Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3332203d3e20323635303338.roa
File:                     323830343a333163633a3a2f33322d3332203d3e20323635303338.roa (raw, json)
Hash identifier:          wH4Jtx0OQ98vRRVaXLMOzfg3MiPwdgSsder765pokn4=
Subject key identifier:   58:82:EE:65:88:61:22:D9:E4:F4:68:61:9D:AC:00:51:89:66:D7:EF
Certificate issuer:       /CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
Certificate serial:       3A78AEDCC4436A9F0185F6393A7BECAF9EF2AEC7
Authority key identifier: 5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3332203d3e20323635303338.roa
Signing time:             Tue 05 Mar 2024 19:26:01 +0000
ROA not before:           Tue 05 Mar 2024 19:21:01 +0000
ROA not after:            Tue 04 Mar 2025 19:26:01 +0000
asID:                     265038
IP address blocks:        2804:31cc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:78:ae:dc:c4:43:6a:9f:01:85:f6:39:3a:7b:ec:af:9e:f2:ae:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
        Validity
            Not Before: Mar  5 19:21:01 2024 GMT
            Not After : Mar  4 19:26:01 2025 GMT
        Subject: CN=5882EE65886122D9E4F468619DAC00518966D7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:fd:27:14:47:28:f1:a7:ab:fb:e0:c0:50:
                    58:ca:d0:2f:d3:ef:f6:60:10:2c:6c:36:a8:37:94:
                    70:01:a3:cb:2c:d1:f5:95:d0:db:92:2a:90:a8:90:
                    7c:e6:66:75:ac:c8:e5:e1:65:c0:df:ed:cb:f4:c6:
                    c7:80:3a:ab:19:c6:a7:15:5a:7f:a7:68:c8:27:1b:
                    87:c2:49:2c:74:16:ab:28:48:a7:5c:5b:d0:13:c7:
                    52:bf:fe:1b:1a:a8:c1:d6:5a:6a:99:11:9e:97:9d:
                    9f:56:63:49:f1:86:2c:7d:15:07:26:b9:52:a9:62:
                    f4:a8:71:d5:41:e9:17:3f:b9:5e:7f:a2:6a:15:cd:
                    70:f4:d7:23:a6:35:bf:73:ac:0e:84:e0:3a:5a:51:
                    a0:1f:0b:3a:e6:10:64:19:c7:29:db:47:24:2a:04:
                    cf:be:16:82:cb:22:e2:7d:67:19:a9:05:19:62:a6:
                    33:14:ac:0e:b3:ab:6e:90:53:41:33:9d:4f:9b:20:
                    de:0f:ad:1b:20:db:29:3c:ae:61:cc:81:c4:20:63:
                    e2:7b:7f:b3:92:ea:df:2b:fd:3e:77:04:67:98:44:
                    a8:6c:40:cb:37:fa:4f:c4:28:69:16:76:2d:ce:d6:
                    2b:ad:99:fd:bb:37:45:c8:ce:09:6f:5a:d1:0f:9d:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:82:EE:65:88:61:22:D9:E4:F4:68:61:9D:AC:00:51:89:66:D7:EF
            X509v3 Authority Key Identifier:
                keyid:5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3332203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:9a:bd:ed:c8:f1:aa:55:20:7f:32:45:83:f0:6d:f6:4d:
         34:f7:48:53:a6:a1:bc:49:11:4b:e7:ce:9c:8a:04:21:e2:af:
         c3:87:9d:f0:9c:db:c4:bb:d9:dd:d0:f9:f5:c7:01:09:d7:b3:
         1d:ab:b3:97:8c:38:66:68:2e:c1:ed:41:a7:f3:0d:62:d1:0b:
         36:9b:45:67:38:23:f6:11:45:73:f9:00:a9:0e:ec:f7:1c:d6:
         0f:08:f3:5d:83:11:35:f6:02:1a:87:bf:f0:b7:71:14:af:9b:
         3b:4c:44:3b:fe:9a:da:1e:3a:6d:71:a0:5a:f7:9a:7f:b3:e1:
         15:72:1b:ab:22:1c:d9:7b:38:57:8d:07:32:15:3c:da:76:ec:
         e0:f5:b4:4d:3e:60:08:57:68:2f:a5:18:3e:58:93:89:3a:6c:
         f1:46:2e:95:3b:de:f5:d0:75:c1:f2:65:56:6c:66:0e:3d:63:
         40:53:aa:1c:a2:ce:80:f6:98:c7:aa:a5:1a:e1:bf:9c:cf:ce:
         b6:79:1d:a7:50:ff:8b:e2:47:5f:10:e6:84:e2:a9:2f:63:45:
         5d:d1:ee:c3:cc:a2:23:bb:9c:c4:b4:e3:db:9c:58:88:de:91:
         a9:81:f3:d1:86:13:c3:8c:e6:53:fc:20:33:60:1a:f7:df:a6:
         ea:b4:12:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOniu3MRDap8BhfY5Onvsr57yrscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQyRjUwNTA2OEM3Q0FCNzFEQ0NDM0Y0OERCNjU4NzRG
Qzc5RTZBODAeFw0yNDAzMDUxOTIxMDFaFw0yNTAzMDQxOTI2MDFaMDMxMTAvBgNV
BAMTKDU4ODJFRTY1ODg2MTIyRDlFNEY0Njg2MTlEQUMwMDUxODk2NkQ3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/v0nFEco8aer++DAUFjK0C/T
7/ZgECxsNqg3lHABo8ss0fWV0NuSKpCokHzmZnWsyOXhZcDf7cv0xseAOqsZxqcV
Wn+naMgnG4fCSSx0FqsoSKdcW9ATx1K//hsaqMHWWmqZEZ6XnZ9WY0nxhix9FQcm
uVKpYvSocdVB6Rc/uV5/omoVzXD01yOmNb9zrA6E4DpaUaAfCzrmEGQZxynbRyQq
BM++FoLLIuJ9ZxmpBRlipjMUrA6zq26QU0EznU+bIN4PrRsg2yk8rmHMgcQgY+J7
f7OS6t8r/T53BGeYRKhsQMs3+k/EKGkWdi3O1iutmf27N0XIzglvWtEPndXtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWILuZYhhItnk9GhhnawAUYlm1+8wHwYDVR0j
BBgwFoAUXS9QUGjHyrcdzMP0jbZYdPx55qgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmpnckZROU5XQjc2dGduS2F3WVVqNVAyQTZHc3ZoWnA5bWtyeDIzU1J1
cEEvMC81RDJGNTA1MDY4QzdDQUI3MURDQ0MzRjQ4REI2NTg3NEZDNzlFNkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVEMkY1MDUwNjhDN0NBQjcx
RENDQzNGNDhEQjY1ODc0RkM3OUU2QTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JqZ3JGUTlOV0I3NnRnbkthd1lVajVQMkE2R3N2aFpwOW1rcngyM1NSdXBBLzAv
MzIzODMwMzQzYTMzMzE2MzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzAzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQxzDANBgkqhkiG9w0BAQsFAAOCAQEAj6qave3I
8apVIH8yRYPwbfZNNPdIU6ahvEkRS+fOnIoEIeKvw4ed8JzbxLvZ3dD59ccBCdez
Hauzl4w4Zmguwe1Bp/MNYtELNptFZzgj9hFFc/kAqQ7s9xzWDwjzXYMRNfYCGoe/
8LdxFK+bO0xEO/6a2h46bXGgWveaf7PhFXIbqyIc2Xs4V40HMhU82nbs4PW0TT5g
CFdoL6UYPliTiTps8UYulTve9dB1wfJlVmxmDj1jQFOqHKLOgPaYx6qlGuG/nM/O
tnkdp1D/i+JHXxDmhOKpL2NFXdHuw8yiI7ucxLTj25xYiN6RqYHz0YYTw4zmU/wg
M2Aa99+m6rQSYw==
-----END CERTIFICATE-----