Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/323830343a363138303a3a2f33322d3332203d3e20323639323338.roa
File:                     323830343a363138303a3a2f33322d3332203d3e20323639323338.roa (raw, json)
Hash identifier:          zV/ZTmrQez9mOF5G3JPNhIP+vdF29fFzOjaTZTk5Go4=
Subject key identifier:   27:CE:9F:E2:5B:FD:8B:C1:64:44:1A:E8:8E:FE:11:59:11:67:14:20
Certificate issuer:       /CN=5DEF1069E775D55236467B1751C7F6CE5EF180F2
Certificate serial:       154C0672EAA702CF27A663C764749E72122BF808
Authority key identifier: 5D:EF:10:69:E7:75:D5:52:36:46:7B:17:51:C7:F6:CE:5E:F1:80:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/323830343a363138303a3a2f33322d3332203d3e20323639323338.roa
Signing time:             Thu 15 Feb 2024 01:34:49 +0000
ROA not before:           Thu 15 Feb 2024 01:29:49 +0000
ROA not after:            Thu 13 Feb 2025 01:34:49 +0000
asID:                     269238
IP address blocks:        2804:6180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4c:06:72:ea:a7:02:cf:27:a6:63:c7:64:74:9e:72:12:2b:f8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEF1069E775D55236467B1751C7F6CE5EF180F2
        Validity
            Not Before: Feb 15 01:29:49 2024 GMT
            Not After : Feb 13 01:34:49 2025 GMT
        Subject: CN=27CE9FE25BFD8BC164441AE88EFE115911671420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:21:51:f4:b4:35:e2:9e:f4:c8:6b:6f:15:
                    27:75:56:ba:b5:23:21:a8:01:ac:4b:bd:85:b2:07:
                    02:ec:4d:d8:75:06:f9:eb:a9:29:1c:0b:ff:2a:0b:
                    14:89:93:f5:a4:23:83:9f:d1:cf:5e:a7:46:ca:09:
                    fa:9c:ae:4f:4b:8b:f0:31:ce:cd:f1:e3:ab:dc:28:
                    f7:ed:ec:cd:22:a8:7a:6a:7a:dc:db:c5:ae:3a:1d:
                    5e:11:14:5c:28:5b:c5:f4:78:d6:30:e6:45:aa:5a:
                    45:0d:cf:41:7a:41:55:e0:6a:0d:0e:0f:f9:08:85:
                    63:06:e4:ab:6d:79:88:9e:18:b1:9c:14:32:0a:8c:
                    8d:d5:9b:30:32:bc:80:f0:95:bc:33:8e:46:3d:95:
                    b5:71:b3:79:11:46:10:96:ba:6d:7c:89:61:c5:3f:
                    dd:29:d9:17:95:93:c3:1c:f8:96:f5:9e:02:54:9b:
                    5b:4f:61:23:ab:e4:c2:f2:45:67:d8:a3:53:60:46:
                    b4:d7:9d:1f:20:b8:37:46:0a:4e:3f:4a:b5:d5:9a:
                    9e:25:c5:9d:50:54:91:8f:cf:b3:55:3b:d4:e8:ab:
                    fa:06:6a:0b:bc:65:b9:8a:a6:47:be:2c:1a:10:7b:
                    9f:9d:5c:24:db:58:a9:2b:68:84:9c:e9:dd:74:5b:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CE:9F:E2:5B:FD:8B:C1:64:44:1A:E8:8E:FE:11:59:11:67:14:20
            X509v3 Authority Key Identifier:
                keyid:5D:EF:10:69:E7:75:D5:52:36:46:7B:17:51:C7:F6:CE:5E:F1:80:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/323830343a363138303a3a2f33322d3332203d3e20323639323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6180::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:ab:ec:3b:23:2b:b9:1d:d4:85:51:a6:9a:c7:2a:bd:c1:6d:
         4a:f9:b5:c5:db:db:61:63:4a:44:b0:87:ac:32:a2:5d:9e:94:
         5a:e3:77:57:de:91:b9:13:f9:27:7c:5e:86:22:a0:dd:97:11:
         3e:22:4f:1c:eb:40:0c:55:51:13:7b:1b:3c:60:f7:ae:b0:28:
         10:2a:3d:07:65:b5:a4:91:69:6b:ce:75:74:44:34:b3:3a:26:
         01:27:6a:6c:5c:c9:91:31:77:10:7d:66:bd:84:10:f3:f5:7a:
         97:e1:57:99:7d:82:b1:15:7d:27:10:47:dc:8e:e5:77:b9:d9:
         14:22:24:78:79:b2:d3:9e:74:54:95:fe:b9:fa:fa:b4:3d:87:
         05:bc:5b:de:25:24:80:42:e1:77:6b:21:68:37:1b:ef:78:d3:
         47:e8:af:9a:0f:ab:11:83:7f:68:48:a2:bb:f0:75:5c:18:1b:
         68:34:83:3f:8f:8b:68:86:b1:e3:24:7f:0a:10:d9:66:ad:35:
         7a:11:83:41:37:7d:08:b2:35:22:81:37:73:a0:83:f5:d4:88:
         2e:cf:10:21:d7:c1:b1:f9:7f:75:50:a3:62:3b:99:ec:2f:74:
         04:3c:a1:68:f3:49:63:2e:e0:f6:d2:ec:46:6e:6e:45:f1:ce:
         56:ae:e0:dd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFUwGcuqnAs8npmPHZHSechIr+AgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURFRjEwNjlFNzc1RDU1MjM2NDY3QjE3NTFDN0Y2Q0U1
RUYxODBGMjAeFw0yNDAyMTUwMTI5NDlaFw0yNTAyMTMwMTM0NDlaMDMxMTAvBgNV
BAMTKDI3Q0U5RkUyNUJGRDhCQzE2NDQ0MUFFODhFRkUxMTU5MTE2NzE0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NSFR9LQ14p70yGtvFSd1Vrq1
IyGoAaxLvYWyBwLsTdh1BvnrqSkcC/8qCxSJk/WkI4Of0c9ep0bKCfqcrk9Li/Ax
zs3x46vcKPft7M0iqHpqetzbxa46HV4RFFwoW8X0eNYw5kWqWkUNz0F6QVXgag0O
D/kIhWMG5KtteYieGLGcFDIKjI3VmzAyvIDwlbwzjkY9lbVxs3kRRhCWum18iWHF
P90p2ReVk8Mc+Jb1ngJUm1tPYSOr5MLyRWfYo1NgRrTXnR8guDdGCk4/SrXVmp4l
xZ1QVJGPz7NVO9Toq/oGagu8ZbmKpke+LBoQe5+dXCTbWKkraISc6d10W8WDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJ86f4lv9i8FkRBrojv4RWRFnFCAwHwYDVR0j
BBgwFoAUXe8Qaed11VI2RnsXUcf2zl7xgPIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEx6Y0pKcEZKNnFUelVTTWloZnRrazVMZHRmSDdFdUZIVWticFFLNGNq
eEcvMC81REVGMTA2OUU3NzVENTUyMzY0NjdCMTc1MUM3RjZDRTVFRjE4MEYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERUYxMDY5RTc3NUQ1NTIz
NjQ2N0IxNzUxQzdGNkNFNUVGMTgwRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhMemNKSnBGSjZxVHpVU01paGZ0a2s1TGR0Zkg3RXVGSFVrYnBRSzRjanhHLzAv
MzIzODMwMzQzYTM2MzEzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARhgDANBgkqhkiG9w0BAQsFAAOCAQEASqvsOyMr
uR3UhVGmmscqvcFtSvm1xdvbYWNKRLCHrDKiXZ6UWuN3V96RuRP5J3xehiKg3ZcR
PiJPHOtADFVRE3sbPGD3rrAoECo9B2W1pJFpa851dEQ0szomASdqbFzJkTF3EH1m
vYQQ8/V6l+FXmX2CsRV9JxBH3I7ld7nZFCIkeHmy0550VJX+ufr6tD2HBbxb3iUk
gELhd2shaDcb73jTR+ivmg+rEYN/aEiiu/B1XBgbaDSDP4+LaIax4yR/ChDZZq01
ehGDQTd9CLI1IoE3c6CD9dSILs8QIdfBsfl/dVCjYjuZ7C90BDyhaPNJYy7g9tLs
Rm5uRfHOVq7g3Q==
-----END CERTIFICATE-----