Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33332d3333203d3e203631363738.roa
File:                     323830343a316364343a3a2f33332d3333203d3e203631363738.roa (raw, json)
Hash identifier:          8HQqEZv0ohOVNlIq4II+UDfgiPSydff2sz+uzcwu3nw=
Subject key identifier:   09:8A:05:90:FF:BF:86:C7:C0:1A:17:89:9E:79:C8:F9:C8:3D:4F:98
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       0675D82D00FA1188DA7F3AA80560655C70AE71DF
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33332d3333203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:43:11 +0000
ROA not before:           Tue 24 Oct 2023 12:38:11 +0000
ROA not after:            Tue 22 Oct 2024 12:43:11 +0000
asID:                     61678
IP address blocks:        2804:1cd4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:75:d8:2d:00:fa:11:88:da:7f:3a:a8:05:60:65:5c:70:ae:71:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:38:11 2023 GMT
            Not After : Oct 22 12:43:11 2024 GMT
        Subject: CN=098A0590FFBF86C7C01A17899E79C8F9C83D4F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:20:e2:15:6a:bf:34:d8:9e:ec:50:df:b2:
                    56:65:51:37:d9:55:01:c3:64:03:da:02:28:78:0f:
                    37:8d:42:4f:cd:2e:b4:7b:29:63:84:6d:78:63:a9:
                    c8:9a:04:2a:da:f6:d5:37:09:d8:76:ed:08:f2:4b:
                    8c:a9:cb:2a:e2:7a:b8:e3:ab:7a:87:90:c8:68:8b:
                    a3:86:fe:7c:64:06:f9:4d:55:7d:04:21:34:bc:72:
                    a0:a4:c2:61:61:43:36:5d:25:b5:ed:38:24:58:8f:
                    4d:c6:b0:98:cf:e7:5f:5c:57:ae:0e:ca:15:0d:12:
                    d9:43:e6:1c:e4:b3:be:84:ed:56:5f:c5:16:8f:af:
                    e6:86:8c:f1:36:65:fd:b7:50:c6:e2:5f:0b:84:32:
                    03:d8:b2:08:3e:b6:ef:91:2e:55:43:74:56:c0:6c:
                    4f:47:65:5d:4c:6c:13:b2:a9:ce:23:21:52:b8:95:
                    98:19:95:eb:b5:f9:85:6f:df:fe:f7:db:75:9f:fb:
                    47:78:7c:4d:66:e7:8a:ac:05:b4:a2:d3:d3:ce:59:
                    35:6a:eb:75:bd:ab:94:e1:84:9b:bd:23:85:4b:f6:
                    7f:4e:93:84:79:9f:c8:2d:80:6c:2d:de:50:ae:27:
                    6f:cd:1e:47:03:85:ba:22:ca:1d:62:d0:6b:45:62:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8A:05:90:FF:BF:86:C7:C0:1A:17:89:9E:79:C8:F9:C8:3D:4F:98
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33332d3333203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:95:51:7d:3d:99:9c:d3:12:41:48:bb:b5:3b:2d:cc:2f:
         9a:0c:28:c9:b2:4a:d9:27:d1:81:36:50:26:9d:f5:60:d7:ce:
         56:f9:62:7e:e4:c9:f2:0b:a9:19:6b:d9:e6:73:95:da:99:28:
         f3:d3:e3:cb:ef:19:62:c7:0b:e1:e9:0d:7a:a9:75:42:d2:27:
         0a:5d:b4:9a:24:d0:fb:8d:d0:4b:0b:e2:3a:22:00:55:a9:28:
         34:f2:62:43:28:07:6d:13:9e:92:1c:1a:6c:10:ab:cb:85:d6:
         df:83:16:c2:60:23:80:6c:c4:9b:5a:c5:9b:a4:82:2d:f0:d6:
         4d:aa:82:05:a6:a7:72:1e:87:da:9a:6b:ad:89:42:0c:f8:3e:
         29:02:b6:1e:82:08:47:b0:03:e3:38:08:0f:6b:c4:03:ed:f9:
         68:ec:58:ac:4f:65:a6:84:32:89:97:81:ae:20:3b:fa:69:4c:
         5c:b8:ef:58:d6:5a:5f:8f:1f:a4:72:de:3d:fb:2c:40:ca:94:
         7d:65:88:ed:cf:5c:2e:dc:e4:9a:89:4c:0b:a6:41:9a:94:a3:
         75:2b:e8:1b:eb:86:fe:06:34:ba:96:eb:ea:5c:bb:ef:a1:a8:
         87:c7:89:d3:78:46:20:21:2e:c4:4e:7c:32:ac:e7:da:b2:cb:
         14:5d:cc:1e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBnXYLQD6EYjafzqoBWBlXHCucd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGRjFEM0E5NDdCOEI1RkY3NURENzFGRjFDRUQ3MEQ0
RTNGQTBCNDAeFw0yMzEwMjQxMjM4MTFaFw0yNDEwMjIxMjQzMTFaMDMxMTAvBgNV
BAMTKDA5OEEwNTkwRkZCRjg2QzdDMDFBMTc4OTlFNzlDOEY5QzgzRDRGOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjHCDiFWq/NNie7FDfslZlUTfZ
VQHDZAPaAih4DzeNQk/NLrR7KWOEbXhjqciaBCra9tU3Cdh27QjyS4ypyyrierjj
q3qHkMhoi6OG/nxkBvlNVX0EITS8cqCkwmFhQzZdJbXtOCRYj03GsJjP519cV64O
yhUNEtlD5hzks76E7VZfxRaPr+aGjPE2Zf23UMbiXwuEMgPYsgg+tu+RLlVDdFbA
bE9HZV1MbBOyqc4jIVK4lZgZleu1+YVv3/7323Wf+0d4fE1m54qsBbSi09POWTVq
63W9q5ThhJu9I4VL9n9Ok4R5n8gtgGwt3lCuJ2/NHkcDhboiyh1i0GtFYpYtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCYoFkP+/hsfAGheJnnnI+cg9T5gwHwYDVR0j
BBgwFoAUX/8dOpR7i1/3Xdcf8c7XDU4/oLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC81RkZGMUQzQTk0N0I4QjVGRjc1REQ3MUZGMUNFRDcwRDRFM0ZBMEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGRkYxRDNBOTQ3QjhCNUZG
NzVERDcxRkYxQ0VENzBENEUzRkEwQjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzIzODMwMzQzYTMxNjM2NDM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzYzMTM2
MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEHNQAMA0GCSqGSIb3DQEBCwUAA4IBAQCfyJVRfT2Z
nNMSQUi7tTstzC+aDCjJskrZJ9GBNlAmnfVg185W+WJ+5MnyC6kZa9nmc5XamSjz
0+PL7xlixwvh6Q16qXVC0icKXbSaJND7jdBLC+I6IgBVqSg08mJDKAdtE56SHBps
EKvLhdbfgxbCYCOAbMSbWsWbpIIt8NZNqoIFpqdyHofammutiUIM+D4pArYegghH
sAPjOAgPa8QD7flo7FisT2WmhDKJl4GuIDv6aUxcuO9Y1lpfjx+kct49+yxAypR9
ZYjtz1wu3OSaiUwLpkGalKN1K+gb64b+BjS6luvqXLvvoaiHx4nTeEYgIS7ETnwy
rOfasssUXcwe
-----END CERTIFICATE-----