Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a3a2f33322d3430203d3e20323633393134.roa
File:                     323830343a323761343a3a2f33322d3430203d3e20323633393134.roa (raw, json)
Hash identifier:          0HWZ1hOTv/VhmbUYr5scF8wBkJPxx7rgAkln/25K8GY=
Subject key identifier:   CB:DE:C0:9D:14:96:DA:42:08:E9:BE:95:D6:A8:FF:47:11:60:18:2A
Certificate issuer:       /CN=7D024D482794E0E96397A274EC4071AD93013B55
Certificate serial:       1432D3766E291CE745EE40348192F427599E41A4
Authority key identifier: 7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a3a2f33322d3430203d3e20323633393134.roa
Signing time:             Wed 17 May 2023 14:13:42 +0000
ROA not before:           Wed 17 May 2023 14:08:42 +0000
ROA not after:            Wed 15 May 2024 14:13:42 +0000
asID:                     263914
IP address blocks:        2804:27a4::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:32:d3:76:6e:29:1c:e7:45:ee:40:34:81:92:f4:27:59:9e:41:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D024D482794E0E96397A274EC4071AD93013B55
        Validity
            Not Before: May 17 14:08:42 2023 GMT
            Not After : May 15 14:13:42 2024 GMT
        Subject: CN=CBDEC09D1496DA4208E9BE95D6A8FF471160182A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:21:15:43:a9:f9:21:8a:ff:f9:16:93:84:
                    12:ee:3d:e0:e1:ce:3f:a6:a5:34:e1:92:a6:e9:ca:
                    f7:8c:8d:8d:ec:59:55:ef:2c:d4:b5:be:91:a6:19:
                    08:f0:25:19:35:f3:77:80:b6:b4:ad:e3:6d:a4:81:
                    49:15:9b:80:01:62:34:69:16:32:c4:05:9f:b1:e0:
                    c9:40:73:be:58:ed:5f:ab:7f:2f:7a:d3:56:37:5a:
                    b7:51:fd:5a:8d:71:8d:f0:57:22:b5:35:e0:5e:fe:
                    95:25:f9:18:63:52:c2:fd:e3:e3:d6:e8:83:2d:90:
                    f9:09:7f:97:ea:16:f5:d5:99:0c:75:71:2f:e7:d7:
                    04:8d:02:db:9d:27:da:d7:98:65:0a:1e:d7:79:75:
                    40:56:8d:cb:05:35:44:74:d7:a7:0b:fe:69:a0:ab:
                    59:a3:f9:23:2d:ec:37:97:b2:83:7a:35:d1:06:e6:
                    01:b1:c0:a3:d5:39:f9:5c:ed:ff:f0:f0:0c:9a:ab:
                    7a:78:64:76:2c:1f:49:c0:8d:10:ff:c7:dd:18:2e:
                    45:e6:be:e3:af:ca:7f:da:5f:74:a4:eb:11:b7:d1:
                    24:fc:74:2c:7d:d4:de:2a:88:cb:56:d1:31:ea:22:
                    4a:61:b9:91:2c:2c:38:97:b9:1b:a5:5e:f9:85:81:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DE:C0:9D:14:96:DA:42:08:E9:BE:95:D6:A8:FF:47:11:60:18:2A
            X509v3 Authority Key Identifier:
                keyid:7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/323830343a323761343a3a2f33322d3430203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:cc:3c:8e:e8:fa:f7:ba:1d:45:b0:13:8e:ec:82:54:ef:e9:
         23:de:be:7a:b4:8f:6b:bc:c4:8f:7a:35:c0:03:dd:3d:02:f5:
         37:46:94:12:37:f2:7f:c7:61:c7:4d:6e:29:a6:d7:d4:b8:d7:
         2b:d3:21:a3:39:21:5f:b3:26:94:27:d6:61:aa:6d:38:b9:dc:
         17:3d:29:98:65:2c:ec:e5:26:d0:ab:1e:c9:0e:34:6f:a8:19:
         88:d8:22:a0:53:95:e2:06:7b:4d:df:ff:96:3f:e5:94:3d:d2:
         60:e2:c4:c2:d3:5b:d6:4e:b3:3c:d7:d0:68:86:51:b2:b2:69:
         05:f3:ba:5b:83:38:82:10:1c:0a:6d:a9:6a:c1:e0:3a:3c:68:
         75:76:05:eb:46:9b:1d:ac:b3:ee:ca:98:30:87:35:bf:17:26:
         d3:77:c8:ab:a3:f1:94:ee:0f:72:b4:17:18:90:b9:7b:38:e5:
         de:0c:b1:62:d9:8a:8f:c0:c6:f5:f4:03:5b:73:86:0e:cf:3d:
         15:f3:52:9d:a4:22:7a:b8:a8:99:27:ae:9c:c7:65:15:e4:2b:
         2c:78:a2:93:3e:f4:8f:7a:24:a8:85:f6:f9:8e:fe:77:cd:fc:
         de:d9:18:5a:fc:71:9f:aa:79:ed:2f:cb:fe:53:9a:a7:75:d7:
         7f:06:f6:0c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFDLTdm4pHOdF7kA0gZL0J1meQaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QwMjRENDgyNzk0RTBFOTYzOTdBMjc0RUM0MDcxQUQ5
MzAxM0I1NTAeFw0yMzA1MTcxNDA4NDJaFw0yNDA1MTUxNDEzNDJaMDMxMTAvBgNV
BAMTKENCREVDMDlEMTQ5NkRBNDIwOEU5QkU5NUQ2QThGRjQ3MTE2MDE4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FyEVQ6n5IYr/+RaThBLuPeDh
zj+mpTThkqbpyveMjY3sWVXvLNS1vpGmGQjwJRk183eAtrSt422kgUkVm4ABYjRp
FjLEBZ+x4MlAc75Y7V+rfy9601Y3WrdR/VqNcY3wVyK1NeBe/pUl+RhjUsL94+PW
6IMtkPkJf5fqFvXVmQx1cS/n1wSNAtudJ9rXmGUKHtd5dUBWjcsFNUR016cL/mmg
q1mj+SMt7DeXsoN6NdEG5gGxwKPVOflc7f/w8Ayaq3p4ZHYsH0nAjRD/x90YLkXm
vuOvyn/aX3Sk6xG30ST8dCx91N4qiMtW0THqIkphuZEsLDiXuRulXvmFgQYdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUy97AnRSW2kII6b6V1qj/RxFgGCowHwYDVR0j
BBgwFoAUfQJNSCeU4Oljl6J07EBxrZMBO1UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkNuaHU1Rnc3QTc0dGNwbmZ0UXhidzVTS2Q2WktpZWpTckN6WWpiS21h
eE0vMC83RDAyNEQ0ODI3OTRFMEU5NjM5N0EyNzRFQzQwNzFBRDkzMDEzQjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdEMDI0RDQ4Mjc5NEUwRTk2
Mzk3QTI3NEVDNDA3MUFEOTMwMTNCNTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JDbmh1NUZ3N0E3NHRjcG5mdFF4Ync1U0tkNlpLaWVqU3JDellqYkttYXhNLzAv
MzIzODMwMzQzYTMyMzc2MTM0M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjMz
MzkzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnpDANBgkqhkiG9w0BAQsFAAOCAQEAr8w8juj6
97odRbATjuyCVO/pI96+erSPa7zEj3o1wAPdPQL1N0aUEjfyf8dhx01uKabX1LjX
K9MhozkhX7MmlCfWYaptOLncFz0pmGUs7OUm0KseyQ40b6gZiNgioFOV4gZ7Td//
lj/llD3SYOLEwtNb1k6zPNfQaIZRsrJpBfO6W4M4ghAcCm2pasHgOjxodXYF60ab
Hayz7sqYMIc1vxcm03fIq6PxlO4PcrQXGJC5ezjl3gyxYtmKj8DG9fQDW3OGDs89
FfNSnaQieriomSeunMdlFeQrLHiikz70j3okqIX2+Y7+d8383tkYWvxxn6p57S/L
/lOap3XXfwb2DA==
-----END CERTIFICATE-----