB/xH/jiKpk5zrjp4+VepXZ+BApPHRzBsqv6d7rEJDlfyGdmdRKa/3+Bf
rRuDYa0sTksqH3GHNwflscqBLf1mEBuIHYL0hB4b3MKgLxbUjpfSRo2p7V1zzcNv
RgCcdazl3cdljPWlL/hhsGGyKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org