Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/323830343a336161343a3a2f33322d3436203d3e20323636313031.roa
File:                     323830343a336161343a3a2f33322d3436203d3e20323636313031.roa (raw, json)
Hash identifier:          odAj0lp8CEGiC6oVlUKxTbhosYh4uCYrMkmIhD8f6qg=
Subject key identifier:   6E:5E:B5:B4:0B:79:87:02:1E:36:D9:C4:C3:0A:70:E8:63:C3:A7:B0
Certificate issuer:       /CN=8C4651A3308D8202B96BFAF56F107E60A6D6277C
Certificate serial:       56535AE028222EE7240F08EB1566D2755A1589F2
Authority key identifier: 8C:46:51:A3:30:8D:82:02:B9:6B:FA:F5:6F:10:7E:60:A6:D6:27:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4651A3308D8202B96BFAF56F107E60A6D6277C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/323830343a336161343a3a2f33322d3436203d3e20323636313031.roa
Signing time:             Tue 02 Apr 2024 23:18:22 +0000
ROA not before:           Tue 02 Apr 2024 23:13:22 +0000
ROA not after:            Tue 01 Apr 2025 23:18:22 +0000
asID:                     266101
IP address blocks:        2804:3aa4::/32 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:53:5a:e0:28:22:2e:e7:24:0f:08:eb:15:66:d2:75:5a:15:89:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4651A3308D8202B96BFAF56F107E60A6D6277C
        Validity
            Not Before: Apr  2 23:13:22 2024 GMT
            Not After : Apr  1 23:18:22 2025 GMT
        Subject: CN=6E5EB5B40B7987021E36D9C4C30A70E863C3A7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:43:d8:25:cb:c6:fe:87:c9:da:0a:c6:d9:
                    68:13:b7:11:0b:6d:81:11:19:49:cc:6a:7d:24:80:
                    8c:9f:33:34:60:27:35:ac:0b:77:64:5a:59:dc:14:
                    cd:02:b8:52:ff:fc:04:7a:7d:54:bb:bb:ff:3c:54:
                    f2:52:8b:b9:d1:b2:6d:b0:2b:cf:0d:a5:d0:4d:67:
                    b5:d0:bd:6d:23:46:5c:94:c1:6a:d5:00:6a:27:c5:
                    97:98:49:22:ac:99:45:14:28:68:05:dd:66:09:7f:
                    e1:19:cd:fc:0e:6f:47:8c:87:b6:55:d8:40:65:26:
                    f6:12:c5:15:02:f9:11:bc:af:73:37:f0:f6:8f:2c:
                    4a:e4:ac:f5:8c:55:be:3d:7d:80:2f:00:41:d8:83:
                    18:b6:f9:a9:df:d5:85:8e:d0:70:c4:aa:39:cc:3f:
                    55:03:2a:63:6a:52:2a:25:66:82:14:f0:61:d2:aa:
                    ea:64:44:57:37:4c:ff:ae:17:dd:ca:62:28:11:6c:
                    22:a8:01:4f:4a:53:aa:6a:69:5d:2b:d7:a6:22:7a:
                    d3:5c:f7:63:5b:3c:f3:b6:be:c3:e6:ea:c1:17:be:
                    bc:f2:03:12:c0:12:35:9c:82:ec:fc:0e:0d:3b:11:
                    aa:6b:fb:61:ae:0e:c2:31:98:34:a8:c1:46:fe:1c:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:B5:B4:0B:79:87:02:1E:36:D9:C4:C3:0A:70:E8:63:C3:A7:B0
            X509v3 Authority Key Identifier:
                keyid:8C:46:51:A3:30:8D:82:02:B9:6B:FA:F5:6F:10:7E:60:A6:D6:27:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/8C4651A3308D8202B96BFAF56F107E60A6D6277C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4651A3308D8202B96BFAF56F107E60A6D6277C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HWsoMi34P4JTQviASkiW7KxEvDgmZd9T7HR9Ey943fe/1/323830343a336161343a3a2f33322d3436203d3e20323636313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:b7:f0:4d:e9:82:03:1e:a7:62:79:74:56:01:bb:01:7a:
         64:33:35:fa:fa:03:20:38:b4:d7:28:63:a1:c2:8a:ea:90:23:
         8a:63:99:95:2a:5a:a9:ca:19:04:8e:e1:4c:70:e2:62:e9:95:
         ab:c0:e5:1d:0f:36:97:da:84:f2:4e:96:24:af:7b:84:0a:6e:
         c1:e7:52:c1:eb:3f:6e:7e:d5:d2:bb:31:b1:4e:fa:3f:51:70:
         6e:04:11:bf:52:13:fd:23:3b:cb:28:60:98:eb:17:2f:f8:b6:
         d7:4f:70:49:30:c8:60:3e:c3:42:5d:66:2d:ad:af:c8:ad:57:
         10:12:16:e0:83:3c:09:07:21:d4:1c:b6:be:20:a4:fb:a8:ee:
         03:31:eb:9b:c8:f4:41:9f:72:6f:1c:28:cc:13:2b:fd:26:d6:
         45:b3:ee:e3:82:fe:ed:c1:4c:0c:bd:f8:8f:e8:74:64:1b:69:
         bf:fb:d7:dc:72:cb:38:ce:a3:08:6a:54:a5:92:3f:89:4c:9f:
         01:b4:14:04:75:98:f4:13:17:c7:b6:aa:29:38:77:02:32:9d:
         71:7d:d0:6a:65:af:a3:02:e7:67:dd:8a:f6:f7:c3:a0:7c:57:
         0a:61:80:14:05:b8:b5:0e:a3:5e:c3:fd:f4:e9:cb:98:e2:f1:
         82:cb:d2:9b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVlNa4CgiLuckDwjrFWbSdVoVifIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM0NjUxQTMzMDhEODIwMkI5NkJGQUY1NkYxMDdFNjBB
NkQ2Mjc3QzAeFw0yNDA0MDIyMzEzMjJaFw0yNTA0MDEyMzE4MjJaMDMxMTAvBgNV
BAMTKDZFNUVCNUI0MEI3OTg3MDIxRTM2RDlDNEMzMEE3MEU4NjNDM0E3QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUH0PYJcvG/ofJ2grG2WgTtxEL
bYERGUnMan0kgIyfMzRgJzWsC3dkWlncFM0CuFL//AR6fVS7u/88VPJSi7nRsm2w
K88NpdBNZ7XQvW0jRlyUwWrVAGonxZeYSSKsmUUUKGgF3WYJf+EZzfwOb0eMh7ZV
2EBlJvYSxRUC+RG8r3M38PaPLErkrPWMVb49fYAvAEHYgxi2+anf1YWO0HDEqjnM
P1UDKmNqUiolZoIU8GHSqupkRFc3TP+uF93KYigRbCKoAU9KU6pqaV0r16YietNc
92NbPPO2vsPm6sEXvrzyAxLAEjWcguz8Dg07Eapr+2GuDsIxmDSowUb+HFgHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbl61tAt5hwIeNtnEwwpw6GPDp7AwHwYDVR0j
BBgwFoAUjEZRozCNggK5a/r1bxB+YKbWJ3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUhXc29NaTM0UDRKVFF2aUFTa2lXN0t4RXZEZ21aZDlUN0hSOUV5OTQz
ZmUvMS84QzQ2NTFBMzMwOEQ4MjAyQjk2QkZBRjU2RjEwN0U2MEE2RDYyNzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDNDY1MUEzMzA4RDgyMDJC
OTZCRkFGNTZGMTA3RTYwQTZENjI3N0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVIV3NvTWkzNFA0SlRRdmlBU2tpVzdLeEV2RGdtWmQ5VDdIUjlFeTk0M2ZlLzEv
MzIzODMwMzQzYTMzNjE2MTM0M2EzYTJmMzMzMjJkMzQzNjIwM2QzZTIwMzIzNjM2
MzEzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ6pDANBgkqhkiG9w0BAQsFAAOCAQEAPtS38E3p
ggMep2J5dFYBuwF6ZDM1+voDIDi01yhjocKK6pAjimOZlSpaqcoZBI7hTHDiYumV
q8DlHQ82l9qE8k6WJK97hApuwedSwes/bn7V0rsxsU76P1FwbgQRv1IT/SM7yyhg
mOsXL/i2109wSTDIYD7DQl1mLa2vyK1XEBIW4IM8CQch1By2viCk+6juAzHrm8j0
QZ9ybxwozBMr/SbWRbPu44L+7cFMDL34j+h0ZBtpv/vX3HLLOM6jCGpUpZI/iUyf
AbQUBHWY9BMXx7aqKTh3AjKdcX3QamWvowLnZ92K9vfDoHxXCmGAFAW4tQ6jXsP9
9OnLmOLxgsvSmw==
-----END CERTIFICATE-----