Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/0/323830343a326330383a3a2f3332203d3e20323635313839.roa
File:                     323830343a326330383a3a2f3332203d3e20323635313839.roa (raw, json)
Hash identifier:          qjZpDtrvu2xAXTqCj9Wz5DLnpcQDnC6WmfWA3vuqb4Q=
Subject key identifier:   63:3E:3A:49:9B:55:DC:93:80:11:20:E9:34:4B:84:57:C1:FB:A0:01
Certificate issuer:       /CN=469981885A8F7261338D1094A7F2563BC33998EB
Certificate serial:       670A07B9840A91EE0EE27EF63565EE5BFDC1CD9C
Authority key identifier: 46:99:81:88:5A:8F:72:61:33:8D:10:94:A7:F2:56:3B:C3:39:98:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/469981885A8F7261338D1094A7F2563BC33998EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/0/323830343a326330383a3a2f3332203d3e20323635313839.roa
Signing time:             Mon 04 Dec 2023 20:29:49 +0000
ROA not before:           Mon 04 Dec 2023 20:24:49 +0000
ROA not after:            Mon 02 Dec 2024 20:29:49 +0000
asID:                     265189
IP address blocks:        2804:2c08::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0a:07:b9:84:0a:91:ee:0e:e2:7e:f6:35:65:ee:5b:fd:c1:cd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469981885A8F7261338D1094A7F2563BC33998EB
        Validity
            Not Before: Dec  4 20:24:49 2023 GMT
            Not After : Dec  2 20:29:49 2024 GMT
        Subject: CN=633E3A499B55DC93801120E9344B8457C1FBA001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:d3:66:fc:c6:28:a9:a2:ce:af:8f:d2:92:
                    d9:0e:4b:f3:b1:53:83:77:c4:77:9d:65:12:a9:45:
                    df:a5:ff:4f:6d:63:d6:3e:ad:9d:1b:2b:9e:62:e1:
                    14:ee:5b:e2:76:88:63:51:15:20:20:f3:4a:c9:ba:
                    4f:78:89:c1:5b:65:70:5a:02:b8:f5:2d:a4:af:93:
                    79:92:31:44:83:a9:b1:7c:92:38:3b:1b:ee:9f:2c:
                    85:7c:c2:22:79:5e:da:b6:e5:3a:36:5e:63:39:de:
                    30:70:07:4b:d9:24:bf:54:7a:81:bb:7d:50:1a:d0:
                    95:49:1a:ef:d7:be:e8:33:f8:fd:13:fe:ed:7a:39:
                    5f:8e:99:6d:b8:da:de:0f:94:0b:db:e5:04:59:65:
                    bf:67:ff:7e:83:65:2b:b9:56:c9:37:73:79:77:b5:
                    2c:61:d1:f6:7b:19:44:e9:bb:99:3e:d2:c9:5a:ef:
                    1f:cf:9f:d6:8b:09:52:bc:8f:c1:e8:c1:30:89:08:
                    a3:2b:b5:5f:83:8c:7e:8f:4b:55:a1:14:29:ab:7b:
                    45:55:42:71:ab:0e:2e:f9:bb:61:e3:3b:51:77:1f:
                    f2:13:3e:e0:89:47:9a:e9:f7:1a:84:8b:ec:57:37:
                    70:1f:3d:93:95:3b:19:05:83:4a:18:df:ef:49:98:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:3A:49:9B:55:DC:93:80:11:20:E9:34:4B:84:57:C1:FB:A0:01
            X509v3 Authority Key Identifier:
                keyid:46:99:81:88:5A:8F:72:61:33:8D:10:94:A7:F2:56:3B:C3:39:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/0/469981885A8F7261338D1094A7F2563BC33998EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/469981885A8F7261338D1094A7F2563BC33998EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/0/323830343a326330383a3a2f3332203d3e20323635313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:25:af:4d:b0:47:96:3e:f1:78:5f:09:e8:25:ae:78:7e:5e:
         93:56:64:c4:5e:c1:b3:33:05:d6:b3:ca:26:af:66:85:a0:65:
         45:63:0d:41:12:0a:69:59:7c:80:41:b8:3d:30:4e:7e:80:de:
         4b:58:fa:0f:0e:31:e2:a5:ae:db:63:1a:17:d6:ae:cc:a0:c1:
         89:a9:34:f0:3f:32:3e:30:dd:43:27:b5:7b:e4:dd:4d:eb:23:
         fa:e4:22:60:0f:b3:1c:62:21:05:57:37:64:f1:81:e4:b8:80:
         96:b6:50:69:7a:1c:92:8a:f1:ae:13:a7:02:c6:1b:6f:54:6a:
         7e:43:14:b6:68:15:26:eb:46:db:f4:09:81:91:0e:8a:ec:46:
         bd:2d:83:5c:f5:52:08:81:8e:61:23:3a:1f:cd:d8:91:d3:a0:
         a0:4c:1e:d0:ff:e5:1c:e1:7c:75:2d:ab:71:3e:06:a5:3f:63:
         af:30:1f:85:8e:cf:37:47:d0:5a:5f:b6:c1:7c:ee:c8:d5:07:
         42:6f:43:96:e3:4e:13:19:5d:ad:ab:e2:3a:df:9a:87:93:2d:
         99:82:8e:ed:d0:6f:ac:d5:e8:15:15:eb:54:03:20:63:ad:93:
         0b:50:f2:3a:ef:58:35:e0:ad:19:1d:2b:9e:55:ca:37:a3:8d:
         6e:c3:2e:86
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUZwoHuYQKke4O4n72NWXuW/3BzZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY5OTgxODg1QThGNzI2MTMzOEQxMDk0QTdGMjU2M0JD
MzM5OThFQjAeFw0yMzEyMDQyMDI0NDlaFw0yNDEyMDIyMDI5NDlaMDMxMTAvBgNV
BAMTKDYzM0UzQTQ5OUI1NURDOTM4MDExMjBFOTM0NEI4NDU3QzFGQkEwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3NNm/MYoqaLOr4/SktkOS/Ox
U4N3xHedZRKpRd+l/09tY9Y+rZ0bK55i4RTuW+J2iGNRFSAg80rJuk94icFbZXBa
Arj1LaSvk3mSMUSDqbF8kjg7G+6fLIV8wiJ5Xtq25To2XmM53jBwB0vZJL9UeoG7
fVAa0JVJGu/Xvugz+P0T/u16OV+OmW242t4PlAvb5QRZZb9n/36DZSu5Vsk3c3l3
tSxh0fZ7GUTpu5k+0sla7x/Pn9aLCVK8j8HowTCJCKMrtV+DjH6PS1WhFCmre0VV
QnGrDi75u2HjO1F3H/ITPuCJR5rp9xqEi+xXN3AfPZOVOxkFg0oY3+9JmOmfAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUYz46SZtV3JOAESDpNEuEV8H7oAEwHwYDVR0j
BBgwFoAURpmBiFqPcmEzjRCUp/JWO8M5mOswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJjeFBTVFJNM3VpZzF6c3AzZ3FzOVVic0tlTUU0dGc0eWh5bVRmeXRQ
dGUvMC80Njk5ODE4ODVBOEY3MjYxMzM4RDEwOTRBN0YyNTYzQkMzMzk5OEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2OTk4MTg4NUE4RjcyNjEz
MzhEMTA5NEE3RjI1NjNCQzMzOTk4RUIuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCY3hQU1RSTTN1aWcxenNwM2dxczlVYnNLZU1FNHRnNHloeW1UZnl0UHRlLzAv
MzIzODMwMzQzYTMyNjMzMDM4M2EzYTJmMzMzMjIwM2QzZTIwMzIzNjM1MzEzODM5
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQsCDANBgkqhkiG9w0BAQsFAAOCAQEAqCWvTbBHlj7xeF8J
6CWueH5ek1ZkxF7BszMF1rPKJq9mhaBlRWMNQRIKaVl8gEG4PTBOfoDeS1j6Dw4x
4qWu22MaF9auzKDBiak08D8yPjDdQye1e+TdTesj+uQiYA+zHGIhBVc3ZPGB5LiA
lrZQaXockorxrhOnAsYbb1RqfkMUtmgVJutG2/QJgZEOiuxGvS2DXPVSCIGOYSM6
H83YkdOgoEwe0P/lHOF8dS2rcT4GpT9jrzAfhY7PN0fQWl+2wXzuyNUHQm9DluNO
ExldraviOt+ah5MtmYKO7dBvrNXoFRXrVAMgY62TC1DyOu9YNeCtGR0rnlXKN6ON
bsMuhg==
-----END CERTIFICATE-----