Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa
File:                     323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa (raw, json)
Hash identifier:          JugwnES1Z1x49r2ymFKVXZ/CG72xaR6pRVvNWMXW+cA=
Subject key identifier:   5B:6B:BA:8E:3C:7D:21:24:E6:84:7A:62:C4:83:1D:31:77:56:ED:DE
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       2B0F1A0DA09FE98FE4C09E4E82BED0B6E6793755
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:36 +0000
ROA not before:           Thu 04 Apr 2024 14:44:36 +0000
ROA not after:            Thu 03 Apr 2025 14:49:36 +0000
asID:                     271723
IP address blocks:        2804:8000:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0f:1a:0d:a0:9f:e9:8f:e4:c0:9e:4e:82:be:d0:b6:e6:79:37:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:36 2024 GMT
            Not After : Apr  3 14:49:36 2025 GMT
        Subject: CN=5B6BBA8E3C7D2124E6847A62C4831D317756EDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:8a:d8:eb:bd:50:d0:b7:27:43:3c:16:1e:
                    9b:7d:d2:a8:d1:53:b7:0f:94:1a:1d:74:a5:7d:7f:
                    19:de:bc:8b:21:1a:41:41:3e:ad:80:34:cc:60:a1:
                    b8:60:b8:c4:b0:90:1f:64:b4:f5:5c:c9:18:0e:82:
                    7f:e1:e1:4c:42:c4:e0:59:e5:a6:ea:52:a8:e3:88:
                    79:6b:0a:e5:5f:7c:fc:95:66:ba:a2:49:9e:cb:11:
                    b4:13:93:a6:60:a2:1a:f0:7f:58:1f:67:32:c8:04:
                    46:f1:9c:45:f2:d7:d2:81:89:f8:67:ea:53:be:87:
                    2b:6f:b0:67:bb:ba:c7:a6:e3:3f:f1:76:73:00:57:
                    33:ab:dc:39:b8:db:e5:33:1f:de:99:d1:81:62:b2:
                    bb:41:b6:35:17:b5:ec:0f:84:0b:10:98:26:50:e4:
                    6f:98:e3:1d:87:ab:08:ea:5b:32:af:7a:66:4a:3c:
                    da:9f:9e:8d:a1:dc:20:9b:ab:ec:16:79:19:de:62:
                    21:92:94:6e:3b:c0:c3:8e:65:26:52:15:1f:7d:0a:
                    61:91:c2:53:ef:b7:2a:58:96:43:36:fc:d7:7a:89:
                    dc:07:6b:7e:99:f5:91:9a:fd:c2:dd:5c:a3:61:75:
                    bf:ce:6e:48:08:f9:9e:ca:bf:bf:1c:14:64:99:24:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6B:BA:8E:3C:7D:21:24:E6:84:7A:62:C4:83:1D:31:77:56:ED:DE
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a383030303a3a2f33332d3333203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:d0:ec:30:24:3c:9d:7d:2d:14:20:36:47:a6:57:84:3f:2f:
         25:eb:8d:15:3f:ba:74:2d:37:11:ee:88:46:b6:fb:91:49:ec:
         b7:cb:34:6b:a4:7c:e3:94:2d:a5:a0:8e:2f:66:c8:16:0b:15:
         7f:66:db:91:20:53:5f:1f:72:17:f8:42:0b:f9:a5:9f:83:3f:
         ea:15:56:77:10:bb:d5:40:d4:70:ec:d4:ac:b7:ed:95:ac:64:
         60:07:f1:3e:27:10:1d:97:b6:4a:40:11:de:ea:40:e2:a0:1d:
         ea:c7:55:a7:36:7f:74:66:6c:08:0f:c8:e0:ce:d8:8a:29:35:
         c3:39:09:fd:18:c0:92:83:8b:48:7d:c6:5a:7d:5d:fd:65:47:
         2d:90:24:60:e8:fd:44:68:27:03:62:c7:b2:b4:60:28:f0:ac:
         e6:a4:33:cb:f0:6d:d6:50:22:99:b0:ea:43:3c:cf:75:cd:fd:
         77:2e:c2:9f:4e:ca:16:8d:72:3d:17:db:b5:26:a1:3b:83:18:
         e4:d9:c8:b1:b1:9a:59:56:2f:f8:b8:fe:6c:eb:58:0a:f8:77:
         45:2f:64:ea:fa:ff:ec:2c:a3:80:46:d7:36:42:a0:fb:55:6c:
         34:b5:64:21:b0:54:39:da:88:e0:99:80:23:ca:93:29:f0:ee:
         53:10:15:9f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKw8aDaCf6Y/kwJ5Ogr7QtuZ5N1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFFRTIwN0MwQzZGQUI1REY0QzhGRjFBNDFCRDkzMjc5
Mjc5MkM5OTAeFw0yNDA0MDQxNDQ0MzZaFw0yNTA0MDMxNDQ5MzZaMDMxMTAvBgNV
BAMTKDVCNkJCQThFM0M3RDIxMjRFNjg0N0E2MkM0ODMxRDMxNzc1NkVEREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3YrY671Q0LcnQzwWHpt90qjR
U7cPlBoddKV9fxnevIshGkFBPq2ANMxgobhguMSwkB9ktPVcyRgOgn/h4UxCxOBZ
5abqUqjjiHlrCuVffPyVZrqiSZ7LEbQTk6Zgohrwf1gfZzLIBEbxnEXy19KBifhn
6lO+hytvsGe7usem4z/xdnMAVzOr3Dm42+UzH96Z0YFisrtBtjUXtewPhAsQmCZQ
5G+Y4x2HqwjqWzKvemZKPNqfno2h3CCbq+wWeRneYiGSlG47wMOOZSZSFR99CmGR
wlPvtypYlkM2/Nd6idwHa36Z9ZGa/cLdXKNhdb/ObkgI+Z7Kv78cFGSZJA3HAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUW2u6jjx9ISTmhHpixIMdMXdW7d4wHwYDVR0j
BBgwFoAUKu4gfAxvq130yP8aQb2TJ5J5LJkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0hzUk5lOWdoVEZDZ0xiY3p5aEx0RENtcTF5NzZQakxzQTVoTDVGM0U3
U2svMS8yQUVFMjA3QzBDNkZBQjVERjRDOEZGMUE0MUJEOTMyNzkyNzkyQzk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBRUUyMDdDMEM2RkFCNURG
NEM4RkYxQTQxQkQ5MzI3OTI3OTJDOTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdIc1JOZTlnaFRGQ2dMYmN6eWhMdERDbXExeTc2UGpMc0E1aEw1RjNFN1NrLzEv
MzIzODMwMzQzYTM4MzAzMDMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTM3MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEgACAMA0GCSqGSIb3DQEBCwUA
A4IBAQCJ0OwwJDydfS0UIDZHpleEPy8l640VP7p0LTcR7ohGtvuRSey3yzRrpHzj
lC2loI4vZsgWCxV/ZtuRIFNfH3IX+EIL+aWfgz/qFVZ3ELvVQNRw7NSst+2VrGRg
B/E+JxAdl7ZKQBHe6kDioB3qx1WnNn90ZmwID8jgztiKKTXDOQn9GMCSg4tIfcZa
fV39ZUctkCRg6P1EaCcDYseytGAo8KzmpDPL8G3WUCKZsOpDPM91zf13LsKfTsoW
jXI9F9u1JqE7gxjk2cixsZpZVi/4uP5s61gK+HdFL2Tq+v/sLKOARtc2QqD7VWw0
tWQhsFQ52ojgmYAjypMp8O5TEBWf
-----END CERTIFICATE-----