Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/323830343a373033383a3a2f33322d313238203d3e20323730373133.roa
File:                     323830343a373033383a3a2f33322d313238203d3e20323730373133.roa (raw, json)
Hash identifier:          WJckauDGfnXmWZqAsfLPYDAyjiEPmjTLd/5+N2VuvFI=
Subject key identifier:   CA:F5:60:D4:9E:82:1E:D0:30:E0:73:3E:25:66:BA:2F:DC:3C:41:09
Certificate issuer:       /CN=3002C27FCE88C3AB86739D98FD94DA42E356CAE1
Certificate serial:       07A9C37490EDB02B34286F5B467770915C598043
Authority key identifier: 30:02:C2:7F:CE:88:C3:AB:86:73:9D:98:FD:94:DA:42:E3:56:CA:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/323830343a373033383a3a2f33322d313238203d3e20323730373133.roa
Signing time:             Mon 11 Dec 2023 18:35:56 +0000
ROA not before:           Mon 11 Dec 2023 18:30:56 +0000
ROA not after:            Mon 09 Dec 2024 18:35:56 +0000
asID:                     270713
IP address blocks:        2804:7038::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a9:c3:74:90:ed:b0:2b:34:28:6f:5b:46:77:70:91:5c:59:80:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3002C27FCE88C3AB86739D98FD94DA42E356CAE1
        Validity
            Not Before: Dec 11 18:30:56 2023 GMT
            Not After : Dec  9 18:35:56 2024 GMT
        Subject: CN=CAF560D49E821ED030E0733E2566BA2FDC3C4109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:76:c2:62:d0:a6:a3:3f:bd:dd:c4:9d:ae:
                    78:72:df:37:3c:ff:de:f2:28:73:7a:97:bc:ac:60:
                    65:60:fb:63:6c:31:fb:3c:ea:fa:79:ab:f0:42:02:
                    9d:22:85:a9:87:94:19:6b:32:7c:fc:6b:76:a4:d7:
                    4b:83:25:4b:3e:86:65:10:e2:41:7c:26:50:46:cb:
                    94:54:a8:65:53:56:5e:d2:b8:25:34:41:1b:59:d8:
                    72:62:e9:c3:41:3e:10:5e:b0:16:6f:2b:a1:df:42:
                    92:9a:c7:94:f3:78:87:2e:43:c1:d7:03:b0:fd:5a:
                    14:ff:5f:53:38:00:6f:84:94:85:6a:d5:fc:26:d6:
                    61:25:68:64:56:fb:8d:a5:0e:df:eb:d7:22:bc:72:
                    ce:a9:86:e2:86:f5:97:49:23:a0:b0:a3:a7:56:f9:
                    8a:72:a9:22:fe:0e:94:7a:a8:74:03:5c:b7:b3:9f:
                    15:20:7b:66:2c:d5:e0:a7:47:44:5c:9d:28:ee:2b:
                    d2:4e:da:6f:0b:a7:b4:84:0d:51:06:46:35:dc:35:
                    a4:af:d6:f2:68:52:d3:ea:c1:ca:d9:26:8e:0d:d0:
                    ad:db:45:f8:79:1d:ec:32:3a:c7:c1:1b:61:b7:8c:
                    fc:fd:7b:f4:97:3e:22:05:62:95:16:64:dc:c5:9b:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F5:60:D4:9E:82:1E:D0:30:E0:73:3E:25:66:BA:2F:DC:3C:41:09
            X509v3 Authority Key Identifier:
                keyid:30:02:C2:7F:CE:88:C3:AB:86:73:9D:98:FD:94:DA:42:E3:56:CA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3002C27FCE88C3AB86739D98FD94DA42E356CAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8iuQ6HzZeSVtNrg9ToS5ai6gKDvaaaAiLdQkEwP162m/0/323830343a373033383a3a2f33322d313238203d3e20323730373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7038::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:4d:2c:20:4c:00:14:1d:46:8f:2a:e1:8f:fa:8a:aa:de:
         89:c2:10:d6:c2:a4:03:aa:07:9b:c4:b3:26:9c:05:1f:73:85:
         3d:e0:15:62:e0:fb:1a:6d:5e:1c:72:c1:b4:19:3c:9c:17:64:
         c8:60:55:9a:4e:26:f6:43:67:23:73:20:15:e9:1a:ca:92:96:
         4f:de:a8:11:31:ef:79:83:35:56:1b:85:69:1d:ed:f9:f9:a1:
         b1:b2:f9:62:10:1b:87:f0:48:c4:db:c0:5e:7e:c2:25:10:99:
         c5:47:dc:6c:d2:3b:83:49:7c:f0:7b:ca:81:27:92:f7:01:ce:
         c8:63:f5:97:7e:ff:ad:2a:f7:f7:f2:6b:7f:11:76:d6:29:1c:
         59:b9:59:4d:22:eb:0e:dc:a3:52:d2:23:2e:d7:02:6f:68:9a:
         90:36:d1:42:15:c8:aa:91:c9:67:c2:c2:23:d7:b5:a6:9f:71:
         3d:33:26:7d:9d:95:8b:7e:0b:71:f7:de:a7:4c:5c:1e:8e:a3:
         48:97:87:b7:e6:ce:91:58:34:a7:b1:dc:23:0e:1a:7f:cd:b5:
         ed:43:d4:a6:26:28:97:2d:36:41:0a:37:e3:10:7c:9d:37:a6:
         ab:2a:1d:ee:1b:82:53:82:88:79:1d:03:41:53:7f:66:7e:52:
         cb:44:43:1d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUB6nDdJDtsCs0KG9bRndwkVxZgEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAwMkMyN0ZDRTg4QzNBQjg2NzM5RDk4RkQ5NERBNDJF
MzU2Q0FFMTAeFw0yMzEyMTExODMwNTZaFw0yNDEyMDkxODM1NTZaMDMxMTAvBgNV
BAMTKENBRjU2MEQ0OUU4MjFFRDAzMEUwNzMzRTI1NjZCQTJGREMzQzQxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Y3bCYtCmoz+93cSdrnhy3zc8
/97yKHN6l7ysYGVg+2NsMfs86vp5q/BCAp0ihamHlBlrMnz8a3ak10uDJUs+hmUQ
4kF8JlBGy5RUqGVTVl7SuCU0QRtZ2HJi6cNBPhBesBZvK6HfQpKax5TzeIcuQ8HX
A7D9WhT/X1M4AG+ElIVq1fwm1mElaGRW+42lDt/r1yK8cs6phuKG9ZdJI6Cwo6dW
+YpyqSL+DpR6qHQDXLeznxUge2Ys1eCnR0RcnSjuK9JO2m8Lp7SEDVEGRjXcNaSv
1vJoUtPqwcrZJo4N0K3bRfh5HewyOsfBG2G3jPz9e/SXPiIFYpUWZNzFmwjBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUyvVg1J6CHtAw4HM+JWa6L9w8QQkwHwYDVR0j
BBgwFoAUMALCf86Iw6uGc52Y/ZTaQuNWyuEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjhpdVE2SHpaZVNWdE5yZzlUb1M1YWk2Z0tEdmFhYUFpTGRRa0V3UDE2
Mm0vMC8zMDAyQzI3RkNFODhDM0FCODY3MzlEOThGRDk0REE0MkUzNTZDQUUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMDJDMjdGQ0U4OEMzQUI4
NjczOUQ5OEZEOTREQTQyRTM1NkNBRTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I4aXVRNkh6WmVTVnROcmc5VG9TNWFpNmdLRHZhYWFBaUxkUWtFd1AxNjJtLzAv
MzIzODMwMzQzYTM3MzAzMzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNzMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHA4MA0GCSqGSIb3DQEBCwUAA4IBAQBL9k0s
IEwAFB1Gjyrhj/qKqt6JwhDWwqQDqgebxLMmnAUfc4U94BVi4PsabV4ccsG0GTyc
F2TIYFWaTib2Q2cjcyAV6RrKkpZP3qgRMe95gzVWG4VpHe35+aGxsvliEBuH8EjE
28BefsIlEJnFR9xs0juDSXzwe8qBJ5L3Ac7IY/WXfv+tKvf38mt/EXbWKRxZuVlN
IusO3KNS0iMu1wJvaJqQNtFCFciqkclnwsIj17Wmn3E9MyZ9nZWLfgtx996nTFwe
jqNIl4e35s6RWDSnsdwjDhp/zbXtQ9SmJiiXLTZBCjfjEHydN6arKh3uG4JTgoh5
HQNBU39mflLLREMd
-----END CERTIFICATE-----