Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa
File:                     323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa (raw, json)
Hash identifier:          8q4tPbRqhxSg1WKanh1I+ISqGtcomKu6DaZjXyCWPjY=
Subject key identifier:   38:57:CC:64:1F:C1:6D:C6:D9:2D:86:17:E8:11:9E:2D:EA:92:AA:B8
Certificate issuer:       /CN=9A87074F73DD530421306A811F62BA127C58A09C
Certificate serial:       0AD4B6927C0B86BD7066C9A4EF7D0D98296113F0
Authority key identifier: 9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa
Signing time:             Mon 18 Dec 2023 19:21:08 +0000
ROA not before:           Mon 18 Dec 2023 19:16:08 +0000
ROA not after:            Mon 16 Dec 2024 19:21:08 +0000
asID:                     270793
IP address blocks:        2804:7180:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d4:b6:92:7c:0b:86:bd:70:66:c9:a4:ef:7d:0d:98:29:61:13:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A87074F73DD530421306A811F62BA127C58A09C
        Validity
            Not Before: Dec 18 19:16:08 2023 GMT
            Not After : Dec 16 19:21:08 2024 GMT
        Subject: CN=3857CC641FC16DC6D92D8617E8119E2DEA92AAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:fa:96:81:70:ef:bc:a9:73:32:12:53:e4:
                    4e:74:80:73:63:6b:20:6a:1e:f1:ea:1e:e1:99:93:
                    cb:66:6b:a0:7e:fb:15:e0:86:57:2f:1f:ca:77:a1:
                    40:33:ab:04:91:41:45:3d:da:ff:45:db:2e:63:52:
                    22:c4:8b:21:27:37:8a:f9:dd:c5:b1:7d:c7:2f:db:
                    c1:f2:55:c3:97:a6:1e:9d:8e:2f:8c:4f:2e:0a:ae:
                    fc:58:a6:b0:d6:c3:d0:d9:5d:d2:a9:60:93:c4:5d:
                    d0:5a:bf:32:97:d5:70:25:32:46:70:ea:c1:8c:5c:
                    fa:65:f7:bf:91:68:73:0c:6d:52:89:57:17:6c:10:
                    c6:0c:9b:b2:de:83:ee:52:0b:de:00:1d:0b:ce:93:
                    cf:4f:ac:30:e2:f9:12:45:bf:a4:6e:12:e4:5a:8b:
                    ac:82:0b:55:b7:94:f0:de:84:b1:01:0b:5e:e1:e8:
                    6d:c6:f5:cf:c1:55:ed:cd:73:de:88:b9:07:b6:f1:
                    df:82:88:1c:c2:93:3b:43:f1:d0:c1:47:ec:de:ab:
                    e0:e2:62:b6:70:c9:a6:eb:0b:fc:f1:95:5a:10:f7:
                    70:25:80:79:9b:13:2a:7c:bf:f8:99:6a:80:02:32:
                    64:1b:22:1b:af:09:71:0c:f5:0f:b2:cd:be:56:3e:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:57:CC:64:1F:C1:6D:C6:D9:2D:86:17:E8:11:9E:2D:EA:92:AA:B8
            X509v3 Authority Key Identifier:
                keyid:9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:43:16:0c:a8:a2:54:06:28:af:e7:0c:58:78:e4:06:48:df:
         70:33:1a:d6:cf:88:e4:b7:a1:ac:ad:3e:f9:9c:49:c9:fe:32:
         8f:a2:c6:b9:56:71:d6:75:4a:82:6d:ad:dd:79:f2:fa:6b:2d:
         82:74:7e:c1:84:b5:98:99:04:b8:c2:e4:f6:cd:df:b2:71:7b:
         78:1d:bd:9e:fc:32:d2:89:23:32:6f:e3:08:19:de:ef:39:86:
         eb:71:d6:23:3c:8e:9e:06:71:35:37:ea:70:d7:b9:13:33:b9:
         21:82:dd:ff:01:0f:79:db:a0:bb:ab:0b:c3:aa:00:9f:ce:88:
         c2:e8:3c:32:8a:36:f6:a2:06:f4:4b:ad:de:0d:46:0f:e8:7b:
         23:8e:8b:4b:72:c1:ce:f5:84:e6:d5:0c:b6:06:a5:58:59:de:
         78:69:6e:1a:b7:df:11:e1:18:c8:f5:cf:14:80:b6:f5:27:86:
         a6:e1:20:58:62:f2:2b:40:79:1e:cf:4a:9f:27:02:dd:9d:8a:
         50:a2:81:62:e0:18:77:55:44:a9:39:43:1e:f6:fe:45:2a:9e:
         69:d4:17:3a:96:87:86:63:30:22:e2:a9:a6:38:0f:08:2b:fa:
         e2:eb:6a:4a:0c:2d:9e:cc:58:3a:8e:f3:43:88:4d:7c:44:3e:
         7d:ed:1c:26
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCtS2knwLhr1wZsmk730NmClhE/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE4NzA3NEY3M0RENTMwNDIxMzA2QTgxMUY2MkJBMTI3
QzU4QTA5QzAeFw0yMzEyMTgxOTE2MDhaFw0yNDEyMTYxOTIxMDhaMDMxMTAvBgNV
BAMTKDM4NTdDQzY0MUZDMTZEQzZEOTJEODYxN0U4MTE5RTJERUE5MkFBQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFvqWgXDvvKlzMhJT5E50gHNj
ayBqHvHqHuGZk8tma6B++xXghlcvH8p3oUAzqwSRQUU92v9F2y5jUiLEiyEnN4r5
3cWxfccv28HyVcOXph6dji+MTy4KrvxYprDWw9DZXdKpYJPEXdBavzKX1XAlMkZw
6sGMXPpl97+RaHMMbVKJVxdsEMYMm7Leg+5SC94AHQvOk89PrDDi+RJFv6RuEuRa
i6yCC1W3lPDehLEBC17h6G3G9c/BVe3Nc96IuQe28d+CiBzCkztD8dDBR+zeq+Di
YrZwyabrC/zxlVoQ93AlgHmbEyp8v/iZaoACMmQbIhuvCXEM9Q+yzb5WPi4hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOFfMZB/BbcbZLYYX6BGeLeqSqrgwHwYDVR0j
BBgwFoAUmocHT3PdUwQhMGqBH2K6EnxYoJwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1
bzMvMC85QTg3MDc0RjczREQ1MzA0MjEzMDZBODExRjYyQkExMjdDNThBMDlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBODcwNzRGNzNERDUzMDQy
MTMwNkE4MTFGNjJCQTEyN0M1OEEwOUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzAv
MzIzODMwMzQzYTM3MzEzODMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEcYDAMA0GCSqGSIb3DQEBCwUA
A4IBAQBYQxYMqKJUBiiv5wxYeOQGSN9wMxrWz4jkt6GsrT75nEnJ/jKPosa5VnHW
dUqCba3defL6ay2CdH7BhLWYmQS4wuT2zd+ycXt4Hb2e/DLSiSMyb+MIGd7vOYbr
cdYjPI6eBnE1N+pw17kTM7khgt3/AQ9526C7qwvDqgCfzojC6Dwyijb2ogb0S63e
DUYP6HsjjotLcsHO9YTm1Qy2BqVYWd54aW4at98R4RjI9c8UgLb1J4am4SBYYvIr
QHkez0qfJwLdnYpQooFi4Bh3VUSpOUMe9v5FKp5p1Bc6loeGYzAi4qmmOA8IK/ri
62pKDC2ezFg6jvNDiE18RD597Rwm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org