Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa
File:                     323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa (raw, json)
Hash identifier:          t1OIZnz3/byb2/lyl+lGoKGpiVTJ0WSVR2/t1lkCdog=
Subject key identifier:   56:77:9A:8C:2C:74:61:51:9B:A3:67:F9:E5:68:9D:1B:32:28:37:77
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       3AFC34F76CA46C379D63547B4DFB59230D58E30A
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa
Signing time:             Sun 24 Sep 2023 21:58:53 +0000
ROA not before:           Sun 24 Sep 2023 21:53:53 +0000
ROA not after:            Sun 22 Sep 2024 21:58:53 +0000
asID:                     265950
IP address blocks:        2804:404c:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fc:34:f7:6c:a4:6c:37:9d:63:54:7b:4d:fb:59:23:0d:58:e3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:53 2023 GMT
            Not After : Sep 22 21:58:53 2024 GMT
        Subject: CN=56779A8C2C7461519BA367F9E5689D1B32283777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:25:16:37:3b:ad:83:d4:9e:e0:02:df:00:
                    52:95:bf:0c:d8:ba:a6:f3:e1:08:4f:21:c3:fe:28:
                    fd:f4:75:19:dd:0e:80:ed:a0:42:60:da:cc:ca:e4:
                    7b:c3:a1:e6:43:45:05:1f:a8:31:73:98:25:83:77:
                    50:94:8b:81:3e:49:2c:ff:1c:2b:8d:15:e4:ed:63:
                    d1:70:41:c1:ee:50:03:af:d2:fc:32:02:53:86:6e:
                    5a:d6:3f:cd:f2:9b:dc:ce:58:aa:f4:43:63:92:97:
                    4f:2b:c3:8c:6a:e2:0d:81:40:4e:2e:cd:08:ad:c1:
                    f3:c3:9d:25:38:94:e5:90:eb:a5:fe:e5:4e:0a:45:
                    c3:16:36:ad:10:e6:6a:92:5f:5d:01:5b:79:3b:48:
                    e8:99:28:ea:b6:a9:37:53:81:04:c5:0f:c7:04:ee:
                    73:0b:cd:4a:7f:dc:62:f5:c6:5a:a0:06:6d:7e:e6:
                    07:7f:34:c2:40:6c:c3:d3:83:ff:03:37:bd:3e:e2:
                    c8:22:d2:d6:4d:05:1e:de:51:1b:7e:e1:bc:0a:2c:
                    a2:c7:a5:68:ac:7b:bb:32:74:96:4d:97:83:34:e3:
                    d9:51:06:8e:90:80:88:bb:f7:ac:bb:c4:b6:be:3f:
                    78:53:b0:df:18:75:65:63:23:5f:6d:43:2b:2e:f2:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:77:9A:8C:2C:74:61:51:9B:A3:67:F9:E5:68:9D:1B:32:28:37:77
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:07:99:e4:5e:13:8e:93:23:76:ba:18:86:55:d2:d9:c6:
         60:5b:52:c4:fe:91:8f:ec:ce:76:ea:46:e8:09:1a:c3:0a:d0:
         07:b3:23:2d:6b:ac:29:8b:00:a7:d6:8c:c4:e3:25:1c:9d:ac:
         87:83:d4:fe:35:ac:97:55:1a:f6:1f:14:40:0e:4b:df:b2:dc:
         fb:b4:af:d1:b7:0f:f2:56:d2:7d:df:15:06:03:d5:91:c2:ad:
         88:31:09:b8:c4:16:e6:03:ef:27:7f:f5:50:77:15:56:71:91:
         d6:e9:40:c3:ed:96:39:be:99:e3:c7:b8:01:c9:09:09:aa:d5:
         8f:df:a8:5a:e7:3f:df:5b:8e:e3:82:73:91:82:22:0c:f0:bf:
         e6:fb:bf:38:55:8e:3a:0d:00:d4:1f:62:02:49:07:70:b8:a3:
         81:b2:64:dc:eb:16:4d:b6:7e:65:1f:63:3e:9d:f3:7f:46:a7:
         2f:2f:b3:41:1d:94:88:83:0b:e1:8f:57:73:0a:7b:e0:5b:2b:
         52:a4:4e:68:0b:a4:d1:0e:bf:8b:95:3e:a9:69:86:d7:41:23:
         d3:79:04:6c:68:85:44:21:9d:37:13:bc:6d:eb:c0:2b:9b:9a:
         4a:0f:44:20:79:f3:ee:08:93:7d:df:6e:a7:28:1c:af:81:e7:
         61:75:b8:98
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUOvw092ykbDedY1R7TftZIw1Y4wowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURBNTg2QzJCMkREMEE3RjBENDQ2OEMzN0IzMjQ2NDIw
M0I0QzAwNzAeFw0yMzA5MjQyMTUzNTNaFw0yNDA5MjIyMTU4NTNaMDMxMTAvBgNV
BAMTKDU2Nzc5QThDMkM3NDYxNTE5QkEzNjdGOUU1Njg5RDFCMzIyODM3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8CUWNzutg9Se4ALfAFKVvwzY
uqbz4QhPIcP+KP30dRndDoDtoEJg2szK5HvDoeZDRQUfqDFzmCWDd1CUi4E+SSz/
HCuNFeTtY9FwQcHuUAOv0vwyAlOGblrWP83ym9zOWKr0Q2OSl08rw4xq4g2BQE4u
zQitwfPDnSU4lOWQ66X+5U4KRcMWNq0Q5mqSX10BW3k7SOiZKOq2qTdTgQTFD8cE
7nMLzUp/3GL1xlqgBm1+5gd/NMJAbMPTg/8DN70+4sgi0tZNBR7eURt+4bwKLKLH
pWise7sydJZNl4M049lRBo6QgIi796y7xLa+P3hTsN8YdWVjI19tQysu8umfAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUVneajCx0YVGbo2f55WidGzIoN3cwHwYDVR0j
BBgwFoAUHaWGwrLdCn8NRGjDezJGQgO0wAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMC8xREE1ODZDMkIyREQwQTdGMEQ0NDY4QzM3QjMyNDY0MjAzQjRDMDA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFEQTU4NkMyQjJERDBBN0Yw
RDQ0NjhDMzdCMzI0NjQyMDNCNEMwMDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzAv
MzIzODMwMzQzYTM0MzAzNDYzM2EzMTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM1MzkzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKARATAARMA0GCSqGSIb3DQEBCwUAA4IB
AQCdrweZ5F4TjpMjdroYhlXS2cZgW1LE/pGP7M526kboCRrDCtAHsyMta6wpiwCn
1ozE4yUcnayHg9T+NayXVRr2HxRADkvfstz7tK/Rtw/yVtJ93xUGA9WRwq2IMQm4
xBbmA+8nf/VQdxVWcZHW6UDD7ZY5vpnjx7gByQkJqtWP36ha5z/fW47jgnORgiIM
8L/m+784VY46DQDUH2ICSQdwuKOBsmTc6xZNtn5lH2M+nfN/RqcvL7NBHZSIgwvh
j1dzCnvgWytSpE5oC6TRDr+LlT6paYbXQSPTeQRsaIVEIZ03E7xt68Arm5pKD0Qg
efPuCJN9326nKByvgedhdbiY
-----END CERTIFICATE-----