Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/323830343a323161303a3a2f33322d3334203d3e20323634353635.roa
File:                     323830343a323161303a3a2f33322d3334203d3e20323634353635.roa (raw, json)
Hash identifier:          4saHyS18Cxl13QqDhO0vPwzBGm1EAr4Sd6XtEulwMSE=
Subject key identifier:   95:78:99:FB:58:26:C7:1A:48:6A:56:CB:FF:33:7D:80:B2:2F:98:84
Certificate issuer:       /CN=659E72DC3BF41FD2ADAACE89599EBA94B9751914
Certificate serial:       480C5EA60653ED601FA7159AB6A5D1CEA7F1C596
Authority key identifier: 65:9E:72:DC:3B:F4:1F:D2:AD:AA:CE:89:59:9E:BA:94:B9:75:19:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/659E72DC3BF41FD2ADAACE89599EBA94B9751914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/323830343a323161303a3a2f33322d3334203d3e20323634353635.roa
Signing time:             Thu 06 Jul 2023 14:58:33 +0000
ROA not before:           Thu 06 Jul 2023 14:53:33 +0000
ROA not after:            Thu 04 Jul 2024 14:58:33 +0000
asID:                     264565
IP address blocks:        2804:21a0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0c:5e:a6:06:53:ed:60:1f:a7:15:9a:b6:a5:d1:ce:a7:f1:c5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E72DC3BF41FD2ADAACE89599EBA94B9751914
        Validity
            Not Before: Jul  6 14:53:33 2023 GMT
            Not After : Jul  4 14:58:33 2024 GMT
        Subject: CN=957899FB5826C71A486A56CBFF337D80B22F9884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:d7:08:5a:d8:ca:83:1e:be:a3:01:e7:2f:
                    e6:e1:1d:7b:d1:bf:ce:e2:d9:17:16:3c:d4:41:a0:
                    ab:80:d1:93:a0:42:69:a4:ac:77:8b:ec:34:49:29:
                    5c:a0:04:2f:54:f1:8f:50:f5:83:61:5b:87:9e:47:
                    e0:f1:9a:09:7e:f5:78:22:3f:6d:64:7f:e2:e2:f5:
                    63:a3:d3:99:e5:fe:67:e7:0d:3e:b7:6a:1c:d8:dd:
                    83:c9:f7:83:10:c8:a6:4a:d1:f3:fb:8f:9a:12:3f:
                    30:82:6c:39:38:f7:f8:4e:dd:7e:85:88:8b:f9:43:
                    c3:bc:7b:b9:1b:c9:b5:ab:88:e5:c2:0c:a1:07:12:
                    37:96:bc:55:4d:dc:60:b4:79:ef:05:9e:d8:dd:57:
                    b3:c3:08:25:58:12:39:e9:c6:00:0c:7f:cd:8b:af:
                    bc:f1:0b:15:29:f9:f3:9c:a4:5b:44:7c:03:2d:c1:
                    07:cb:bb:72:69:88:72:5d:60:01:97:85:14:3b:5c:
                    da:1e:4e:7e:f6:53:2d:f6:b5:a7:31:78:d2:e5:98:
                    ea:01:5f:83:95:2b:a4:f0:c5:fe:00:c4:53:21:3b:
                    d6:b1:28:d7:1d:04:25:88:da:9e:53:41:b0:f5:1d:
                    53:67:60:0b:fb:eb:60:5a:34:03:fa:38:db:bb:d1:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:78:99:FB:58:26:C7:1A:48:6A:56:CB:FF:33:7D:80:B2:2F:98:84
            X509v3 Authority Key Identifier:
                keyid:65:9E:72:DC:3B:F4:1F:D2:AD:AA:CE:89:59:9E:BA:94:B9:75:19:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/659E72DC3BF41FD2ADAACE89599EBA94B9751914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/659E72DC3BF41FD2ADAACE89599EBA94B9751914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/323830343a323161303a3a2f33322d3334203d3e20323634353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:0e:28:f5:57:6b:d3:50:0b:22:47:2b:6f:d4:d4:0b:1b:
         f1:5d:b4:20:26:73:fe:3d:50:9e:e0:ab:5e:65:c3:42:59:b2:
         73:8d:58:9e:a6:5f:be:b7:47:70:08:37:3b:c4:8d:fd:67:29:
         c4:da:28:98:51:f9:3c:60:d1:fc:84:9f:27:8b:a7:c0:48:be:
         87:09:57:69:38:36:06:b6:a2:b7:49:93:4d:9a:5e:49:bd:06:
         49:e9:64:0c:d6:14:cf:af:5b:d5:df:80:b6:fe:9a:28:8a:83:
         9a:f4:80:0e:68:e4:57:82:39:b1:9e:77:66:18:0e:0d:a1:aa:
         13:bf:15:6b:ba:c7:2e:6b:c8:1f:15:25:71:5b:48:d8:00:21:
         3f:83:59:3b:ce:b9:8a:2a:0e:d1:f5:1e:4a:9d:bf:87:ad:16:
         44:e9:a5:69:ea:29:26:f7:46:09:96:34:a9:72:5a:49:c4:aa:
         72:94:7b:42:77:c5:61:85:8b:fb:7a:44:77:71:db:51:9a:e0:
         b5:64:2d:36:cb:7e:8b:0f:40:73:14:bf:5e:db:97:4f:3b:ac:
         3a:d7:b4:af:ae:31:24:79:30:70:e2:04:a8:d1:5c:2b:5f:70:
         e3:e1:dd:5f:93:80:b9:30:e0:e1:48:34:38:fd:79:75:d5:3f:
         45:41:fd:59
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSAxepgZT7WAfpxWatqXRzqfxxZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU5RTcyREMzQkY0MUZEMkFEQUFDRTg5NTk5RUJBOTRC
OTc1MTkxNDAeFw0yMzA3MDYxNDUzMzNaFw0yNDA3MDQxNDU4MzNaMDMxMTAvBgNV
BAMTKDk1Nzg5OUZCNTgyNkM3MUE0ODZBNTZDQkZGMzM3RDgwQjIyRjk4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKi9cIWtjKgx6+owHnL+bhHXvR
v87i2RcWPNRBoKuA0ZOgQmmkrHeL7DRJKVygBC9U8Y9Q9YNhW4eeR+Dxmgl+9Xgi
P21kf+Li9WOj05nl/mfnDT63ahzY3YPJ94MQyKZK0fP7j5oSPzCCbDk49/hO3X6F
iIv5Q8O8e7kbybWriOXCDKEHEjeWvFVN3GC0ee8FntjdV7PDCCVYEjnpxgAMf82L
r7zxCxUp+fOcpFtEfAMtwQfLu3JpiHJdYAGXhRQ7XNoeTn72Uy32tacxeNLlmOoB
X4OVK6Twxf4AxFMhO9axKNcdBCWI2p5TQbD1HVNnYAv762BaNAP6ONu70fqVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlXiZ+1gmxxpIalbL/zN9gLIvmIQwHwYDVR0j
BBgwFoAUZZ5y3Dv0H9Ktqs6JWZ66lLl1GRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE51QVM2NTdkNEJ4cExCZGlEOGVUS3FKc3lXTmJnNmI0aWdmZE1ydXNx
cXIvMC82NTlFNzJEQzNCRjQxRkQyQURBQUNFODk1OTlFQkE5NEI5NzUxOTE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1OUU3MkRDM0JGNDFGRDJB
REFBQ0U4OTU5OUVCQTk0Qjk3NTE5MTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzROdUFTNjU3ZDRCeHBMQmRpRDhlVEtxSnN5V05iZzZiNGlnZmRNcnVzcXFyLzAv
MzIzODMwMzQzYTMyMzE2MTMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM0
MzUzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQhoDANBgkqhkiG9w0BAQsFAAOCAQEAPXwOKPVX
a9NQCyJHK2/U1Asb8V20ICZz/j1QnuCrXmXDQlmyc41YnqZfvrdHcAg3O8SN/Wcp
xNoomFH5PGDR/ISfJ4unwEi+hwlXaTg2Brait0mTTZpeSb0GSelkDNYUz69b1d+A
tv6aKIqDmvSADmjkV4I5sZ53ZhgODaGqE78Va7rHLmvIHxUlcVtI2AAhP4NZO865
iioO0fUeSp2/h60WROmlaeopJvdGCZY0qXJaScSqcpR7QnfFYYWL+3pEd3HbUZrg
tWQtNst+iw9AcxS/XtuXTzusOte0r64xJHkwcOIEqNFcK19w4+HdX5OAuTDg4Ug0
OP15ddU/RUH9WQ==
-----END CERTIFICATE-----