Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a383030303a3a2f33342d3334203d3e20323639333535.roa
File:                     323830343a363335383a383030303a3a2f33342d3334203d3e20323639333535.roa (raw, json)
Hash identifier:          l9I8G0dCrDdKvC/KedLI2dNt+whDX3n2LcaC8gZ05zw=
Subject key identifier:   30:F9:DB:E0:2C:81:96:94:6B:6C:57:0D:25:64:F0:02:E9:5B:BC:A9
Certificate issuer:       /CN=5EBF6B302E6461438C4FA9446A9352773CC79187
Certificate serial:       12D141DD0ACADDEBCFFBC4E77E017ED6F375E7F3
Authority key identifier: 5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a383030303a3a2f33342d3334203d3e20323639333535.roa
Signing time:             Tue 06 Feb 2024 20:15:39 +0000
ROA not before:           Tue 06 Feb 2024 20:10:39 +0000
ROA not after:            Tue 04 Feb 2025 20:15:39 +0000
asID:                     269355
IP address blocks:        2804:6358:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d1:41:dd:0a:ca:dd:eb:cf:fb:c4:e7:7e:01:7e:d6:f3:75:e7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBF6B302E6461438C4FA9446A9352773CC79187
        Validity
            Not Before: Feb  6 20:10:39 2024 GMT
            Not After : Feb  4 20:15:39 2025 GMT
        Subject: CN=30F9DBE02C8196946B6C570D2564F002E95BBCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:2c:57:13:34:d4:f9:ca:c5:0c:19:cc:8f:
                    c9:8a:fb:d9:3a:89:1e:53:a8:5f:45:0f:a1:59:bb:
                    9b:95:ea:33:11:53:6d:91:1f:c8:cc:6b:39:30:74:
                    23:2a:41:d6:4e:fd:bc:b5:d0:d0:a0:86:17:02:ba:
                    a4:5c:22:51:e9:5e:00:69:ca:82:cb:61:43:ec:fd:
                    80:69:11:59:e1:b7:bb:6d:33:38:de:a3:22:9d:3d:
                    cf:eb:4d:36:f2:a0:6b:cc:5b:85:23:d8:a1:4d:dd:
                    eb:09:a7:4c:e9:0a:20:ec:bb:1a:44:f0:e1:53:83:
                    32:16:8d:d3:3d:b1:bb:88:da:26:5d:f9:91:d5:8a:
                    02:a5:63:05:a3:84:67:d1:9b:7f:95:f7:7b:00:06:
                    13:84:7f:f1:33:63:4d:01:04:1b:01:d5:0f:b3:c8:
                    6b:e1:9b:ca:fb:24:25:32:61:b6:f6:a0:28:f4:1d:
                    03:26:e1:88:73:f9:ac:56:33:ee:3a:f8:e3:67:d6:
                    62:d3:3c:66:09:0b:7d:0d:71:76:e9:93:8f:de:34:
                    1d:63:18:d6:da:44:ae:ca:3b:cf:95:c2:ab:7f:1d:
                    0a:30:72:8a:bd:d6:63:c4:23:0d:97:cf:c3:92:64:
                    43:5a:8d:aa:67:60:20:62:b8:1e:61:b4:be:6d:9a:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F9:DB:E0:2C:81:96:94:6B:6C:57:0D:25:64:F0:02:E9:5B:BC:A9
            X509v3 Authority Key Identifier:
                keyid:5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/5EBF6B302E6461438C4FA9446A9352773CC79187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a383030303a3a2f33342d3334203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6358:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:cf:c3:42:f5:94:4f:97:e8:1b:b2:43:57:e8:be:53:79:66:
         31:50:c7:ed:ea:ce:b3:af:13:2a:d1:72:4b:ef:32:af:ac:f4:
         8e:d8:c1:4e:07:d2:ec:d8:4e:0c:93:1f:39:c7:73:a2:47:b1:
         c9:43:2f:de:6d:cf:45:96:57:d3:da:1f:77:e9:8c:65:95:24:
         21:67:7f:f7:85:55:7b:35:84:fd:70:69:e8:88:f7:bc:ad:47:
         c5:fe:72:69:8f:d0:95:6c:75:90:43:39:87:0b:86:5a:f8:a8:
         b2:da:ea:06:cd:7b:dc:d5:ed:ca:7e:b4:6d:3e:39:95:2a:fc:
         c7:c4:52:64:f4:f6:fe:03:1a:fc:c3:63:c6:8d:b3:c0:47:dd:
         75:bf:70:1c:9a:e8:a6:c8:18:37:c1:0d:26:86:bb:88:c1:46:
         ff:66:c0:31:10:17:e0:13:25:d1:2b:df:10:1e:33:bf:6c:dd:
         06:c3:3d:29:54:61:c5:37:a1:73:6a:a3:5b:c0:c4:61:9d:f3:
         31:ce:71:7d:2b:4d:8d:9f:ce:f6:df:b7:44:c1:4c:cf:7a:a7:
         dd:04:06:03:cf:f2:f5:f0:6f:eb:50:fe:37:be:31:e8:19:c0:
         28:99:8a:4b:ab:39:fe:ce:f3:c9:0e:22:e2:9b:f6:7d:66:07:
         80:7e:1b:a4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEtFB3QrK3evP+8TnfgF+1vN15/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVCRjZCMzAyRTY0NjE0MzhDNEZBOTQ0NkE5MzUyNzcz
Q0M3OTE4NzAeFw0yNDAyMDYyMDEwMzlaFw0yNTAyMDQyMDE1MzlaMDMxMTAvBgNV
BAMTKDMwRjlEQkUwMkM4MTk2OTQ2QjZDNTcwRDI1NjRGMDAyRTk1QkJDQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GyxXEzTU+crFDBnMj8mK+9k6
iR5TqF9FD6FZu5uV6jMRU22RH8jMazkwdCMqQdZO/by10NCghhcCuqRcIlHpXgBp
yoLLYUPs/YBpEVnht7ttMzjeoyKdPc/rTTbyoGvMW4Uj2KFN3esJp0zpCiDsuxpE
8OFTgzIWjdM9sbuI2iZd+ZHVigKlYwWjhGfRm3+V93sABhOEf/EzY00BBBsB1Q+z
yGvhm8r7JCUyYbb2oCj0HQMm4Yhz+axWM+46+ONn1mLTPGYJC30NcXbpk4/eNB1j
GNbaRK7KO8+Vwqt/HQowcoq91mPEIw2Xz8OSZENajapnYCBiuB5htL5tmoxtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMPnb4CyBlpRrbFcNJWTwAulbvKkwHwYDVR0j
BBgwFoAUXr9rMC5kYUOMT6lEapNSdzzHkYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RpR2pGZjlYbkZRRE1haEhtOENIcjhxSExUazNpTnBFeW90V29vVkdV
SjkvMC81RUJGNkIzMDJFNjQ2MTQzOEM0RkE5NDQ2QTkzNTI3NzNDQzc5MTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFQkY2QjMwMkU2NDYxNDM4
QzRGQTk0NDZBOTM1Mjc3M0NDNzkxODcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUaUdqRmY5WG5GUURNYWhIbThDSHI4cUhMVGszaU5wRXlvdFdvb1ZHVUo5LzAv
MzIzODMwMzQzYTM2MzMzNTM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMzMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEY1iAMA0GCSqGSIb3DQEBCwUA
A4IBAQBtz8NC9ZRPl+gbskNX6L5TeWYxUMft6s6zrxMq0XJL7zKvrPSO2MFOB9Ls
2E4Mkx85x3OiR7HJQy/ebc9FllfT2h936YxllSQhZ3/3hVV7NYT9cGnoiPe8rUfF
/nJpj9CVbHWQQzmHC4Za+Kiy2uoGzXvc1e3KfrRtPjmVKvzHxFJk9Pb+Axr8w2PG
jbPAR911v3AcmuimyBg3wQ0mhruIwUb/ZsAxEBfgEyXRK98QHjO/bN0Gwz0pVGHF
N6FzaqNbwMRhnfMxznF9K02Nn87237dEwUzPeqfdBAYDz/L18G/rUP43vjHoGcAo
mYpLqzn+zvPJDiLim/Z9ZgeAfhuk
-----END CERTIFICATE-----