Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/323830343a313866633a3a2f33322d3332203d3e203631373637.roa
File:                     323830343a313866633a3a2f33322d3332203d3e203631373637.roa (raw, json)
Hash identifier:          f3DjJhErJDSST/P5oN8o6s2LUxcImO/397tQBKbp/80=
Subject key identifier:   A3:64:F0:81:F4:96:20:D0:63:9A:CB:B0:E5:DF:F1:2C:16:1D:65:7C
Certificate issuer:       /CN=2FBE13F1826AF12492EA0793337A3CD8B27334F8
Certificate serial:       2298F849E5F6FF549D1A19EB38DF2E05DDA64158
Authority key identifier: 2F:BE:13:F1:82:6A:F1:24:92:EA:07:93:33:7A:3C:D8:B2:73:34:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/323830343a313866633a3a2f33322d3332203d3e203631373637.roa
Signing time:             Tue 15 Aug 2023 20:12:15 +0000
ROA not before:           Tue 15 Aug 2023 20:07:15 +0000
ROA not after:            Tue 13 Aug 2024 20:12:15 +0000
asID:                     61767
IP address blocks:        2804:18fc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:98:f8:49:e5:f6:ff:54:9d:1a:19:eb:38:df:2e:05:dd:a6:41:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FBE13F1826AF12492EA0793337A3CD8B27334F8
        Validity
            Not Before: Aug 15 20:07:15 2023 GMT
            Not After : Aug 13 20:12:15 2024 GMT
        Subject: CN=A364F081F49620D0639ACBB0E5DFF12C161D657C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e1:af:8c:f6:b4:81:ac:82:ca:96:ab:ff:df:
                    0f:ed:77:78:c7:14:09:32:5f:98:b6:ba:d6:39:e8:
                    b2:a4:7f:91:4d:51:90:f6:31:37:76:c0:25:1c:29:
                    43:15:4d:6e:f6:0f:95:8e:49:80:c6:51:25:2d:66:
                    1b:58:4f:dd:e9:24:a0:48:34:9f:94:28:05:bd:a3:
                    72:19:13:89:ba:ee:89:5e:69:f5:03:3b:2c:e9:d3:
                    c5:57:60:d0:15:a0:85:b3:0c:d1:3e:06:d2:cd:d9:
                    41:19:85:4b:ad:44:56:5d:d5:4e:9f:b2:5a:54:6b:
                    75:8a:01:9f:d2:90:03:67:2d:aa:6b:3c:bf:56:dc:
                    46:a3:f7:41:4f:53:60:92:b2:9f:02:ad:73:1e:d3:
                    9f:88:f8:cd:b9:36:b7:9e:96:20:a8:10:c2:1f:6e:
                    c8:f1:c7:33:83:69:70:07:87:4f:31:e0:62:c2:49:
                    a8:78:f6:a4:8f:d2:ad:cc:3e:bb:b7:57:1b:d2:79:
                    dd:99:18:6c:56:4a:ed:39:cd:7f:6e:4b:b3:65:f8:
                    60:bb:35:14:f7:de:8e:5e:38:86:c9:31:6f:6e:1f:
                    2a:60:00:15:5a:41:4c:42:c9:9c:cd:08:70:e5:62:
                    82:3e:c3:da:fe:37:ea:76:6d:ad:23:ef:5e:8c:f9:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:64:F0:81:F4:96:20:D0:63:9A:CB:B0:E5:DF:F1:2C:16:1D:65:7C
            X509v3 Authority Key Identifier:
                keyid:2F:BE:13:F1:82:6A:F1:24:92:EA:07:93:33:7A:3C:D8:B2:73:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/323830343a313866633a3a2f33322d3332203d3e203631373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:7f:70:58:c3:3a:e3:b9:18:e9:6a:3d:ca:c5:95:5c:46:
         a4:13:dd:7e:ab:36:56:57:93:23:84:53:d6:a7:85:a7:1a:67:
         10:7a:0f:3c:37:fb:89:f8:ee:b4:f8:28:de:63:c8:4c:6a:62:
         53:67:0c:9a:31:69:60:dd:3c:a4:04:be:e5:ac:98:9b:77:5b:
         33:a1:cc:f5:75:54:2c:b9:43:30:6a:aa:b9:e0:76:f1:06:92:
         6a:1c:c7:28:11:4e:ae:fd:f3:34:24:89:8f:44:eb:6f:a1:f7:
         92:9a:76:c7:96:fa:cb:6a:ba:36:5b:73:73:64:6c:d0:2e:b6:
         88:d7:74:9a:b6:b1:cc:57:06:e5:99:51:ec:77:dc:21:e6:28:
         91:db:34:6f:1a:6d:70:6d:5d:22:a6:45:6e:17:fc:8e:cb:f7:
         d5:5e:c3:84:f3:da:06:5c:de:fb:e7:91:7e:aa:f3:86:35:5a:
         64:9f:95:0c:25:b6:45:b5:e1:5b:91:30:91:e8:87:f8:dd:dc:
         1f:99:0a:f6:87:59:d6:92:cb:8e:2a:59:19:0d:00:c3:3d:b9:
         1e:06:26:66:28:f5:6c:2b:5a:ec:60:e6:25:7f:7b:3e:a0:a6:
         ee:e1:7f:dc:9f:07:be:7e:ab:23:ba:76:65:b7:4c:d2:a8:b4:
         c3:8b:5e:a7
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIpj4SeX2/1SdGhnrON8uBd2mQVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCRTEzRjE4MjZBRjEyNDkyRUEwNzkzMzM3QTNDRDhC
MjczMzRGODAeFw0yMzA4MTUyMDA3MTVaFw0yNDA4MTMyMDEyMTVaMDMxMTAvBgNV
BAMTKEEzNjRGMDgxRjQ5NjIwRDA2MzlBQ0JCMEU1REZGMTJDMTYxRDY1N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD24a+M9rSBrILKlqv/3w/td3jH
FAkyX5i2utY56LKkf5FNUZD2MTd2wCUcKUMVTW72D5WOSYDGUSUtZhtYT93pJKBI
NJ+UKAW9o3IZE4m67oleafUDOyzp08VXYNAVoIWzDNE+BtLN2UEZhUutRFZd1U6f
slpUa3WKAZ/SkANnLaprPL9W3Eaj90FPU2CSsp8CrXMe05+I+M25NreeliCoEMIf
bsjxxzODaXAHh08x4GLCSah49qSP0q3MPru3VxvSed2ZGGxWSu05zX9uS7Nl+GC7
NRT33o5eOIbJMW9uHypgABVaQUxCyZzNCHDlYoI+w9r+N+p2ba0j716M+V8DAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUo2TwgfSWINBjmsuw5d/xLBYdZXwwHwYDVR0j
BBgwFoAUL74T8YJq8SSS6geTM3o82LJzNPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGo3ZFdTcTFWQUJWUmo1UFBQWXEzekZTd1RKRDNBZ3FpQWpRcGprZjlI
eHIvMC8yRkJFMTNGMTgyNkFGMTI0OTJFQTA3OTMzMzdBM0NEOEIyNzMzNEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGQkUxM0YxODI2QUYxMjQ5
MkVBMDc5MzMzN0EzQ0Q4QjI3MzM0RjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhqN2RXU3ExVkFCVlJqNVBQUFlxM3pGU3dUSkQzQWdxaUFqUXBqa2Y5SHhyLzAv
MzIzODMwMzQzYTMxMzg2NjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGPwwDQYJKoZIhvcNAQELBQADggEBAJCtf3BYwzrj
uRjpaj3KxZVcRqQT3X6rNlZXkyOEU9anhacaZxB6Dzw3+4n47rT4KN5jyExqYlNn
DJoxaWDdPKQEvuWsmJt3WzOhzPV1VCy5QzBqqrngdvEGkmocxygRTq798zQkiY9E
62+h95KadseW+stqujZbc3NkbNAutojXdJq2scxXBuWZUex33CHmKJHbNG8abXBt
XSKmRW4X/I7L99Vew4Tz2gZc3vvnkX6q84Y1WmSflQwltkW14VuRMJHoh/jd3B+Z
CvaHWdaSy44qWRkNAMM9uR4GJmYo9WwrWuxg5iV/ez6gpu7hf9yfB75+qyO6dmW3
TNKotMOLXqc=
-----END CERTIFICATE-----