Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383830303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a383830303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          oU8B//Tu4zgH96q2Af61VD/QqSXcLjn5VceUGJhOBh4=
Subject key identifier:   78:B9:89:CC:05:29:7D:B3:40:97:D3:19:47:37:C9:76:DE:66:7D:DA
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       02FC36BE906285988BAC65991ACDE54C59495295
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383830303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:38 +0000
ROA not before:           Sat 24 Sep 2022 00:41:38 +0000
ROA not after:            Sat 23 Sep 2023 00:46:38 +0000
asID:                     264242
IP address blocks:        2804:24cc:8800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fc:36:be:90:62:85:98:8b:ac:65:99:1a:cd:e5:4c:59:49:52:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:38 2022 GMT
            Not After : Sep 23 00:46:38 2023 GMT
        Subject: CN=78B989CC05297DB34097D3194737C976DE667DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:0e:f9:5b:7e:83:f7:00:75:c6:39:7d:1b:
                    4c:c0:b5:90:f6:62:97:53:21:47:94:94:4d:d1:b7:
                    be:7d:37:a9:7a:f7:7b:02:a8:a9:93:cf:f6:e2:0a:
                    0c:4d:3c:88:84:be:56:47:3f:b0:55:d5:c7:53:26:
                    ed:df:b6:2f:7e:36:db:e7:b5:0c:14:dd:d4:19:de:
                    c5:8d:94:16:c4:6d:1c:4d:bd:19:91:2b:ac:b6:33:
                    90:99:be:81:0b:f7:d4:86:d1:d4:4a:77:4c:54:06:
                    67:37:78:82:7d:74:12:b8:ec:7e:51:92:90:69:13:
                    1a:15:7c:09:24:9a:ed:e0:36:2d:50:fb:94:33:8e:
                    91:4c:be:f6:18:0a:5f:cb:d0:4c:fa:2c:3d:79:14:
                    74:cf:4c:2f:17:97:ea:3a:00:32:7a:2b:8b:d9:e4:
                    59:d4:41:96:14:03:14:7b:bc:ff:20:69:ae:2f:de:
                    0e:6e:70:ff:95:9a:5a:1c:d2:d2:95:4e:d8:10:e3:
                    57:f3:e4:95:5f:ea:eb:48:e6:ed:89:c1:d5:52:27:
                    02:71:e9:ba:fc:68:66:15:2c:71:65:57:ad:d0:31:
                    d2:5e:90:d1:e2:8f:f8:21:53:ee:ba:09:5b:1c:3e:
                    17:46:89:1b:b1:97:58:70:0f:e9:e5:28:ac:f4:79:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B9:89:CC:05:29:7D:B3:40:97:D3:19:47:37:C9:76:DE:66:7D:DA
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383830303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:b3:c3:8f:5a:f4:5d:1f:b4:e6:b9:86:c6:c6:28:8e:91:cf:
         d4:8a:c0:9b:e9:97:da:7d:e1:b2:88:e5:77:43:65:03:77:1d:
         9f:10:04:05:e6:6b:31:fd:12:7a:c6:bd:88:75:5e:c7:70:c8:
         b7:0d:7b:70:58:98:91:d7:91:08:c7:39:86:96:c3:fd:4b:46:
         88:4f:de:4b:0f:81:e9:30:76:c7:61:fa:67:dc:00:d9:16:c9:
         c2:4e:15:ab:22:90:fa:12:f8:59:73:f1:8a:fb:fe:0a:d4:b7:
         91:83:99:d8:c9:72:f2:05:6c:f7:0d:42:d2:7f:b7:8e:40:80:
         1d:e4:85:49:73:2b:53:64:53:54:2a:1e:ab:11:e9:e7:2a:09:
         a2:2c:b7:bb:ed:c1:9e:62:bb:7e:d3:e6:b5:0b:d5:72:6c:c6:
         0e:57:08:32:44:af:b3:d5:02:99:b9:cc:18:d4:c3:6c:64:fb:
         41:f8:50:0c:72:6d:c2:86:26:96:09:4b:f5:e8:52:47:68:0d:
         27:5b:8f:a6:66:e2:eb:05:2a:9b:2d:7a:be:68:3a:c7:a5:85:
         26:73:43:5b:d5:12:19:7e:d3:d3:48:a7:cb:46:04:c3:aa:dc:
         22:12:82:24:35:6c:80:ba:05:ca:67:6c:91:08:3d:97:a6:9f:
         25:42:fa:81
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUAvw2vpBihZiLrGWZGs3lTFlJUpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkREQzcwMzNCNDVEOTc1NDcwNkQxNjJEN0ZCMkM4QkVF
MUEyOTM4NzAeFw0yMjA5MjQwMDQxMzhaFw0yMzA5MjMwMDQ2MzhaMDMxMTAvBgNV
BAMTKDc4Qjk4OUNDMDUyOTdEQjM0MDk3RDMxOTQ3MzdDOTc2REU2NjdEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vQ75W36D9wB1xjl9G0zAtZD2
YpdTIUeUlE3Rt759N6l693sCqKmTz/biCgxNPIiEvlZHP7BV1cdTJu3fti9+Ntvn
tQwU3dQZ3sWNlBbEbRxNvRmRK6y2M5CZvoEL99SG0dRKd0xUBmc3eIJ9dBK47H5R
kpBpExoVfAkkmu3gNi1Q+5QzjpFMvvYYCl/L0Ez6LD15FHTPTC8Xl+o6ADJ6K4vZ
5FnUQZYUAxR7vP8gaa4v3g5ucP+Vmloc0tKVTtgQ41fz5JVf6utI5u2JwdVSJwJx
6br8aGYVLHFlV63QMdJekNHij/ghU+66CVscPhdGiRuxl1hwD+nlKKz0eZ53AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUeLmJzAUpfbNAl9MZRzfJdt5mfdowHwYDVR0j
BBgwFoAULdxwM7Rdl1RwbRYtf7LIvuGik4cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KbzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6
LzEvMkREQzcwMzNCNDVEOTc1NDcwNkQxNjJEN0ZCMkM4QkVFMUEyOTM4Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8yRERDNzAzM0I0NUQ5NzU0NzA2
RDE2MkQ3RkIyQzhCRUUxQTI5Mzg3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
bzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6LzEvMzIz
ODMwMzQzYTMyMzQ2MzYzM2EzODM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2Uy
MDMyMzYzNDMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJMyIMA0GCSqGSIb3DQEBCwUAA4IB
AQDKs8OPWvRdH7TmuYbGxiiOkc/UisCb6ZfafeGyiOV3Q2UDdx2fEAQF5msx/RJ6
xr2IdV7HcMi3DXtwWJiR15EIxzmGlsP9S0aIT95LD4HpMHbHYfpn3ADZFsnCThWr
IpD6EvhZc/GK+/4K1LeRg5nYyXLyBWz3DULSf7eOQIAd5IVJcytTZFNUKh6rEenn
KgmiLLe77cGeYrt+0+a1C9VybMYOVwgyRK+z1QKZucwY1MNsZPtB+FAMcm3ChiaW
CUv16FJHaA0nW4+mZuLrBSqbLXq+aDrHpYUmc0Nb1RIZftPTSKfLRgTDqtwiEoIk
NWyAugXKZ2yRCD2Xpp8lQvqB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org