Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/323830343a363532343a3a2f33322d3332203d3e20323639343731.roa
File:                     323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (raw, json)
Hash identifier:          cSK7nzIFmLNfuwR6/a3wHZRiz6Lv5jn7hSteltmY6fM=
Subject key identifier:   E1:A9:F8:8D:B3:93:DA:42:42:19:16:9F:7E:F4:11:0D:13:81:60:62
Certificate issuer:       /CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
Certificate serial:       44BFAAED2C68AE0D5949E9ECA888A45C3007B558
Authority key identifier: 4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/323830343a363532343a3a2f33322d3332203d3e20323639343731.roa
Signing time:             Fri 09 Feb 2024 17:00:02 +0000
ROA not before:           Fri 09 Feb 2024 16:55:02 +0000
ROA not after:            Fri 07 Feb 2025 17:00:02 +0000
asID:                     269471
IP address blocks:        2804:6524::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:aa:ed:2c:68:ae:0d:59:49:e9:ec:a8:88:a4:5c:30:07:b5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
        Validity
            Not Before: Feb  9 16:55:02 2024 GMT
            Not After : Feb  7 17:00:02 2025 GMT
        Subject: CN=E1A9F88DB393DA424219169F7EF4110D13816062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:9a:38:18:41:8d:16:f1:84:7c:9f:38:58:
                    2c:0a:58:6a:5d:10:ba:aa:b7:58:4b:f0:40:c4:c7:
                    83:e5:8b:4e:f3:d0:e3:26:d3:98:5c:99:90:b0:ca:
                    71:27:ba:74:3c:41:42:5b:d7:ee:31:08:63:e1:3d:
                    b8:44:41:1d:0d:e7:e1:1f:88:74:37:ea:c4:18:b3:
                    6c:0b:4a:e7:06:58:9f:f2:fb:ad:34:72:1b:51:e6:
                    25:67:17:aa:6d:7d:db:ae:24:c0:bc:fb:ee:e2:03:
                    d0:1a:cd:12:ec:12:20:bb:4b:65:5d:bd:b7:81:57:
                    b2:c4:3d:9c:eb:84:33:6d:2f:bc:28:b7:ee:b1:95:
                    f3:11:45:a4:1c:f6:0f:5b:04:39:23:46:fc:be:bb:
                    07:5b:92:45:9a:0b:eb:8a:71:3d:56:c5:3c:cb:1d:
                    38:46:ab:d2:37:37:e9:8b:df:7e:20:71:c0:6a:35:
                    7c:1a:48:7b:97:b9:47:a7:c5:bd:e7:17:8c:a3:b1:
                    59:ed:77:1d:5d:d9:7f:8e:ff:68:49:f0:81:10:26:
                    ba:72:f0:91:56:b2:26:9f:12:4c:3a:9b:c0:45:1a:
                    86:29:30:bd:db:9f:18:35:c0:3e:66:f1:a8:ce:14:
                    3a:04:fe:48:fd:51:8e:6d:a8:52:f1:6e:13:49:7c:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A9:F8:8D:B3:93:DA:42:42:19:16:9F:7E:F4:11:0D:13:81:60:62
            X509v3 Authority Key Identifier:
                keyid:4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/323830343a363532343a3a2f33322d3332203d3e20323639343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6524::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:0a:29:28:5e:5a:b2:96:b6:34:83:d6:d0:49:dc:53:47:a6:
         77:75:9f:95:93:1b:2b:65:c1:f1:39:ad:03:b8:46:13:2f:a1:
         0d:1f:61:3d:44:f1:b9:58:4e:d3:95:d9:82:6a:89:c7:88:97:
         00:c1:ed:06:c8:db:ee:25:54:dd:9d:35:73:9a:8d:30:fd:58:
         94:7a:65:e7:27:24:c0:d3:40:93:9d:ef:e0:17:13:9b:c9:9f:
         d0:1b:b0:44:2a:4d:4f:ce:e1:03:d7:db:bc:4c:f7:53:61:9d:
         03:b7:55:27:ba:31:65:2b:48:11:2e:0c:56:3c:55:dc:3e:02:
         fe:76:a6:56:07:3f:5c:a4:40:73:4a:ec:cc:a4:ba:c0:1f:5d:
         f7:bd:a2:60:76:13:32:42:0b:80:c2:5f:22:e9:89:50:46:64:
         5e:cb:e0:e0:51:a5:5a:90:b7:1f:16:a8:fc:bc:4a:42:3d:c0:
         8c:dc:08:33:7f:20:fc:f9:2f:94:b3:63:f0:5e:f0:28:65:81:
         8a:54:9b:ce:ae:94:d7:cf:dc:76:a5:68:b8:fb:af:ad:67:20:
         a0:db:7c:24:96:16:2a:92:a9:0a:6b:02:59:c7:a6:8c:81:84:
         1f:ab:53:49:be:69:78:4c:5f:a0:7f:ff:33:bf:93:8e:aa:ea:
         a2:7e:d9:00
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURL+q7Sxorg1ZSensqIikXDAHtVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVGOTQ1QUUyNjRBM0VDQjAzOEZEN0IwNkNCREMxMEE4
NUU4RTNCMzAeFw0yNDAyMDkxNjU1MDJaFw0yNTAyMDcxNzAwMDJaMDMxMTAvBgNV
BAMTKEUxQTlGODhEQjM5M0RBNDI0MjE5MTY5RjdFRjQxMTBEMTM4MTYwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmYJo4GEGNFvGEfJ84WCwKWGpd
ELqqt1hL8EDEx4Pli07z0OMm05hcmZCwynEnunQ8QUJb1+4xCGPhPbhEQR0N5+Ef
iHQ36sQYs2wLSucGWJ/y+600chtR5iVnF6ptfduuJMC8++7iA9AazRLsEiC7S2Vd
vbeBV7LEPZzrhDNtL7wot+6xlfMRRaQc9g9bBDkjRvy+uwdbkkWaC+uKcT1WxTzL
HThGq9I3N+mL334gccBqNXwaSHuXuUenxb3nF4yjsVntdx1d2X+O/2hJ8IEQJrpy
8JFWsiafEkw6m8BFGoYpML3bnxg1wD5m8ajOFDoE/kj9UY5tqFLxbhNJfCmLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4an4jbOT2kJCGRaffvQRDROBYGIwHwYDVR0j
BBgwFoAUTvlFriZKPssDj9ewbL3BCoXo47MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5
dzgvMC80RUY5NDVBRTI2NEEzRUNCMDM4RkQ3QjA2Q0JEQzEwQTg1RThFM0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFRjk0NUFFMjY0QTNFQ0Iw
MzhGRDdCMDZDQkRDMTBBODVFOEUzQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdoQlpkb1AyOHhGcmFVRnFQQ1VUdjVUTFdGQ0FBUXlhOWN4UEZLcEUyOXc4LzAv
MzIzODMwMzQzYTM2MzUzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzQzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARlJDANBgkqhkiG9w0BAQsFAAOCAQEAlgopKF5a
spa2NIPW0EncU0emd3WflZMbK2XB8TmtA7hGEy+hDR9hPUTxuVhO05XZgmqJx4iX
AMHtBsjb7iVU3Z01c5qNMP1YlHpl5yckwNNAk53v4BcTm8mf0BuwRCpNT87hA9fb
vEz3U2GdA7dVJ7oxZStIES4MVjxV3D4C/namVgc/XKRAc0rszKS6wB9d972iYHYT
MkILgMJfIumJUEZkXsvg4FGlWpC3Hxao/LxKQj3AjNwIM38g/PkvlLNj8F7wKGWB
ilSbzq6U18/cdqVouPuvrWcgoNt8JJYWKpKpCmsCWcemjIGEH6tTSb5peExfoH//
M7+Tjqrqon7ZAA==
-----END CERTIFICATE-----