Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/323830343a6366303a3a2f33322d3438203d3e203532353736.roa
File:                     323830343a6366303a3a2f33322d3438203d3e203532353736.roa (raw, json)
Hash identifier:          dSpad7hyAotHmkC9Fgb8l0O9HL5Y7MzZK0YNkYJJoAY=
Subject key identifier:   C5:26:03:EA:1F:DC:02:5E:CE:E4:58:B4:81:D2:73:FF:0F:40:B6:42
Certificate issuer:       /CN=19173A52C083B2FBECEC8F9929630EF36F40D063
Certificate serial:       41D02D54AE71058E09CF37704B6F2EFCF403F095
Authority key identifier: 19:17:3A:52:C0:83:B2:FB:EC:EC:8F:99:29:63:0E:F3:6F:40:D0:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19173A52C083B2FBECEC8F9929630EF36F40D063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/323830343a6366303a3a2f33322d3438203d3e203532353736.roa
Signing time:             Fri 01 Mar 2024 11:03:46 +0000
ROA not before:           Fri 01 Mar 2024 10:58:46 +0000
ROA not after:            Fri 28 Feb 2025 11:03:46 +0000
asID:                     52576
IP address blocks:        2804:cf0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d0:2d:54:ae:71:05:8e:09:cf:37:70:4b:6f:2e:fc:f4:03:f0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19173A52C083B2FBECEC8F9929630EF36F40D063
        Validity
            Not Before: Mar  1 10:58:46 2024 GMT
            Not After : Feb 28 11:03:46 2025 GMT
        Subject: CN=C52603EA1FDC025ECEE458B481D273FF0F40B642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:f9:3d:00:64:ce:e9:7a:7e:ef:64:d3:86:
                    ff:21:70:36:81:59:2f:92:b3:37:21:87:83:bc:f0:
                    fe:15:f0:70:7d:ce:5c:08:e7:d5:82:a5:ec:d5:12:
                    0a:68:99:43:ad:06:6f:01:27:60:8e:f3:85:43:aa:
                    72:a2:7d:ee:d8:ff:46:42:e9:fc:77:b7:47:1b:af:
                    a2:8e:44:5f:a3:f5:2e:05:1c:23:cd:49:a7:85:05:
                    89:c8:f2:4c:12:7b:ab:e3:f8:29:23:30:f1:e7:8c:
                    70:85:d9:23:9c:57:14:c8:2b:68:e3:bf:bc:b6:20:
                    c5:5f:b9:0a:0c:d8:eb:16:60:40:99:1c:14:99:a5:
                    bb:11:57:80:11:d5:3b:dd:7e:4b:01:3f:4d:98:99:
                    06:3b:bf:6b:72:04:3c:45:10:10:7a:ae:1c:72:bb:
                    fb:d5:61:d7:bb:ae:e8:18:24:c6:15:16:f7:51:44:
                    88:be:dd:18:57:50:31:c9:47:a6:e5:76:55:98:71:
                    f8:88:ba:6d:b0:8f:a5:04:2d:0f:c3:b1:98:64:31:
                    34:d5:7c:4b:b7:b2:57:09:61:78:48:54:a9:05:e4:
                    2d:91:c8:d3:02:27:4e:2b:36:24:42:54:e3:ff:84:
                    d2:f8:3a:91:0e:64:e3:85:60:08:07:d7:c9:3d:5a:
                    99:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:26:03:EA:1F:DC:02:5E:CE:E4:58:B4:81:D2:73:FF:0F:40:B6:42
            X509v3 Authority Key Identifier:
                keyid:19:17:3A:52:C0:83:B2:FB:EC:EC:8F:99:29:63:0E:F3:6F:40:D0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/19173A52C083B2FBECEC8F9929630EF36F40D063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19173A52C083B2FBECEC8F9929630EF36F40D063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/323830343a6366303a3a2f33322d3438203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:d0:7f:d8:ba:a6:5d:82:ca:90:23:37:5f:04:88:52:22:a0:
         7d:ae:1c:6e:94:01:03:bf:5e:31:d1:6d:b2:03:37:99:2a:d4:
         64:fd:2d:2b:c5:7c:c0:92:f2:a9:56:54:f1:53:88:57:1b:8c:
         2a:34:d6:c1:73:dd:a8:52:99:a4:82:0f:15:68:b4:b5:ae:69:
         5c:8e:38:ad:92:89:2b:3d:86:66:99:07:2a:a2:37:cd:df:b3:
         21:9c:1e:12:7b:44:e0:45:a2:59:17:3b:0b:2d:f7:83:ca:95:
         ff:d1:82:52:ac:61:58:88:02:a0:00:97:25:db:05:33:62:63:
         7e:b8:47:db:75:04:52:d1:dd:ad:1f:5c:bd:63:f5:18:1f:31:
         43:01:24:04:da:f6:d0:35:b4:ce:48:41:94:58:4d:4e:2f:7d:
         63:bc:40:5c:4a:31:35:13:41:24:9e:8a:f6:21:f9:e6:63:7a:
         b6:83:c1:7c:b0:31:db:22:09:cb:62:d0:9a:0a:7a:15:04:17:
         d5:6b:01:4a:4e:a6:80:3b:6e:f1:9d:b5:ba:61:bf:6f:48:a1:
         d0:8d:e6:c7:a8:f8:07:0e:92:05:99:06:4b:dd:7a:1c:9e:20:
         1f:7a:d7:23:4e:5f:69:5d:07:0f:9c:9b:33:80:a8:b4:4c:0e:
         06:66:33:5d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUQdAtVK5xBY4JzzdwS28u/PQD8JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkxNzNBNTJDMDgzQjJGQkVDRUM4Rjk5Mjk2MzBFRjM2
RjQwRDA2MzAeFw0yNDAzMDExMDU4NDZaFw0yNTAyMjgxMTAzNDZaMDMxMTAvBgNV
BAMTKEM1MjYwM0VBMUZEQzAyNUVDRUU0NThCNDgxRDI3M0ZGMEY0MEI2NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClk/k9AGTO6Xp+72TThv8hcDaB
WS+Sszchh4O88P4V8HB9zlwI59WCpezVEgpomUOtBm8BJ2CO84VDqnKife7Y/0ZC
6fx3t0cbr6KORF+j9S4FHCPNSaeFBYnI8kwSe6vj+CkjMPHnjHCF2SOcVxTIK2jj
v7y2IMVfuQoM2OsWYECZHBSZpbsRV4AR1TvdfksBP02YmQY7v2tyBDxFEBB6rhxy
u/vVYde7rugYJMYVFvdRRIi+3RhXUDHJR6bldlWYcfiIum2wj6UELQ/DsZhkMTTV
fEu3slcJYXhIVKkF5C2RyNMCJ04rNiRCVOP/hNL4OpEOZOOFYAgH18k9WpltAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUxSYD6h/cAl7O5Fi0gdJz/w9AtkIwHwYDVR0j
BBgwFoAUGRc6UsCDsvvs7I+ZKWMO829A0GMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK
WFIvMC8xOTE3M0E1MkMwODNCMkZCRUNFQzhGOTkyOTYzMEVGMzZGNDBEMDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5MTczQTUyQzA4M0IyRkJF
Q0VDOEY5OTI5NjMwRUYzNkY0MEQwNjMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVjbmE2ZVJNOVRzV2dyYzJ2U3hlN0E0TDNqYmdKSGpvTlhFVUo2Q01HSlhSLzAv
MzIzODMwMzQzYTYzNjYzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNTM3
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAzwMA0GCSqGSIb3DQEBCwUAA4IBAQDF0H/YuqZdgsqQ
IzdfBIhSIqB9rhxulAEDv14x0W2yAzeZKtRk/S0rxXzAkvKpVlTxU4hXG4wqNNbB
c92oUpmkgg8VaLS1rmlcjjitkokrPYZmmQcqojfN37MhnB4Se0TgRaJZFzsLLfeD
ypX/0YJSrGFYiAKgAJcl2wUzYmN+uEfbdQRS0d2tH1y9Y/UYHzFDASQE2vbQNbTO
SEGUWE1OL31jvEBcSjE1E0Eknor2IfnmY3q2g8F8sDHbIgnLYtCaCnoVBBfVawFK
TqaAO27xnbW6Yb9vSKHQjebHqPgHDpIFmQZL3XocniAfetcjTl9pXQcPnJszgKi0
TA4GZjNd
-----END CERTIFICATE-----