Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa
File:                     323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa (raw, json)
Hash identifier:          U3YyEAg0q2CxcgPJL4qH2CbjU10NL12tbZ1R9D/9IQc=
Subject key identifier:   8C:8A:FC:2A:24:BB:7D:E6:BF:42:6F:BB:EB:BB:5F:2E:F9:9D:B3:EB
Certificate issuer:       /CN=BFE42304450EA733F37BD9420D070B3323835C2F
Certificate serial:       4288F2EE379FAA98F2F33B0B2A7B1D686FD63CB5
Authority key identifier: BF:E4:23:04:45:0E:A7:33:F3:7B:D9:42:0D:07:0B:33:23:83:5C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE42304450EA733F37BD9420D070B3323835C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa
Signing time:             Fri 09 Feb 2024 12:33:43 +0000
ROA not before:           Fri 09 Feb 2024 12:28:43 +0000
ROA not after:            Fri 07 Feb 2025 12:33:43 +0000
asID:                     266170
IP address blocks:        2804:3bc8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:88:f2:ee:37:9f:aa:98:f2:f3:3b:0b:2a:7b:1d:68:6f:d6:3c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE42304450EA733F37BD9420D070B3323835C2F
        Validity
            Not Before: Feb  9 12:28:43 2024 GMT
            Not After : Feb  7 12:33:43 2025 GMT
        Subject: CN=8C8AFC2A24BB7DE6BF426FBBEBBB5F2EF99DB3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:78:ab:90:e5:2c:d8:e7:ad:28:8e:fc:65:
                    51:5c:18:5c:1b:ff:84:82:a5:02:84:fc:51:f2:14:
                    b3:91:b8:95:59:1d:a1:10:9c:fc:c2:5f:61:be:5c:
                    9c:de:21:4c:bc:ae:c2:13:8f:0e:95:59:28:c4:65:
                    40:1f:65:a3:de:2a:16:05:4b:39:f2:35:e7:3c:49:
                    6a:62:dd:c5:80:06:89:e2:00:15:b5:3e:b7:63:d1:
                    96:6b:5a:2f:93:81:8c:29:db:64:b0:05:94:bb:09:
                    13:39:1b:ca:26:80:7a:1e:c2:99:a6:f9:8d:b9:e6:
                    9f:ac:a8:78:8f:92:37:46:bb:f6:2c:76:8a:cf:58:
                    6d:84:ef:b8:9e:0e:d5:61:2a:df:de:db:82:64:28:
                    ee:87:ea:bf:4b:7c:c2:07:f8:00:0e:95:c6:db:fc:
                    37:ab:4f:ae:36:53:db:d1:64:85:f3:98:1a:41:2b:
                    6e:3e:36:62:e6:86:b5:c5:67:12:86:79:5a:cb:ad:
                    c8:55:d5:ff:1d:c2:d1:19:0d:44:e7:c2:c0:f3:8f:
                    dd:f5:8b:be:e0:c3:4c:8c:2f:73:b1:cf:0a:b4:46:
                    7d:77:87:b5:96:02:f5:9f:a3:11:53:67:d3:83:b9:
                    16:41:49:78:ba:2e:ec:42:6d:04:b3:f4:13:4f:6d:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8A:FC:2A:24:BB:7D:E6:BF:42:6F:BB:EB:BB:5F:2E:F9:9D:B3:EB
            X509v3 Authority Key Identifier:
                keyid:BF:E4:23:04:45:0E:A7:33:F3:7B:D9:42:0D:07:0B:33:23:83:5C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/BFE42304450EA733F37BD9420D070B3323835C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFE42304450EA733F37BD9420D070B3323835C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:8e:4a:d8:6f:b3:63:c5:df:d4:d9:92:1b:4d:1b:f9:ab:c9:
         70:c2:c7:77:58:b8:dd:97:27:2f:4c:8c:1e:c0:76:12:8e:9e:
         b8:fc:a7:87:d3:93:9b:00:14:32:fb:9d:a7:3b:7e:70:8e:bc:
         10:5c:2c:bd:40:ba:7b:bc:65:bb:82:26:c3:36:bb:aa:42:18:
         53:55:67:c1:03:ec:04:1e:12:8d:c6:01:ef:4e:6e:40:01:33:
         98:28:49:ae:ee:41:ad:3f:6e:4d:5e:ea:af:31:52:fa:33:11:
         62:52:50:a5:f6:e4:c7:29:39:f6:d0:2a:b6:67:54:9e:4b:c1:
         2e:cc:8a:3a:de:75:b9:53:00:ae:f9:3b:6d:df:df:2e:91:5f:
         98:55:e9:00:28:7e:76:3d:df:69:7f:da:7c:6d:6a:e7:ff:66:
         3a:c4:4b:7d:6e:f4:4a:69:96:3b:a6:3f:76:7b:30:18:99:e1:
         0b:c6:a1:25:b1:9c:9f:de:cd:01:f9:d5:43:b5:0d:b0:07:3c:
         27:b1:f1:61:38:86:29:b8:a4:48:74:fb:9d:06:fe:78:4e:13:
         7c:4d:c8:24:fe:1e:00:c3:4c:cc:23:ca:48:6f:b4:e5:53:78:
         e3:c7:eb:5f:95:5f:7e:da:d2:4c:34:38:f7:6e:e5:1c:e8:92:
         40:1a:e9:df
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQojy7jefqpjy8zsLKnsdaG/WPLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZFNDIzMDQ0NTBFQTczM0YzN0JEOTQyMEQwNzBCMzMy
MzgzNUMyRjAeFw0yNDAyMDkxMjI4NDNaFw0yNTAyMDcxMjMzNDNaMDMxMTAvBgNV
BAMTKDhDOEFGQzJBMjRCQjdERTZCRjQyNkZCQkVCQkI1RjJFRjk5REIzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUH3irkOUs2OetKI78ZVFcGFwb
/4SCpQKE/FHyFLORuJVZHaEQnPzCX2G+XJzeIUy8rsITjw6VWSjEZUAfZaPeKhYF
SznyNec8SWpi3cWABoniABW1Prdj0ZZrWi+TgYwp22SwBZS7CRM5G8omgHoewpmm
+Y255p+sqHiPkjdGu/YsdorPWG2E77ieDtVhKt/e24JkKO6H6r9LfMIH+AAOlcbb
/DerT642U9vRZIXzmBpBK24+NmLmhrXFZxKGeVrLrchV1f8dwtEZDUTnwsDzj931
i77gw0yML3Oxzwq0Rn13h7WWAvWfoxFTZ9ODuRZBSXi6LuxCbQSz9BNPbU5PAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjIr8KiS7fea/Qm+767tfLvmds+swHwYDVR0j
BBgwFoAUv+QjBEUOpzPze9lCDQcLMyODXC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjlIOU5ETjFEbXk2akZZNFVjQ1dieW9ZYXdDd2NydUVCUFVyck1Vd1FF
a1kvMC9CRkU0MjMwNDQ1MEVBNzMzRjM3QkQ5NDIwRDA3MEIzMzIzODM1QzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGRTQyMzA0NDUwRUE3MzNG
MzdCRDk0MjBEMDcwQjMzMjM4MzVDMkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I5SDlORE4xRG15NmpGWTRVY0NXYnlvWWF3Q3djcnVFQlBVcnJNVXdRRWtZLzAv
MzIzODMwMzQzYTMzNjI2MzM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEO8iAMA0GCSqGSIb3DQEBCwUA
A4IBAQCsjkrYb7Njxd/U2ZIbTRv5q8lwwsd3WLjdlycvTIwewHYSjp64/KeH05Ob
ABQy+52nO35wjrwQXCy9QLp7vGW7gibDNruqQhhTVWfBA+wEHhKNxgHvTm5AATOY
KEmu7kGtP25NXuqvMVL6MxFiUlCl9uTHKTn20Cq2Z1SeS8EuzIo63nW5UwCu+Ttt
398ukV+YVekAKH52Pd9pf9p8bWrn/2Y6xEt9bvRKaZY7pj92ezAYmeELxqElsZyf
3s0B+dVDtQ2wBzwnsfFhOIYpuKRIdPudBv54ThN8Tcgk/h4Aw0zMI8pIb7TlU3jj
x+tflV9+2tJMNDj3buUc6JJAGunf
-----END CERTIFICATE-----