Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/323830343a313636383a3a2f33322d3438203d3e203533313332.roa
File:                     323830343a313636383a3a2f33322d3438203d3e203533313332.roa (raw, json)
Hash identifier:          xpKtD/veLNMCuTghrxDCEVXY8AhrPC9L6WReX5M4f20=
Subject key identifier:   0E:DD:50:BA:E4:F3:0A:15:5B:31:77:09:E5:52:BF:02:9D:22:18:E0
Certificate issuer:       /CN=71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0
Certificate serial:       F8AF066537A00FB0C4A9E98055A88929665F2C
Authority key identifier: 71:AF:85:1F:A1:AB:7F:3F:8F:F5:9D:7E:8C:21:2F:57:81:89:CF:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/323830343a313636383a3a2f33322d3438203d3e203533313332.roa
Signing time:             Wed 25 Oct 2023 19:47:46 +0000
ROA not before:           Wed 25 Oct 2023 19:42:46 +0000
ROA not after:            Wed 23 Oct 2024 19:47:46 +0000
asID:                     53132
IP address blocks:        2804:1668::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f8:af:06:65:37:a0:0f:b0:c4:a9:e9:80:55:a8:89:29:66:5f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0
        Validity
            Not Before: Oct 25 19:42:46 2023 GMT
            Not After : Oct 23 19:47:46 2024 GMT
        Subject: CN=0EDD50BAE4F30A155B317709E552BF029D2218E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:b5:cc:fb:58:c1:42:55:3f:5a:0a:7f:a1:
                    a5:db:80:f5:b4:34:85:6d:87:60:a1:47:e6:73:c3:
                    a7:47:91:3e:57:9b:08:01:fe:10:31:aa:5f:83:6b:
                    36:bf:40:fa:71:a8:ff:aa:3e:ac:66:a1:49:c4:31:
                    bf:9b:1f:7e:87:5f:78:58:de:1d:f7:38:86:99:3f:
                    ca:14:fe:aa:05:23:26:64:47:9c:ab:b9:c3:c0:4f:
                    e8:95:24:1d:5e:a3:07:23:20:5a:51:26:54:98:84:
                    9b:c7:0e:2f:f4:a5:3f:3d:f3:3b:5a:5d:50:f0:41:
                    c8:5d:5c:f2:e5:b1:24:1a:ee:0f:57:69:01:cf:07:
                    97:88:2a:26:34:0e:3e:c2:d1:69:8a:67:f9:ac:7c:
                    0d:91:89:98:2f:f1:29:c3:3c:45:b7:5a:a4:c0:54:
                    18:64:df:8d:1d:6f:67:fd:44:42:44:49:9f:25:22:
                    a6:c4:c5:d2:40:e7:9b:27:b3:4a:a5:7d:f9:f8:0f:
                    5c:ec:61:bf:ea:27:d8:a2:50:0d:f5:d6:3c:6e:40:
                    87:39:a1:d1:63:a5:fc:66:27:c5:17:7f:c9:64:67:
                    da:12:61:98:25:1d:cc:e6:be:b1:c7:f2:cc:84:65:
                    20:1f:68:35:25:d5:95:be:95:51:64:7e:a1:f0:2b:
                    13:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DD:50:BA:E4:F3:0A:15:5B:31:77:09:E5:52:BF:02:9D:22:18:E0
            X509v3 Authority Key Identifier:
                keyid:71:AF:85:1F:A1:AB:7F:3F:8F:F5:9D:7E:8C:21:2F:57:81:89:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/323830343a313636383a3a2f33322d3438203d3e203533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1668::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:20:45:f3:f9:09:e9:c1:00:6e:9a:58:08:40:fa:bf:ae:d6:
         28:dc:fd:b8:b8:ca:cd:cd:55:71:db:48:94:fe:76:fe:75:78:
         b8:04:94:bb:6a:b3:57:15:53:56:97:88:ed:02:ae:46:0b:66:
         17:5d:5c:ee:35:1a:b4:c6:63:7b:ec:60:51:ec:2b:89:b2:06:
         b8:ce:16:5c:d9:4c:eb:7d:45:5e:66:68:4b:e1:e2:43:4f:4b:
         dc:cc:50:6d:c0:1a:90:df:bb:8e:9c:7b:47:30:6b:dd:23:08:
         86:a2:5a:02:15:6e:5e:72:1b:5a:9c:8e:ee:23:e3:8f:01:5a:
         44:24:0c:42:9b:6e:0d:9f:8e:11:de:85:de:04:1b:20:e5:cc:
         f3:71:d8:6c:bc:55:9c:ac:00:51:74:8e:73:f9:fb:05:c0:2f:
         19:9e:ea:fe:a7:ba:61:53:bf:d3:8c:ae:41:cf:c0:2d:2e:c2:
         e8:3a:f3:27:54:72:c8:e2:43:92:16:b5:6c:bc:67:9c:0e:7c:
         29:d7:87:91:00:09:f2:fd:74:27:82:a8:7c:1d:52:ef:c2:3f:
         81:cc:ba:0e:e3:19:b0:f5:74:a9:d6:31:d6:36:e5:7f:16:aa:
         3b:96:3d:e3:d7:a2:b0:62:f5:1e:19:f6:5a:aa:54:0f:8e:ae:
         34:74:9d:dd
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUAPivBmU3oA+wxKnpgFWoiSlmXywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBRjg1MUZBMUFCN0YzRjhGRjU5RDdFOEMyMTJGNTc4
MTg5Q0ZCMDAeFw0yMzEwMjUxOTQyNDZaFw0yNDEwMjMxOTQ3NDZaMDMxMTAvBgNV
BAMTKDBFREQ1MEJBRTRGMzBBMTU1QjMxNzcwOUU1NTJCRjAyOUQyMjE4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrTLXM+1jBQlU/Wgp/oaXbgPW0
NIVth2ChR+Zzw6dHkT5XmwgB/hAxql+Daza/QPpxqP+qPqxmoUnEMb+bH36HX3hY
3h33OIaZP8oU/qoFIyZkR5yrucPAT+iVJB1eowcjIFpRJlSYhJvHDi/0pT898zta
XVDwQchdXPLlsSQa7g9XaQHPB5eIKiY0Dj7C0WmKZ/msfA2RiZgv8SnDPEW3WqTA
VBhk340db2f9REJESZ8lIqbExdJA55sns0qlffn4D1zsYb/qJ9iiUA311jxuQIc5
odFjpfxmJ8UXf8lkZ9oSYZglHczmvrHH8syEZSAfaDUl1ZW+lVFkfqHwKxMFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUDt1QuuTzChVbMXcJ5VK/Ap0iGOAwHwYDVR0j
BBgwFoAUca+FH6Grfz+P9Z1+jCEvV4GJz7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZKUU01cVZTZ2lSZ0JzTXVUemlCelU2WnVkOG54Y3ZDc2p4eUhyTmU2
ZUYvMC83MUFGODUxRkExQUI3RjNGOEZGNTlEN0U4QzIxMkY1NzgxODlDRkIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxQUY4NTFGQTFBQjdGM0Y4
RkY1OUQ3RThDMjEyRjU3ODE4OUNGQjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2SlFNNXFWU2dpUmdCc011VHppQnpVNlp1ZDhueGN2Q3NqeHlIck5lNmVGLzAv
MzIzODMwMzQzYTMxMzYzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMx
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFmgwDQYJKoZIhvcNAQELBQADggEBACwgRfP5CenB
AG6aWAhA+r+u1ijc/bi4ys3NVXHbSJT+dv51eLgElLtqs1cVU1aXiO0CrkYLZhdd
XO41GrTGY3vsYFHsK4myBrjOFlzZTOt9RV5maEvh4kNPS9zMUG3AGpDfu46ce0cw
a90jCIaiWgIVbl5yG1qcju4j448BWkQkDEKbbg2fjhHehd4EGyDlzPNx2Gy8VZys
AFF0jnP5+wXALxme6v6numFTv9OMrkHPwC0uwug68ydUcsjiQ5IWtWy8Z5wOfCnX
h5EACfL9dCeCqHwdUu/CP4HMug7jGbD1dKnWMdY25X8WqjuWPePXorBi9R4Z9lqq
VA+OrjR0nd0=
-----END CERTIFICATE-----