Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a633030303a3a2f33342d3334203d3e20323639333535.roa
File:                     323830343a363335383a633030303a3a2f33342d3334203d3e20323639333535.roa (raw, json)
Hash identifier:          Jwj1Wube3IOzmYTRWdjU+QS9tAAFK7EugUFqg4tkkng=
Subject key identifier:   FD:24:01:DF:A9:BE:59:CA:F1:E5:AF:5B:50:36:64:B1:7B:A8:3A:9B
Certificate issuer:       /CN=5EBF6B302E6461438C4FA9446A9352773CC79187
Certificate serial:       301CE1E0891D622C10F9D9816438F431C75C5251
Authority key identifier: 5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a633030303a3a2f33342d3334203d3e20323639333535.roa
Signing time:             Tue 06 Feb 2024 20:15:52 +0000
ROA not before:           Tue 06 Feb 2024 20:10:52 +0000
ROA not after:            Tue 04 Feb 2025 20:15:52 +0000
asID:                     269355
IP address blocks:        2804:6358:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1c:e1:e0:89:1d:62:2c:10:f9:d9:81:64:38:f4:31:c7:5c:52:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBF6B302E6461438C4FA9446A9352773CC79187
        Validity
            Not Before: Feb  6 20:10:52 2024 GMT
            Not After : Feb  4 20:15:52 2025 GMT
        Subject: CN=FD2401DFA9BE59CAF1E5AF5B503664B17BA83A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:6c:c8:68:79:81:13:ac:62:b4:80:45:dc:
                    7f:43:4c:1a:a1:44:2c:55:c9:19:75:6a:7d:3e:44:
                    8e:e9:f8:5a:2d:90:9e:ca:be:26:35:db:9c:15:f3:
                    2e:d5:6d:2b:f7:cb:56:14:3e:f3:28:b5:99:53:5c:
                    6a:5e:9d:35:23:ba:a0:fb:d4:a6:43:61:d6:a8:2a:
                    c9:ba:e0:cb:ee:e9:55:fd:c5:a9:51:bd:28:65:7a:
                    64:5e:8b:c0:7e:92:1b:2d:ab:31:8c:46:41:57:09:
                    5d:2b:21:9a:b6:07:e7:6b:0f:30:cf:97:ff:6f:7f:
                    77:58:18:2c:02:a0:46:8e:fa:78:e9:76:6f:c2:e3:
                    35:c0:68:71:ec:f5:41:1a:ee:64:6d:c2:00:3d:c8:
                    98:f4:ef:da:3a:f2:6f:99:2c:30:86:93:25:70:b0:
                    aa:7a:7a:59:5c:61:37:3d:b6:aa:c9:5f:71:73:98:
                    6a:b1:cc:10:46:b6:34:08:bf:94:1c:79:11:d8:62:
                    2a:bd:20:31:e7:dc:79:db:c9:92:12:dd:04:c0:5d:
                    23:2f:10:25:fb:42:9c:66:5c:6d:b8:7b:48:1e:61:
                    b0:50:9c:25:eb:68:6c:a0:54:4c:c0:07:7b:b3:a0:
                    88:7f:74:d1:50:8a:80:86:df:c8:20:d9:9d:6d:e0:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:24:01:DF:A9:BE:59:CA:F1:E5:AF:5B:50:36:64:B1:7B:A8:3A:9B
            X509v3 Authority Key Identifier:
                keyid:5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/5EBF6B302E6461438C4FA9446A9352773CC79187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/323830343a363335383a633030303a3a2f33342d3334203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6358:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:c2:b9:03:b8:6e:2d:14:fb:06:1b:c6:58:c3:76:6a:24:
         7d:a8:ef:2a:fa:91:71:75:14:07:fc:5c:5c:6a:fa:11:73:45:
         06:54:73:f4:f1:5c:f3:e4:b7:ca:12:87:48:9c:ab:e2:17:3f:
         6e:c6:f1:03:a2:19:fd:dc:96:47:89:90:4c:be:5d:09:92:42:
         79:7f:b7:6e:55:13:29:8b:77:39:a5:91:45:02:b6:0a:63:4a:
         75:4a:2a:01:e4:da:0a:fa:44:4a:aa:19:62:2a:09:63:26:16:
         89:30:b8:b2:4a:d5:95:9e:6c:5a:81:ef:25:7c:04:ad:4c:0e:
         56:a5:72:16:b2:f6:89:f1:96:77:35:9b:7b:88:19:f1:58:91:
         72:0d:8c:49:15:49:f8:9e:b5:dc:2b:14:ff:86:20:47:e4:c9:
         18:91:d3:19:63:97:0d:a4:17:df:49:4d:02:2c:be:fe:9b:ab:
         a0:53:5c:77:3a:7d:9c:cf:85:15:a0:a7:89:b3:82:6e:52:bb:
         ec:b5:ee:1b:6e:e3:59:ca:b2:5f:6e:d8:00:eb:43:3a:e2:31:
         0f:1b:cb:d8:76:ba:55:87:5c:61:32:a6:48:03:b7:74:8e:94:
         8b:92:01:2f:13:c7:19:29:20:29:67:59:3c:09:d5:28:ff:97:
         42:18:1c:10
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMBzh4IkdYiwQ+dmBZDj0McdcUlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVCRjZCMzAyRTY0NjE0MzhDNEZBOTQ0NkE5MzUyNzcz
Q0M3OTE4NzAeFw0yNDAyMDYyMDEwNTJaFw0yNTAyMDQyMDE1NTJaMDMxMTAvBgNV
BAMTKEZEMjQwMURGQTlCRTU5Q0FGMUU1QUY1QjUwMzY2NEIxN0JBODNBOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcWzIaHmBE6xitIBF3H9DTBqh
RCxVyRl1an0+RI7p+FotkJ7KviY125wV8y7VbSv3y1YUPvMotZlTXGpenTUjuqD7
1KZDYdaoKsm64Mvu6VX9xalRvShlemRei8B+khstqzGMRkFXCV0rIZq2B+drDzDP
l/9vf3dYGCwCoEaO+njpdm/C4zXAaHHs9UEa7mRtwgA9yJj079o68m+ZLDCGkyVw
sKp6ellcYTc9tqrJX3FzmGqxzBBGtjQIv5QceRHYYiq9IDHn3HnbyZIS3QTAXSMv
ECX7QpxmXG24e0geYbBQnCXraGygVEzAB3uzoIh/dNFQioCG38gg2Z1t4AQVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/SQB36m+Wcrx5a9bUDZksXuoOpswHwYDVR0j
BBgwFoAUXr9rMC5kYUOMT6lEapNSdzzHkYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RpR2pGZjlYbkZRRE1haEhtOENIcjhxSExUazNpTnBFeW90V29vVkdV
SjkvMC81RUJGNkIzMDJFNjQ2MTQzOEM0RkE5NDQ2QTkzNTI3NzNDQzc5MTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFQkY2QjMwMkU2NDYxNDM4
QzRGQTk0NDZBOTM1Mjc3M0NDNzkxODcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUaUdqRmY5WG5GUURNYWhIbThDSHI4cUhMVGszaU5wRXlvdFdvb1ZHVUo5LzAv
MzIzODMwMzQzYTM2MzMzNTM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMzMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEY1jAMA0GCSqGSIb3DQEBCwUA
A4IBAQBbFsK5A7huLRT7BhvGWMN2aiR9qO8q+pFxdRQH/FxcavoRc0UGVHP08Vzz
5LfKEodInKviFz9uxvEDohn93JZHiZBMvl0JkkJ5f7duVRMpi3c5pZFFArYKY0p1
SioB5NoK+kRKqhliKgljJhaJMLiyStWVnmxage8lfAStTA5WpXIWsvaJ8ZZ3NZt7
iBnxWJFyDYxJFUn4nrXcKxT/hiBH5MkYkdMZY5cNpBffSU0CLL7+m6ugU1x3On2c
z4UVoKeJs4JuUrvste4bbuNZyrJfbtgA60M64jEPG8vYdrpVh1xhMqZIA7d0jpSL
kgEvE8cZKSApZ1k8CdUo/5dCGBwQ
-----END CERTIFICATE-----