Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/323830343a373038383a3a2f33322d3332203d3e20323730373332.roa
File:                     323830343a373038383a3a2f33322d3332203d3e20323730373332.roa (raw, json)
Hash identifier:          RaV+2jSaPqlv/7S59V2u+zRjBt+w5tch1Gt0u+KQcg4=
Subject key identifier:   60:C8:0D:82:DA:10:46:0B:61:7D:CE:68:5D:D1:97:6D:B7:CC:29:B8
Certificate issuer:       /CN=41F3C0F65E8171965A227085FB864D9A4D75C0E2
Certificate serial:       4D30BBE78DC9C5763B40DFBFAC3652B94ECFE4E3
Authority key identifier: 41:F3:C0:F6:5E:81:71:96:5A:22:70:85:FB:86:4D:9A:4D:75:C0:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F3C0F65E8171965A227085FB864D9A4D75C0E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/323830343a373038383a3a2f33322d3332203d3e20323730373332.roa
Signing time:             Fri 23 Aug 2024 20:08:57 +0000
ROA not before:           Fri 23 Aug 2024 20:03:57 +0000
ROA not after:            Fri 22 Aug 2025 20:08:57 +0000
asID:                     270732
IP address blocks:        2804:7088::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:30:bb:e7:8d:c9:c5:76:3b:40:df:bf:ac:36:52:b9:4e:cf:e4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F3C0F65E8171965A227085FB864D9A4D75C0E2
        Validity
            Not Before: Aug 23 20:03:57 2024 GMT
            Not After : Aug 22 20:08:57 2025 GMT
        Subject: CN=60C80D82DA10460B617DCE685DD1976DB7CC29B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:a3:fa:56:80:99:a7:87:0d:87:22:df:89:
                    3a:70:94:3f:6d:c4:85:bf:14:ad:15:2d:b5:63:6c:
                    69:82:6c:84:25:7b:ec:a9:f8:0a:51:71:11:48:c4:
                    07:cf:3c:ba:40:de:67:b0:ee:cb:06:3c:d8:ac:18:
                    55:73:48:cb:a6:51:1e:e9:e8:d2:5f:f1:3c:c1:1e:
                    30:4d:b9:90:db:a3:7b:5c:a9:e1:c2:b9:66:08:d4:
                    b9:1f:8d:fb:76:0a:40:4a:26:4c:01:ea:fa:8e:17:
                    5d:1f:39:19:ba:6f:71:38:74:e0:d2:c1:76:7e:1f:
                    4e:3a:bd:e1:f2:0a:e4:d9:82:0b:9d:93:49:69:61:
                    b0:ea:e7:70:e2:22:1e:b5:6d:1d:1b:fe:71:89:4d:
                    a4:dd:87:94:5c:f9:6b:18:32:2d:17:aa:74:f4:99:
                    04:cd:57:70:e2:e7:82:c0:78:0c:28:9e:65:6b:ec:
                    e5:8d:d3:19:64:38:98:aa:e2:de:b3:c0:ee:ce:40:
                    6b:9c:df:d2:cc:41:be:3e:0c:6e:8a:53:b0:48:00:
                    df:5d:ab:2f:97:e0:53:54:48:18:21:ff:b7:07:c5:
                    85:ea:9b:4d:bf:11:6b:1b:82:81:7d:c5:96:9d:65:
                    6a:97:09:4c:2f:4b:d6:73:94:4f:70:ee:b7:5b:3b:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C8:0D:82:DA:10:46:0B:61:7D:CE:68:5D:D1:97:6D:B7:CC:29:B8
            X509v3 Authority Key Identifier:
                keyid:41:F3:C0:F6:5E:81:71:96:5A:22:70:85:FB:86:4D:9A:4D:75:C0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/41F3C0F65E8171965A227085FB864D9A4D75C0E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F3C0F65E8171965A227085FB864D9A4D75C0E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/323830343a373038383a3a2f33322d3332203d3e20323730373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7088::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:7e:c1:eb:63:74:0e:e6:b5:92:88:0c:55:2e:67:d2:96:06:
         2e:6a:fd:52:da:84:98:e9:67:0b:f1:1a:9b:a4:30:41:27:fd:
         d8:ce:6f:99:c5:e3:ee:48:4b:b5:8d:ac:1b:b1:51:b0:af:68:
         d5:1e:53:4d:27:83:95:97:08:f2:c5:91:0c:a6:37:56:eb:b6:
         59:e7:c7:ea:d4:2b:e8:b5:f6:14:e1:ec:95:6b:6b:32:5f:25:
         13:6b:38:60:f0:d8:55:90:c5:63:56:e9:2a:51:a3:4f:24:06:
         e2:1d:6c:f8:17:14:ee:cd:3e:17:eb:24:e7:c2:c4:bf:21:55:
         9e:20:97:f9:49:e7:f3:fa:57:99:a2:07:ff:5f:e7:11:5f:99:
         5d:0c:59:04:17:62:0f:29:5c:5c:a5:47:5c:4b:ce:53:8e:56:
         6c:e3:ef:0e:fd:5e:69:d9:87:50:bd:f4:64:ab:b8:01:5e:27:
         ca:3a:06:46:12:ce:f8:2e:35:1d:c3:48:ed:90:c0:1b:ee:2e:
         32:17:a0:3e:b1:ec:31:bc:60:a1:f8:79:fd:b6:21:fd:5a:f3:
         5c:78:06:14:4f:17:bf:95:1b:98:fa:7f:82:60:9d:23:06:88:
         47:46:d4:ff:b0:45:34:22:33:51:05:5b:f4:7f:cf:94:77:36:
         24:6d:8c:3c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTTC7543JxXY7QN+/rDZSuU7P5OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGM0MwRjY1RTgxNzE5NjVBMjI3MDg1RkI4NjREOUE0
RDc1QzBFMjAeFw0yNDA4MjMyMDAzNTdaFw0yNTA4MjIyMDA4NTdaMDMxMTAvBgNV
BAMTKDYwQzgwRDgyREExMDQ2MEI2MTdEQ0U2ODVERDE5NzZEQjdDQzI5QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfO6P6VoCZp4cNhyLfiTpwlD9t
xIW/FK0VLbVjbGmCbIQle+yp+ApRcRFIxAfPPLpA3mew7ssGPNisGFVzSMumUR7p
6NJf8TzBHjBNuZDbo3tcqeHCuWYI1Lkfjft2CkBKJkwB6vqOF10fORm6b3E4dODS
wXZ+H046veHyCuTZggudk0lpYbDq53DiIh61bR0b/nGJTaTdh5Rc+WsYMi0XqnT0
mQTNV3Di54LAeAwonmVr7OWN0xlkOJiq4t6zwO7OQGuc39LMQb4+DG6KU7BIAN9d
qy+X4FNUSBgh/7cHxYXqm02/EWsbgoF9xZadZWqXCUwvS9ZzlE9w7rdbOwwzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYMgNgtoQRgthfc5oXdGXbbfMKbgwHwYDVR0j
BBgwFoAUQfPA9l6BcZZaInCF+4ZNmk11wOIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzNoQ0ZjZVJEeGd3RDF2cVVXVFhUelUyM1k1bVVvVXZjcWMxTHRmd0Rr
S3EvMC80MUYzQzBGNjVFODE3MTk2NUEyMjcwODVGQjg2NEQ5QTRENzVDMEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxRjNDMEY2NUU4MTcxOTY1
QTIyNzA4NUZCODY0RDlBNEQ3NUMwRTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzczaENGY2VSRHhnd0QxdnFVV1RYVHpVMjNZNW1Vb1V2Y3FjMUx0ZndEa0txLzAv
MzIzODMwMzQzYTM3MzAzODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzczMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARwiDANBgkqhkiG9w0BAQsFAAOCAQEAlH7B62N0
Dua1kogMVS5n0pYGLmr9UtqEmOlnC/Eam6QwQSf92M5vmcXj7khLtY2sG7FRsK9o
1R5TTSeDlZcI8sWRDKY3Vuu2WefH6tQr6LX2FOHslWtrMl8lE2s4YPDYVZDFY1bp
KlGjTyQG4h1s+BcU7s0+F+sk58LEvyFVniCX+Unn8/pXmaIH/1/nEV+ZXQxZBBdi
DylcXKVHXEvOU45WbOPvDv1eadmHUL30ZKu4AV4nyjoGRhLO+C41HcNI7ZDAG+4u
MhegPrHsMbxgofh5/bYh/VrzXHgGFE8Xv5UbmPp/gmCdIwaIR0bU/7BFNCIzUQVb
9H/PlHc2JG2MPA==
-----END CERTIFICATE-----