Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a64303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a64303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          5xF6RPXetZUUC+nERqOD4rMrfkE4n5O+Ou1Y/b0/kUY=
Subject key identifier:   26:2E:26:B0:5A:E9:8A:30:EE:9C:8A:59:02:5D:61:25:91:47:76:47
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       53D25F0CDB35F78E94BF9024E592AC9782295F72
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a64303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:58 +0000
ROA not before:           Tue 20 Dec 2022 15:04:58 +0000
ROA not after:            Tue 19 Dec 2023 15:09:58 +0000
asID:                     262468
IP address blocks:        2804:e94:d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d2:5f:0c:db:35:f7:8e:94:bf:90:24:e5:92:ac:97:82:29:5f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:58 2022 GMT
            Not After : Dec 19 15:09:58 2023 GMT
        Subject: CN=262E26B05AE98A30EE9C8A59025D612591477647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3c:40:67:12:8c:88:8d:18:82:5e:05:cd:15:
                    3c:71:c9:08:8a:6c:58:b0:9b:fe:77:ee:6f:51:21:
                    67:9f:89:0c:06:af:eb:2c:0a:ee:1b:2e:ec:db:12:
                    d7:1a:b6:16:8f:d9:cc:99:ea:30:ae:b9:6b:f6:c6:
                    0a:b3:c7:4a:99:78:81:03:e1:65:de:5e:23:01:90:
                    bc:db:c9:28:7f:65:c0:53:20:21:05:18:7e:e5:57:
                    ef:39:34:a9:8b:fc:6e:a8:5e:8c:69:99:32:df:47:
                    fe:75:df:3a:4c:b1:84:5f:75:ad:5c:17:4c:77:84:
                    b7:b7:2c:88:75:48:cf:9b:ca:28:a2:3d:65:07:45:
                    60:85:6a:5c:f6:bb:cf:bf:09:c8:b1:ad:da:3f:cc:
                    40:78:46:f8:05:5d:59:a1:b9:85:0f:c7:bd:7b:96:
                    6c:f6:1e:0e:ad:f2:91:48:32:29:c6:d7:95:e4:96:
                    6e:44:36:e0:e6:42:c9:8f:af:e7:0b:9e:ec:cc:83:
                    57:6a:9a:09:92:3a:e7:de:08:f3:68:e1:0d:17:42:
                    4b:1f:44:f7:1a:c7:6e:d9:bb:58:c6:44:eb:c0:5a:
                    1b:66:7f:04:cf:e1:3f:bd:e2:5d:fa:1c:f9:cc:f9:
                    85:e0:68:ce:6f:6b:2f:2d:10:90:96:2a:cc:81:3b:
                    28:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:26:B0:5A:E9:8A:30:EE:9C:8A:59:02:5D:61:25:91:47:76:47
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a64303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:95:33:cf:14:31:17:c9:85:85:6a:4b:2d:82:a1:63:44:54:
         90:7a:aa:d3:52:6d:08:f9:f9:24:66:0c:9f:b0:a9:86:70:a3:
         8c:ab:5f:55:4e:c9:24:ab:25:fc:03:38:8b:64:9c:e7:f3:f6:
         52:15:0f:cc:16:f0:7a:8e:a3:b1:1b:cc:63:3e:32:d9:39:70:
         85:18:ba:df:b6:35:8f:68:01:34:d0:0b:44:c0:29:a6:2b:9a:
         cb:9f:d1:88:fe:40:22:21:38:05:0b:96:7d:1a:4f:ac:6b:ff:
         59:21:0f:08:b3:73:c3:a6:ee:72:4f:8c:c2:43:f5:09:1b:0b:
         e9:94:be:a5:e5:1f:96:d5:34:f1:d8:73:ea:7a:2a:36:55:f4:
         52:07:82:84:c9:76:ce:08:2b:84:9c:42:ea:98:05:e7:b2:eb:
         05:b0:bb:72:45:d1:fd:c6:ca:94:ad:d7:cd:c0:ff:ae:5c:f7:
         9d:70:80:0d:a0:d7:27:7c:e9:6f:37:13:84:fb:2f:94:d6:66:
         f8:b9:e7:eb:15:9c:b1:c9:7f:12:16:22:45:55:96:ec:bd:b9:
         b6:3c:52:f5:3e:d9:dc:b8:35:6d:8f:3a:81:8d:ff:28:ae:b6:
         5e:cf:0e:ba:26:d5:df:a9:e0:a6:b7:fb:89:68:c8:7f:88:eb:
         ef:1c:90:dc
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUU9JfDNs1946Uv5Ak5ZKsl4IpX3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMUNEQzQwNUI1Mjg1NTRCMjRENjdFRkIxN0E3RDIw
REE2ODMzMzAeFw0yMjEyMjAxNTA0NThaFw0yMzEyMTkxNTA5NThaMDMxMTAvBgNV
BAMTKDI2MkUyNkIwNUFFOThBMzBFRTlDOEE1OTAyNUQ2MTI1OTE0Nzc2NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPEBnEoyIjRiCXgXNFTxxyQiK
bFiwm/537m9RIWefiQwGr+ssCu4bLuzbEtcathaP2cyZ6jCuuWv2xgqzx0qZeIED
4WXeXiMBkLzbySh/ZcBTICEFGH7lV+85NKmL/G6oXoxpmTLfR/513zpMsYRfda1c
F0x3hLe3LIh1SM+byiiiPWUHRWCFalz2u8+/Ccixrdo/zEB4RvgFXVmhuYUPx717
lmz2Hg6t8pFIMinG15Xklm5ENuDmQsmPr+cLnuzMg1dqmgmSOufeCPNo4Q0XQksf
RPcax27Zu1jGROvAWhtmfwTP4T+94l36HPnM+YXgaM5vay8tEJCWKsyBOyixAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUJi4msFrpijDunIpZAl1hJZFHdkcwHwYDVR0j
BBgwFoAUHtHNxAW1KFVLJNZ++xen0g2mgzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhydEh0cFNnY1ljSmNlY1dNNkM4NFpma0h3TjE0c0Z2c1U3YjNRaTNG
aVcvMC8xRUQxQ0RDNDA1QjUyODU1NEIyNEQ2N0VGQjE3QTdEMjBEQTY4MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFFRDFDREM0MDVCNTI4NTU0
QjI0RDY3RUZCMTdBN0QyMERBNjgzMzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4cnRIdHBTZ2NZY0pjZWNXTTZDODRaZmtId04xNHNGdnNVN2IzUWkzRmlXLzAv
MzIzODMwMzQzYTY1MzkzNDNhNjQzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMy
MzYzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEDpQA0DANBgkqhkiG9w0BAQsFAAOCAQEA
IZUzzxQxF8mFhWpLLYKhY0RUkHqq01JtCPn5JGYMn7CphnCjjKtfVU7JJKsl/AM4
i2Sc5/P2UhUPzBbweo6jsRvMYz4y2TlwhRi637Y1j2gBNNALRMAppiuay5/RiP5A
IiE4BQuWfRpPrGv/WSEPCLNzw6buck+MwkP1CRsL6ZS+peUfltU08dhz6noqNlX0
UgeChMl2zggrhJxC6pgF57LrBbC7ckXR/cbKlK3XzcD/rlz3nXCADaDXJ3zpbzcT
hPsvlNZm+Lnn6xWcscl/EhYiRVWW7L25tjxS9T7Z3Lg1bY86gY3/KK62Xs8OuibV
36ngprf7iWjIf4jr7xyQ3A==
-----END CERTIFICATE-----