Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/323830343a336139303a3a2f33322d3336203d3e20323636303936.roa
File:                     323830343a336139303a3a2f33322d3336203d3e20323636303936.roa (raw, json)
Hash identifier:          2MOaY3t2SiFrZ7wYvsYqVPOOR+g+t1Q3IuvhYbvBIb4=
Subject key identifier:   9E:D4:08:0F:29:6B:EE:25:1A:8A:9E:98:9F:66:8A:23:3B:71:E5:A2
Certificate issuer:       /CN=551C8D694782953B26464AA2E96089A434D823FC
Certificate serial:       3B74D745315E54D51228021DB724C6A27E79657D
Authority key identifier: 55:1C:8D:69:47:82:95:3B:26:46:4A:A2:E9:60:89:A4:34:D8:23:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551C8D694782953B26464AA2E96089A434D823FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/323830343a336139303a3a2f33322d3336203d3e20323636303936.roa
Signing time:             Fri 23 Feb 2024 19:34:08 +0000
ROA not before:           Fri 23 Feb 2024 19:29:08 +0000
ROA not after:            Fri 21 Feb 2025 19:34:08 +0000
asID:                     266096
IP address blocks:        2804:3a90::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:74:d7:45:31:5e:54:d5:12:28:02:1d:b7:24:c6:a2:7e:79:65:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551C8D694782953B26464AA2E96089A434D823FC
        Validity
            Not Before: Feb 23 19:29:08 2024 GMT
            Not After : Feb 21 19:34:08 2025 GMT
        Subject: CN=9ED4080F296BEE251A8A9E989F668A233B71E5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:c6:ea:47:fa:3a:57:ff:c5:59:6a:db:70:
                    5a:4b:8a:70:d8:b0:1f:3b:54:e3:a5:0c:12:23:28:
                    73:54:a6:5d:dc:21:3a:87:be:64:5c:ce:ff:35:fe:
                    bb:aa:c6:0f:59:87:7b:99:c6:72:09:4a:1f:4a:0c:
                    46:bc:b2:2e:37:92:3b:38:7e:66:c3:3b:8b:c1:aa:
                    99:7d:c3:a5:85:9f:96:47:90:44:7a:9f:1d:5e:af:
                    f5:9d:7e:1a:34:44:a0:ec:ca:20:f0:78:ee:bc:53:
                    0d:29:b3:31:c8:3d:9e:50:c5:ef:d4:98:99:e4:fc:
                    6c:19:7d:b0:87:cd:7d:2d:28:78:03:8f:50:6f:57:
                    91:b5:0a:64:90:92:28:aa:90:5c:6e:a4:ca:fc:cb:
                    d6:01:0c:2c:73:3a:8e:90:29:07:57:a2:62:7c:84:
                    03:77:c4:da:cd:1a:66:76:c4:85:39:16:ed:3f:5b:
                    60:dc:c4:bc:85:ad:cf:7d:69:39:7d:f1:65:cc:43:
                    65:20:70:65:73:6a:a6:39:63:11:86:e8:c4:29:5b:
                    89:4e:d8:f8:dc:9c:e4:86:90:9c:3b:09:f7:93:68:
                    7a:bd:61:3b:8e:d2:34:e9:f3:0f:19:2a:2e:c9:15:
                    3a:62:53:5c:d7:b4:c6:a6:62:45:76:65:fc:92:3f:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D4:08:0F:29:6B:EE:25:1A:8A:9E:98:9F:66:8A:23:3B:71:E5:A2
            X509v3 Authority Key Identifier:
                keyid:55:1C:8D:69:47:82:95:3B:26:46:4A:A2:E9:60:89:A4:34:D8:23:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/551C8D694782953B26464AA2E96089A434D823FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/551C8D694782953B26464AA2E96089A434D823FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/323830343a336139303a3a2f33322d3336203d3e20323636303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:9a:d3:3a:db:9f:dc:69:d3:95:60:f7:ac:c3:d9:d0:0f:
         db:de:c6:3b:16:d1:86:23:ca:4d:1d:7b:8b:01:e6:65:7d:36:
         27:e0:4d:5f:f1:31:0f:4a:8f:38:3a:1a:a0:37:da:09:08:5d:
         30:56:13:16:7d:e8:1c:87:95:81:82:d3:ad:4d:33:b7:fb:26:
         cb:38:02:1e:f5:87:90:aa:0f:e2:9d:75:c0:19:2e:21:6c:3f:
         2e:ca:25:21:9b:50:44:a8:03:93:85:9b:20:3c:4f:cd:1c:a7:
         2a:8e:2c:46:44:41:a6:40:30:dc:f1:b4:bc:a4:95:04:45:f4:
         57:5d:64:1d:3c:61:fe:af:b2:66:7c:7b:09:9c:22:93:c8:2a:
         93:26:00:a2:54:14:42:f2:a0:95:ce:3c:88:9d:79:9f:8d:13:
         e8:5c:2f:d9:b1:57:b7:66:a0:e4:9b:0a:ff:5e:cd:4f:00:19:
         3a:96:ec:de:6d:3b:24:62:24:46:84:9d:5a:42:ce:3b:8b:cf:
         58:44:3a:36:e8:49:45:de:1d:47:e6:e6:a3:3e:98:e4:a8:b2:
         62:ef:c2:3d:b7:da:92:98:cc:b7:73:0d:1c:fa:3d:35:bf:3f:
         f5:91:8f:98:7f:82:63:d0:d1:f5:fd:5b:0e:30:1a:ef:f3:7e:
         8a:be:dd:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO3TXRTFeVNUSKAIdtyTGon55ZX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUxQzhENjk0NzgyOTUzQjI2NDY0QUEyRTk2MDg5QTQz
NEQ4MjNGQzAeFw0yNDAyMjMxOTI5MDhaFw0yNTAyMjExOTM0MDhaMDMxMTAvBgNV
BAMTKDlFRDQwODBGMjk2QkVFMjUxQThBOUU5ODlGNjY4QTIzM0I3MUU1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZqsbqR/o6V//FWWrbcFpLinDY
sB87VOOlDBIjKHNUpl3cITqHvmRczv81/ruqxg9Zh3uZxnIJSh9KDEa8si43kjs4
fmbDO4vBqpl9w6WFn5ZHkER6nx1er/Wdfho0RKDsyiDweO68Uw0pszHIPZ5Qxe/U
mJnk/GwZfbCHzX0tKHgDj1BvV5G1CmSQkiiqkFxupMr8y9YBDCxzOo6QKQdXomJ8
hAN3xNrNGmZ2xIU5Fu0/W2DcxLyFrc99aTl98WXMQ2UgcGVzaqY5YxGG6MQpW4lO
2PjcnOSGkJw7CfeTaHq9YTuO0jTp8w8ZKi7JFTpiU1zXtMamYkV2ZfySPwm7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUntQIDylr7iUaip6Yn2aKIztx5aIwHwYDVR0j
BBgwFoAUVRyNaUeClTsmRkqi6WCJpDTYI/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEx0R2g3dVpRcHFOZm1Rdlc5QnV6RjJGRFdIcUFrSzQ0UVlFUTVQUEJK
cGUvMC81NTFDOEQ2OTQ3ODI5NTNCMjY0NjRBQTJFOTYwODlBNDM0RDgyM0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1MUM4RDY5NDc4Mjk1M0Iy
NjQ2NEFBMkU5NjA4OUE0MzREODIzRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMdEdoN3VaUXBxTmZtUXZXOUJ1ekYyRkRXSHFBa0s0NFFZRVE1UFBCSnBlLzAv
MzIzODMwMzQzYTMzNjEzOTMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM2
MzAzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ6kDANBgkqhkiG9w0BAQsFAAOCAQEAQqWa0zrb
n9xp05Vg96zD2dAP297GOxbRhiPKTR17iwHmZX02J+BNX/ExD0qPODoaoDfaCQhd
MFYTFn3oHIeVgYLTrU0zt/smyzgCHvWHkKoP4p11wBkuIWw/LsolIZtQRKgDk4Wb
IDxPzRynKo4sRkRBpkAw3PG0vKSVBEX0V11kHTxh/q+yZnx7CZwik8gqkyYAolQU
QvKglc48iJ15n40T6Fwv2bFXt2ag5JsK/17NTwAZOpbs3m07JGIkRoSdWkLOO4vP
WEQ6NuhJRd4dR+bmoz6Y5KiyYu/CPbfakpjMt3MNHPo9Nb8/9ZGPmH+CY9DR9f1b
DjAa7/N+ir7d6A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org