Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          M8leIo+JKzfbFNIguzObEQObduj0A+tMsyrQ0tRKvcY=
Subject key identifier:   07:1C:5E:49:D1:45:5A:28:03:EB:FC:E8:3A:7D:27:5D:9D:05:68:A0
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       1574AB08B4F266F3FA80D75FC353935098BC75EB
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:18:49 +0000
ROA not before:           Thu 14 Mar 2024 02:13:49 +0000
ROA not after:            Thu 13 Mar 2025 02:18:49 +0000
asID:                     266623
IP address blocks:        2804:3ed4:30aa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:74:ab:08:b4:f2:66:f3:fa:80:d7:5f:c3:53:93:50:98:bc:75:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:13:49 2024 GMT
            Not After : Mar 13 02:18:49 2025 GMT
        Subject: CN=071C5E49D1455A2803EBFCE83A7D275D9D0568A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:db:c9:55:dd:df:ba:95:29:d8:bf:63:29:
                    ad:f4:70:37:6f:7d:a5:94:fc:a7:72:68:ce:75:f3:
                    2a:b2:33:2a:f6:ed:76:11:79:b5:7e:b7:9d:73:70:
                    7d:5a:15:eb:47:5a:eb:7b:99:be:83:dc:3a:bd:ca:
                    6e:e5:d5:27:56:36:0f:f0:d8:ed:b1:35:18:40:1d:
                    4b:57:f2:7f:54:33:2b:43:93:ba:0a:ca:f2:cb:ec:
                    62:83:75:3a:75:3a:a3:55:83:c3:e8:28:f9:7f:52:
                    0b:8e:96:67:73:00:6c:81:b7:c2:ad:77:2f:b2:c8:
                    6f:50:59:91:0c:25:fc:f0:0a:93:c7:2f:26:b0:67:
                    03:df:82:a4:b6:2b:b8:5c:26:4c:ab:8d:4f:f5:2f:
                    62:a1:fa:3c:b5:04:24:81:b5:d9:7f:a7:55:1c:d5:
                    eb:4a:2b:f4:e0:82:c8:21:1b:f6:70:a0:9a:f3:9d:
                    c3:dc:93:2a:71:64:5a:69:f9:eb:2b:f1:a3:c3:76:
                    8b:6b:e2:ff:45:34:45:fd:ab:d8:44:7a:ce:89:ae:
                    ba:70:42:4b:bf:2a:2c:c1:4f:7e:07:c3:4b:c8:d6:
                    62:9d:c5:72:1b:ed:a7:7a:ba:91:3f:53:87:38:91:
                    ad:d2:11:9c:d5:15:16:69:43:b3:4b:74:f2:a0:3c:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:5E:49:D1:45:5A:28:03:EB:FC:E8:3A:7D:27:5D:9D:05:68:A0
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:30aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:46:79:f7:42:13:c8:9b:b3:bb:02:0a:83:f2:51:0e:89:5f:
         8b:a2:69:87:3b:1e:c2:3f:3f:5e:32:9d:99:e6:50:35:54:a8:
         a4:e0:6e:04:58:9c:8c:e5:d3:c9:fc:00:7e:69:4b:06:55:15:
         5f:60:c1:26:34:d7:d3:ae:8a:d3:0b:ce:69:ec:f6:e6:a3:0c:
         31:c6:7b:21:a0:2f:2e:2f:d8:2d:ed:5e:12:0b:7a:e9:a0:5d:
         89:54:a7:91:7e:24:5a:6f:94:4f:3a:64:f2:f4:37:65:1a:7e:
         4e:fe:49:3b:78:dc:da:bc:66:6b:21:52:c6:06:4c:a7:10:61:
         76:15:f5:32:48:b9:ee:ad:a4:54:66:81:9a:84:a8:c3:52:3f:
         8a:d6:36:f0:ca:8c:b9:2d:a8:30:f4:3a:84:99:12:85:cd:d4:
         dc:4d:d2:76:3e:51:2b:b9:f6:90:d2:82:38:14:d1:46:be:c4:
         1e:1b:0a:63:9c:e9:12:a0:de:c5:61:5a:08:47:ab:dd:94:6b:
         b9:3d:b3:06:70:0b:ac:49:31:6c:28:3d:61:1b:e4:9b:2c:7c:
         1c:dc:6d:60:3c:1e:79:e4:21:0a:29:a4:b6:93:00:bd:55:1f:
         b1:35:c1:13:c4:2e:3f:d8:d0:fc:a0:39:63:06:e4:55:7a:8b:
         c3:ad:9d:40
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUFXSrCLTyZvP6gNdfw1OTUJi8deswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0Mzc0MzY0REVGMEEzQUQzMUMzRjQ1NDRFNDE1QjlF
QzZDNzA4MzAeFw0yNDAzMTQwMjEzNDlaFw0yNTAzMTMwMjE4NDlaMDMxMTAvBgNV
BAMTKDA3MUM1RTQ5RDE0NTVBMjgwM0VCRkNFODNBN0QyNzVEOUQwNTY4QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFttvJVd3fupUp2L9jKa30cDdv
faWU/KdyaM518yqyMyr27XYRebV+t51zcH1aFetHWut7mb6D3Dq9ym7l1SdWNg/w
2O2xNRhAHUtX8n9UMytDk7oKyvLL7GKDdTp1OqNVg8PoKPl/UguOlmdzAGyBt8Kt
dy+yyG9QWZEMJfzwCpPHLyawZwPfgqS2K7hcJkyrjU/1L2Kh+jy1BCSBtdl/p1Uc
1etKK/TggsghG/ZwoJrzncPckypxZFpp+esr8aPDdotr4v9FNEX9q9hEes6Jrrpw
Qku/KizBT34Hw0vI1mKdxXIb7ad6upE/U4c4ka3SEZzVFRZpQ7NLdPKgPJSpAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUBxxeSdFFWigD6/zoOn0nXZ0FaKAwHwYDVR0j
BBgwFoAUPUN0Nk3vCjrTHD9FROQVuexscIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMC8zRDQzNzQzNjRERUYwQTNBRDMxQzNGNDU0NEU0MTVCOUVDNkM3MDgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNENDM3NDM2NERFRjBBM0FE
MzFDM0Y0NTQ0RTQxNUI5RUM2QzcwODMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzAv
MzIzODMwMzQzYTMzNjU2NDM0M2EzMzMwNjE2MTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPtQwqjANBgkqhkiG9w0BAQsF
AAOCAQEAaEZ590ITyJuzuwIKg/JRDolfi6Jphzsewj8/XjKdmeZQNVSopOBuBFic
jOXTyfwAfmlLBlUVX2DBJjTX066K0wvOaez25qMMMcZ7IaAvLi/YLe1eEgt66aBd
iVSnkX4kWm+UTzpk8vQ3ZRp+Tv5JO3jc2rxmayFSxgZMpxBhdhX1Mki57q2kVGaB
moSow1I/itY28MqMuS2oMPQ6hJkShc3U3E3Sdj5RK7n2kNKCOBTRRr7EHhsKY5zp
EqDexWFaCEer3ZRruT2zBnALrEkxbCg9YRvkmyx8HNxtYDweeeQhCimktpMAvVUf
sTXBE8QuP9jQ/KA5YwbkVXqLw62dQA==
-----END CERTIFICATE-----