Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa
File:                     323830343a346265303a3a2f33322d3332203d3e20323637333334.roa (raw, json)
Hash identifier:          b/G3XgFLMP3DU4pExB8YkbuaPU0ndJ8NDcIqwWxdZ38=
Subject key identifier:   35:E6:A7:F3:B8:82:35:7A:23:31:69:60:2F:EB:0A:3D:AC:03:89:0E
Certificate issuer:       /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial:       4A822917C95B7CDA8953DD66DEFF0EEC8EAD88DF
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa
Signing time:             Sun 26 Nov 2023 21:00:00 +0000
ROA not before:           Sun 26 Nov 2023 20:55:00 +0000
ROA not after:            Sun 24 Nov 2024 21:00:00 +0000
asID:                     267334
IP address blocks:        2804:4be0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:82:29:17:c9:5b:7c:da:89:53:dd:66:de:ff:0e:ec:8e:ad:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Validity
            Not Before: Nov 26 20:55:00 2023 GMT
            Not After : Nov 24 21:00:00 2024 GMT
        Subject: CN=35E6A7F3B882357A233169602FEB0A3DAC03890E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:16:9e:ff:ad:d4:14:da:39:82:d7:ac:4e:
                    66:fa:08:72:fe:08:1a:c3:1d:f2:b3:87:76:e3:a2:
                    27:ac:58:75:b0:26:ae:c8:20:14:f5:df:ca:bc:ce:
                    fc:80:b0:5e:fa:c1:03:ce:9e:21:16:ec:f7:d2:3b:
                    05:19:40:eb:41:b5:82:f0:ed:01:46:9a:86:10:56:
                    10:62:fa:1c:1a:f6:6c:19:ae:09:aa:36:b8:f6:85:
                    ea:fb:ea:9d:19:33:c5:de:80:9e:f8:cb:8e:bd:d8:
                    ea:39:98:28:dd:ee:a0:aa:bb:36:0e:ae:6e:b2:6d:
                    e1:87:d0:dc:4c:01:b8:51:8c:f7:6b:3b:3f:55:ed:
                    96:e7:42:25:17:ae:dc:1a:b6:99:55:63:f9:51:75:
                    58:29:51:05:d1:96:8c:01:b6:61:1c:e5:8f:a7:c4:
                    55:4d:35:75:19:04:fa:87:b0:04:57:d4:e5:df:57:
                    fe:8a:64:1e:61:c5:66:8d:ea:b2:e0:41:50:6f:eb:
                    e4:7a:d0:a7:8f:46:31:cc:c9:41:d4:53:51:58:a2:
                    4d:fd:a9:4c:9d:fa:7f:01:28:d5:15:77:bb:28:62:
                    4c:a3:ab:d3:42:21:7f:67:0e:09:db:d4:82:c2:44:
                    5f:e9:59:18:b7:4d:89:2c:81:f7:7a:53:01:3d:90:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:A7:F3:B8:82:35:7A:23:31:69:60:2F:EB:0A:3D:AC:03:89:0E
            X509v3 Authority Key Identifier:
                keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:f4:95:2a:ce:7c:bc:f3:46:9b:74:94:58:98:89:07:9e:
         7c:e8:54:82:19:1c:cd:09:23:4b:ff:1a:4f:e1:2e:42:68:de:
         cd:93:7d:b5:59:0a:7f:78:44:48:2a:3a:8f:29:2a:d9:96:97:
         50:ad:9f:78:44:62:78:0d:e5:cb:0c:9d:85:cc:ec:51:b8:50:
         28:9c:6e:e2:d5:e1:29:b1:99:10:f3:98:e2:c6:3f:61:66:52:
         b8:2e:6e:bc:84:de:a4:a3:98:bd:b6:f7:2d:f9:18:b9:90:5c:
         46:b5:84:97:a8:e3:13:16:9c:74:a0:71:1d:0a:94:7f:d6:4f:
         12:43:8f:65:a7:e9:dd:d7:44:eb:f4:a4:4f:77:d6:b2:0b:37:
         1b:4e:a3:27:a6:ad:98:68:2e:0b:6c:1d:e8:db:f9:31:cc:c4:
         97:74:c9:10:b6:63:76:4f:1d:f6:a2:67:2a:d9:da:c8:f3:5a:
         76:14:25:e7:c5:fd:e0:35:07:09:f5:1c:06:4a:3e:ee:23:56:
         85:39:d0:df:17:50:2f:78:d3:6d:bc:07:54:35:de:8b:51:d5:
         ad:d9:fd:f9:ae:f6:fb:d5:22:68:a8:cd:6b:26:33:32:25:be:
         13:fe:d1:fe:b7:60:b0:ae:64:77:c3:d6:2c:b3:41:6b:57:4a:
         8d:b5:8b:a0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSoIpF8lbfNqJU91m3v8O7I6tiN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUzMjA4OUI3MTA2RkRDRUEwQTJEQzQxMURCRDdGM0NB
OTM2OEM4OTAeFw0yMzExMjYyMDU1MDBaFw0yNDExMjQyMTAwMDBaMDMxMTAvBgNV
BAMTKDM1RTZBN0YzQjg4MjM1N0EyMzMxNjk2MDJGRUIwQTNEQUMwMzg5MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5Bae/63UFNo5gtesTmb6CHL+
CBrDHfKzh3bjoiesWHWwJq7IIBT138q8zvyAsF76wQPOniEW7PfSOwUZQOtBtYLw
7QFGmoYQVhBi+hwa9mwZrgmqNrj2her76p0ZM8XegJ74y4692Oo5mCjd7qCquzYO
rm6ybeGH0NxMAbhRjPdrOz9V7ZbnQiUXrtwatplVY/lRdVgpUQXRlowBtmEc5Y+n
xFVNNXUZBPqHsARX1OXfV/6KZB5hxWaN6rLgQVBv6+R60KePRjHMyUHUU1FYok39
qUyd+n8BKNUVd7soYkyjq9NCIX9nDgnb1ILCRF/pWRi3TYksgfd6UwE9kLC9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUNean87iCNXojMWlgL+sKPawDiQ4wHwYDVR0j
BBgwFoAUlTIIm3EG/c6gotxBHb1/PKk2jIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZNd3k0TnF3ZWo0VWNVOEVMM2tuWjJreXRGbzE5Z0Y2eVBUMVJFaTJN
b3YvMC85NTMyMDg5QjcxMDZGRENFQTBBMkRDNDExREJEN0YzQ0E5MzY4Qzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1MzIwODlCNzEwNkZEQ0VB
MEEyREM0MTFEQkQ3RjNDQTkzNjhDODkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmTXd5NE5xd2VqNFVjVThFTDNrbloya3l0Rm8xOWdGNnlQVDFSRWkyTW92LzAv
MzIzODMwMzQzYTM0NjI2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzMzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARL4DANBgkqhkiG9w0BAQsFAAOCAQEAWqP0lSrO
fLzzRpt0lFiYiQeefOhUghkczQkjS/8aT+EuQmjezZN9tVkKf3hESCo6jykq2ZaX
UK2feERieA3lywydhczsUbhQKJxu4tXhKbGZEPOY4sY/YWZSuC5uvITepKOYvbb3
LfkYuZBcRrWEl6jjExacdKBxHQqUf9ZPEkOPZafp3ddE6/SkT3fWsgs3G06jJ6at
mGguC2wd6Nv5MczEl3TJELZjdk8d9qJnKtnayPNadhQl58X94DUHCfUcBko+7iNW
hTnQ3xdQL3jTbbwHVDXei1HVrdn9+a72+9UiaKjNayYzMiW+E/7R/rdgsK5kd8PW
LLNBa1dKjbWLoA==
-----END CERTIFICATE-----