Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a383030303a3a2f33342d3334203d3e20323637363134.roa
File:                     323830343a343366633a383030303a3a2f33342d3334203d3e20323637363134.roa (raw, json)
Hash identifier:          +tqhHZjErQ5CClnrZrNJNjZ8if5XgtahdZYfefl4CNY=
Subject key identifier:   8F:51:D5:09:B5:87:94:37:ED:F3:7E:4F:C6:D5:5D:86:20:72:59:FE
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       5B0FEB3DD8F1893A9544616396839C3D22852DC9
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a383030303a3a2f33342d3334203d3e20323637363134.roa
Signing time:             Wed 06 Dec 2023 18:21:37 +0000
ROA not before:           Wed 06 Dec 2023 18:16:37 +0000
ROA not after:            Wed 04 Dec 2024 18:21:37 +0000
asID:                     267614
IP address blocks:        2804:43fc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0f:eb:3d:d8:f1:89:3a:95:44:61:63:96:83:9c:3d:22:85:2d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Dec  6 18:16:37 2023 GMT
            Not After : Dec  4 18:21:37 2024 GMT
        Subject: CN=8F51D509B5879437EDF37E4FC6D55D86207259FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:f0:e2:45:10:d3:c4:ad:24:e7:2f:d6:42:
                    6f:b0:60:31:5e:2b:2a:4c:9f:0e:38:56:e5:11:96:
                    0a:15:ee:fc:60:0c:92:f7:91:1b:40:af:e7:12:79:
                    58:ed:08:56:6e:41:46:6f:e0:95:c9:3e:74:bb:00:
                    bc:d9:d5:72:20:99:b7:1d:c3:00:79:b0:02:55:1a:
                    f5:7d:c9:9c:39:a5:00:74:ba:8e:bd:3e:5d:f5:75:
                    6a:0b:91:24:3e:18:a1:3e:67:22:78:0c:87:30:55:
                    60:5f:a6:4c:50:e1:76:16:80:ab:62:ab:c7:5f:4a:
                    33:71:b4:98:52:18:38:da:b4:86:ac:b5:c2:0d:2e:
                    40:cf:b8:c2:7c:d3:82:4c:7c:93:91:25:01:c3:b0:
                    03:59:cf:c7:d8:f7:2d:19:3f:ae:03:f9:87:51:fc:
                    eb:3f:21:fd:4a:58:09:31:d9:7f:2c:85:45:77:50:
                    e0:0c:c9:ad:3d:c5:65:42:0e:c5:1e:86:b8:b9:e2:
                    b4:e1:64:9f:90:2a:18:aa:0d:3b:33:1b:a3:37:65:
                    60:23:74:36:3c:b2:c6:75:75:36:02:1b:1b:24:53:
                    10:61:e9:4f:76:10:27:a0:34:a6:31:e5:ae:7b:57:
                    da:8a:57:bc:63:e3:fe:47:2e:79:ea:2b:f1:72:bc:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:51:D5:09:B5:87:94:37:ED:F3:7E:4F:C6:D5:5D:86:20:72:59:FE
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a383030303a3a2f33342d3334203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:9f:7a:57:cc:f3:99:69:89:4a:54:41:f4:f6:8f:6f:32:
         4b:3f:c8:b6:8e:ab:92:11:b1:b1:9d:14:24:80:10:15:35:34:
         8e:a9:45:81:0b:a6:c6:de:75:54:be:4c:c7:44:19:ef:bd:a0:
         d5:d7:6b:46:44:20:df:13:34:33:c3:ae:b2:49:a8:1f:be:d2:
         13:dc:46:fa:ee:9f:00:f2:d0:39:a7:84:1c:f5:d4:f7:db:c1:
         97:3c:0c:ea:e1:b9:2f:5e:e9:97:12:35:5e:b6:ec:30:ac:e0:
         8a:6d:e6:41:ad:41:21:ab:ae:7d:0d:f4:dc:b3:20:42:55:6e:
         62:17:52:11:24:81:9f:bc:0b:54:1c:37:c2:e7:b0:68:93:9d:
         45:b6:96:cf:fc:64:f6:68:8f:b8:44:92:22:26:aa:6c:81:51:
         20:65:c5:0e:37:d6:59:46:d5:92:be:90:bf:7b:06:96:2e:88:
         45:c1:74:22:79:53:7d:26:06:b2:a3:89:f0:31:8d:06:c8:63:
         bf:60:a9:da:55:96:f3:ba:be:de:51:fa:f9:a5:9d:25:9e:2f:
         98:f7:ed:3e:c7:8b:76:e9:ee:10:e5:21:f3:c4:8c:5a:01:ff:
         34:db:e4:8c:3f:77:8c:c7:8b:5c:85:ef:d2:3f:f6:c9:6b:0c:
         0e:d1:ca:c2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWw/rPdjxiTqVRGFjloOcPSKFLckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EzNTU3Q0E3QzIzNjZEQzE4REVFQkI3NDMzQjFBM0Q5
M0Q0NUZGQzAeFw0yMzEyMDYxODE2MzdaFw0yNDEyMDQxODIxMzdaMDMxMTAvBgNV
BAMTKDhGNTFENTA5QjU4Nzk0MzdFREYzN0U0RkM2RDU1RDg2MjA3MjU5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiPDiRRDTxK0k5y/WQm+wYDFe
KypMnw44VuURlgoV7vxgDJL3kRtAr+cSeVjtCFZuQUZv4JXJPnS7ALzZ1XIgmbcd
wwB5sAJVGvV9yZw5pQB0uo69Pl31dWoLkSQ+GKE+ZyJ4DIcwVWBfpkxQ4XYWgKti
q8dfSjNxtJhSGDjatIastcINLkDPuMJ804JMfJORJQHDsANZz8fY9y0ZP64D+YdR
/Os/If1KWAkx2X8shUV3UOAMya09xWVCDsUehri54rThZJ+QKhiqDTszG6M3ZWAj
dDY8ssZ1dTYCGxskUxBh6U92ECegNKYx5a57V9qKV7xj4/5HLnnqK/FyvCxtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUj1HVCbWHlDft835PxtVdhiByWf4wHwYDVR0j
BBgwFoAUejVXynwjZtwY3uu3QzsaPZPUX/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1NNNzJ6Y2hXNHRhbmlveGJweTc4UFJkSmduc2lOTkpja0JGdEdhMTFi
SEIvMC83QTM1NTdDQTdDMjM2NkRDMThERUVCQjc0MzNCMUEzRDkzRDQ1RkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBMzU1N0NBN0MyMzY2REMx
OERFRUJCNzQzM0IxQTNEOTNENDVGRkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NTTTcyemNoVzR0YW5pb3hicHk3OFBSZEpnbnNpTk5KY2tCRnRHYTExYkhCLzAv
MzIzODMwMzQzYTM0MzM2NjYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM2MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQ/yAMA0GCSqGSIb3DQEBCwUA
A4IBAQAy5596V8zzmWmJSlRB9PaPbzJLP8i2jquSEbGxnRQkgBAVNTSOqUWBC6bG
3nVUvkzHRBnvvaDV12tGRCDfEzQzw66ySagfvtIT3Eb67p8A8tA5p4Qc9dT328GX
PAzq4bkvXumXEjVetuwwrOCKbeZBrUEhq659DfTcsyBCVW5iF1IRJIGfvAtUHDfC
57Bok51FtpbP/GT2aI+4RJIiJqpsgVEgZcUON9ZZRtWSvpC/ewaWLohFwXQieVN9
Jgayo4nwMY0GyGO/YKnaVZbzur7eUfr5pZ0lni+Y9+0+x4t26e4Q5SHzxIxaAf80
2+SMP3eMx4tche/SP/bJawwO0crC
-----END CERTIFICATE-----