Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/0/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa
File:                     323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (raw, json)
Hash identifier:          ucDJ049NPlDQWcacMxOueh+93O2+Y+EuNzD6+8p24S8=
Subject key identifier:   4E:19:C8:3D:C4:14:D8:42:76:91:1C:4F:42:C3:EE:37:5F:7F:90:83
Certificate issuer:       /CN=7413D9E11B833BF9E8A6706DC1FE55CB927C674F
Certificate serial:       1C4744BB24511D197026B7EBC4DEFDE3F3F2A797
Authority key identifier: 74:13:D9:E1:1B:83:3B:F9:E8:A6:70:6D:C1:FE:55:CB:92:7C:67:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7413D9E11B833BF9E8A6706DC1FE55CB927C674F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/0/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa
Signing time:             Fri 15 Mar 2024 18:53:37 +0000
ROA not before:           Fri 15 Mar 2024 18:48:37 +0000
ROA not after:            Fri 14 Mar 2025 18:53:37 +0000
asID:                     266140
IP address blocks:        2804:3b4c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:44:bb:24:51:1d:19:70:26:b7:eb:c4:de:fd:e3:f3:f2:a7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7413D9E11B833BF9E8A6706DC1FE55CB927C674F
        Validity
            Not Before: Mar 15 18:48:37 2024 GMT
            Not After : Mar 14 18:53:37 2025 GMT
        Subject: CN=4E19C83DC414D84276911C4F42C3EE375F7F9083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:81:71:54:1e:9d:24:0d:d1:81:40:34:15:
                    e8:08:88:ed:65:32:f2:0d:59:f3:a4:8a:c0:4b:44:
                    6c:6b:9b:84:00:f4:7f:47:16:e3:b2:7b:e9:e4:ee:
                    d9:74:34:4e:21:a5:01:c3:51:ec:e3:60:4f:18:e5:
                    58:03:38:95:c8:72:7d:8e:0d:1f:75:0a:0c:e4:87:
                    bd:8c:f8:83:84:6c:96:75:f3:c0:ff:e7:a7:0d:8a:
                    e4:6f:dc:eb:f7:00:d2:30:3f:7b:ec:68:05:5c:4a:
                    15:52:10:0b:97:39:ba:19:c3:de:a4:cf:ea:41:f5:
                    d8:78:f8:b9:0e:75:01:48:b5:4f:a6:7d:19:18:57:
                    95:a6:20:01:4a:79:74:91:45:7c:d8:fc:7a:e4:91:
                    e9:82:66:5a:8e:89:c7:51:a7:64:66:86:a5:78:48:
                    0c:7f:88:b9:c5:27:f5:e0:ba:38:89:b6:64:73:2e:
                    ba:de:4f:30:00:7e:88:69:42:29:a6:52:e8:f1:33:
                    7d:93:84:97:00:b7:4c:82:26:30:f1:79:5d:cc:dc:
                    bd:eb:be:af:d3:5d:53:a6:8c:2a:bc:f9:12:84:b6:
                    b3:61:bf:94:dc:4c:7c:d7:56:a1:04:66:60:1a:04:
                    41:19:d2:10:68:bf:eb:21:a2:03:1e:63:89:82:df:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:19:C8:3D:C4:14:D8:42:76:91:1C:4F:42:C3:EE:37:5F:7F:90:83
            X509v3 Authority Key Identifier:
                keyid:74:13:D9:E1:1B:83:3B:F9:E8:A6:70:6D:C1:FE:55:CB:92:7C:67:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/0/7413D9E11B833BF9E8A6706DC1FE55CB927C674F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7413D9E11B833BF9E8A6706DC1FE55CB927C674F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/0/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:67:81:74:b9:0b:a2:95:18:c0:81:78:2d:e8:56:25:0e:d4:
         1b:88:5c:bb:20:47:d0:e6:f1:7d:fb:cb:48:5c:27:d5:04:49:
         ad:c7:a7:f0:66:61:eb:02:5a:09:ff:20:b8:44:a7:ee:25:40:
         0c:09:92:9c:d9:79:d3:80:a8:96:78:1a:43:9f:1d:3a:9d:e3:
         dd:5c:05:8b:0a:7f:df:50:10:7b:53:36:36:ae:3e:14:65:a2:
         b6:2c:59:36:8b:d2:68:39:67:c8:2a:a5:0c:ef:27:64:f4:9f:
         66:03:73:c2:5a:48:f7:dd:7d:e0:2f:87:85:a4:7a:e9:5f:eb:
         79:d4:13:97:61:68:ea:22:74:e0:cf:af:76:99:1b:40:59:5d:
         93:75:99:f2:6f:2e:93:70:92:30:b0:d9:40:89:8e:1e:ac:eb:
         97:e4:71:bc:5e:be:0c:6f:f2:a7:4d:36:78:b0:71:e1:91:ec:
         78:02:ec:d1:78:65:f6:a8:ec:4d:0c:70:61:03:ab:63:11:62:
         9f:db:d3:97:19:ef:ed:ad:f4:24:53:ad:66:33:4f:df:96:74:
         b5:9d:da:ae:b5:99:84:e5:6f:0c:bd:83:c3:81:de:7a:52:36:
         7f:ca:b6:16:d6:76:cf:2d:5f:34:1e:04:33:61:e0:f7:97:21:
         5b:be:e4:8f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUHEdEuyRRHRlwJrfrxN794/Pyp5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQxM0Q5RTExQjgzM0JGOUU4QTY3MDZEQzFGRTU1Q0I5
MjdDNjc0RjAeFw0yNDAzMTUxODQ4MzdaFw0yNTAzMTQxODUzMzdaMDMxMTAvBgNV
BAMTKDRFMTlDODNEQzQxNEQ4NDI3NjkxMUM0RjQyQzNFRTM3NUY3RjkwODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQYFxVB6dJA3RgUA0FegIiO1l
MvINWfOkisBLRGxrm4QA9H9HFuOye+nk7tl0NE4hpQHDUezjYE8Y5VgDOJXIcn2O
DR91Cgzkh72M+IOEbJZ188D/56cNiuRv3Ov3ANIwP3vsaAVcShVSEAuXOboZw96k
z+pB9dh4+LkOdQFItU+mfRkYV5WmIAFKeXSRRXzY/HrkkemCZlqOicdRp2RmhqV4
SAx/iLnFJ/XgujiJtmRzLrreTzAAfohpQimmUujxM32ThJcAt0yCJjDxeV3M3L3r
vq/TXVOmjCq8+RKEtrNhv5TcTHzXVqEEZmAaBEEZ0hBov+shogMeY4mC358xAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUThnIPcQU2EJ2kRxPQsPuN19/kIMwHwYDVR0j
BBgwFoAUdBPZ4RuDO/nopnBtwf5Vy5J8Z08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2VQaXNzWVU5RWNUNksyWHVxTjE3N1RuQnNvSjRreUtRNkJrZDVuM1Ey
UGEvMC83NDEzRDlFMTFCODMzQkY5RThBNjcwNkRDMUZFNTVDQjkyN0M2NzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc0MTNEOUUxMUI4MzNCRjlF
OEE2NzA2REMxRkU1NUNCOTI3QzY3NEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNlUGlzc1lVOUVjVDZLMlh1cU4xNzdUbkJzb0o0a3lLUTZCa2Q1bjNRMlBhLzAv
MzIzODMwMzQzYTMzNjIzNDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDtMMA0GCSqGSIb3DQEBCwUAA4IBAQACZ4F0
uQuilRjAgXgt6FYlDtQbiFy7IEfQ5vF9+8tIXCfVBEmtx6fwZmHrAloJ/yC4RKfu
JUAMCZKc2XnTgKiWeBpDnx06nePdXAWLCn/fUBB7UzY2rj4UZaK2LFk2i9JoOWfI
KqUM7ydk9J9mA3PCWkj33X3gL4eFpHrpX+t51BOXYWjqInTgz692mRtAWV2TdZny
by6TcJIwsNlAiY4erOuX5HG8Xr4Mb/KnTTZ4sHHhkex4AuzReGX2qOxNDHBhA6tj
EWKf29OXGe/trfQkU61mM0/flnS1ndqutZmE5W8MvYPDgd56UjZ/yrYW1nbPLV80
HgQzYeD3lyFbvuSP
-----END CERTIFICATE-----