Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d3332203d3e20323635393834.roa
File:                     323830343a343064343a3a2f33322d3332203d3e20323635393834.roa (raw, json)
Hash identifier:          v3vZAelYTUkQKFT2L8hlZcSOhBfvsGtvTscCHpvo2Z0=
Subject key identifier:   99:C5:52:CC:47:42:2F:32:BD:0C:EB:A0:74:58:9C:75:67:C0:E2:FC
Certificate issuer:       /CN=8A0675049E75A43515562A7F8B3BEE3E74C4F50C
Certificate serial:       5B41ACBEF1364E71B2932DC7FDCFF0FA42F90E44
Authority key identifier: 8A:06:75:04:9E:75:A4:35:15:56:2A:7F:8B:3B:EE:3E:74:C4:F5:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A0675049E75A43515562A7F8B3BEE3E74C4F50C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d3332203d3e20323635393834.roa
Signing time:             Fri 13 Oct 2023 18:18:48 +0000
ROA not before:           Fri 13 Oct 2023 18:13:48 +0000
ROA not after:            Fri 11 Oct 2024 18:18:48 +0000
asID:                     265984
IP address blocks:        2804:40d4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:41:ac:be:f1:36:4e:71:b2:93:2d:c7:fd:cf:f0:fa:42:f9:0e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A0675049E75A43515562A7F8B3BEE3E74C4F50C
        Validity
            Not Before: Oct 13 18:13:48 2023 GMT
            Not After : Oct 11 18:18:48 2024 GMT
        Subject: CN=99C552CC47422F32BD0CEBA074589C7567C0E2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:49:34:a3:d0:10:96:13:22:93:41:ed:a8:
                    d4:b9:cb:93:17:ec:15:a7:d0:9e:a3:8d:cd:c4:c0:
                    cd:f3:fc:99:5c:c9:81:64:1f:05:35:fd:04:77:24:
                    15:ce:49:a1:e6:4e:a2:4b:ea:ad:e7:2f:ef:ec:b4:
                    b9:9b:88:03:8d:b0:45:36:f4:2a:a0:47:37:f0:4a:
                    f7:d7:f1:85:b5:08:2a:75:22:95:11:04:ba:55:5b:
                    d4:10:2e:39:fb:c5:18:10:4e:b5:53:8b:0e:1d:f0:
                    7c:55:11:50:63:8e:6a:cf:f1:ce:19:67:7b:ec:97:
                    14:e1:ce:20:e0:85:95:19:be:d4:45:9c:f9:4d:63:
                    3e:4b:89:4f:d0:bd:49:b3:08:2b:87:ad:ba:f9:18:
                    4f:6b:ca:ae:30:24:33:fe:03:4d:33:0d:60:ad:7d:
                    de:cf:33:b1:d6:0e:66:38:12:3b:f1:ea:6d:54:cc:
                    05:ea:7f:04:a0:08:35:cc:0d:fb:9d:7d:ba:7c:5b:
                    03:78:7b:92:9c:57:f1:5e:65:b8:87:a9:03:1f:d6:
                    d8:53:3d:32:a5:81:a2:9d:ce:8e:90:8a:84:12:9f:
                    7b:76:08:53:ff:e5:87:a8:36:82:05:4d:2e:6f:fa:
                    00:cd:f7:9c:99:ea:91:8c:54:0f:79:08:c8:42:29:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C5:52:CC:47:42:2F:32:BD:0C:EB:A0:74:58:9C:75:67:C0:E2:FC
            X509v3 Authority Key Identifier:
                keyid:8A:06:75:04:9E:75:A4:35:15:56:2A:7F:8B:3B:EE:3E:74:C4:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/8A0675049E75A43515562A7F8B3BEE3E74C4F50C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A0675049E75A43515562A7F8B3BEE3E74C4F50C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d3332203d3e20323635393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:b9:11:45:94:4e:af:b7:33:67:bf:d1:3b:50:b9:b8:8f:74:
         22:27:45:be:a8:c2:ac:7e:6a:26:96:a4:42:a5:50:62:fc:8f:
         05:3f:e4:08:48:f1:cb:f9:dc:e7:05:44:c9:35:cd:6c:8b:db:
         f3:ad:10:aa:2d:28:aa:10:4b:2b:81:4c:27:e6:58:45:ac:bf:
         98:41:7b:e3:94:11:d6:fe:b2:e0:ec:c9:46:40:65:d3:d7:89:
         ed:b9:04:9d:bc:3c:e4:e3:8c:13:64:20:d3:e9:a7:7d:6a:c6:
         ee:95:bd:3d:b2:20:ee:0c:bc:b1:f1:2e:36:50:82:47:eb:a4:
         82:96:7b:10:85:e6:fa:97:b1:3a:6b:25:51:6b:18:78:94:2c:
         11:99:dc:76:3e:e6:e5:a5:83:98:8c:c6:6a:b4:95:cc:4f:d2:
         66:cd:8f:10:cc:de:b7:fb:ff:e9:cd:73:f4:7e:0c:0b:f6:4c:
         62:a7:30:6f:fb:a9:0a:73:eb:2c:a3:b8:b0:f7:b8:0a:e4:bb:
         c3:5f:14:d7:f4:4c:f9:0b:07:88:bc:3e:46:f6:4e:c8:cf:89:
         09:4e:97:4a:6f:f5:8d:f0:7d:b0:a8:a5:7b:15:5d:c9:da:ce:
         f4:be:a9:4b:76:da:45:6d:99:e1:30:99:7e:49:41:e0:be:a6:
         07:8e:40:1e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW0GsvvE2TnGyky3H/c/w+kL5DkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwNjc1MDQ5RTc1QTQzNTE1NTYyQTdGOEIzQkVFM0U3
NEM0RjUwQzAeFw0yMzEwMTMxODEzNDhaFw0yNDEwMTExODE4NDhaMDMxMTAvBgNV
BAMTKDk5QzU1MkNDNDc0MjJGMzJCRDBDRUJBMDc0NTg5Qzc1NjdDMEUyRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/kk0o9AQlhMik0HtqNS5y5MX
7BWn0J6jjc3EwM3z/JlcyYFkHwU1/QR3JBXOSaHmTqJL6q3nL+/stLmbiAONsEU2
9CqgRzfwSvfX8YW1CCp1IpURBLpVW9QQLjn7xRgQTrVTiw4d8HxVEVBjjmrP8c4Z
Z3vslxThziDghZUZvtRFnPlNYz5LiU/QvUmzCCuHrbr5GE9ryq4wJDP+A00zDWCt
fd7PM7HWDmY4Ejvx6m1UzAXqfwSgCDXMDfudfbp8WwN4e5KcV/FeZbiHqQMf1thT
PTKlgaKdzo6QioQSn3t2CFP/5YeoNoIFTS5v+gDN95yZ6pGMVA95CMhCKYW5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmcVSzEdCLzK9DOugdFicdWfA4vwwHwYDVR0j
BBgwFoAUigZ1BJ51pDUVVip/izvuPnTE9QwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmVKeGFZUXNiS2pUWTVIaHJnR2ZrNmNaelhXM1RkZU5NdU1VaFNBd3Z2
cXgvMC84QTA2NzUwNDlFNzVBNDM1MTU1NjJBN0Y4QjNCRUUzRTc0QzRGNTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBMDY3NTA0OUU3NUE0MzUx
NTU2MkE3RjhCM0JFRTNFNzRDNEY1MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZlSnhhWVFzYktqVFk1SGhyZ0dmazZjWnpYVzNUZGVOTXVNVWhTQXd2dnF4LzAv
MzIzODMwMzQzYTM0MzA2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzkzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARA1DANBgkqhkiG9w0BAQsFAAOCAQEAE7kRRZRO
r7czZ7/RO1C5uI90IidFvqjCrH5qJpakQqVQYvyPBT/kCEjxy/nc5wVEyTXNbIvb
860Qqi0oqhBLK4FMJ+ZYRay/mEF745QR1v6y4OzJRkBl09eJ7bkEnbw85OOME2Qg
0+mnfWrG7pW9PbIg7gy8sfEuNlCCR+ukgpZ7EIXm+pexOmslUWsYeJQsEZncdj7m
5aWDmIzGarSVzE/SZs2PEMzet/v/6c1z9H4MC/ZMYqcwb/upCnPrLKO4sPe4CuS7
w18U1/RM+QsHiLw+RvZOyM+JCU6XSm/1jfB9sKilexVdydrO9L6pS3baRW2Z4TCZ
fklB4L6mB45AHg==
-----END CERTIFICATE-----