Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/323830343a3132383a3a2f33322d3334203d3e203238363334.roa
File:                     323830343a3132383a3a2f33322d3334203d3e203238363334.roa (raw, json)
Hash identifier:          mlcIjFNB+P/USHiXM75/cLyZUvMiETBMAK7LrK6nxP0=
Subject key identifier:   8E:15:37:16:FB:FA:10:8B:53:52:C0:9A:36:41:48:D8:BE:0B:82:EE
Certificate issuer:       /CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Certificate serial:       3B53FA2594C979018915F39762753C4D3E7BEB52
Authority key identifier: 2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/323830343a3132383a3a2f33322d3334203d3e203238363334.roa
Signing time:             Thu 09 Feb 2023 20:00:00 +0000
ROA not before:           Thu 09 Feb 2023 19:55:00 +0000
ROA not after:            Thu 08 Feb 2024 20:00:00 +0000
asID:                     28634
IP address blocks:        2804:128::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:53:fa:25:94:c9:79:01:89:15:f3:97:62:75:3c:4d:3e:7b:eb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Validity
            Not Before: Feb  9 19:55:00 2023 GMT
            Not After : Feb  8 20:00:00 2024 GMT
        Subject: CN=8E153716FBFA108B5352C09A364148D8BE0B82EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:4d:8c:10:e3:f5:06:67:05:76:a3:c2:d4:
                    52:a2:ed:8e:ba:f4:a9:ab:c0:f0:4e:55:79:57:fd:
                    d6:2d:2d:f4:4a:1b:69:0e:97:46:dd:12:60:49:e2:
                    3f:39:a5:3b:72:a5:e4:5f:f0:27:d3:34:b3:02:6b:
                    3d:ce:d3:af:b1:22:ec:05:c4:06:e7:d0:d6:eb:7f:
                    c4:e6:f2:a0:30:f8:e6:e1:07:97:b9:96:95:c1:b2:
                    f9:78:40:a4:fb:3f:ea:3c:a6:93:de:da:c7:14:23:
                    a8:6f:a4:0f:24:25:5a:01:a1:24:8c:39:f7:eb:99:
                    eb:a8:d0:93:c7:07:c0:2d:c2:d5:35:07:90:cc:70:
                    fb:f8:af:88:1a:b4:03:de:ef:95:2e:f2:78:ac:e7:
                    32:b9:08:14:1e:2c:cb:4c:96:a3:fe:30:8f:26:25:
                    20:3b:ea:ac:f5:e7:52:c9:a2:42:ac:67:d4:39:d5:
                    04:47:71:b8:13:1d:d5:08:e1:02:f0:cc:89:e3:5c:
                    89:fb:bb:46:5d:64:ee:58:18:81:9d:47:8c:3a:1f:
                    b0:c2:8d:d0:6d:c8:0e:c6:e9:a4:8f:e9:bf:bd:23:
                    f5:d0:cc:a6:e7:49:3d:56:3e:23:a5:7c:b7:2f:dc:
                    3d:4a:42:11:43:7d:68:71:2f:c3:68:b8:ec:70:d3:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:15:37:16:FB:FA:10:8B:53:52:C0:9A:36:41:48:D8:BE:0B:82:EE
            X509v3 Authority Key Identifier:
                keyid:2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/323830343a3132383a3a2f33322d3334203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:128::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:ae:c6:db:b5:47:db:90:d7:7b:c7:c4:d5:8c:3f:ec:1e:26:
         e6:ea:26:c6:b1:19:2b:8b:f5:71:d9:46:72:76:f6:0f:f6:75:
         67:01:83:55:ec:28:9f:89:36:c7:b9:1d:f9:ec:9c:0a:bc:4c:
         87:49:59:b8:f5:05:b0:4f:aa:61:59:c9:b2:3b:7a:54:3d:85:
         2b:4f:ba:a8:df:67:55:b0:da:5e:41:2c:83:5b:16:77:2a:21:
         5d:62:37:ce:6b:4c:1c:5c:2e:87:1d:c6:cd:16:74:c6:62:1f:
         b6:06:a9:a5:c9:05:72:f3:00:4c:7d:5b:72:e4:e0:92:8f:65:
         7c:93:81:d1:3f:36:60:58:28:b1:4b:bd:80:8a:cd:bd:27:20:
         ca:a7:34:22:6b:06:24:0e:5d:c7:af:b7:d7:57:91:06:22:ef:
         ea:d5:31:19:62:7d:29:77:75:bf:b6:2f:75:f7:d3:72:2c:60:
         cd:c6:32:9e:d3:43:31:e2:f5:2f:16:27:5d:bb:01:62:24:85:
         28:a5:6c:5f:a3:5a:13:1e:05:00:73:07:32:c7:62:7c:24:e2:
         18:ec:eb:5c:9b:38:1d:6c:1a:e1:f9:df:77:ae:e2:5c:93:1a:
         da:e6:78:b7:7e:78:8c:13:ca:80:69:94:ba:d2:5e:d4:f5:eb:
         36:c5:43:86
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUO1P6JZTJeQGJFfOXYnU8TT5761IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzODEyNERBNDI1NUZFMzJCNzBCOTExQzdDMEFENDI5
MjFDRkNBQjAeFw0yMzAyMDkxOTU1MDBaFw0yNDAyMDgyMDAwMDBaMDMxMTAvBgNV
BAMTKDhFMTUzNzE2RkJGQTEwOEI1MzUyQzA5QTM2NDE0OEQ4QkUwQjgyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHU2MEOP1BmcFdqPC1FKi7Y66
9KmrwPBOVXlX/dYtLfRKG2kOl0bdEmBJ4j85pTtypeRf8CfTNLMCaz3O06+xIuwF
xAbn0Nbrf8Tm8qAw+ObhB5e5lpXBsvl4QKT7P+o8ppPe2scUI6hvpA8kJVoBoSSM
Offrmeuo0JPHB8AtwtU1B5DMcPv4r4gatAPe75Uu8nis5zK5CBQeLMtMlqP+MI8m
JSA76qz151LJokKsZ9Q51QRHcbgTHdUI4QLwzInjXIn7u0ZdZO5YGIGdR4w6H7DC
jdBtyA7G6aSP6b+9I/XQzKbnST1WPiOlfLcv3D1KQhFDfWhxL8NouOxw07QNAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUjhU3Fvv6EItTUsCaNkFI2L4Lgu4wHwYDVR0j
BBgwFoAUKjgSTaQlX+MrcLkRx8CtQpIc/KswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRktRd1ZvQUR5RVA1S045NmZoemlxTkhBWlJYVGtEQnBBWTJXcWNIaE1a
NWcvMC8yQTM4MTI0REE0MjU1RkUzMkI3MEI5MTFDN0MwQUQ0MjkyMUNGQ0FCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJBMzgxMjREQTQyNTVGRTMy
QjcwQjkxMUM3QzBBRDQyOTIxQ0ZDQUIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZLUXdWb0FEeUVQNUtOOTZmaHppcU5IQVpSWFRrREJwQVkyV3FjSGhNWjVnLzAv
MzIzODMwMzQzYTMxMzIzODNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzgzNjMz
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAEoMA0GCSqGSIb3DQEBCwUAA4IBAQCTrsbbtUfbkNd7
x8TVjD/sHibm6ibGsRkri/Vx2UZydvYP9nVnAYNV7CifiTbHuR357JwKvEyHSVm4
9QWwT6phWcmyO3pUPYUrT7qo32dVsNpeQSyDWxZ3KiFdYjfOa0wcXC6HHcbNFnTG
Yh+2BqmlyQVy8wBMfVty5OCSj2V8k4HRPzZgWCixS72Ais29JyDKpzQiawYkDl3H
r7fXV5EGIu/q1TEZYn0pd3W/ti9199NyLGDNxjKe00Mx4vUvFidduwFiJIUopWxf
o1oTHgUAcwcyx2J8JOIY7OtcmzgdbBrh+d93ruJckxra5ni3fniME8qAaZS60l7U
9es2xUOG
-----END CERTIFICATE-----