Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393030303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a393030303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          +0cU0n0634Z1Gofp658qOabitVf6h9B4/xKdmGZA+98=
Subject key identifier:   48:EC:18:C0:72:9E:0E:E9:A9:77:99:40:68:FB:AC:83:A6:2E:8A:64
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       5F7801B0E95033CC89DDFC18495801ACD40DFBC5
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393030303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:39 +0000
ROA not before:           Sat 24 Sep 2022 00:41:39 +0000
ROA not after:            Sat 23 Sep 2023 00:46:39 +0000
asID:                     264242
IP address blocks:        2804:24cc:9000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:78:01:b0:e9:50:33:cc:89:dd:fc:18:49:58:01:ac:d4:0d:fb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:39 2022 GMT
            Not After : Sep 23 00:46:39 2023 GMT
        Subject: CN=48EC18C0729E0EE9A977994068FBAC83A62E8A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:35:2f:88:8e:be:8f:cf:80:d3:b8:26:05:
                    70:83:ae:65:13:52:1c:a6:a4:2a:9c:10:1d:82:6e:
                    ef:42:45:79:ac:62:69:34:ab:d6:1a:b4:3a:c4:e3:
                    85:41:b6:a7:ae:05:24:c2:3d:fa:ab:91:ad:c1:9c:
                    9e:22:86:7d:19:ea:18:75:23:00:14:de:3d:17:c2:
                    69:a9:2e:d2:d6:70:1e:82:61:85:dd:6c:24:63:d0:
                    8c:e3:7a:72:c7:c8:6a:00:7c:36:9b:cf:2a:47:76:
                    cd:08:83:00:fa:b0:b8:b3:a8:39:70:9c:f8:4e:e0:
                    da:fd:27:b5:87:47:f8:88:4f:09:e5:d8:d9:1d:5c:
                    93:54:fc:25:98:2b:87:3a:94:f7:0e:c0:b1:30:01:
                    05:43:af:9e:7b:14:4a:ae:18:e7:3a:24:5b:4d:5a:
                    6d:8c:55:25:7a:89:86:e8:7c:90:63:17:96:01:93:
                    3f:07:25:47:59:55:85:78:62:9b:b9:d7:e8:cb:9a:
                    83:3b:42:9e:9b:aa:fe:4c:eb:fd:c3:08:65:af:30:
                    54:08:4c:a9:56:f6:b3:f9:17:e5:07:0d:ce:ff:3d:
                    02:00:3f:9d:44:3a:99:ba:11:50:fe:c3:db:f3:30:
                    0d:de:6a:86:9d:2c:dd:98:58:56:8e:61:ae:36:9b:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:18:C0:72:9E:0E:E9:A9:77:99:40:68:FB:AC:83:A6:2E:8A:64
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393030303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:7b:fa:fb:47:66:e9:61:80:e4:3c:75:51:57:75:f9:f9:07:
         0f:8c:03:26:95:8c:49:13:b2:32:c1:b0:33:b2:47:6d:2b:6c:
         8b:78:e6:62:e9:5e:b7:ca:ee:4b:ab:46:0c:9d:98:51:a5:86:
         66:75:0a:2b:13:12:68:04:93:8b:a6:5a:cc:18:1a:03:36:c7:
         3f:60:78:22:c4:eb:0c:51:06:6f:c8:cb:29:e5:ac:9d:5a:65:
         d6:4c:00:80:7a:80:42:bf:e5:67:6b:7f:e3:ba:e1:7c:aa:52:
         60:ea:1a:aa:c6:61:1d:93:d5:8e:86:1b:a3:a2:2f:47:91:6d:
         0f:2f:cd:a7:ae:77:2a:28:7c:59:23:64:c1:ae:67:5e:cf:0c:
         44:24:c6:51:f9:29:65:7c:61:e2:a8:d6:de:21:82:51:2f:56:
         2c:b8:35:ef:5e:88:19:29:9a:e0:c5:be:b1:0d:ef:38:00:10:
         f0:17:9f:31:d2:22:4c:af:9a:62:97:8d:9f:e6:5f:ff:76:55:
         62:3d:07:7c:b5:91:4f:af:6e:a7:5e:bc:c6:bc:41:b0:08:e6:
         8e:40:d5:60:0c:b1:85:2f:3f:8d:c6:e8:71:23:5a:c2:7b:f9:
         58:c4:40:20:60:56:c6:4b:82:94:90:af:58:c7:7a:bf:18:03:
         20:10:1b:18
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUX3gBsOlQM8yJ3fwYSVgBrNQN+8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkREQzcwMzNCNDVEOTc1NDcwNkQxNjJEN0ZCMkM4QkVF
MUEyOTM4NzAeFw0yMjA5MjQwMDQxMzlaFw0yMzA5MjMwMDQ2MzlaMDMxMTAvBgNV
BAMTKDQ4RUMxOEMwNzI5RTBFRTlBOTc3OTk0MDY4RkJBQzgzQTYyRThBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIDUviI6+j8+A07gmBXCDrmUT
UhympCqcEB2Cbu9CRXmsYmk0q9YatDrE44VBtqeuBSTCPfqrka3BnJ4ihn0Z6hh1
IwAU3j0XwmmpLtLWcB6CYYXdbCRj0IzjenLHyGoAfDabzypHds0IgwD6sLizqDlw
nPhO4Nr9J7WHR/iITwnl2NkdXJNU/CWYK4c6lPcOwLEwAQVDr557FEquGOc6JFtN
Wm2MVSV6iYbofJBjF5YBkz8HJUdZVYV4Ypu51+jLmoM7Qp6bqv5M6/3DCGWvMFQI
TKlW9rP5F+UHDc7/PQIAP51EOpm6EVD+w9vzMA3eaoadLN2YWFaOYa42m1XTAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUSOwYwHKeDumpd5lAaPusg6YuimQwHwYDVR0j
BBgwFoAULdxwM7Rdl1RwbRYtf7LIvuGik4cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KbzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6
LzEvMkREQzcwMzNCNDVEOTc1NDcwNkQxNjJEN0ZCMkM4QkVFMUEyOTM4Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8yRERDNzAzM0I0NUQ5NzU0NzA2
RDE2MkQ3RkIyQzhCRUUxQTI5Mzg3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
bzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6LzEvMzIz
ODMwMzQzYTMyMzQ2MzYzM2EzOTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2Uy
MDMyMzYzNDMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJMyQMA0GCSqGSIb3DQEBCwUAA4IB
AQC2e/r7R2bpYYDkPHVRV3X5+QcPjAMmlYxJE7IywbAzskdtK2yLeOZi6V63yu5L
q0YMnZhRpYZmdQorExJoBJOLplrMGBoDNsc/YHgixOsMUQZvyMsp5aydWmXWTACA
eoBCv+Vna3/juuF8qlJg6hqqxmEdk9WOhhujoi9HkW0PL82nrncqKHxZI2TBrmde
zwxEJMZR+SllfGHiqNbeIYJRL1YsuDXvXogZKZrgxb6xDe84ABDwF58x0iJMr5pi
l42f5l//dlViPQd8tZFPr26nXrzGvEGwCOaOQNVgDLGFLz+NxuhxI1rCe/lYxEAg
YFbGS4KUkK9Yx3q/GAMgEBsY
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org