Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa
File:                     323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (raw, json)
Hash identifier:          nbQPJ7m3kniRStbkakgZ98pTVRg9dABZwLCDcvQALOo=
Subject key identifier:   A0:95:52:49:CD:BC:6A:32:B9:8D:01:FB:88:DA:48:0E:11:0A:6F:EF
Certificate issuer:       /CN=AAB1E0E94AC7495DB2187F386DE3A3926B2E264D
Certificate serial:       2F92E55073B086288ABBE92D54D152A77F48841A
Authority key identifier: AA:B1:E0:E9:4A:C7:49:5D:B2:18:7F:38:6D:E3:A3:92:6B:2E:26:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa
Signing time:             Tue 12 Mar 2024 17:03:35 +0000
ROA not before:           Tue 12 Mar 2024 16:58:35 +0000
ROA not after:            Tue 11 Mar 2025 17:03:35 +0000
asID:                     273704
IP address blocks:        2804:8af8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:92:e5:50:73:b0:86:28:8a:bb:e9:2d:54:d1:52:a7:7f:48:84:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB1E0E94AC7495DB2187F386DE3A3926B2E264D
        Validity
            Not Before: Mar 12 16:58:35 2024 GMT
            Not After : Mar 11 17:03:35 2025 GMT
        Subject: CN=A0955249CDBC6A32B98D01FB88DA480E110A6FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:b8:b5:fc:81:56:7e:98:1d:f9:b2:69:25:
                    03:85:86:e6:1b:4b:bf:dd:c7:09:9d:b0:b1:fc:03:
                    62:59:ed:15:4f:57:21:71:d5:59:92:85:48:07:73:
                    6b:ce:63:1c:d1:e4:f8:18:26:eb:5a:05:8b:d3:72:
                    02:4d:5a:5f:0b:78:ca:e3:bc:53:bd:9d:0c:44:1b:
                    d3:06:f6:25:d9:23:4a:7b:5c:59:89:89:bf:11:23:
                    ad:0b:1c:39:7d:ba:fe:83:7a:6a:ec:6a:00:c2:ba:
                    35:b3:3a:e9:4c:cf:e6:5a:7b:8b:70:24:c6:cb:c8:
                    6e:fa:b6:88:4e:1e:d5:40:e3:b0:de:fb:af:91:60:
                    51:db:cb:c7:40:32:1a:0d:d4:a9:3c:cf:4c:42:d0:
                    10:44:4d:d9:80:e1:22:f5:43:67:c1:97:95:1b:03:
                    5c:7a:69:be:91:d9:02:9b:9f:27:93:dd:91:a7:93:
                    11:a1:28:59:31:a1:a4:ae:a3:13:a0:4b:da:cd:b0:
                    20:da:bb:1a:03:21:6c:f1:66:a6:12:b5:81:4b:65:
                    af:08:d9:9a:a5:51:fd:e5:2e:68:21:49:8f:ab:2b:
                    a0:57:ac:ce:55:81:af:45:3c:f6:f2:b5:57:2a:6b:
                    5e:56:3b:de:f5:9d:6b:30:1b:aa:5d:13:01:ab:ca:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:95:52:49:CD:BC:6A:32:B9:8D:01:FB:88:DA:48:0E:11:0A:6F:EF
            X509v3 Authority Key Identifier:
                keyid:AA:B1:E0:E9:4A:C7:49:5D:B2:18:7F:38:6D:E3:A3:92:6B:2E:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:96:68:25:ee:eb:8b:73:ff:00:18:fb:ea:82:3e:bf:4d:cd:
         cd:f7:ef:84:b6:14:c6:d9:0b:c0:ce:f3:37:6a:87:e6:2a:d2:
         ee:19:90:d5:40:1a:0f:7b:3f:b4:bf:fe:86:08:60:0b:59:55:
         c1:ef:bd:2b:a1:8f:80:a0:6c:a4:16:e5:3a:17:b5:f9:2b:28:
         28:f3:42:8f:a5:4e:9f:ce:c7:8b:4f:a2:bb:07:b0:b2:0d:da:
         50:7d:ce:b0:81:fc:5e:ac:fe:1f:95:0d:8b:34:47:9e:ff:44:
         50:b0:e3:58:7a:f7:06:84:c4:11:60:98:bf:a2:18:f6:33:74:
         24:2b:89:34:70:a3:3f:7c:bb:2f:dd:aa:ec:29:98:59:8f:4f:
         51:27:3e:32:11:f8:3f:19:73:5f:37:2f:69:54:cf:29:f7:c4:
         24:a7:ac:f0:b4:c8:9c:65:9c:7a:b5:76:03:2c:d3:8e:0a:5e:
         ed:d6:d6:73:5c:33:cd:a9:f0:ce:42:85:50:97:dd:6b:9d:cd:
         7f:47:bb:d2:ae:ba:60:31:2a:ae:66:80:1e:5b:0e:29:a6:b9:
         08:ce:c2:05:a4:32:e8:98:99:f7:0d:23:e7:d1:5b:1a:3a:c4:
         af:07:bc:b6:03:5f:5f:2a:9c:e2:50:fc:52:f8:14:c3:d2:71:
         7c:49:d7:56
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL5LlUHOwhiiKu+ktVNFSp39IhBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCMUUwRTk0QUM3NDk1REIyMTg3RjM4NkRFM0EzOTI2
QjJFMjY0RDAeFw0yNDAzMTIxNjU4MzVaFw0yNTAzMTExNzAzMzVaMDMxMTAvBgNV
BAMTKEEwOTU1MjQ5Q0RCQzZBMzJCOThEMDFGQjg4REE0ODBFMTEwQTZGRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfsbi1/IFWfpgd+bJpJQOFhuYb
S7/dxwmdsLH8A2JZ7RVPVyFx1VmShUgHc2vOYxzR5PgYJutaBYvTcgJNWl8LeMrj
vFO9nQxEG9MG9iXZI0p7XFmJib8RI60LHDl9uv6DemrsagDCujWzOulMz+Zae4tw
JMbLyG76tohOHtVA47De+6+RYFHby8dAMhoN1Kk8z0xC0BBETdmA4SL1Q2fBl5Ub
A1x6ab6R2QKbnyeT3ZGnkxGhKFkxoaSuoxOgS9rNsCDauxoDIWzxZqYStYFLZa8I
2ZqlUf3lLmghSY+rK6BXrM5Vga9FPPbytVcqa15WO971nWswG6pdEwGrymjlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUoJVSSc28ajK5jQH7iNpIDhEKb+8wHwYDVR0j
BBgwFoAUqrHg6UrHSV2yGH84beOjkmsuJk0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC9BQUIxRTBFOTRBQzc0OTVEQjIxODdGMzg2REUzQTM5MjZCMkUyNjRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBQjFFMEU5NEFDNzQ5NURC
MjE4N0YzODZERTNBMzkyNkIyRTI2NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOVluY0pGbW94ajVQS3hKQzFEbnhzc0tXSjhBaFlKWTNMWmtFS0JHVlhqLzAv
MzIzODMwMzQzYTM4NjE2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASK+DANBgkqhkiG9w0BAQsFAAOCAQEAkpZoJe7r
i3P/ABj76oI+v03NzffvhLYUxtkLwM7zN2qH5irS7hmQ1UAaD3s/tL/+hghgC1lV
we+9K6GPgKBspBblOhe1+SsoKPNCj6VOn87Hi0+iuwewsg3aUH3OsIH8Xqz+H5UN
izRHnv9EULDjWHr3BoTEEWCYv6IY9jN0JCuJNHCjP3y7L92q7CmYWY9PUSc+MhH4
PxlzXzcvaVTPKffEJKes8LTInGWcerV2AyzTjgpe7dbWc1wzzanwzkKFUJfda53N
f0e70q66YDEqrmaAHlsOKaa5CM7CBaQy6JiZ9w0j59FbGjrErwe8tgNfXyqc4lD8
UvgUw9JxfEnXVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org