Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          TlB62qJndvIbjaCV/F1ccdXi8wg+2A0sr2AGxnua1ec=
Subject key identifier:   8C:53:B0:4E:DB:09:66:84:47:77:FF:BD:A6:7B:2E:D4:88:A1:D6:C2
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       6B50FD1DCDF3F04CE183243E498A3347701352EB
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa
Signing time:             Mon 15 Jan 2024 13:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:55:00 +0000
ROA not after:            Mon 13 Jan 2025 13:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:13::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:50:fd:1d:cd:f3:f0:4c:e1:83:24:3e:49:8a:33:47:70:13:52:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan 15 12:55:00 2024 GMT
            Not After : Jan 13 13:00:00 2025 GMT
        Subject: CN=8C53B04EDB0966844777FFBDA67B2ED488A1D6C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:9d:19:3b:4c:16:16:12:f7:fd:9f:ed:b1:
                    ac:cc:50:7a:ef:d6:ae:15:93:d6:a3:43:8a:b4:03:
                    41:67:ba:01:bf:2c:89:37:ca:1b:3a:0c:9f:1a:e5:
                    9f:fc:05:c4:ac:80:70:92:37:e2:70:70:d3:35:32:
                    33:a8:72:2e:e8:b0:0d:53:f4:9c:bc:45:b0:92:2e:
                    7a:46:21:5e:4a:9d:48:2f:2a:79:5c:41:7b:af:39:
                    94:2a:f1:c9:68:6d:42:18:2f:ce:7b:c8:97:36:a8:
                    c7:08:9c:07:50:c2:ed:a3:c6:f4:fd:f6:b8:19:dd:
                    b5:50:7c:bd:c3:37:ab:a6:6a:e1:7f:43:85:b3:d6:
                    35:66:7b:45:51:c0:87:f6:b4:58:82:f4:53:83:b5:
                    96:e5:a4:04:77:9b:72:09:6e:21:e9:e9:31:01:d3:
                    ea:94:c2:ed:78:4c:f3:47:d6:e2:46:e6:8b:b1:14:
                    a6:54:87:d7:b9:87:24:08:04:3b:f2:ed:c4:d3:d3:
                    e6:89:1c:5a:60:ad:0a:95:d1:9c:dd:1f:90:15:cc:
                    74:52:65:1d:0b:fc:30:e6:67:16:ea:82:b0:c9:68:
                    12:26:c1:5e:c2:97:8e:a4:63:69:f8:f9:a5:12:78:
                    a6:f9:ca:8b:55:3d:ae:61:f5:d4:09:b5:71:16:ce:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:53:B0:4E:DB:09:66:84:47:77:FF:BD:A6:7B:2E:D4:88:A1:D6:C2
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:d0:7f:c9:50:7f:a8:79:47:29:43:c7:a9:b3:f9:86:b2:
         8b:3d:62:69:d9:e5:8a:fe:b0:59:b2:b4:50:42:f1:96:b2:23:
         59:80:12:84:94:7b:96:29:08:6f:b5:c0:f1:13:70:a3:e9:c6:
         22:4d:99:3a:b8:0b:58:7c:e7:ca:19:77:62:81:25:43:d6:3a:
         2a:f2:b0:1d:b5:e6:24:fe:e2:cd:78:c7:0c:21:e2:7a:68:e8:
         a5:f8:1c:c8:90:b3:53:d1:85:35:3e:7d:78:d6:1c:0c:5e:8b:
         93:3f:ae:9d:a4:df:f9:f0:c5:f0:88:db:06:b0:c1:da:4e:07:
         62:bf:17:b7:5f:3c:fb:e4:9b:1c:19:a3:2c:9d:f7:20:52:75:
         65:e4:3d:b1:69:1a:45:d5:e5:0c:a5:ca:84:5b:a8:f8:00:91:
         d3:c2:fd:3d:f0:e5:d0:e5:d9:4c:cd:cb:a0:8a:b8:34:df:52:
         83:0e:f4:b1:55:a8:93:40:0c:06:8b:e3:04:e4:a2:f8:80:de:
         07:0d:a0:6a:f6:c4:f0:05:e4:12:61:4b:b1:10:d1:5a:55:01:
         20:e3:14:24:95:0a:64:c2:07:67:59:f2:08:61:77:f2:8b:2c:
         75:d9:2a:82:28:2b:00:43:26:49:8b:24:c2:e6:01:cd:fa:75:
         2e:bc:15:d9
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUa1D9Hc3z8EzhgyQ+SYozR3ATUuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE0QThEREY4NUUyNkQ0NUE1MzBDOTJGMTgzOTY3RjhF
QTFGNTZBOTAeFw0yNDAxMTUxMjU1MDBaFw0yNTAxMTMxMzAwMDBaMDMxMTAvBgNV
BAMTKDhDNTNCMDRFREIwOTY2ODQ0Nzc3RkZCREE2N0IyRUQ0ODhBMUQ2QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARJ0ZO0wWFhL3/Z/tsazMUHrv
1q4Vk9ajQ4q0A0FnugG/LIk3yhs6DJ8a5Z/8BcSsgHCSN+JwcNM1MjOoci7osA1T
9Jy8RbCSLnpGIV5KnUgvKnlcQXuvOZQq8clobUIYL857yJc2qMcInAdQwu2jxvT9
9rgZ3bVQfL3DN6umauF/Q4Wz1jVme0VRwIf2tFiC9FODtZblpAR3m3IJbiHp6TEB
0+qUwu14TPNH1uJG5ouxFKZUh9e5hyQIBDvy7cTT0+aJHFpgrQqV0ZzdH5AVzHRS
ZR0L/DDmZxbqgrDJaBImwV7Cl46kY2n4+aUSeKb5yotVPa5h9dQJtXEWztVPAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUjFOwTtsJZoRHd/+9pnsu1Iih1sIwHwYDVR0j
BBgwFoAUUUqN34XibUWlMMkvGDln+OofVqkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMC81MTRBOERERjg1RTI2RDQ1QTUzMEM5MkYxODM5NjdGOEVBMUY1NkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxNEE4RERGODVFMjZENDVB
NTMwQzkyRjE4Mzk2N0Y4RUExRjU2QTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzAv
MzIzODMwMzQzYTY1MzYzMDNhMzEzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2
MzEzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBA5gABMwDQYJKoZIhvcNAQELBQADggEBACIe
0H/JUH+oeUcpQ8eps/mGsos9YmnZ5Yr+sFmytFBC8ZayI1mAEoSUe5YpCG+1wPET
cKPpxiJNmTq4C1h858oZd2KBJUPWOirysB215iT+4s14xwwh4npo6KX4HMiQs1PR
hTU+fXjWHAxei5M/rp2k3/nwxfCI2wawwdpOB2K/F7dfPPvkmxwZoyyd9yBSdWXk
PbFpGkXV5QylyoRbqPgAkdPC/T3w5dDl2UzNy6CKuDTfUoMO9LFVqJNADAaL4wTk
oviA3gcNoGr2xPAF5BJhS7EQ0VpVASDjFCSVCmTCB2dZ8ghhd/KLLHXZKoIoKwBD
JkmLJMLmAc36dS68Fdk=
-----END CERTIFICATE-----