Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa
File:                     323830343a386166383a3a2f33332d3333203d3e20323733373034.roa (raw, json)
Hash identifier:          AIV5XCrl2rnIDpADDIrX1qNrK2NdgaE5D99VOtVZ4Dk=
Subject key identifier:   81:6A:FF:E8:99:51:C7:B4:F1:4F:4D:2D:F5:11:E0:F6:BA:A0:A4:A6
Certificate issuer:       /CN=AAB1E0E94AC7495DB2187F386DE3A3926B2E264D
Certificate serial:       779F892220D3B34B705E8F08D0615766E6EB7238
Authority key identifier: AA:B1:E0:E9:4A:C7:49:5D:B2:18:7F:38:6D:E3:A3:92:6B:2E:26:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa
Signing time:             Tue 12 Mar 2024 17:03:35 +0000
ROA not before:           Tue 12 Mar 2024 16:58:35 +0000
ROA not after:            Tue 11 Mar 2025 17:03:35 +0000
asID:                     273704
IP address blocks:        2804:8af8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9f:89:22:20:d3:b3:4b:70:5e:8f:08:d0:61:57:66:e6:eb:72:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB1E0E94AC7495DB2187F386DE3A3926B2E264D
        Validity
            Not Before: Mar 12 16:58:35 2024 GMT
            Not After : Mar 11 17:03:35 2025 GMT
        Subject: CN=816AFFE89951C7B4F14F4D2DF511E0F6BAA0A4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:28:24:77:12:13:e6:b3:17:f8:82:e9:5a:
                    df:f9:5c:3c:17:2f:74:95:4a:d0:47:85:47:3d:ec:
                    13:d3:e1:84:04:64:54:08:a8:2f:9f:bf:68:f3:af:
                    f6:ec:10:02:6c:5d:4f:d4:b7:48:99:06:aa:6b:6d:
                    c4:50:70:c3:bf:d4:7f:74:4b:d1:be:be:58:a7:f7:
                    7b:38:73:d6:46:52:cc:87:1f:b0:52:1c:0e:a0:c3:
                    33:ad:f1:30:e5:d3:83:19:b6:36:18:c0:92:d8:64:
                    61:79:d5:7b:3f:19:4f:48:8b:23:54:98:76:a2:11:
                    d6:dc:b4:24:2c:ec:ac:ab:12:cc:fa:16:c4:1f:c6:
                    e0:1a:f3:6e:42:dc:51:8a:c7:4b:bf:71:60:ef:ad:
                    ed:2c:ac:63:66:b6:21:ec:42:02:2c:f4:cc:94:69:
                    bb:0c:42:1f:3f:a2:b4:9c:71:a3:e4:5e:1b:a0:ac:
                    14:d9:1d:c8:8a:38:94:d3:b1:60:05:6f:84:29:6b:
                    92:4c:75:97:d0:7e:ad:7e:c1:59:8d:dc:6b:23:1b:
                    a5:c1:a6:e0:20:2e:9c:af:14:72:6b:2d:e8:1d:a9:
                    89:9c:a6:87:cb:e3:04:0c:2d:b1:ac:7a:05:b7:67:
                    79:7b:d8:c0:f5:71:b5:45:3e:4d:d4:84:5f:32:63:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6A:FF:E8:99:51:C7:B4:F1:4F:4D:2D:F5:11:E0:F6:BA:A0:A4:A6
            X509v3 Authority Key Identifier:
                keyid:AA:B1:E0:E9:4A:C7:49:5D:B2:18:7F:38:6D:E3:A3:92:6B:2E:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB1E0E94AC7495DB2187F386DE3A3926B2E264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:e3:c1:12:06:23:15:a0:8c:52:3d:5e:4f:c0:8b:d1:18:
         00:cd:52:c3:d5:e6:0c:b9:91:59:b2:a9:45:d3:e3:bc:93:33:
         1d:9f:fc:8a:d4:8c:2f:98:79:1d:e0:7b:67:db:12:15:b9:22:
         f3:53:69:87:d7:2b:44:98:59:02:5e:5d:5b:d1:6f:bd:18:db:
         9e:c3:56:06:f1:89:04:c1:60:c5:8e:22:23:0c:14:0d:a2:26:
         f3:f1:55:bd:b1:41:b6:f4:29:04:98:f9:26:46:ae:a7:1e:58:
         5d:32:5f:4c:89:d0:49:1f:56:eb:85:e2:7a:7b:a8:27:b1:cf:
         c0:cf:84:eb:4a:1d:57:88:9a:eb:93:e1:ba:bf:19:5e:be:82:
         a5:40:a8:eb:6c:71:56:96:59:79:c4:bd:8c:ac:67:51:b2:61:
         56:e7:61:55:5a:24:0f:45:6f:43:04:20:7d:60:1b:3f:4f:94:
         c5:07:97:6f:a6:97:6f:dd:85:3b:7c:b6:05:7f:aa:fb:84:27:
         e9:4d:b4:34:aa:80:32:8b:53:70:ae:4c:1e:45:80:93:50:22:
         fb:ac:6a:55:f9:14:f3:d7:95:04:c3:5f:32:22:fe:0a:f6:de:
         74:b6:46:d4:bb:0a:e1:b5:a9:98:d4:9b:11:f6:be:52:bc:03:
         a5:46:c7:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd5+JIiDTs0twXo8I0GFXZubrcjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCMUUwRTk0QUM3NDk1REIyMTg3RjM4NkRFM0EzOTI2
QjJFMjY0RDAeFw0yNDAzMTIxNjU4MzVaFw0yNTAzMTExNzAzMzVaMDMxMTAvBgNV
BAMTKDgxNkFGRkU4OTk1MUM3QjRGMTRGNEQyREY1MTFFMEY2QkFBMEE0QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqSgkdxIT5rMX+ILpWt/5XDwX
L3SVStBHhUc97BPT4YQEZFQIqC+fv2jzr/bsEAJsXU/Ut0iZBqprbcRQcMO/1H90
S9G+vlin93s4c9ZGUsyHH7BSHA6gwzOt8TDl04MZtjYYwJLYZGF51Xs/GU9IiyNU
mHaiEdbctCQs7KyrEsz6FsQfxuAa825C3FGKx0u/cWDvre0srGNmtiHsQgIs9MyU
absMQh8/orSccaPkXhugrBTZHciKOJTTsWAFb4Qpa5JMdZfQfq1+wVmN3GsjG6XB
puAgLpyvFHJrLegdqYmcpofL4wQMLbGsegW3Z3l72MD1cbVFPk3UhF8yY35VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgWr/6JlRx7TxT00t9RHg9rqgpKYwHwYDVR0j
BBgwFoAUqrHg6UrHSV2yGH84beOjkmsuJk0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC9BQUIxRTBFOTRBQzc0OTVEQjIxODdGMzg2REUzQTM5MjZCMkUyNjRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBQjFFMEU5NEFDNzQ5NURC
MjE4N0YzODZERTNBMzkyNkIyRTI2NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOVluY0pGbW94ajVQS3hKQzFEbnhzc0tXSjhBaFlKWTNMWmtFS0JHVlhqLzAv
MzIzODMwMzQzYTM4NjE2NjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASK+AAwDQYJKoZIhvcNAQELBQADggEBAJWa48ES
BiMVoIxSPV5PwIvRGADNUsPV5gy5kVmyqUXT47yTMx2f/IrUjC+YeR3ge2fbEhW5
IvNTaYfXK0SYWQJeXVvRb70Y257DVgbxiQTBYMWOIiMMFA2iJvPxVb2xQbb0KQSY
+SZGrqceWF0yX0yJ0EkfVuuF4np7qCexz8DPhOtKHVeImuuT4bq/GV6+gqVAqOts
cVaWWXnEvYysZ1GyYVbnYVVaJA9Fb0MEIH1gGz9PlMUHl2+ml2/dhTt8tgV/qvuE
J+lNtDSqgDKLU3CuTB5FgJNQIvusalX5FPPXlQTDXzIi/gr23nS2RtS7CuG1qZjU
mxH2vlK8A6VGxws=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org