Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          Q67AOLq6H5jirBZKYik157c0mam9FrRjY+1sCbm7gQA=
Subject key identifier:   BD:7F:E1:79:1B:0A:84:B2:AC:67:58:B2:0C:32:0D:71:13:39:5D:5F
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       37DCAD07DBDE1B7616FD43EB624385D512AC087B
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:28 +0000
ROA not before:           Wed 03 Apr 2024 13:48:28 +0000
ROA not after:            Wed 02 Apr 2025 13:53:28 +0000
asID:                     270266
IP address blocks:        2804:6960:5002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:dc:ad:07:db:de:1b:76:16:fd:43:eb:62:43:85:d5:12:ac:08:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:28 2024 GMT
            Not After : Apr  2 13:53:28 2025 GMT
        Subject: CN=BD7FE1791B0A84B2AC6758B20C320D7113395D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:e0:10:87:0e:2d:84:eb:77:c2:d1:42:e9:
                    13:e8:4a:d1:03:74:50:36:2b:51:00:94:c4:95:58:
                    72:4e:c4:46:89:9a:f0:11:b4:93:41:ea:48:40:67:
                    59:90:88:02:0b:22:d9:a4:22:99:20:79:d3:09:57:
                    9f:75:17:0e:97:0f:66:83:cd:61:55:74:15:2d:a6:
                    e1:66:dd:87:e6:8c:97:1f:b3:f8:9c:97:43:8f:96:
                    b0:57:47:67:fb:83:bf:85:94:57:f7:8e:2b:5a:04:
                    3e:1f:67:83:83:15:7a:6c:9c:fb:3e:29:95:53:eb:
                    98:f9:96:34:82:1a:de:7a:44:fa:36:a2:56:81:ae:
                    2c:16:08:28:5f:e0:8c:6c:ef:e4:09:36:5a:66:5b:
                    65:aa:3f:72:c6:bd:fe:67:93:f3:64:bc:68:83:db:
                    93:1d:1e:ec:ea:10:c4:50:f8:6d:2d:9b:6c:3f:b1:
                    1a:25:a6:78:94:cd:d4:09:6a:34:9f:d0:d7:f6:fd:
                    2d:e3:85:bb:79:d1:cb:0b:de:63:e3:3c:4a:01:15:
                    16:03:de:1b:21:a5:4b:fd:61:5d:d8:33:6e:d9:70:
                    e5:80:f7:12:f8:76:77:af:a2:91:a0:c6:f8:6a:af:
                    8e:b5:2f:1c:a8:3c:16:7b:9b:d0:b2:cc:cf:3a:a3:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7F:E1:79:1B:0A:84:B2:AC:67:58:B2:0C:32:0D:71:13:39:5D:5F
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:38:3e:ca:47:b1:18:bb:cf:0d:37:4c:4c:15:93:0a:c1:
         5e:a8:86:e3:04:2f:ae:71:06:06:10:af:ac:91:e8:10:2a:ae:
         cd:3d:74:08:d2:2a:15:65:50:5e:1f:a0:72:44:22:db:12:60:
         b6:27:bc:57:ce:eb:e1:02:9a:98:98:f5:01:05:ea:12:59:58:
         7a:2b:f4:1b:6f:51:c9:74:5a:7c:46:ab:54:2d:ab:f2:a2:06:
         5d:11:c8:66:77:16:a3:27:87:de:c1:3a:ca:49:3e:3d:99:c4:
         fe:1e:4b:40:25:24:7c:61:d4:4e:a4:69:3b:05:55:5c:fe:4a:
         c0:84:7f:7f:b4:d7:07:37:14:f7:79:bb:c7:ef:07:8d:13:49:
         b7:23:06:a1:a5:bc:bd:ec:9a:a2:04:d6:58:19:51:d5:e7:b6:
         98:3a:b6:6b:0f:cd:b2:74:f5:6a:2a:10:2a:dc:b6:18:48:1f:
         5a:15:50:46:ee:e7:12:9c:cd:9b:15:0b:b1:bd:30:22:a4:ba:
         18:8a:ea:70:f6:35:6b:bd:4f:c2:d7:b0:ba:f6:e0:d4:ff:ca:
         35:f5:37:5f:e3:df:6f:de:4d:57:7c:df:af:1d:e4:cc:a6:3c:
         a9:af:0f:8b:ad:49:7d:7b:bd:61:97:0b:d7:79:f0:20:f6:76:
         08:ab:fc:b5
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUN9ytB9veG3YW/UPrYkOF1RKsCHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg0NzBDMTBBQzY0NEJFRjRERjI2NjkyNEM0RTA4MzJD
OEZCQThBMjAeFw0yNDA0MDMxMzQ4MjhaFw0yNTA0MDIxMzUzMjhaMDMxMTAvBgNV
BAMTKEJEN0ZFMTc5MUIwQTg0QjJBQzY3NThCMjBDMzIwRDcxMTMzOTVENUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxOAQhw4thOt3wtFC6RPoStED
dFA2K1EAlMSVWHJOxEaJmvARtJNB6khAZ1mQiAILItmkIpkgedMJV591Fw6XD2aD
zWFVdBUtpuFm3YfmjJcfs/icl0OPlrBXR2f7g7+FlFf3jitaBD4fZ4ODFXpsnPs+
KZVT65j5ljSCGt56RPo2olaBriwWCChf4Ixs7+QJNlpmW2WqP3LGvf5nk/NkvGiD
25MdHuzqEMRQ+G0tm2w/sRolpniUzdQJajSf0Nf2/S3jhbt50csL3mPjPEoBFRYD
3hshpUv9YV3YM27ZcOWA9xL4dnevopGgxvhqr461LxyoPBZ7m9CyzM86owGrAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUvX/heRsKhLKsZ1iyDDINcRM5XV8wHwYDVR0j
BBgwFoAUuEcMEKxkS+9N8maSTE4IMsj7qKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hydVFhSHZMVE1nV3FZTmJFNk16SnVDenI0ZEdiVmNVUjRRS3lQZldz
cHkvMC9CODQ3MEMxMEFDNjQ0QkVGNERGMjY2OTI0QzRFMDgzMkM4RkJBOEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4NDcwQzEwQUM2NDRCRUY0
REYyNjY5MjRDNEUwODMyQzhGQkE4QTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYcnVRYUh2TFRNZ1dxWU5iRTZNekp1Q3pyNGRHYlZjVVI0UUt5UGZXc3B5LzAv
MzIzODMwMzQzYTM2MzkzNjMwM2EzNTMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEaWBQAjANBgkqhkiG9w0BAQsF
AAOCAQEATRU4PspHsRi7zw03TEwVkwrBXqiG4wQvrnEGBhCvrJHoECquzT10CNIq
FWVQXh+gckQi2xJgtie8V87r4QKamJj1AQXqEllYeiv0G29RyXRafEarVC2r8qIG
XRHIZncWoyeH3sE6ykk+PZnE/h5LQCUkfGHUTqRpOwVVXP5KwIR/f7TXBzcU93m7
x+8HjRNJtyMGoaW8veyaogTWWBlR1ee2mDq2aw/NsnT1aioQKty2GEgfWhVQRu7n
EpzNmxULsb0wIqS6GIrqcPY1a71Pwtewuvbg1P/KNfU3X+Pfb95NV3zfrx3kzKY8
qa8Pi61JfXu9YZcL13nwIPZ2CKv8tQ==
-----END CERTIFICATE-----