Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          St8V70nABke9dqs6eXbUPSaK82N200pG7HerjISI8+Y=
Subject key identifier:   D9:4F:7C:71:F2:8F:C2:A9:9F:27:92:76:BE:D5:DA:B1:34:BE:2A:C8
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       2E6B5F9A49548104ADE30F36F26D61C2B0A4E797
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:01 +0000
ROA not before:           Fri 15 Sep 2023 16:51:01 +0000
ROA not after:            Fri 13 Sep 2024 16:56:01 +0000
asID:                     268144
IP address blocks:        2804:58b0:120::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6b:5f:9a:49:54:81:04:ad:e3:0f:36:f2:6d:61:c2:b0:a4:e7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:01 2023 GMT
            Not After : Sep 13 16:56:01 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ad:6a:99:9f:29:73:db:95:b6:93:9a:63:dd:
                    58:49:de:f2:3c:6b:47:f0:ce:ab:ea:6b:32:8a:53:
                    61:2a:ad:a4:17:83:57:95:9c:6a:45:be:7c:00:6a:
                    a1:bb:5d:79:57:7e:28:77:25:0c:ce:00:51:3b:ef:
                    b1:22:3b:f4:8f:af:5e:5c:5a:3c:a6:fb:0a:e5:76:
                    aa:86:ac:a3:46:e2:a5:ba:cb:cb:f9:24:81:38:f5:
                    21:22:21:a9:91:4c:44:93:85:90:3c:d7:4a:28:45:
                    a9:61:87:f0:b2:3a:63:de:50:ac:bd:6b:b9:23:b9:
                    69:5a:0f:f6:cd:22:f4:f2:98:e1:83:62:bc:79:a0:
                    e4:23:63:f3:94:a2:80:0b:b1:2b:95:e8:e6:e2:7d:
                    ed:37:fc:a3:be:8b:33:d6:37:74:2d:ea:bd:04:3a:
                    03:2c:c4:fd:52:6e:c9:3b:ad:f6:ad:a9:ed:4d:d8:
                    ea:9c:d5:7c:a5:18:93:71:bd:4c:51:7e:14:2d:e8:
                    34:f8:44:05:c2:a3:03:22:c0:50:d0:ae:77:c8:f0:
                    9c:ed:27:ce:66:01:ff:98:b1:b4:a7:eb:be:dc:dc:
                    f8:9a:54:55:18:ca:31:45:a4:0c:86:01:c4:1d:53:
                    95:6a:65:58:04:29:f9:2d:22:0e:ea:64:2d:b2:fc:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:7C:71:F2:8F:C2:A9:9F:27:92:76:BE:D5:DA:B1:34:BE:2A:C8
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:120::/45

    Signature Algorithm: sha256WithRSAEncryption
         85:41:6e:d2:eb:4a:a7:a9:2c:bb:84:be:ed:11:8d:b1:a7:69:
         9d:3e:0d:53:17:41:79:6f:8d:8c:f9:bf:08:b8:8c:d0:93:56:
         e2:83:6b:11:39:0a:45:17:33:3b:4b:53:c5:ef:c2:c5:f0:d5:
         06:19:0c:5d:b0:b3:17:26:4f:2a:ba:98:8d:27:5e:c2:e9:4d:
         3c:d6:6d:e3:f5:8b:5f:a7:80:91:09:f1:3e:7b:34:eb:91:0a:
         f1:cf:a5:7e:48:19:a5:a1:c3:81:2d:a2:a5:c2:b3:0c:ae:02:
         29:0f:fd:53:f1:40:d8:c2:e5:74:85:6b:14:10:82:3b:bc:ea:
         a6:a4:14:d5:83:c1:0b:c8:f4:bc:68:8a:26:e9:be:6b:a8:d3:
         92:85:3b:ac:2b:fa:57:32:9c:61:0d:a1:12:70:29:5e:ab:1a:
         b1:0e:65:ff:1b:a9:1d:39:d8:2e:04:f7:1e:03:1a:33:f4:9e:
         de:8e:4f:bd:ed:f9:07:69:61:6f:38:23:2a:bb:fc:f7:7b:cd:
         3e:b4:4e:78:3f:ec:78:7e:b1:86:d2:57:f3:d7:94:5d:7d:1b:
         95:c5:6f:92:49:4e:11:be:50:52:79:eb:16:e3:24:9d:2d:b9:
         32:6d:12:02:76:ef:97:91:59:4d:70:88:63:e7:83:56:f9:b1:
         f3:17:24:57
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIULmtfmklUgQSt4w828m1hwrCk55cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YxODRFMjRDNkY5RURBNDAwMzc0MzNDRTg4MEFCNkFG
NzlCQUExODAeFw0yMzA5MTUxNjUxMDFaFw0yNDA5MTMxNjU2MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREVBRDZBOTk5RjI5NzNEQjk1
QjY5MzlBNjNERDU4NDlERUYyM0M2QjQ3RjBDRUFCRUE2QjMyOEE1MzYxMkFBREE0
MTc4MzU3OTU5QzZBNDVCRTdDMDA2QUExQkI1RDc5NTc3RTI4NzcyNTBDQ0UwMDUx
M0JFRkIxMjIzQkY0OEZBRjVFNUM1QTNDQTZGQjBBRTU3NkFBODZBQ0EzNDZFMkE1
QkFDQkNCRjkyNDgxMzhGNTIxMjIyMUE5OTE0QzQ0OTM4NTkwM0NENzRBMjg0NUE5
NjE4N0YwQjIzQTYzREU1MEFDQkQ2QkI5MjNCOTY5NUEwRkY2Q0QyMkY0RjI5OEUx
ODM2MkJDNzlBMEU0MjM2M0YzOTRBMjgwMEJCMTJCOTVFOEU2RTI3REVEMzdGQ0Ez
QkU4QjMzRDYzNzc0MkRFQUJEMDQzQTAzMkNDNEZENTI2RUM5M0JBREY2QURBOUVE
NEREOEVBOUNENTdDQTUxODkzNzFCRDRDNTE3RTE0MkRFODM0Rjg0NDA1QzJBMzAz
MjJDMDUwRDBBRTc3QzhGMDlDRUQyN0NFNjYwMUZGOThCMUI0QTdFQkJFRENEQ0Y4
OUE1NDU1MThDQTMxNDVBNDBDODYwMUM0MUQ1Mzk1NkE2NTU4MDQyOUY5MkQyMjBF
RUE2NDJEQjJGQzEwODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3q1qmZ8pc9uVtpOaY91YSd7yPGtH8M6r6msyilNhKq2kF4NXlZxq
Rb58AGqhu115V34odyUMzgBRO++xIjv0j69eXFo8pvsK5XaqhqyjRuKlusvL+SSB
OPUhIiGpkUxEk4WQPNdKKEWpYYfwsjpj3lCsvWu5I7lpWg/2zSL08pjhg2K8eaDk
I2PzlKKAC7Erlejm4n3tN/yjvosz1jd0Leq9BDoDLMT9Um7JO632rantTdjqnNV8
pRiTcb1MUX4ULeg0+EQFwqMDIsBQ0K53yPCc7SfOZgH/mLG0p+u+3Nz4mlRVGMox
RaQMhgHEHVOVamVYBCn5LSIO6mQtsvwQgQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FNlPfHHyj8KpnyeSdr7V2rE0virIMB8GA1UdIwQYMBaAFH8YTiTG+e2kADdDPOiA
q2r3m6oYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS
aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzAvN0YxODRFMjRDNkY5RURB
NDAwMzc0MzNDRTg4MEFCNkFGNzlCQUExOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83RjE4NEUyNEM2RjlFREE0MDAzNzQzM0NFODgwQUI2QUY3OUJB
QTE4LmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91
N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8wLzMyMzgzMDM0M2EzNTM4NjIzMDNh
MzEzMjMwM2EzYTJmMzQzNTJkMzQzNTIwM2QzZTIwMzIzNjM4MzEzNDM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcDKARYsAEgMA0GCSqGSIb3DQEBCwUAA4IBAQCFQW7S60qnqSy7hL7tEY2x
p2mdPg1TF0F5b42M+b8IuIzQk1big2sROQpFFzM7S1PF78LF8NUGGQxdsLMXJk8q
upiNJ17C6U081m3j9Ytfp4CRCfE+ezTrkQrxz6V+SBmlocOBLaKlwrMMrgIpD/1T
8UDYwuV0hWsUEII7vOqmpBTVg8ELyPS8aIom6b5rqNOShTusK/pXMpxhDaEScCle
qxqxDmX/G6kdOdguBPceAxoz9J7ejk+97fkHaWFvOCMqu/z3e80+tE54P+x4frGG
0lfz15RdfRuVxW+SSU4RvlBSeesW4ySdLbkybRICdu+XkVlNcIhj54NW+bHzFyRX
-----END CERTIFICATE-----