Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d313238203d3e20323634353835.roa
File:                     323830343a323230303a3a2f33322d313238203d3e20323634353835.roa (raw, json)
Hash identifier:          IaZE+xZ9vWH+OEB43MaRCvdYCRfo3G8fj8Uj/aY8c7Q=
Subject key identifier:   41:C1:0F:A1:EB:5F:2D:CB:1D:43:52:1C:70:B2:7E:B2:CB:27:29:9A
Certificate issuer:       /CN=07833EE00DABA87DB5F29925F1042F428FD9200E
Certificate serial:       43A888FB8F23A7DB915CB6B94E929EDAA38B03C8
Authority key identifier: 07:83:3E:E0:0D:AB:A8:7D:B5:F2:99:25:F1:04:2F:42:8F:D9:20:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07833EE00DABA87DB5F29925F1042F428FD9200E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d313238203d3e20323634353835.roa
Signing time:             Mon 13 Mar 2023 15:32:40 +0000
ROA not before:           Mon 13 Mar 2023 15:27:40 +0000
ROA not after:            Mon 11 Mar 2024 15:32:40 +0000
asID:                     264585
IP address blocks:        2804:2200::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a8:88:fb:8f:23:a7:db:91:5c:b6:b9:4e:92:9e:da:a3:8b:03:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07833EE00DABA87DB5F29925F1042F428FD9200E
        Validity
            Not Before: Mar 13 15:27:40 2023 GMT
            Not After : Mar 11 15:32:40 2024 GMT
        Subject: CN=41C10FA1EB5F2DCB1D43521C70B27EB2CB27299A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:e5:3c:6e:86:0e:5a:90:9c:88:9b:dd:a3:
                    ce:fe:1e:83:17:f4:ed:74:74:11:3c:45:8e:86:c4:
                    26:1d:53:b8:34:23:c3:4f:df:85:77:99:7d:34:92:
                    7f:33:2b:e8:4a:34:33:00:dd:de:f7:54:84:e5:aa:
                    d8:9d:b9:50:16:09:d0:b0:5d:3a:ba:95:ad:82:6a:
                    3f:bc:98:d9:0e:01:55:ff:b4:61:29:b5:ef:bf:a2:
                    a6:96:c1:5b:64:de:bf:90:67:25:90:4a:71:a6:de:
                    98:69:0e:23:03:fc:56:bb:cc:aa:81:57:a8:94:63:
                    11:1a:3e:33:ce:c0:e4:82:1c:eb:ba:22:ab:29:db:
                    0e:e6:28:45:ee:bc:84:6e:0e:5f:d8:85:22:c7:1e:
                    0a:8e:12:69:91:c9:15:13:ed:cf:1e:de:0b:5c:c7:
                    c1:4f:e6:01:58:ba:3a:25:d3:14:5b:43:12:b0:79:
                    49:49:a9:c1:3d:c3:f0:28:e9:b5:e2:88:4c:12:37:
                    da:ad:61:df:bb:f6:87:43:d2:1e:be:1a:d8:c3:27:
                    c9:73:74:21:b8:72:94:cf:33:cb:76:68:6c:ba:7e:
                    ee:fd:a6:af:8f:e7:0d:b4:e1:aa:80:11:42:ef:2d:
                    ac:46:e2:e9:3b:6f:37:2b:4e:7b:9e:36:bd:ce:dd:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:0F:A1:EB:5F:2D:CB:1D:43:52:1C:70:B2:7E:B2:CB:27:29:9A
            X509v3 Authority Key Identifier:
                keyid:07:83:3E:E0:0D:AB:A8:7D:B5:F2:99:25:F1:04:2F:42:8F:D9:20:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/07833EE00DABA87DB5F29925F1042F428FD9200E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07833EE00DABA87DB5F29925F1042F428FD9200E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a3a2f33322d313238203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2200::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:c1:05:ec:20:1d:b5:93:3f:94:a2:64:09:ec:d9:97:5a:
         6b:a6:ca:34:00:84:65:5c:be:ca:67:a0:27:1b:5b:4f:be:06:
         64:cf:dc:c0:51:c3:98:00:cf:76:1f:cf:c3:45:b0:a3:37:39:
         bc:51:db:ca:21:57:e6:d3:29:de:5b:f1:12:25:9b:0a:56:29:
         58:33:4e:2e:ea:fc:95:1d:30:6b:c1:84:e2:2f:17:30:db:b9:
         b3:e2:67:6d:6f:81:9d:9d:ae:52:49:c6:0b:0b:80:ef:eb:80:
         b7:9a:b3:9a:6b:33:09:ec:15:31:63:65:74:67:55:ed:3c:a3:
         33:f6:32:be:19:9a:65:a0:0e:a7:d6:26:99:2c:3a:eb:db:8c:
         18:75:8a:d8:ae:a7:7d:0c:7f:f0:95:7c:42:38:8a:d4:b5:8e:
         76:9c:57:a4:17:aa:40:93:88:5a:99:a3:ca:34:2d:df:27:af:
         4d:32:0c:05:ce:e8:e9:e5:28:10:49:55:78:85:a0:de:a2:eb:
         29:a9:60:1a:b1:a1:a2:fc:f3:8f:64:be:6e:d3:24:72:94:7c:
         3f:d8:f7:ee:71:78:b7:50:67:7c:3d:85:17:84:19:4c:d2:63:
         cb:b2:25:91:38:5c:03:eb:cd:ba:19:45:1c:62:67:1e:44:ea:
         ce:b7:12:bb
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUQ6iI+48jp9uRXLa5TpKe2qOLA8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc4MzNFRTAwREFCQTg3REI1RjI5OTI1RjEwNDJGNDI4
RkQ5MjAwRTAeFw0yMzAzMTMxNTI3NDBaFw0yNDAzMTExNTMyNDBaMDMxMTAvBgNV
BAMTKDQxQzEwRkExRUI1RjJEQ0IxRDQzNTIxQzcwQjI3RUIyQ0IyNzI5OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7B+U8boYOWpCciJvdo87+HoMX
9O10dBE8RY6GxCYdU7g0I8NP34V3mX00kn8zK+hKNDMA3d73VITlqtiduVAWCdCw
XTq6la2Caj+8mNkOAVX/tGEpte+/oqaWwVtk3r+QZyWQSnGm3phpDiMD/Fa7zKqB
V6iUYxEaPjPOwOSCHOu6Iqsp2w7mKEXuvIRuDl/YhSLHHgqOEmmRyRUT7c8e3gtc
x8FP5gFYujol0xRbQxKweUlJqcE9w/Ao6bXiiEwSN9qtYd+79odD0h6+GtjDJ8lz
dCG4cpTPM8t2aGy6fu79pq+P5w204aqAEULvLaxG4uk7bzcrTnueNr3O3TW7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUQcEPoetfLcsdQ1IccLJ+sssnKZowHwYDVR0j
BBgwFoAUB4M+4A2rqH218pkl8QQvQo/ZIA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUo4eEpkaE5YSFlwWFFuemFod0x6eGdIUlc3N2d5OHgzYXp6eWRRQ2J3
NDMvMC8wNzgzM0VFMDBEQUJBODdEQjVGMjk5MjVGMTA0MkY0MjhGRDkyMDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3ODMzRUUwMERBQkE4N0RC
NUYyOTkyNUYxMDQyRjQyOEZEOTIwMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKOHhKZGhOWEhZcFhRbnphaHdMenhnSFJXNzdneTh4M2F6enlkUUNidzQzLzAv
MzIzODMwMzQzYTMyMzIzMDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCIAMA0GCSqGSIb3DQEBCwUAA4IBAQCMp8EF
7CAdtZM/lKJkCezZl1prpso0AIRlXL7KZ6AnG1tPvgZkz9zAUcOYAM92H8/DRbCj
Nzm8UdvKIVfm0yneW/ESJZsKVilYM04u6vyVHTBrwYTiLxcw27mz4mdtb4Gdna5S
ScYLC4Dv64C3mrOaazMJ7BUxY2V0Z1XtPKMz9jK+GZploA6n1iaZLDrr24wYdYrY
rqd9DH/wlXxCOIrUtY52nFekF6pAk4hamaPKNC3fJ69NMgwFzujp5SgQSVV4haDe
ouspqWAasaGi/POPZL5u0yRylHw/2PfucXi3UGd8PYUXhBlM0mPLsiWROFwD6826
GUUcYmceROrOtxK7
-----END CERTIFICATE-----