Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          0VISn41rpyQWmeNc507PhQzjNGvry3cIaaprrA9kU78=
Subject key identifier:   E3:4A:64:F5:FE:CD:34:C6:5D:D2:09:3E:51:BB:68:60:3C:9D:BE:12
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       1D63C54AE9A61DDD8E4EB5256DEDBFB357DCA7C5
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:42 +0000
ROA not before:           Tue 27 Feb 2024 17:25:42 +0000
ROA not after:            Tue 25 Feb 2025 17:30:42 +0000
asID:                     263146
IP address blocks:        2804:1778:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:63:c5:4a:e9:a6:1d:dd:8e:4e:b5:25:6d:ed:bf:b3:57:dc:a7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:42 2024 GMT
            Not After : Feb 25 17:30:42 2025 GMT
        Subject: CN=E34A64F5FECD34C65DD2093E51BB68603C9DBE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:e9:1b:dc:99:11:ad:be:d7:7d:e2:f5:c0:
                    49:79:a6:25:c7:12:55:55:4b:ae:33:c0:3b:3d:1d:
                    44:45:08:11:a4:5e:b5:3f:e2:4b:66:7d:e0:d8:3f:
                    73:34:e7:b0:3c:3d:ca:88:65:d5:fc:a4:01:32:2d:
                    f4:9a:cc:5e:26:82:85:39:85:b9:ca:a2:3c:2c:f0:
                    49:e0:63:b9:24:a4:d2:86:7e:aa:ad:ce:4d:8b:6a:
                    aa:14:6d:9a:77:f3:b3:34:46:19:58:83:4f:1a:16:
                    a6:32:5c:e1:3d:dd:55:dd:ad:68:4f:79:6c:5e:f5:
                    1f:66:ad:57:9f:36:9e:a2:3d:18:a3:b4:a2:b0:6d:
                    d6:bc:b9:e3:21:92:cd:3d:42:1d:4b:8b:30:3e:04:
                    93:e1:58:8d:71:31:7f:02:08:cf:90:bb:f1:be:e2:
                    f5:bf:81:c7:48:7e:45:30:7c:b7:05:18:90:93:fb:
                    57:ba:d2:88:e5:9f:67:1f:21:52:89:55:bb:75:4d:
                    f2:1b:51:51:6d:8c:2a:b3:1b:6a:30:49:18:2e:13:
                    4a:51:cb:e1:d2:6b:7c:e1:3e:a1:5e:22:6c:ca:27:
                    61:79:d8:3a:8c:c5:01:3d:c4:7e:da:09:06:c7:e7:
                    65:8d:48:36:f2:4e:0f:e0:e4:a3:8e:a7:c4:44:82:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4A:64:F5:FE:CD:34:C6:5D:D2:09:3E:51:BB:68:60:3C:9D:BE:12
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a383030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:78:26:ac:91:38:1f:87:8d:3a:78:19:18:bf:d0:f3:aa:
         d0:cb:75:99:3b:2a:2d:76:5d:6b:be:76:14:6c:51:38:89:04:
         a0:75:f2:91:6d:4d:5a:dc:6a:9b:8b:be:84:ce:c8:64:57:10:
         aa:a9:00:85:cb:1c:e9:02:37:40:07:51:59:1c:9e:84:67:92:
         0f:04:9d:92:98:56:08:ef:f6:b5:05:d1:84:cb:e8:0d:bd:18:
         e1:b3:64:a5:c5:e8:1c:e2:61:34:9a:52:7f:53:42:d9:fb:bf:
         69:84:15:d0:bd:03:c5:4b:fc:07:2d:be:36:67:0e:5e:50:31:
         ef:59:9f:c8:a2:df:1f:9d:82:81:db:2b:f8:a2:79:18:4c:e5:
         5f:d8:95:4a:63:ff:4c:f2:2d:90:b0:22:3c:06:6d:d1:4e:26:
         1a:08:59:42:fb:84:a6:ff:7a:ab:0e:35:f4:e1:09:b1:c3:67:
         5b:90:d8:77:67:c7:6f:68:6f:7a:c7:3d:b5:be:5b:e6:b9:02:
         27:9d:5e:fb:5b:34:d1:fb:ab:a1:6c:6c:81:15:96:24:c1:13:
         5a:73:d0:cb:03:6a:23:56:fd:9e:38:65:f2:a4:d8:11:8c:b5:
         cf:bd:2d:99:3f:1e:b0:95:a8:18:30:59:c1:f3:b2:ab:b9:72:
         65:b9:34:10
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHWPFSummHd2OTrUlbe2/s1fcp8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxNzMwMzFGNEQ0MjVERjA5REI3MzFFNEY3QUMxMDEx
REU2NkYxOTAeFw0yNDAyMjcxNzI1NDJaFw0yNTAyMjUxNzMwNDJaMDMxMTAvBgNV
BAMTKEUzNEE2NEY1RkVDRDM0QzY1REQyMDkzRTUxQkI2ODYwM0M5REJFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZekb3JkRrb7XfeL1wEl5piXH
ElVVS64zwDs9HURFCBGkXrU/4ktmfeDYP3M057A8PcqIZdX8pAEyLfSazF4mgoU5
hbnKojws8EngY7kkpNKGfqqtzk2LaqoUbZp387M0RhlYg08aFqYyXOE93VXdrWhP
eWxe9R9mrVefNp6iPRijtKKwbda8ueMhks09Qh1LizA+BJPhWI1xMX8CCM+Qu/G+
4vW/gcdIfkUwfLcFGJCT+1e60ojln2cfIVKJVbt1TfIbUVFtjCqzG2owSRguE0pR
y+HSa3zhPqFeImzKJ2F52DqMxQE9xH7aCQbH52WNSDbyTg/g5KOOp8REgptvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU40pk9f7NNMZd0gk+UbtoYDydvhIwHwYDVR0j
BBgwFoAUQhcwMfTUJd8J23MeT3rBAR3mbxkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMC80MjE3MzAzMUY0RDQyNURGMDlEQjczMUU0RjdBQzEwMTFERTY2RjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMTczMDMxRjRENDI1REYw
OURCNzMxRTRGN0FDMTAxMURFNjZGMTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzAv
MzIzODMwMzQzYTMxMzczNzM4M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMzMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEF3iAMA0GCSqGSIb3DQEBCwUA
A4IBAQARXHgmrJE4H4eNOngZGL/Q86rQy3WZOyotdl1rvnYUbFE4iQSgdfKRbU1a
3Gqbi76EzshkVxCqqQCFyxzpAjdAB1FZHJ6EZ5IPBJ2SmFYI7/a1BdGEy+gNvRjh
s2Slxegc4mE0mlJ/U0LZ+79phBXQvQPFS/wHLb42Zw5eUDHvWZ/Iot8fnYKB2yv4
onkYTOVf2JVKY/9M8i2QsCI8Bm3RTiYaCFlC+4Sm/3qrDjX04Qmxw2dbkNh3Z8dv
aG96xz21vlvmuQInnV77WzTR+6uhbGyBFZYkwRNac9DLA2ojVv2eOGXypNgRjLXP
vS2ZPx6wlagYMFnB87KruXJluTQQ
-----END CERTIFICATE-----