Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33322d3332203d3e20323632353738.roa
File:                     323830343a3635383a3a2f33322d3332203d3e20323632353738.roa (raw, json)
Hash identifier:          n1iuG4zaEFftdZ41H1Chm/UXhRu4jhINBQiccWMyms8=
Subject key identifier:   B3:57:9F:EC:81:DF:67:7B:A5:28:71:4A:57:01:E0:2D:0E:CE:D6:88
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       061D0E8A70347C980D943213A2463769CAE80FBC
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33322d3332203d3e20323632353738.roa
Signing time:             Fri 11 Aug 2023 16:34:54 +0000
ROA not before:           Fri 11 Aug 2023 16:29:54 +0000
ROA not after:            Fri 09 Aug 2024 16:34:54 +0000
asID:                     262578
IP address blocks:        2804:658::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1d:0e:8a:70:34:7c:98:0d:94:32:13:a2:46:37:69:ca:e8:0f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Aug 11 16:29:54 2023 GMT
            Not After : Aug  9 16:34:54 2024 GMT
        Subject: CN=B3579FEC81DF677BA528714A5701E02D0ECED688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:01:59:89:c5:ca:d0:7e:ae:d1:d7:77:da:
                    11:96:13:52:f1:7e:f8:d0:f6:cd:29:05:9b:88:bc:
                    0f:8f:73:cb:1e:bb:cb:80:fc:21:d5:ef:3a:da:ae:
                    26:11:19:e5:e1:8e:b6:24:8a:f4:6d:94:26:57:1c:
                    9f:65:a2:82:fe:47:cc:4f:20:bc:04:1b:54:a9:b8:
                    20:9b:58:74:2d:e9:3b:27:ed:06:6f:4e:75:e0:0e:
                    05:db:bd:3e:a6:f2:ec:c3:86:63:84:0c:35:e3:f9:
                    b3:f8:04:08:8b:c2:b3:ff:30:41:31:24:06:65:9d:
                    73:ec:e4:ab:ea:6d:70:4a:b6:b4:f0:97:42:7d:0a:
                    52:31:69:51:4e:d0:7d:2c:d8:f3:ce:14:8d:f0:68:
                    4a:60:6d:91:2d:b5:cf:8d:47:6a:88:d8:38:e6:70:
                    3d:da:4e:0f:43:a0:40:e5:f2:56:2b:90:6f:fd:67:
                    e0:08:30:71:72:53:bf:79:d7:40:d2:27:5e:58:9f:
                    f0:64:c9:f5:fa:78:88:71:cc:b2:4e:66:4b:20:85:
                    5f:b5:1e:38:de:eb:7c:4a:5d:ee:c7:5b:7b:51:8c:
                    7c:a6:0a:b7:64:08:d4:c6:88:8a:a0:a4:c8:9f:44:
                    8d:db:d9:40:0b:9f:75:63:05:d0:23:ee:18:4c:c5:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:57:9F:EC:81:DF:67:7B:A5:28:71:4A:57:01:E0:2D:0E:CE:D6:88
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a3a2f33322d3332203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:fc:c5:65:03:e4:23:18:ae:81:04:6d:dc:66:40:5f:1d:8f:
         a5:30:e4:d0:25:6f:fd:9d:ed:e8:79:73:d0:42:b7:1f:15:d4:
         a7:c1:6e:4a:90:fa:d3:72:c0:51:33:b7:7c:de:67:c2:f9:a6:
         0f:0a:fa:47:a0:ec:f8:7c:eb:2b:85:c0:ba:f9:62:b0:08:b9:
         2d:52:b8:aa:5e:ec:d4:da:cf:f8:86:95:49:34:43:8b:1b:2f:
         d3:d8:d4:04:7d:e1:f8:de:c4:14:c6:ca:29:1c:bc:80:be:a3:
         3a:93:e7:50:2e:84:5c:b3:7e:73:ff:80:cb:a6:b8:7a:91:b1:
         38:83:51:8c:0a:e5:0b:d5:77:f9:64:f3:fc:a3:ed:40:ec:e8:
         0d:ef:03:12:12:e5:63:d5:b9:ad:1e:76:94:5e:8a:3b:6f:4c:
         c1:33:46:8e:2d:95:80:c4:9e:bc:d0:6b:e0:04:72:de:bd:ea:
         2b:c1:24:94:a8:86:ef:10:2b:50:6a:f4:56:63:9a:87:c2:85:
         3e:5f:21:cc:6f:33:1d:1d:fb:36:9f:d4:df:e3:d9:57:4f:c0:
         89:5b:ec:ae:17:e7:7b:68:d0:0a:5c:79:77:c4:2d:14:ef:79:
         f5:5a:f0:ec:3f:ec:4e:2a:90:b4:f9:04:73:31:80:fd:8a:a3:
         40:21:b9:f6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUBh0OinA0fJgNlDITokY3acroD7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVBNkUwRjg4MjVDMTY4OEM5MTU3MkM4MUMxN0YxRTkz
NUMzNTNEODAeFw0yMzA4MTExNjI5NTRaFw0yNDA4MDkxNjM0NTRaMDMxMTAvBgNV
BAMTKEIzNTc5RkVDODFERjY3N0JBNTI4NzE0QTU3MDFFMDJEMEVDRUQ2ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUagFZicXK0H6u0dd32hGWE1Lx
fvjQ9s0pBZuIvA+Pc8seu8uA/CHV7zrariYRGeXhjrYkivRtlCZXHJ9looL+R8xP
ILwEG1SpuCCbWHQt6Tsn7QZvTnXgDgXbvT6m8uzDhmOEDDXj+bP4BAiLwrP/MEEx
JAZlnXPs5KvqbXBKtrTwl0J9ClIxaVFO0H0s2PPOFI3waEpgbZEttc+NR2qI2Djm
cD3aTg9DoEDl8lYrkG/9Z+AIMHFyU79510DSJ15Yn/BkyfX6eIhxzLJOZksghV+1
Hjje63xKXe7HW3tRjHymCrdkCNTGiIqgpMifRI3b2UALn3VjBdAj7hhMxbzhAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUs1ef7IHfZ3ulKHFKVwHgLQ7O1ogwHwYDVR0j
BBgwFoAUTqbg+IJcFojJFXLIHBfx6TXDU9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0
QkEvMC80RUE2RTBGODgyNUMxNjg4QzkxNTcyQzgxQzE3RjFFOTM1QzM1M0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFQTZFMEY4ODI1QzE2ODhD
OTE1NzJDODFDMTdGMUU5MzVDMzUzRDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzAv
MzIzODMwMzQzYTM2MzUzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM1
MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBlgwDQYJKoZIhvcNAQELBQADggEBACL8xWUD5CMY
roEEbdxmQF8dj6Uw5NAlb/2d7eh5c9BCtx8V1KfBbkqQ+tNywFEzt3zeZ8L5pg8K
+keg7Ph86yuFwLr5YrAIuS1SuKpe7NTaz/iGlUk0Q4sbL9PY1AR94fjexBTGyikc
vIC+ozqT51AuhFyzfnP/gMumuHqRsTiDUYwK5QvVd/lk8/yj7UDs6A3vAxIS5WPV
ua0edpReijtvTMEzRo4tlYDEnrzQa+AEct696ivBJJSohu8QK1Bq9FZjmofChT5f
IcxvMx0d+zaf1N/j2VdPwIlb7K4X53to0ApceXfELRTvefVa8Ow/7E4qkLT5BHMx
gP2Ko0AhufY=
-----END CERTIFICATE-----