Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a3a2f33322d3332203d3e20323637353030.roa
File:                     323830343a343237303a3a2f33322d3332203d3e20323637353030.roa (raw, json)
Hash identifier:          UZ3LTgrDSYKTfw7h52KtD9xEcsk7eFqXtmMdIVicIu8=
Subject key identifier:   B2:B7:FE:C2:C8:6F:29:A9:08:EE:3D:CD:CF:3F:DA:5B:77:43:14:88
Certificate issuer:       /CN=A07201EB497ECDF417C2B45551BA90FE23600A9F
Certificate serial:       02E45B5D83915C48AADA42F0E7FA3CE75BCB49E4
Authority key identifier: A0:72:01:EB:49:7E:CD:F4:17:C2:B4:55:51:BA:90:FE:23:60:0A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A07201EB497ECDF417C2B45551BA90FE23600A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a3a2f33322d3332203d3e20323637353030.roa
Signing time:             Wed 22 Mar 2023 19:51:07 +0000
ROA not before:           Wed 22 Mar 2023 19:46:07 +0000
ROA not after:            Wed 20 Mar 2024 19:51:07 +0000
asID:                     267500
IP address blocks:        2804:4270::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e4:5b:5d:83:91:5c:48:aa:da:42:f0:e7:fa:3c:e7:5b:cb:49:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A07201EB497ECDF417C2B45551BA90FE23600A9F
        Validity
            Not Before: Mar 22 19:46:07 2023 GMT
            Not After : Mar 20 19:51:07 2024 GMT
        Subject: CN=B2B7FEC2C86F29A908EE3DCDCF3FDA5B77431488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:55:f3:33:87:64:a3:a5:51:8b:31:26:46:
                    38:60:76:e8:96:1d:99:b0:1c:9b:f0:91:fb:67:98:
                    2d:b8:1d:b3:5b:5b:c8:2e:32:36:92:73:64:7e:85:
                    bb:df:94:b2:ed:c1:8e:2a:56:64:0b:a4:a1:d2:8f:
                    7a:7f:2e:a8:86:7b:e9:45:b4:41:3e:30:0e:55:dd:
                    d3:05:6e:f2:9d:11:94:40:9b:20:9d:d9:2d:b2:7f:
                    75:17:01:8a:37:64:fd:3e:f4:1c:10:d3:1b:ad:fc:
                    53:28:49:12:11:f6:74:14:d1:f0:b4:41:f4:49:6b:
                    7a:05:44:dd:0a:d2:7a:61:49:31:29:01:bf:5f:2c:
                    d0:02:d0:64:f9:aa:ba:ed:6d:0f:b3:e3:39:18:62:
                    92:ba:d1:c2:c0:f7:52:62:6f:c1:ab:ad:df:f8:7a:
                    92:f7:d3:25:1f:45:54:2f:91:75:47:b1:ec:a3:a5:
                    4d:6c:14:ea:a3:0a:0b:2b:1d:7b:33:db:86:fd:e0:
                    de:a2:de:c1:ba:57:fe:61:cf:07:04:7e:b5:4c:d7:
                    61:ea:7e:66:f3:f6:e1:9c:a1:5c:f0:ae:b7:3b:c1:
                    dd:0d:09:9d:4e:d5:b4:e1:39:23:9d:f2:6d:03:be:
                    8d:e5:92:31:2b:25:c4:a2:1b:82:09:63:5e:6c:aa:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B7:FE:C2:C8:6F:29:A9:08:EE:3D:CD:CF:3F:DA:5B:77:43:14:88
            X509v3 Authority Key Identifier:
                keyid:A0:72:01:EB:49:7E:CD:F4:17:C2:B4:55:51:BA:90:FE:23:60:0A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/A07201EB497ECDF417C2B45551BA90FE23600A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A07201EB497ECDF417C2B45551BA90FE23600A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a3a2f33322d3332203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:0b:2f:35:48:38:3f:75:0d:8b:80:ee:f0:ee:11:76:f0:84:
         c4:b1:e0:08:52:89:ee:ba:f2:18:58:cf:48:3a:87:6f:08:c8:
         3c:c4:75:85:e1:84:4e:36:a8:a8:39:14:44:eb:94:f9:52:a4:
         23:b9:4a:23:47:1d:f8:be:85:29:ba:1d:79:51:39:ba:49:af:
         bc:89:a2:2d:d7:06:80:62:cf:9a:90:a1:80:b1:63:45:da:a6:
         8c:b7:a2:73:47:25:d1:fd:bb:d3:5d:28:eb:04:15:9d:7c:0c:
         47:37:05:53:e9:20:07:bc:34:be:76:b4:ce:b4:c9:4f:8d:75:
         cb:a0:cb:66:60:6c:91:e9:48:b2:fd:d0:7a:ea:4f:df:b2:d1:
         7d:e3:0d:3b:46:16:8c:13:48:16:f8:f4:30:19:39:1f:45:42:
         9a:84:ca:ac:c1:95:cb:dd:1f:cc:2d:01:18:ff:ed:32:15:1e:
         c7:7e:4c:d0:33:51:bf:fa:7d:56:b8:ef:a8:01:f9:e1:f8:2f:
         7a:1c:cf:67:26:e3:ba:31:9e:c1:48:e7:d0:04:8d:80:ea:3c:
         e5:16:d2:5b:7b:41:7b:1d:b7:88:60:1e:97:5f:f9:b5:9b:8d:
         62:b6:48:d0:b7:1b:d9:c7:5a:5a:e0:f4:86:1f:ec:3f:d7:39:
         cf:e6:2c:8b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAuRbXYORXEiq2kLw5/o851vLSeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA3MjAxRUI0OTdFQ0RGNDE3QzJCNDU1NTFCQTkwRkUy
MzYwMEE5RjAeFw0yMzAzMjIxOTQ2MDdaFw0yNDAzMjAxOTUxMDdaMDMxMTAvBgNV
BAMTKEIyQjdGRUMyQzg2RjI5QTkwOEVFM0RDRENGM0ZEQTVCNzc0MzE0ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdrlXzM4dko6VRizEmRjhgduiW
HZmwHJvwkftnmC24HbNbW8guMjaSc2R+hbvflLLtwY4qVmQLpKHSj3p/LqiGe+lF
tEE+MA5V3dMFbvKdEZRAmyCd2S2yf3UXAYo3ZP0+9BwQ0xut/FMoSRIR9nQU0fC0
QfRJa3oFRN0K0nphSTEpAb9fLNAC0GT5qrrtbQ+z4zkYYpK60cLA91Jib8Grrd/4
epL30yUfRVQvkXVHseyjpU1sFOqjCgsrHXsz24b94N6i3sG6V/5hzwcEfrVM12Hq
fmbz9uGcoVzwrrc7wd0NCZ1O1bThOSOd8m0Dvo3lkjErJcSiG4IJY15sqp4pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsrf+wshvKakI7j3Nzz/aW3dDFIgwHwYDVR0j
BBgwFoAUoHIB60l+zfQXwrRVUbqQ/iNgCp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUZkV3doVTVrTnBrMjZyOUdZZkRqVnNwZkdHWmphSzZmVUx0VFpNUXBC
N0IvMC9BMDcyMDFFQjQ5N0VDREY0MTdDMkI0NTU1MUJBOTBGRTIzNjAwQTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwNzIwMUVCNDk3RUNERjQx
N0MyQjQ1NTUxQkE5MEZFMjM2MDBBOUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlGZFd3aFU1a05wazI2cjlHWWZEalZzcGZHR1pqYUs2ZlVMdFRaTVFwQjdCLzAv
MzIzODMwMzQzYTM0MzIzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARCcDANBgkqhkiG9w0BAQsFAAOCAQEAPgsvNUg4
P3UNi4Du8O4RdvCExLHgCFKJ7rryGFjPSDqHbwjIPMR1heGETjaoqDkUROuU+VKk
I7lKI0cd+L6FKbodeVE5ukmvvImiLdcGgGLPmpChgLFjRdqmjLeic0cl0f27010o
6wQVnXwMRzcFU+kgB7w0vna0zrTJT411y6DLZmBskelIsv3QeupP37LRfeMNO0YW
jBNIFvj0MBk5H0VCmoTKrMGVy90fzC0BGP/tMhUex35M0DNRv/p9VrjvqAH54fgv
ehzPZybjujGewUjn0ASNgOo85RbSW3tBex23iGAel1/5tZuNYrZI0Lcb2cdaWuD0
hh/sP9c5z+Ysiw==
-----END CERTIFICATE-----