Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/323830343a326161343a3a2f33322d3332203d3e20323634303836.roa
File:                     323830343a326161343a3a2f33322d3332203d3e20323634303836.roa (raw, json)
Hash identifier:          SG0yThIYsVi0f+Pv8sVSVQBRobNxxTXNW7JqyJE6GCk=
Subject key identifier:   0C:BC:3C:14:51:C9:54:D9:69:6A:7B:66:07:12:52:85:CC:F4:0A:9E
Certificate issuer:       /CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
Certificate serial:       1D44163721A1138B620F4B5611073E8BB02904C0
Authority key identifier: 62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/323830343a326161343a3a2f33322d3332203d3e20323634303836.roa
Signing time:             Thu 09 Nov 2023 14:14:08 +0000
ROA not before:           Thu 09 Nov 2023 14:09:08 +0000
ROA not after:            Thu 07 Nov 2024 14:14:08 +0000
asID:                     264086
IP address blocks:        2804:2aa4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:44:16:37:21:a1:13:8b:62:0f:4b:56:11:07:3e:8b:b0:29:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
        Validity
            Not Before: Nov  9 14:09:08 2023 GMT
            Not After : Nov  7 14:14:08 2024 GMT
        Subject: CN=0CBC3C1451C954D9696A7B6607125285CCF40A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:9e:b5:d8:ba:c8:32:0a:a8:4e:39:c3:3e:
                    53:f2:70:0a:55:5d:35:c8:7a:ed:c3:34:78:a3:4d:
                    2d:1f:1e:00:3e:a0:8a:05:11:21:36:20:a9:40:20:
                    e3:2d:f4:38:99:92:50:b6:ec:a7:d2:32:99:60:cc:
                    00:4c:ba:31:a7:83:e4:b7:66:82:e1:e8:f5:1d:7e:
                    66:62:be:d8:26:b3:b7:ac:94:38:f2:a0:4d:ef:1a:
                    7a:a3:c1:d1:bf:cd:06:f6:75:84:60:37:a1:07:23:
                    dd:f2:90:c6:a5:5f:18:fd:0a:23:e6:59:49:ed:6a:
                    4c:81:b0:0e:c8:84:ac:1d:23:4c:5a:11:ae:03:5e:
                    0f:00:78:2a:d2:f3:92:13:7d:e5:84:ac:dd:36:ce:
                    6d:ed:0f:e2:ac:c2:fa:1c:a9:80:f3:b1:24:71:b4:
                    d1:ca:30:e3:34:d8:f6:13:fc:17:88:20:83:a8:c0:
                    2f:60:32:7c:fa:b9:26:22:63:fd:3e:7d:1e:54:d1:
                    eb:9b:5f:58:35:ec:a9:d8:8f:cf:43:b4:d8:59:64:
                    bb:a5:5b:11:0b:1b:01:82:40:48:6e:dd:a5:fe:75:
                    8b:e7:b0:ba:17:09:a5:04:3c:c7:42:90:7e:b9:dc:
                    e0:a3:d0:89:10:b7:82:28:15:d9:66:2d:69:83:74:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BC:3C:14:51:C9:54:D9:69:6A:7B:66:07:12:52:85:CC:F4:0A:9E
            X509v3 Authority Key Identifier:
                keyid:62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/323830343a326161343a3a2f33322d3332203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:dc:f4:b3:93:68:7a:50:80:44:4c:d5:0d:48:5d:0c:9a:85:
         a5:b9:77:13:9b:89:51:30:bf:1f:0b:18:2c:9f:98:45:2a:9f:
         da:9a:4a:00:6d:0d:8f:e5:dd:10:67:91:b7:94:5d:7f:31:d8:
         eb:52:25:38:18:1f:66:cd:e3:05:4c:9b:10:72:61:c1:db:ae:
         36:31:9b:68:e1:57:ff:f3:ae:87:6b:37:83:7f:ce:a5:9d:47:
         54:c7:37:9b:dd:a4:d2:bd:2b:88:0f:da:11:4f:38:51:1a:08:
         06:e0:6b:ec:c2:5c:2b:b1:e0:9f:bb:1d:4d:98:03:a8:94:6e:
         fe:ea:e6:c0:da:f4:e9:9b:cc:20:46:e3:77:7b:a1:29:31:fb:
         43:2d:fe:19:8d:60:05:89:ad:1e:03:e3:62:f2:67:58:6d:2e:
         fa:a7:36:3c:ed:1e:cd:70:02:cb:88:fb:10:c8:b3:f2:38:e3:
         55:78:b0:3a:ec:bd:8a:53:f4:df:9a:68:84:ec:06:49:f7:71:
         24:67:e6:58:38:12:2a:85:84:f7:a6:20:06:ef:ac:86:75:41:
         97:dc:c2:9d:31:a6:2e:c3:84:2b:4b:9c:50:a2:73:3a:81:79:
         a2:94:8a:14:0c:ee:62:4e:a7:40:a9:69:27:23:8c:cc:dd:7d:
         1f:a0:ce:a1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHUQWNyGhE4tiD0tWEQc+i7ApBMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI4OEE1NzJDMDg5Q0Y3REUwQzg3NzcwQzQyRUFDMkFE
QUJGMTUzRjAeFw0yMzExMDkxNDA5MDhaFw0yNDExMDcxNDE0MDhaMDMxMTAvBgNV
BAMTKDBDQkMzQzE0NTFDOTU0RDk2OTZBN0I2NjA3MTI1Mjg1Q0NGNDBBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsJ612LrIMgqoTjnDPlPycApV
XTXIeu3DNHijTS0fHgA+oIoFESE2IKlAIOMt9DiZklC27KfSMplgzABMujGng+S3
ZoLh6PUdfmZivtgms7eslDjyoE3vGnqjwdG/zQb2dYRgN6EHI93ykMalXxj9CiPm
WUntakyBsA7IhKwdI0xaEa4DXg8AeCrS85ITfeWErN02zm3tD+KswvocqYDzsSRx
tNHKMOM02PYT/BeIIIOowC9gMnz6uSYiY/0+fR5U0eubX1g17KnYj89DtNhZZLul
WxELGwGCQEhu3aX+dYvnsLoXCaUEPMdCkH653OCj0IkQt4IoFdlmLWmDdLTTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDLw8FFHJVNlpantmBxJShcz0Cp4wHwYDVR0j
BBgwFoAUYoilcsCJz33gyHdwxC6sKtq/FT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlNVZ1pGbmtVa2ZCUEhTZVVHWm5nN0hrTkxZVnBCdTd3a1ZtNHh1TlRz
aWUvMC82Mjg4QTU3MkMwODlDRjdERTBDODc3NzBDNDJFQUMyQURBQkYxNTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYyODhBNTcyQzA4OUNGN0RF
MEM4Nzc3MEM0MkVBQzJBREFCRjE1M0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTVWdaRm5rVWtmQlBIU2VVR1puZzdIa05MWVZwQnU3d2tWbTR4dU5Uc2llLzAv
MzIzODMwMzQzYTMyNjE2MTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQqpDANBgkqhkiG9w0BAQsFAAOCAQEAAtz0s5No
elCAREzVDUhdDJqFpbl3E5uJUTC/HwsYLJ+YRSqf2ppKAG0Nj+XdEGeRt5RdfzHY
61IlOBgfZs3jBUybEHJhwduuNjGbaOFX//Ouh2s3g3/OpZ1HVMc3m92k0r0riA/a
EU84URoIBuBr7MJcK7Hgn7sdTZgDqJRu/urmwNr06ZvMIEbjd3uhKTH7Qy3+GY1g
BYmtHgPjYvJnWG0u+qc2PO0ezXACy4j7EMiz8jjjVXiwOuy9ilP035pohOwGSfdx
JGfmWDgSKoWE96YgBu+shnVBl9zCnTGmLsOEK0ucUKJzOoF5opSKFAzuYk6nQKlp
JyOMzN19H6DOoQ==
-----END CERTIFICATE-----