Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
File:                     323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (raw, json)
Hash identifier:          z3xWhXReXbuW0MU41S7e7zUYqOATKCWoDEGfEPaTYYg=
Subject key identifier:   B6:C0:32:B4:8D:4F:26:3D:26:86:B7:F5:49:71:87:84:F1:0F:DE:91
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       2A5913059AEA6B4A65D8D5122EB4B3A81EA272C0
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
Signing time:             Fri 18 Aug 2023 15:59:42 +0000
ROA not before:           Fri 18 Aug 2023 15:54:42 +0000
ROA not after:            Fri 16 Aug 2024 15:59:42 +0000
asID:                     267222
IP address blocks:        2804:4a2c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:59:13:05:9a:ea:6b:4a:65:d8:d5:12:2e:b4:b3:a8:1e:a2:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 18 15:54:42 2023 GMT
            Not After : Aug 16 15:59:42 2024 GMT
        Subject: CN=B6C032B48D4F263D2686B7F549718784F10FDE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:f4:d4:4a:e6:56:65:dd:34:66:a6:c9:1a:
                    33:e6:e5:3b:a4:62:e1:45:e2:e8:6d:cb:ba:20:2d:
                    7f:a5:3d:0b:4e:2d:c8:20:f0:23:90:ef:60:de:28:
                    7e:55:84:49:b4:8e:55:94:ce:0d:f8:2a:2c:cf:c9:
                    9a:ca:88:1e:10:be:9b:bc:49:1d:a8:f6:a7:45:bc:
                    02:4c:7f:9a:96:f1:8f:f8:68:ef:f6:04:2c:f0:da:
                    3d:9e:8a:24:e9:c3:28:7b:ac:31:c6:b2:4b:73:d9:
                    33:e5:69:9a:4b:9d:dd:22:44:79:5c:ba:9c:4c:d8:
                    d0:93:21:57:4f:9c:59:aa:94:7e:17:99:bc:58:60:
                    aa:76:84:73:22:e0:2b:69:e2:e2:7c:93:9b:56:f5:
                    c4:8b:49:ec:3a:d6:74:2b:9e:c9:23:7d:c1:d0:cd:
                    b2:02:be:26:7b:b4:c2:b9:03:72:2a:6a:ca:29:11:
                    9a:de:a1:91:b5:b5:29:e6:b1:69:37:3c:cb:56:73:
                    6f:33:ba:e5:04:cd:0c:3a:40:af:f0:6c:62:61:0e:
                    5d:f2:f2:13:1d:70:26:df:4f:2a:3b:3a:bb:4a:d7:
                    d6:12:ab:99:9b:b3:c5:13:d4:73:07:db:7a:10:a8:
                    02:de:51:bd:a5:10:51:36:0d:6b:dc:c6:94:0d:fc:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C0:32:B4:8D:4F:26:3D:26:86:B7:F5:49:71:87:84:F1:0F:DE:91
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:68:8d:11:57:3e:13:25:1d:6b:e7:52:b5:49:fe:03:c9:
         d8:6d:98:6f:18:4e:f8:96:f2:16:72:8a:0f:11:1b:21:52:3b:
         e4:b8:2a:7d:63:f2:20:2a:17:32:97:83:0a:20:d7:e6:7f:a7:
         87:5f:23:6d:8c:38:82:b9:36:95:b9:72:aa:3b:06:36:35:30:
         d5:c7:80:d6:49:dd:55:08:3c:a6:eb:88:1f:ca:4e:65:b0:7e:
         64:a9:5b:8c:f2:33:fe:df:2d:7d:e8:db:6c:40:53:d9:4b:56:
         86:7f:26:4b:b6:9a:7b:e6:56:e3:ff:79:e3:62:ae:14:4c:bd:
         cc:ca:75:c2:f5:dd:84:50:c2:64:c8:52:93:f4:29:15:3a:f7:
         7c:92:ed:37:2b:f7:a8:78:c7:ac:18:33:f7:bd:3c:35:61:da:
         ea:02:68:43:ef:83:0a:80:d5:0d:a4:a9:82:ee:f0:8f:40:47:
         9d:43:8a:dc:04:5a:58:f0:99:e8:b0:bd:23:e1:7b:c3:59:32:
         61:7e:c2:b8:0e:b6:52:25:c8:fd:3e:41:a8:1d:64:3f:96:0e:
         37:e6:9a:a7:6e:10:d4:8e:d4:f0:16:4f:ef:c5:c6:36:55:19:
         d8:0e:28:04:30:3d:97:14:08:8d:12:86:0c:a3:1c:fe:33:ad:
         c1:4a:e3:60
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKlkTBZrqa0pl2NUSLrSzqB6icsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdFMUVGNEJGMzNBNEI2QkFERjYyNjI4RjMxNjBEMDI2
NEY0MDhCOTAeFw0yMzA4MTgxNTU0NDJaFw0yNDA4MTYxNTU5NDJaMDMxMTAvBgNV
BAMTKEI2QzAzMkI0OEQ0RjI2M0QyNjg2QjdGNTQ5NzE4Nzg0RjEwRkRFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEI/TUSuZWZd00ZqbJGjPm5Tuk
YuFF4uhty7ogLX+lPQtOLcgg8COQ72DeKH5VhEm0jlWUzg34KizPyZrKiB4Qvpu8
SR2o9qdFvAJMf5qW8Y/4aO/2BCzw2j2eiiTpwyh7rDHGsktz2TPlaZpLnd0iRHlc
upxM2NCTIVdPnFmqlH4XmbxYYKp2hHMi4Ctp4uJ8k5tW9cSLSew61nQrnskjfcHQ
zbICviZ7tMK5A3IqasopEZreoZG1tSnmsWk3PMtWc28zuuUEzQw6QK/wbGJhDl3y
8hMdcCbfTyo7OrtK19YSq5mbs8UT1HMH23oQqALeUb2lEFE2DWvcxpQN/BJHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtsAytI1PJj0mhrf1SXGHhPEP3pEwHwYDVR0j
BBgwFoAUV+HvS/M6S2ut9iYo8xYNAmT0CLkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o
a2UvMC81N0UxRUY0QkYzM0E0QjZCQURGNjI2MjhGMzE2MEQwMjY0RjQwOEI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3RTFFRjRCRjMzQTRCNkJB
REY2MjYyOEYzMTYwRDAyNjRGNDA4QjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlM3FUUFpwRGNibW9admhteGZCd1kzc2RSdnR2NlZzS1R5NDR5eVFNaGtlLzAv
MzIzODMwMzQzYTM0NjEzMjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKLDANBgkqhkiG9w0BAQsFAAOCAQEAapxojRFX
PhMlHWvnUrVJ/gPJ2G2YbxhO+JbyFnKKDxEbIVI75LgqfWPyICoXMpeDCiDX5n+n
h18jbYw4grk2lblyqjsGNjUw1ceA1kndVQg8puuIH8pOZbB+ZKlbjPIz/t8tfejb
bEBT2UtWhn8mS7aae+ZW4/9542KuFEy9zMp1wvXdhFDCZMhSk/QpFTr3fJLtNyv3
qHjHrBgz9708NWHa6gJoQ++DCoDVDaSpgu7wj0BHnUOK3ARaWPCZ6LC9I+F7w1ky
YX7CuA62UiXI/T5BqB1kP5YON+aap24Q1I7U8BZP78XGNlUZ2A4oBDA9lxQIjRKG
DKMc/jOtwUrjYA==
-----END CERTIFICATE-----