Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa
File:                     323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa (raw, json)
Hash identifier:          0SUcvhvB7tf1fhmHGMGmg/8u14qJoCjyJnH/1WVjviM=
Subject key identifier:   D7:16:86:78:AC:1B:22:B5:9F:AE:28:A6:3A:E2:B0:65:D6:EE:52:D5
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       679FC908E2A70E23D0FCD042ED1F4BC60CB7A5FF
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa
Signing time:             Wed 17 Jan 2024 15:00:01 +0000
ROA not before:           Wed 17 Jan 2024 14:55:01 +0000
ROA not after:            Fri 17 Jan 2025 15:00:01 +0000
asID:                     266020
IP address blocks:        2804:393c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9f:c9:08:e2:a7:0e:23:d0:fc:d0:42:ed:1f:4b:c6:0c:b7:a5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: Jan 17 14:55:01 2024 GMT
            Not After : Jan 17 15:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:b5:2b:7c:08:84:65:04:ff:0f:58:e5:1d:
                    30:ab:95:e4:5b:78:02:a0:6e:06:fb:b9:5f:7a:c7:
                    58:77:c7:ea:bf:a8:da:0c:39:31:5a:0f:f6:19:34:
                    9a:4d:fe:b0:32:ce:3c:cb:55:09:23:3a:19:9f:cc:
                    8a:dd:c3:85:9f:a8:9e:51:9b:62:80:c9:a2:2f:0a:
                    1e:85:3c:ee:4d:ef:da:57:e8:65:4f:19:83:a3:d2:
                    cb:12:b2:85:a5:db:58:44:94:ee:74:6c:7b:a5:8c:
                    7f:35:78:25:3b:b2:eb:45:7e:c1:09:d6:c8:c3:5d:
                    35:e0:0e:dc:c6:f9:ed:0f:46:7e:28:5b:a6:65:bc:
                    eb:aa:96:99:97:73:9e:a8:8a:01:92:84:dd:29:62:
                    cd:6c:c9:a2:cc:ab:66:c7:a8:7a:b3:30:40:a7:57:
                    fc:af:c1:b8:cf:3c:44:17:da:e9:49:44:3a:e8:75:
                    ae:a7:f3:ca:d5:5a:76:1e:11:44:4a:03:e1:78:fb:
                    01:bf:02:25:d7:4e:50:93:8f:3c:42:23:d6:28:af:
                    a7:d9:10:14:b1:a8:a5:9c:4a:2d:82:1c:eb:ad:39:
                    d6:4f:67:e8:74:e9:8e:11:1f:e4:8c:de:53:c3:5f:
                    d5:40:7b:d0:91:15:3b:e8:99:5f:36:3a:1d:bc:eb:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:16:86:78:AC:1B:22:B5:9F:AE:28:A6:3A:E2:B0:65:D6:EE:52:D5
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:b5:0d:ca:b6:8a:f0:36:24:e8:da:0e:c0:7b:5a:96:b2:bb:
         94:80:b1:23:ff:3e:1d:11:86:ac:2c:d3:0d:31:47:9a:34:99:
         b5:ce:de:14:f1:ed:1f:53:ee:e5:c2:31:36:ae:ce:7d:2f:1a:
         51:56:63:f4:f1:8a:cc:d0:b5:aa:4b:89:08:6f:de:6f:7c:70:
         39:2d:8b:74:a9:99:05:40:99:09:bb:0c:bb:bf:d0:91:ad:15:
         df:08:85:b1:53:7d:d6:29:4e:e7:18:ed:8f:b7:10:9b:28:3c:
         6d:d5:b2:8d:f3:0c:c0:68:46:bb:54:be:3b:2d:0a:f1:b6:6d:
         17:9a:f0:be:76:18:e1:77:42:43:bd:1c:3a:3c:1d:3f:d6:f5:
         90:38:88:ba:fb:7e:2d:83:49:64:63:6f:4b:0e:ab:7a:c9:ed:
         7c:ec:7c:00:48:5c:45:79:c3:a0:50:12:e2:f3:a2:42:98:1d:
         55:38:11:4c:a9:79:15:91:16:c5:ff:f8:b4:d3:0b:ed:ff:6f:
         a6:1b:1d:ed:9a:8e:4b:04:5f:bb:cd:05:28:5b:5f:31:51:11:
         5c:41:1d:56:2a:85:6b:b4:55:46:bd:29:8d:81:6a:29:19:dc:
         04:7e:bf:8e:d7:a3:f6:04:e7:18:6e:a2:e0:55:96:dd:38:18:
         f2:51:32:1e
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUZ5/JCOKnDiPQ/NBC7R9Lxgy3pf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4MjM2NzAyNkFGMTlFNTJCQzgwQzk0MkRFRjhEQTA5
RDc2QUVGMzAeFw0yNDAxMTcxNDU1MDFaFw0yNTAxMTcxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk2Q0I1MkI3QzA4ODQ2NTA0
RkYwRjU4RTUxRDMwQUI5NUU0NUI3ODAyQTA2RTA2RkJCOTVGN0FDNzU4NzdDN0VB
QkZBOERBMEMzOTMxNUEwRkY2MTkzNDlBNERGRUIwMzJDRTNDQ0I1NTA5MjMzQTE5
OUZDQzhBRERDMzg1OUZBODlFNTE5QjYyODBDOUEyMkYwQTFFODUzQ0VFNERFRkRB
NTdFODY1NEYxOTgzQTNEMkNCMTJCMjg1QTVEQjU4NDQ5NEVFNzQ2QzdCQTU4QzdG
MzU3ODI1M0JCMkVCNDU3RUMxMDlENkM4QzM1RDM1RTAwRURDQzZGOUVEMEY0NjdF
Mjg1QkE2NjVCQ0VCQUE5Njk5OTc3MzlFQTg4QTAxOTI4NEREMjk2MkNENkNDOUEy
Q0NBQjY2QzdBODdBQjMzMDQwQTc1N0ZDQUZDMUI4Q0YzQzQ0MTdEQUU5NDk0NDNB
RTg3NUFFQTdGM0NBRDU1QTc2MUUxMTQ0NEEwM0UxNzhGQjAxQkYwMjI1RDc0RTUw
OTM4RjNDNDIyM0Q2MjhBRkE3RDkxMDE0QjFBOEE1OUM0QTJEODIxQ0VCQUQzOUQ2
NEY2N0U4NzRFOThFMTExRkU0OENERTUzQzM1RkQ1NDA3QkQwOTExNTNCRTg5OTVG
MzYzQTFEQkNFQkI0M0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuWy1K3wIhGUE/w9Y5R0wq5XkW3gCoG4G+7lfesdYd8fqv6jaDDkx
Wg/2GTSaTf6wMs48y1UJIzoZn8yK3cOFn6ieUZtigMmiLwoehTzuTe/aV+hlTxmD
o9LLErKFpdtYRJTudGx7pYx/NXglO7LrRX7BCdbIw1014A7cxvntD0Z+KFumZbzr
qpaZl3OeqIoBkoTdKWLNbMmizKtmx6h6szBAp1f8r8G4zzxEF9rpSUQ66HWup/PK
1Vp2HhFESgPhePsBvwIl105Qk488QiPWKK+n2RAUsailnEotghzrrTnWT2fodOmO
ER/kjN5Tw1/VQHvQkRU76JlfNjodvOu0OwIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FNcWhnisGyK1n64opjrisGXW7lLVMB8GA1UdIwQYMBaAFJuCNnAmrxnlK8gMlC3v
jaCddq7zMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNBVHlxRHVwZHFwNlc3
d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAvOUI4MjM2NzAyNkFGMTlF
NTJCQzgwQzk0MkRFRjhEQTA5RDc2QUVGMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85QjgyMzY3MDI2QUYxOUU1MkJDODBDOTQyREVGOERBMDlENzZB
RUYzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zQVR5cUR1cGRxcDZXN3dVSGQz
ejRIUEhRZ3I2VlNIZWhaWWR0VFZyRUFFTi8wLzMyMzgzMDM0M2EzMzM5MzM2MzNh
MzQzMDMwMzAzYTNhMmYzMzM0MjAzZDNlMjAzMjM2MzYzMDMyMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD
BgYoBDk8QDANBgkqhkiG9w0BAQsFAAOCAQEAa7UNyraK8DYk6NoOwHtalrK7lICx
I/8+HRGGrCzTDTFHmjSZtc7eFPHtH1Pu5cIxNq7OfS8aUVZj9PGKzNC1qkuJCG/e
b3xwOS2LdKmZBUCZCbsMu7/Qka0V3wiFsVN91ilO5xjtj7cQmyg8bdWyjfMMwGhG
u1S+Oy0K8bZtF5rwvnYY4XdCQ70cOjwdP9b1kDiIuvt+LYNJZGNvSw6resntfOx8
AEhcRXnDoFAS4vOiQpgdVTgRTKl5FZEWxf/4tNML7f9vphsd7ZqOSwRfu80FKFtf
MVERXEEdViqFa7RVRr0pjYFqKRncBH6/jtej9gTnGG6i4FWW3TgY8lEyHg==
-----END CERTIFICATE-----