Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3334203d3e20323637363537.roa
File:                     323830343a343464383a3a2f33322d3334203d3e20323637363537.roa (raw, json)
Hash identifier:          JlznyfkduUGubU+QNKHriGONd6SNJt41S2IcyPBso08=
Subject key identifier:   0F:78:29:FA:BC:2E:4C:1A:6C:2B:4F:AF:4C:91:FD:43:D0:2B:98:85
Certificate issuer:       /CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
Certificate serial:       493DF7FBA0F670CB9D6A653C7738B957C8E6C0F1
Authority key identifier: 27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3334203d3e20323637363537.roa
Signing time:             Thu 11 Jan 2024 13:55:47 +0000
ROA not before:           Thu 11 Jan 2024 13:50:47 +0000
ROA not after:            Thu 09 Jan 2025 13:55:47 +0000
asID:                     267657
IP address blocks:        2804:44d8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3d:f7:fb:a0:f6:70:cb:9d:6a:65:3c:77:38:b9:57:c8:e6:c0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
        Validity
            Not Before: Jan 11 13:50:47 2024 GMT
            Not After : Jan  9 13:55:47 2025 GMT
        Subject: CN=0F7829FABC2E4C1A6C2B4FAF4C91FD43D02B9885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:2c:74:a9:89:04:17:66:86:9d:45:36:27:
                    cd:b8:1f:50:28:8c:41:aa:49:f5:c2:17:8b:b3:88:
                    c1:c9:53:eb:75:5a:4b:f3:52:58:34:23:ee:cc:75:
                    85:2e:7e:74:64:a1:f5:55:64:3c:36:94:1b:03:fe:
                    da:24:cf:bd:b5:91:f6:1b:44:e5:90:53:78:89:0d:
                    53:30:d9:f2:d4:af:44:34:79:12:15:66:f0:b7:fb:
                    a9:18:71:10:6c:10:3b:3f:81:de:34:ee:e8:18:5a:
                    7d:73:88:fb:f6:0a:73:0b:d3:3b:c8:cd:f1:35:2b:
                    6f:60:6c:e7:d1:d9:b4:5b:06:d2:e1:c2:c1:d3:b3:
                    f9:e8:43:e7:a5:44:6b:bc:da:b6:60:1c:81:e6:44:
                    57:db:80:86:70:11:35:ad:ca:54:bc:66:16:34:fb:
                    76:07:e4:3e:b7:de:44:90:a0:78:38:d6:3b:c1:aa:
                    ca:7e:b6:d9:0f:5a:49:51:f9:62:29:ee:d3:4f:91:
                    d0:03:d1:b6:25:cf:ff:e1:a1:63:ac:b6:5e:d7:9c:
                    ff:67:0d:7e:31:0d:52:1c:98:af:2b:09:18:9a:68:
                    2c:e2:3c:8c:d0:e8:14:87:c4:87:29:38:37:ba:89:
                    61:06:be:31:58:df:1f:5b:0b:0c:e1:df:f4:af:b1:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:78:29:FA:BC:2E:4C:1A:6C:2B:4F:AF:4C:91:FD:43:D0:2B:98:85
            X509v3 Authority Key Identifier:
                keyid:27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3334203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:d4:ed:f6:06:57:ba:b6:bc:cf:0f:ea:ca:98:13:34:1d:5b:
         c8:d5:ab:b8:c7:7c:4e:66:20:fd:53:0e:8f:de:a1:ea:be:b0:
         83:6f:82:13:f7:26:25:12:d1:f9:6f:57:3b:38:29:e7:08:a9:
         37:ae:74:26:76:2a:c0:56:9b:e6:03:15:32:3b:f6:6c:61:d8:
         5b:28:81:5c:ed:c6:4b:3a:7a:bb:94:63:04:4b:14:28:b3:7e:
         ae:0a:bc:3e:6a:6e:34:82:f6:3a:48:3d:26:7c:91:3b:81:7c:
         c4:fc:49:7b:f3:90:a4:be:bd:ac:f7:94:89:59:04:47:a9:be:
         dc:75:69:8c:69:9b:82:2b:7a:d9:61:45:8d:43:90:d2:c2:e4:
         b7:a8:f9:68:e6:30:7d:e3:22:6b:4c:87:da:c8:39:ac:11:3b:
         e7:62:01:d8:b3:a8:76:63:cc:fb:47:ca:9a:c6:8c:5e:05:45:
         40:89:1c:ac:66:5b:e5:1d:10:3e:bc:cc:3d:5a:4a:5a:bf:5f:
         57:74:7a:54:d3:bb:d1:fa:f4:7b:1f:ee:46:07:9e:32:8d:2b:
         27:99:dc:d4:c8:5a:37:ab:1a:64:fd:aa:1f:1b:05:3e:13:56:
         9d:6e:99:c0:6c:4d:2b:9d:b3:32:4f:4d:31:96:88:bd:79:2c:
         52:95:bd:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUST33+6D2cMudamU8dzi5V8jmwPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCNjI0OEIxRTA1OEUyRUUwQTcxMUJBQUU1RjZDQkRG
NjFDNjEwNDAeFw0yNDAxMTExMzUwNDdaFw0yNTAxMDkxMzU1NDdaMDMxMTAvBgNV
BAMTKDBGNzgyOUZBQkMyRTRDMUE2QzJCNEZBRjRDOTFGRDQzRDAyQjk4ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRsyx0qYkEF2aGnUU2J824H1Ao
jEGqSfXCF4uziMHJU+t1WkvzUlg0I+7MdYUufnRkofVVZDw2lBsD/tokz721kfYb
ROWQU3iJDVMw2fLUr0Q0eRIVZvC3+6kYcRBsEDs/gd407ugYWn1ziPv2CnML0zvI
zfE1K29gbOfR2bRbBtLhwsHTs/noQ+elRGu82rZgHIHmRFfbgIZwETWtylS8ZhY0
+3YH5D633kSQoHg41jvBqsp+ttkPWklR+WIp7tNPkdAD0bYlz//hoWOstl7XnP9n
DX4xDVIcmK8rCRiaaCziPIzQ6BSHxIcpODe6iWEGvjFY3x9bCwzh3/SvsfDTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUD3gp+rwuTBpsK0+vTJH9Q9ArmIUwHwYDVR0j
BBgwFoAUJ7Ykix4Fji7gpxG6rl9svfYcYQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41
UzMvMC8yN0I2MjQ4QjFFMDU4RTJFRTBBNzExQkFBRTVGNkNCREY2MUM2MTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3QjYyNDhCMUUwNThFMkVF
MEE3MTFCQUFFNUY2Q0JERjYxQzYxMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZYa3dLd1k1dXlBU3c4UmJ6cTVNeGMxamNUaWJ0MWNyc2tkdVJWSzVONVMzLzAv
MzIzODMwMzQzYTM0MzQ2NDM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM3
MzYzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARE2DANBgkqhkiG9w0BAQsFAAOCAQEAqNTt9gZX
ura8zw/qypgTNB1byNWruMd8TmYg/VMOj96h6r6wg2+CE/cmJRLR+W9XOzgp5wip
N650JnYqwFab5gMVMjv2bGHYWyiBXO3GSzp6u5RjBEsUKLN+rgq8PmpuNIL2Okg9
JnyRO4F8xPxJe/OQpL69rPeUiVkER6m+3HVpjGmbgit62WFFjUOQ0sLkt6j5aOYw
feMia0yH2sg5rBE752IB2LOodmPM+0fKmsaMXgVFQIkcrGZb5R0QPrzMPVpKWr9f
V3R6VNO70fr0ex/uRgeeMo0rJ5nc1MhaN6saZP2qHxsFPhNWnW6ZwGxNK52zMk9N
MZaIvXksUpW9uQ==
-----END CERTIFICATE-----