Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/323830343a316161383a3a2f33322d3332203d3e203631383734.roa
File:                     323830343a316161383a3a2f33322d3332203d3e203631383734.roa (raw, json)
Hash identifier:          UW8KDjZXLPk87lFKGmcNB45sHxYbnSj9MHliNRBO8Ec=
Subject key identifier:   A5:4A:71:02:24:F8:16:5C:34:2F:E9:5B:A2:5F:45:C5:B7:78:7B:0D
Certificate issuer:       /CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
Certificate serial:       6D3C728A595E76EC2C0EAB193A63FB5124ACAB9F
Authority key identifier: B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/323830343a316161383a3a2f33322d3332203d3e203631383734.roa
Signing time:             Fri 08 Mar 2024 18:15:19 +0000
ROA not before:           Fri 08 Mar 2024 18:10:19 +0000
ROA not after:            Fri 07 Mar 2025 18:15:19 +0000
asID:                     61874
IP address blocks:        2804:1aa8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3c:72:8a:59:5e:76:ec:2c:0e:ab:19:3a:63:fb:51:24:ac:ab:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
        Validity
            Not Before: Mar  8 18:10:19 2024 GMT
            Not After : Mar  7 18:15:19 2025 GMT
        Subject: CN=A54A710224F8165C342FE95BA25F45C5B7787B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:7a:43:59:4b:22:ac:b2:25:84:33:b7:70:
                    59:13:5b:af:d5:e2:e9:9f:9d:f8:c4:d4:cf:a1:79:
                    12:32:d7:40:fa:54:5a:5d:ba:cc:60:35:aa:cc:1b:
                    a3:e7:81:7a:66:89:94:68:7c:83:15:40:7e:4e:c1:
                    2e:4d:f1:71:0d:3f:d9:45:43:a8:46:12:41:1e:bb:
                    9d:60:a1:30:1a:4d:6e:58:96:96:8e:29:a5:6b:5c:
                    95:a4:fb:5e:c0:48:d2:21:b5:0b:df:9a:40:f6:a0:
                    0e:59:59:e4:6e:6e:06:76:e3:02:fa:73:47:df:2b:
                    ed:bf:ac:3f:2e:cc:82:7c:d1:e5:3d:bf:67:bc:99:
                    d5:91:cd:db:52:61:9d:2e:08:42:bc:54:3b:b3:0f:
                    4d:27:76:3a:0a:d0:e5:44:75:f4:68:ec:ef:e9:b1:
                    a4:05:38:cd:0c:97:5e:1e:5e:7b:be:67:34:43:73:
                    cf:db:3a:73:b6:bb:2c:61:e9:dd:e7:2e:bd:04:f7:
                    d1:85:8a:49:a6:0f:4d:9a:47:df:06:c2:c1:e7:e9:
                    25:9a:1e:3c:9e:5f:ae:99:ce:f2:b0:5d:82:90:dd:
                    54:e5:4f:29:da:a0:f0:5e:6d:85:27:fa:e0:38:f0:
                    cf:a4:f6:5e:f6:d3:c9:ac:58:3f:ad:23:7e:9e:75:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:71:02:24:F8:16:5C:34:2F:E9:5B:A2:5F:45:C5:B7:78:7B:0D
            X509v3 Authority Key Identifier:
                keyid:B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/323830343a316161383a3a2f33322d3332203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1aa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:3e:27:cb:ce:5d:23:cf:c1:76:e0:1f:3b:24:0a:b1:47:09:
         98:27:11:04:ce:f5:5d:0b:80:b0:87:b5:3c:05:c7:e0:f8:39:
         e8:fa:de:ee:cd:0e:e1:31:3c:4b:9c:6c:10:9e:53:01:69:c8:
         73:62:fc:13:19:d7:89:36:38:32:f0:1d:98:3f:2e:48:ec:da:
         63:3f:3c:16:12:1f:e5:6d:26:7c:bc:32:cf:38:a4:cd:64:44:
         11:e5:f3:3e:19:05:22:66:53:fb:2f:45:65:8b:28:a8:94:37:
         a1:a6:36:97:67:ed:b1:fd:f0:0c:f7:67:46:ce:69:57:a3:a6:
         b4:c1:5c:39:7a:13:01:82:71:20:6f:53:e7:b3:7c:31:94:0f:
         f5:81:9a:a7:34:e3:24:9f:54:78:71:3d:bc:f2:6e:ca:fb:4f:
         71:bc:a8:8b:fa:a9:a1:dd:e9:72:5b:f1:7d:81:af:d6:f3:7e:
         74:f6:a3:65:9f:17:60:0e:6d:04:8d:d5:ab:29:af:b7:50:d7:
         6d:61:83:64:91:7b:29:d6:ba:fc:46:e3:62:19:62:93:21:ff:
         76:79:86:27:a1:00:2f:49:f2:b5:7f:36:ad:7f:40:15:a2:40:
         68:79:76:27:91:4c:aa:5f:87:9c:e8:bb:56:cc:a5:1c:ed:5e:
         7f:2c:74:e3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbTxyilleduwsDqsZOmP7USSsq58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NzQ1QTFGODkwQTc4MkEwNEZBRTkwNDhDNkUzNTU0
QkUxQUIwOTAeFw0yNDAzMDgxODEwMTlaFw0yNTAzMDcxODE1MTlaMDMxMTAvBgNV
BAMTKEE1NEE3MTAyMjRGODE2NUMzNDJGRTk1QkEyNUY0NUM1Qjc3ODdCMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClp3pDWUsirLIlhDO3cFkTW6/V
4umfnfjE1M+heRIy10D6VFpdusxgNarMG6PngXpmiZRofIMVQH5OwS5N8XENP9lF
Q6hGEkEeu51goTAaTW5YlpaOKaVrXJWk+17ASNIhtQvfmkD2oA5ZWeRubgZ24wL6
c0ffK+2/rD8uzIJ80eU9v2e8mdWRzdtSYZ0uCEK8VDuzD00ndjoK0OVEdfRo7O/p
saQFOM0Ml14eXnu+ZzRDc8/bOnO2uyxh6d3nLr0E99GFikmmD02aR98GwsHn6SWa
HjyeX66ZzvKwXYKQ3VTlTynaoPBebYUn+uA48M+k9l7208msWD+tI36edfzrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUpUpxAiT4Flw0L+lbol9Fxbd4ew0wHwYDVR0j
BBgwFoAUuWdFofiQp4KgT66QSMbjVUvhqwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFoNVFoU1BMZlp3R2RCdFNmNU1IS0EyZ3hLY1FDUUNOaXY4b2kyYjJH
a0svMC9COTY3NDVBMUY4OTBBNzgyQTA0RkFFOTA0OEM2RTM1NTRCRTFBQjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5Njc0NUExRjg5MEE3ODJB
MDRGQUU5MDQ4QzZFMzU1NEJFMUFCMDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZxaDVRaFNQTGZad0dkQnRTZjVNSEtBMmd4S2NRQ1FDTml2OG9pMmIyR2tLLzAv
MzIzODMwMzQzYTMxNjE2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM4
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGqgwDQYJKoZIhvcNAQELBQADggEBAKY+J8vOXSPP
wXbgHzskCrFHCZgnEQTO9V0LgLCHtTwFx+D4Oej63u7NDuExPEucbBCeUwFpyHNi
/BMZ14k2ODLwHZg/Lkjs2mM/PBYSH+VtJny8Ms84pM1kRBHl8z4ZBSJmU/svRWWL
KKiUN6GmNpdn7bH98Az3Z0bOaVejprTBXDl6EwGCcSBvU+ezfDGUD/WBmqc04ySf
VHhxPbzybsr7T3G8qIv6qaHd6XJb8X2Br9bzfnT2o2WfF2AObQSN1aspr7dQ121h
g2SReynWuvxG42IZYpMh/3Z5hiehAC9J8rV/Nq1/QBWiQGh5dieRTKpfh5zou1bM
pRztXn8sdOM=
-----END CERTIFICATE-----