Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a3a2f33322d3332203d3e20323633383937.roa
File:                     323830343a323736303a3a2f33322d3332203d3e20323633383937.roa (raw, json)
Hash identifier:          l/UWlWozUYARfO2ti2jAAPbEqU3HAs9L/ExIz5w6EYw=
Subject key identifier:   D4:A1:84:9A:36:44:51:6A:11:6D:13:92:0E:70:1D:CE:E1:DB:00:6A
Certificate issuer:       /CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
Certificate serial:       3CADFD89EA8706F86C18857EAAB3676B5BA0C669
Authority key identifier: 7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a3a2f33322d3332203d3e20323633383937.roa
Signing time:             Mon 29 Jan 2024 13:48:31 +0000
ROA not before:           Mon 29 Jan 2024 13:43:31 +0000
ROA not after:            Mon 27 Jan 2025 13:48:31 +0000
asID:                     263897
IP address blocks:        2804:2760::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ad:fd:89:ea:87:06:f8:6c:18:85:7e:aa:b3:67:6b:5b:a0:c6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
        Validity
            Not Before: Jan 29 13:43:31 2024 GMT
            Not After : Jan 27 13:48:31 2025 GMT
        Subject: CN=D4A1849A3644516A116D13920E701DCEE1DB006A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:dc:3c:e5:2e:45:5e:dc:1e:5f:a3:b8:2b:
                    59:6b:4b:5c:d4:cc:c8:a1:0e:ef:2e:91:99:9e:ef:
                    9a:be:77:9d:25:7d:e8:03:ad:2d:b9:1e:f4:b3:ec:
                    b5:59:36:16:bf:2d:e6:63:9c:3b:99:89:94:75:02:
                    a3:5b:55:9e:93:15:b5:b2:6c:5d:cd:c8:f8:74:db:
                    6c:88:da:ff:b3:6d:d6:36:03:0c:0b:70:bb:0d:45:
                    9c:9e:0e:4a:7e:d2:47:3c:53:bb:84:cf:3c:9b:3b:
                    97:69:73:42:e8:3f:c0:24:d0:b9:f9:30:2e:d4:fa:
                    83:fc:90:e3:1c:9f:bf:44:78:2e:b2:b2:ce:85:ec:
                    58:66:cb:ea:9e:82:63:bb:38:fa:a1:1e:4a:0c:60:
                    ef:84:5a:f2:81:0b:53:cf:34:e1:fa:e5:99:5e:96:
                    62:5f:7d:41:28:b8:1b:dc:b0:e0:5a:90:1a:e9:f9:
                    f9:da:6a:6a:03:0c:77:d5:7c:8d:59:3f:a2:8a:aa:
                    25:45:50:ab:8a:a7:6d:46:47:aa:49:34:0f:2f:e2:
                    1a:11:53:31:ef:f3:2f:54:f1:64:b2:c6:8d:41:c7:
                    57:51:30:c8:0f:fa:ae:fd:5b:22:d2:11:76:57:f2:
                    71:d2:84:22:f3:86:f0:4c:ab:7e:ec:a3:75:85:c2:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A1:84:9A:36:44:51:6A:11:6D:13:92:0E:70:1D:CE:E1:DB:00:6A
            X509v3 Authority Key Identifier:
                keyid:7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a3a2f33322d3332203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2760::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:ef:2e:68:13:08:18:3d:3d:ad:3d:0b:39:0f:f0:b0:0c:3a:
         37:5c:0e:0b:af:f5:b9:0e:42:70:92:e8:c3:ee:0f:fb:6e:7d:
         0f:d9:4a:f9:51:09:33:50:8d:65:ae:6d:86:96:f0:60:ef:51:
         32:91:ad:99:cb:0f:be:8b:d4:19:8b:e2:8d:13:3e:49:e4:96:
         d2:68:e9:9d:75:70:c8:6c:52:be:32:58:95:dc:c8:b6:33:70:
         fd:be:8c:42:95:9e:78:08:2b:4b:d6:85:8d:01:f0:19:33:79:
         55:b2:9f:a8:3a:f6:8a:2b:06:58:87:08:51:00:be:7e:02:a9:
         a5:ac:51:30:90:1a:3d:f8:a7:9b:cc:fb:60:5d:f0:be:3d:81:
         4a:90:ed:a8:e5:e5:b5:b6:8d:dd:62:9b:7e:22:25:c2:bd:c6:
         cc:5e:7f:f5:f6:2e:38:36:75:ff:3c:59:4f:3f:f8:79:03:40:
         c8:bc:1b:b8:cc:53:1c:40:ee:f1:d3:71:c8:80:b1:68:d4:b1:
         c6:13:db:47:b3:83:f7:fb:bb:94:94:45:a5:da:e0:eb:69:f0:
         ab:d8:2d:3b:22:7f:20:a7:c5:af:3e:a2:03:e4:e5:96:93:59:
         61:c0:3d:56:e7:ec:70:db:05:39:e2:43:c4:04:e4:44:d5:4a:
         75:32:1a:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPK39ieqHBvhsGIV+qrNna1ugxmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VFRDMwMjkyQTlDOUUxMjk0RERBMzFENTJCQzk3RDc3
NzVFRTlFQzAeFw0yNDAxMjkxMzQzMzFaFw0yNTAxMjcxMzQ4MzFaMDMxMTAvBgNV
BAMTKEQ0QTE4NDlBMzY0NDUxNkExMTZEMTM5MjBFNzAxRENFRTFEQjAwNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCye9w85S5FXtweX6O4K1lrS1zU
zMihDu8ukZme75q+d50lfegDrS25HvSz7LVZNha/LeZjnDuZiZR1AqNbVZ6TFbWy
bF3NyPh022yI2v+zbdY2AwwLcLsNRZyeDkp+0kc8U7uEzzybO5dpc0LoP8Ak0Ln5
MC7U+oP8kOMcn79EeC6yss6F7Fhmy+qegmO7OPqhHkoMYO+EWvKBC1PPNOH65Zle
lmJffUEouBvcsOBakBrp+fnaamoDDHfVfI1ZP6KKqiVFUKuKp21GR6pJNA8v4hoR
UzHv8y9U8WSyxo1Bx1dRMMgP+q79WyLSEXZX8nHShCLzhvBMq37so3WFwhkrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1KGEmjZEUWoRbROSDnAdzuHbAGowHwYDVR0j
BBgwFoAUfu0wKSqcnhKU3aMdUryX13de6ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmVTNFJwZFB1Vkg4c0FQemlmZ2FINzFWYkdWRlRVZnN2cktucURMbmt2
bTcvMC83RUVEMzAyOTJBOUM5RTEyOTREREEzMUQ1MkJDOTdENzc3NUVFOUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFRUQzMDI5MkE5QzlFMTI5
NEREQTMxRDUyQkM5N0Q3Nzc1RUU5RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JlUzRScGRQdVZIOHNBUHppZmdhSDcxVmJHVkZUVWZzdnJLbnFETG5rdm03LzAv
MzIzODMwMzQzYTMyMzczNjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzgzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnYDANBgkqhkiG9w0BAQsFAAOCAQEAG+8uaBMI
GD09rT0LOQ/wsAw6N1wOC6/1uQ5CcJLow+4P+259D9lK+VEJM1CNZa5thpbwYO9R
MpGtmcsPvovUGYvijRM+SeSW0mjpnXVwyGxSvjJYldzItjNw/b6MQpWeeAgrS9aF
jQHwGTN5VbKfqDr2iisGWIcIUQC+fgKppaxRMJAaPfinm8z7YF3wvj2BSpDtqOXl
tbaN3WKbfiIlwr3GzF5/9fYuODZ1/zxZTz/4eQNAyLwbuMxTHEDu8dNxyICxaNSx
xhPbR7OD9/u7lJRFpdrg62nwq9gtOyJ/IKfFrz6iA+TllpNZYcA9VufscNsFOeJD
xATkRNVKdTIaLA==
-----END CERTIFICATE-----