Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a3a2f33322d3332203d3e20323636343938.roa
File:                     323830343a333862633a3a2f33322d3332203d3e20323636343938.roa (raw, json)
Hash identifier:          i988X/xqGRbBXjgI4gMd+TxMSkpCscrUyW/+tCFtE9M=
Subject key identifier:   5B:15:58:F1:04:6E:60:1A:4A:A7:C4:4F:1D:F3:A2:BC:85:43:D2:BE
Certificate issuer:       /CN=0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048
Certificate serial:       29FFF1CA5EDBBE4C9BF30AB80EA36520174975E6
Authority key identifier: 0E:A5:ED:0B:D9:E5:F3:A3:E0:18:D8:8B:6A:B7:8B:F5:83:30:B0:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a3a2f33322d3332203d3e20323636343938.roa
Signing time:             Mon 04 Mar 2024 17:43:56 +0000
ROA not before:           Mon 04 Mar 2024 17:38:56 +0000
ROA not after:            Mon 03 Mar 2025 17:43:56 +0000
asID:                     266498
IP address blocks:        2804:38bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ff:f1:ca:5e:db:be:4c:9b:f3:0a:b8:0e:a3:65:20:17:49:75:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048
        Validity
            Not Before: Mar  4 17:38:56 2024 GMT
            Not After : Mar  3 17:43:56 2025 GMT
        Subject: CN=5B1558F1046E601A4AA7C44F1DF3A2BC8543D2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:5b:8c:8a:32:fc:84:ff:43:ab:f3:52:5f:
                    e0:9a:b6:e7:c4:4a:1c:0b:df:a4:34:9c:c3:96:dd:
                    35:c0:cd:37:bf:62:30:08:71:b2:52:ef:a2:4f:74:
                    7e:66:03:35:63:9f:54:69:97:24:fc:1a:81:39:49:
                    e0:a7:93:67:7c:bf:aa:91:72:5e:7f:2f:1e:88:11:
                    eb:45:06:63:cb:25:7a:f7:4a:bc:1d:5a:6f:63:58:
                    d8:32:a6:30:c8:ed:6d:13:bc:27:0a:0f:ce:4d:e4:
                    4d:c5:6b:1b:06:78:a9:40:35:0e:5a:06:24:12:a9:
                    48:d7:3a:e1:90:aa:e6:7a:a7:15:a6:a7:c6:3b:96:
                    b0:fb:2e:e2:12:32:53:29:d1:ba:f8:ba:ad:62:77:
                    d3:18:24:55:f7:c6:0c:b3:2a:fb:9b:ff:57:8a:47:
                    38:0f:11:9e:b3:c6:9b:ad:43:0b:cd:dd:e7:33:2c:
                    ad:de:8e:fa:45:80:10:ac:4a:b4:30:4c:a8:4d:80:
                    25:9a:eb:b9:98:9f:ef:e0:cb:fb:23:c1:f0:c5:31:
                    6e:ab:2e:05:5e:30:13:3d:b6:eb:86:ff:c6:cf:8a:
                    62:cd:72:6c:47:2e:a3:1c:db:6b:2e:68:1e:12:a4:
                    65:03:ea:0f:90:2a:4b:fe:e4:7d:48:94:6e:59:08:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:15:58:F1:04:6E:60:1A:4A:A7:C4:4F:1D:F3:A2:BC:85:43:D2:BE
            X509v3 Authority Key Identifier:
                keyid:0E:A5:ED:0B:D9:E5:F3:A3:E0:18:D8:8B:6A:B7:8B:F5:83:30:B0:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EA5ED0BD9E5F3A3E018D88B6AB78BF58330B048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a3a2f33322d3332203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:f9:19:44:7c:06:78:97:ea:46:0c:30:33:ba:9f:66:6c:77:
         12:d3:59:09:73:11:8a:a8:e3:7a:7e:86:5c:00:24:d4:c0:ed:
         1f:1a:c1:d9:74:73:91:79:df:9c:18:2d:d1:d0:be:8b:13:06:
         4a:a5:12:65:1c:58:c4:6c:07:d0:bc:22:b9:0d:bd:15:05:c2:
         4b:e9:ee:ad:8b:c5:9d:a5:0f:21:bf:19:04:f3:88:4a:46:05:
         02:b6:b5:8a:f1:8b:89:91:e2:c3:95:00:9a:ad:14:44:ee:f7:
         88:7d:33:c9:3f:c8:5b:8a:a4:5a:d5:ee:ce:f6:29:a7:52:7e:
         e5:40:3e:e5:75:fb:31:dc:c7:fe:16:ce:47:ec:61:17:20:42:
         99:96:21:ed:a3:10:0d:73:7b:e5:25:6b:cc:f9:f9:85:a6:f9:
         9e:6c:a8:fe:92:4f:bd:ff:50:9c:1d:57:cd:dd:6d:5e:d9:d0:
         1e:b9:0d:72:e6:ac:32:d3:a7:13:d4:e0:e9:69:b0:59:7a:1d:
         cd:ab:bf:57:3b:6b:7a:18:8a:47:7c:a8:ca:93:aa:1b:e9:8d:
         00:54:b8:22:f3:f4:46:48:8a:a4:95:95:e4:b4:5e:f2:e8:ff:
         49:65:d5:62:b0:8c:42:11:79:d9:8f:b2:cf:ff:dc:b4:ef:9b:
         ef:42:ca:23
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKf/xyl7bvkyb8wq4DqNlIBdJdeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVBNUVEMEJEOUU1RjNBM0UwMThEODhCNkFCNzhCRjU4
MzMwQjA0ODAeFw0yNDAzMDQxNzM4NTZaFw0yNTAzMDMxNzQzNTZaMDMxMTAvBgNV
BAMTKDVCMTU1OEYxMDQ2RTYwMUE0QUE3QzQ0RjFERjNBMkJDODU0M0QyQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDemVuMijL8hP9Dq/NSX+CatufE
ShwL36Q0nMOW3TXAzTe/YjAIcbJS76JPdH5mAzVjn1RplyT8GoE5SeCnk2d8v6qR
cl5/Lx6IEetFBmPLJXr3SrwdWm9jWNgypjDI7W0TvCcKD85N5E3FaxsGeKlANQ5a
BiQSqUjXOuGQquZ6pxWmp8Y7lrD7LuISMlMp0br4uq1id9MYJFX3xgyzKvub/1eK
RzgPEZ6zxputQwvN3eczLK3ejvpFgBCsSrQwTKhNgCWa67mYn+/gy/sjwfDFMW6r
LgVeMBM9tuuG/8bPimLNcmxHLqMc22suaB4SpGUD6g+QKkv+5H1IlG5ZCLvFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWxVY8QRuYBpKp8RPHfOivIVD0r4wHwYDVR0j
BBgwFoAUDqXtC9nl86PgGNiLareL9YMwsEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlc2dUNKd1BlakNlSlFTM2ZoTTFoQmI2SkY5bkZTc3I4UDRQQUUyS2R1
a3cvMC8wRUE1RUQwQkQ5RTVGM0EzRTAxOEQ4OEI2QUI3OEJGNTgzMzBCMDQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBFQTVFRDBCRDlFNUYzQTNF
MDE4RDg4QjZBQjc4QkY1ODMzMEIwNDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JXNnVDSndQZWpDZUpRUzNmaE0xaEJiNkpGOW5GU3NyOFA0UEFFMktkdWt3LzAv
MzIzODMwMzQzYTMzMzg2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ4vDANBgkqhkiG9w0BAQsFAAOCAQEAIvkZRHwG
eJfqRgwwM7qfZmx3EtNZCXMRiqjjen6GXAAk1MDtHxrB2XRzkXnfnBgt0dC+ixMG
SqUSZRxYxGwH0LwiuQ29FQXCS+nurYvFnaUPIb8ZBPOISkYFAra1ivGLiZHiw5UA
mq0URO73iH0zyT/IW4qkWtXuzvYpp1J+5UA+5XX7MdzH/hbOR+xhFyBCmZYh7aMQ
DXN75SVrzPn5hab5nmyo/pJPvf9QnB1Xzd1tXtnQHrkNcuasMtOnE9Tg6WmwWXod
zau/VztrehiKR3yoypOqG+mNAFS4IvP0RkiKpJWV5LRe8uj/SWXVYrCMQhF52Y+y
z//ctO+b70LKIw==
-----END CERTIFICATE-----