Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030343a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030343a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          IYpMSQ46tcLJbmaQZhVSjeN4OqXTx55CQ3RAU72T8Pk=
Subject key identifier:   CB:4F:9B:B5:64:8D:E2:CE:77:2A:40:22:6B:92:83:BC:FF:1F:A3:F8
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       0F9EE6E47B68049F3502F66EE490D77E6083A007
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030343a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:37 +0000
ROA not before:           Thu 04 Apr 2024 14:44:37 +0000
ROA not after:            Thu 03 Apr 2025 14:49:37 +0000
asID:                     271723
IP address blocks:        2804:8000:6004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9e:e6:e4:7b:68:04:9f:35:02:f6:6e:e4:90:d7:7e:60:83:a0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:37 2024 GMT
            Not After : Apr  3 14:49:37 2025 GMT
        Subject: CN=CB4F9BB5648DE2CE772A40226B9283BCFF1FA3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:9d:1f:ae:56:76:a3:8b:99:55:8e:1d:39:
                    25:81:e0:d0:7d:a0:44:f5:93:cc:c6:c3:fc:9e:40:
                    4b:6f:64:cd:12:f6:f3:0d:e5:c5:c9:8e:ef:fb:e1:
                    37:9f:11:a8:f9:b2:04:41:45:d6:59:24:c8:e2:11:
                    c2:ea:77:6d:c6:be:b9:f7:0c:e2:b1:52:d0:88:70:
                    e2:de:59:83:92:0a:c0:fa:f2:b6:cb:44:00:73:f8:
                    27:01:d1:2b:89:93:b2:8d:06:d4:22:f3:5e:39:13:
                    68:09:45:fe:ab:6a:fb:22:d3:58:50:c2:21:a7:15:
                    22:2b:24:ed:8b:08:ce:7c:b0:02:ea:69:6d:2f:2a:
                    e2:36:ae:3b:c0:46:a6:92:fb:20:05:7b:4f:bf:14:
                    c2:cc:00:25:76:41:d5:88:fa:11:c4:09:c8:40:53:
                    29:8b:77:d5:b6:19:52:20:5f:44:82:9f:a6:b8:72:
                    a7:b2:7c:ce:13:34:23:3a:6c:fb:a9:bf:90:ae:a1:
                    90:40:ed:31:8d:4d:37:2d:08:3a:cd:eb:6c:bc:22:
                    9c:74:40:1e:81:3b:cb:09:9e:85:1a:ad:82:a8:e1:
                    69:21:d3:fc:08:b5:55:84:95:c8:f0:73:78:8c:2a:
                    80:96:d0:3f:b3:62:ae:e7:47:8a:7d:ad:5d:aa:0f:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4F:9B:B5:64:8D:E2:CE:77:2A:40:22:6B:92:83:BC:FF:1F:A3:F8
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030343a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:9a:7d:47:e9:d8:3b:03:53:a0:fe:03:4e:81:57:22:2a:
         f1:31:4e:e2:71:0c:25:6f:e9:2d:0e:c8:6d:c6:d3:ee:ff:6c:
         c1:fd:98:59:f6:41:44:e9:3f:f1:00:60:94:03:c2:ae:91:2d:
         9c:73:4a:a7:15:87:ff:5d:85:7c:7f:ec:f6:f2:e1:39:62:52:
         71:32:3b:2d:98:07:bd:9a:a1:8f:f1:de:35:dd:25:22:5d:c8:
         b4:dc:c0:ab:39:a2:0f:9b:12:36:b3:ee:78:52:22:15:dd:db:
         f9:f4:ed:01:b4:d9:e4:d6:db:52:a7:8e:02:94:9a:f5:a4:0a:
         41:d2:fe:4d:a8:0f:f6:6d:76:44:16:58:92:e0:b9:3a:25:4c:
         d4:68:f7:8a:51:ac:1b:93:84:e1:ed:84:05:33:f4:a3:46:96:
         87:8f:86:06:9b:bc:86:28:04:e3:2b:bc:fa:f3:d5:01:08:87:
         0c:6b:af:70:12:67:37:e6:38:58:4c:70:5c:7b:e0:bc:a4:8b:
         7e:4d:ab:39:f4:ff:57:ba:f2:db:2d:fe:de:28:98:84:89:19:
         26:df:ad:a0:bc:ce:01:67:ee:bb:e7:c7:a9:75:1b:cb:3f:c3:
         9b:05:d2:7b:d2:27:8f:f9:08:fe:e0:f0:1f:8f:b1:bb:71:69:
         3a:76:ab:79
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUD57m5HtoBJ81AvZu5JDXfmCDoAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFFRTIwN0MwQzZGQUI1REY0QzhGRjFBNDFCRDkzMjc5
Mjc5MkM5OTAeFw0yNDA0MDQxNDQ0MzdaFw0yNTA0MDMxNDQ5MzdaMDMxMTAvBgNV
BAMTKENCNEY5QkI1NjQ4REUyQ0U3NzJBNDAyMjZCOTI4M0JDRkYxRkEzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl9J0frlZ2o4uZVY4dOSWB4NB9
oET1k8zGw/yeQEtvZM0S9vMN5cXJju/74TefEaj5sgRBRdZZJMjiEcLqd23Gvrn3
DOKxUtCIcOLeWYOSCsD68rbLRABz+CcB0SuJk7KNBtQi8145E2gJRf6ravsi01hQ
wiGnFSIrJO2LCM58sALqaW0vKuI2rjvARqaS+yAFe0+/FMLMACV2QdWI+hHECchA
UymLd9W2GVIgX0SCn6a4cqeyfM4TNCM6bPupv5CuoZBA7TGNTTctCDrN62y8Ipx0
QB6BO8sJnoUarYKo4Wkh0/wItVWElcjwc3iMKoCW0D+zYq7nR4p9rV2qD4MFAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUy0+btWSN4s53KkAia5KDvP8fo/gwHwYDVR0j
BBgwFoAUKu4gfAxvq130yP8aQb2TJ5J5LJkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0hzUk5lOWdoVEZDZ0xiY3p5aEx0RENtcTF5NzZQakxzQTVoTDVGM0U3
U2svMS8yQUVFMjA3QzBDNkZBQjVERjRDOEZGMUE0MUJEOTMyNzkyNzkyQzk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBRUUyMDdDMEM2RkFCNURG
NEM4RkYxQTQxQkQ5MzI3OTI3OTJDOTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdIc1JOZTlnaFRGQ2dMYmN6eWhMdERDbXExeTc2UGpMc0E1aEw1RjNFN1NrLzEv
MzIzODMwMzQzYTM4MzAzMDMwM2EzNjMwMzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMTM3MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEgABgBDANBgkqhkiG9w0BAQsF
AAOCAQEAfd+afUfp2DsDU6D+A06BVyIq8TFO4nEMJW/pLQ7IbcbT7v9swf2YWfZB
ROk/8QBglAPCrpEtnHNKpxWH/12FfH/s9vLhOWJScTI7LZgHvZqhj/HeNd0lIl3I
tNzAqzmiD5sSNrPueFIiFd3b+fTtAbTZ5NbbUqeOApSa9aQKQdL+TagP9m12RBZY
kuC5OiVM1Gj3ilGsG5OE4e2EBTP0o0aWh4+GBpu8higE4yu8+vPVAQiHDGuvcBJn
N+Y4WExwXHvgvKSLfk2rOfT/V7ry2y3+3iiYhIkZJt+toLzOAWfuu+fHqXUbyz/D
mwXSe9Inj/kI/uDwH4+xu3FpOnareQ==
-----END CERTIFICATE-----