Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa
File:                     323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa (raw, json)
Hash identifier:          bx81XSIpny6v0ti0E2Jt+5rwcro8EI1vSm23AB9zijk=
Subject key identifier:   9B:8F:18:2D:98:35:6C:BC:D1:92:44:14:29:E5:BE:08:83:98:7E:41
Certificate issuer:       /CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
Certificate serial:       77757A373140979C30232E51FD79A92468F8100A
Authority key identifier: E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa
Signing time:             Mon 26 Feb 2024 14:58:35 +0000
ROA not before:           Mon 26 Feb 2024 14:53:35 +0000
ROA not after:            Mon 24 Feb 2025 14:58:35 +0000
asID:                     269175
IP address blocks:        2804:1f4c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:75:7a:37:31:40:97:9c:30:23:2e:51:fd:79:a9:24:68:f8:10:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
        Validity
            Not Before: Feb 26 14:53:35 2024 GMT
            Not After : Feb 24 14:58:35 2025 GMT
        Subject: CN=9B8F182D98356CBCD192441429E5BE0883987E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d6:4b:49:e8:d5:ab:8f:4b:bd:59:c9:36:11:
                    67:61:39:01:ae:53:d3:87:40:05:f9:b8:44:f8:e2:
                    f9:3a:be:3c:2a:92:13:35:bd:6f:91:b2:5f:c4:c5:
                    fc:e4:18:c9:37:03:39:c4:1d:d1:a2:84:13:35:26:
                    8c:d2:03:2e:5d:d7:9a:81:55:f1:e3:db:47:b5:b6:
                    d9:44:ec:98:60:37:33:8c:7d:1f:28:21:2e:79:c0:
                    b6:c8:4f:7f:33:48:e6:cc:2a:2b:94:68:64:f9:d8:
                    e3:5a:7c:93:1c:39:38:43:04:0d:13:d3:ff:79:14:
                    db:33:70:c1:03:51:d3:82:2a:58:42:68:fe:db:35:
                    d8:74:79:5e:09:32:fe:a7:9d:cf:ea:a1:30:d6:f4:
                    d8:78:d4:c5:e2:9d:ff:47:20:83:2b:30:81:3a:be:
                    21:c0:bf:a4:2a:bf:12:8e:64:cd:c4:c8:1b:85:30:
                    a0:da:00:49:66:d4:b5:15:07:ab:8b:97:03:31:45:
                    17:cd:d1:19:d7:ae:32:7a:63:1c:c8:c4:46:37:dc:
                    5a:fb:9a:48:75:f0:9d:a8:d3:dc:8d:b0:2c:ad:2c:
                    d6:75:7f:82:43:83:8a:c1:41:ab:da:96:08:0f:b5:
                    7e:80:84:81:f6:e2:68:ed:1b:5a:42:ed:d1:97:c7:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:18:2D:98:35:6C:BC:D1:92:44:14:29:E5:BE:08:83:98:7E:41
            X509v3 Authority Key Identifier:
                keyid:E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:a7:ea:e1:ab:2c:c5:67:59:c2:1b:72:89:89:e4:c3:70:b3:
         d1:1f:c9:f6:f7:61:28:c0:8e:f1:5b:d8:34:11:58:8a:11:78:
         ac:8c:87:48:46:b9:0f:a2:37:03:56:10:1f:c3:42:b2:81:df:
         34:a4:73:16:2a:9e:93:26:64:24:45:1d:dd:93:55:3b:80:a8:
         19:39:a6:6b:d5:ff:e5:01:d3:cd:12:b5:54:81:95:7f:27:a1:
         58:5f:28:ca:19:7f:09:95:88:d5:e2:e5:46:a1:fc:da:34:a7:
         9a:f3:17:aa:d2:43:8e:bf:84:98:51:8b:4b:36:9e:0f:12:9c:
         83:c2:30:67:07:8e:a7:fe:6e:8a:66:90:2d:f8:7a:f6:e5:8f:
         eb:ab:4a:0b:bc:1b:96:09:23:93:ec:8d:3e:63:6d:80:62:2f:
         9f:7b:04:51:c8:7f:55:2d:f7:52:ca:78:ca:24:87:b0:69:96:
         a5:eb:3d:cc:42:18:5b:a8:25:90:2c:5e:3a:3d:04:96:94:86:
         82:10:70:4a:90:ef:0d:ff:bc:f4:0f:26:cf:8f:2d:63:f6:7c:
         43:71:32:7e:0d:a7:38:1f:0b:8f:8b:d2:fc:1a:f5:25:58:5b:
         21:5c:d8:03:e3:75:7d:c8:37:e4:be:74:25:4e:31:cf:cb:96:
         37:00:8f:22
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUd3V6NzFAl5wwIy5R/XmpJGj4EAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEJFN0Y0NUZBREYyQzE2MDRCMUREN0MxOTU5OTZC
NzQ4NThFOTAeFw0yNDAyMjYxNDUzMzVaFw0yNTAyMjQxNDU4MzVaMDMxMTAvBgNV
BAMTKDlCOEYxODJEOTgzNTZDQkNEMTkyNDQxNDI5RTVCRTA4ODM5ODdFNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW1ktJ6NWrj0u9Wck2EWdhOQGu
U9OHQAX5uET44vk6vjwqkhM1vW+Rsl/ExfzkGMk3AznEHdGihBM1JozSAy5d15qB
VfHj20e1ttlE7JhgNzOMfR8oIS55wLbIT38zSObMKiuUaGT52ONafJMcOThDBA0T
0/95FNszcMEDUdOCKlhCaP7bNdh0eV4JMv6nnc/qoTDW9Nh41MXinf9HIIMrMIE6
viHAv6QqvxKOZM3EyBuFMKDaAElm1LUVB6uLlwMxRRfN0RnXrjJ6YxzIxEY33Fr7
mkh18J2o09yNsCytLNZ1f4JDg4rBQavalggPtX6AhIH24mjtG1pC7dGXxyN7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUm48YLZg1bLzRkkQUKeW+CIOYfkEwHwYDVR0j
BBgwFoAU4+C+f0X63ywWBLHdfBlZlrdIWOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMC9FM0UwQkU3RjQ1RkFERjJDMTYwNEIxREQ3QzE5NTk5NkI3NDg1OEU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzRTBCRTdGNDVGQURGMkMx
NjA0QjFERDdDMTk1OTk2Qjc0ODU4RTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzAv
MzIzODMwMzQzYTMxNjYzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTMxMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEH0yAMA0GCSqGSIb3DQEBCwUA
A4IBAQCGp+rhqyzFZ1nCG3KJieTDcLPRH8n292EowI7xW9g0EViKEXisjIdIRrkP
ojcDVhAfw0Kygd80pHMWKp6TJmQkRR3dk1U7gKgZOaZr1f/lAdPNErVUgZV/J6FY
XyjKGX8JlYjV4uVGofzaNKea8xeq0kOOv4SYUYtLNp4PEpyDwjBnB46n/m6KZpAt
+Hr25Y/rq0oLvBuWCSOT7I0+Y22AYi+fewRRyH9VLfdSynjKJIewaZal6z3MQhhb
qCWQLF46PQSWlIaCEHBKkO8N/7z0DybPjy1j9nxDcTJ+Dac4HwuPi9L8GvUlWFsh
XNgD43V9yDfkvnQlTjHPy5Y3AI8i
-----END CERTIFICATE-----