Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/323830343a363530303a3a2f33322d3334203d3e20323639343632.roa
File:                     323830343a363530303a3a2f33322d3334203d3e20323639343632.roa (raw, json)
Hash identifier:          umVAU8hm3WMckaJc3w3f1fTvDJumdOGqVK/o3LF2/kk=
Subject key identifier:   52:13:5C:43:4A:59:37:C6:66:7A:77:A9:36:F1:44:9B:F8:06:4A:EE
Certificate issuer:       /CN=72D950483459BB286E83221CC667C2CA6132DB5C
Certificate serial:       78B7CB804C63DC67192FCCBF1683933D838235DA
Authority key identifier: 72:D9:50:48:34:59:BB:28:6E:83:22:1C:C6:67:C2:CA:61:32:DB:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D950483459BB286E83221CC667C2CA6132DB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/323830343a363530303a3a2f33322d3334203d3e20323639343632.roa
Signing time:             Tue 19 Dec 2023 15:19:22 +0000
ROA not before:           Tue 19 Dec 2023 15:14:22 +0000
ROA not after:            Tue 17 Dec 2024 15:19:22 +0000
asID:                     269462
IP address blocks:        2804:6500::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b7:cb:80:4c:63:dc:67:19:2f:cc:bf:16:83:93:3d:83:82:35:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D950483459BB286E83221CC667C2CA6132DB5C
        Validity
            Not Before: Dec 19 15:14:22 2023 GMT
            Not After : Dec 17 15:19:22 2024 GMT
        Subject: CN=52135C434A5937C6667A77A936F1449BF8064AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:52:43:ab:f1:da:4b:21:b1:e4:7c:b3:b3:
                    84:e1:f5:35:06:4c:38:1f:7e:ef:74:d6:1c:cb:7a:
                    9a:54:07:a1:2f:d8:ea:48:97:02:eb:7f:0f:e8:62:
                    15:f6:ed:d3:0c:ca:c9:25:f2:d9:fe:9c:75:3d:43:
                    b4:cd:43:d0:01:2f:e3:c5:1f:c7:07:22:cc:b1:a7:
                    21:cd:d8:13:68:e3:89:0d:c1:8e:16:d7:43:a4:53:
                    53:16:77:18:b0:b7:b2:d2:51:76:20:8b:1e:f8:ce:
                    0c:73:7a:e1:0e:b2:5c:e7:25:68:ef:c8:fe:85:6d:
                    78:0d:d9:18:2d:0b:d3:e6:f9:ee:d3:d7:0f:cb:71:
                    7c:ec:5c:d6:31:21:92:5a:d6:9c:f3:32:2a:1a:b8:
                    a9:fb:e0:aa:18:a9:bb:50:20:01:f5:cf:40:34:2d:
                    3c:fd:ef:59:a1:d8:00:29:d7:75:de:10:a7:19:60:
                    4c:48:96:d1:b7:09:ef:cb:7a:fb:40:fa:30:a7:74:
                    fb:cf:5f:8a:3a:ec:7b:b1:0f:c4:7a:c2:a3:a0:95:
                    2d:55:10:4c:46:21:56:13:00:33:05:e4:68:7f:f5:
                    c5:92:04:5c:1c:71:d6:68:01:77:69:aa:7a:c1:63:
                    27:b9:98:85:fb:a8:78:bc:ae:d1:50:1e:aa:d6:1e:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:13:5C:43:4A:59:37:C6:66:7A:77:A9:36:F1:44:9B:F8:06:4A:EE
            X509v3 Authority Key Identifier:
                keyid:72:D9:50:48:34:59:BB:28:6E:83:22:1C:C6:67:C2:CA:61:32:DB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/72D950483459BB286E83221CC667C2CA6132DB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D950483459BB286E83221CC667C2CA6132DB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/323830343a363530303a3a2f33322d3334203d3e20323639343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6500::/32

    Signature Algorithm: sha256WithRSAEncryption
         e8:ce:ed:dd:d2:9f:87:d6:51:05:52:f3:2c:89:c0:ea:7f:a3:
         25:c7:4e:4b:bf:a4:6c:1d:ba:ac:06:a4:52:db:e7:72:b1:2b:
         12:ab:be:85:79:e7:1d:27:ee:8b:c0:6e:8e:65:8e:5c:8f:bc:
         e2:e1:1a:a1:8f:83:63:fb:6f:69:9c:86:c7:1c:01:f9:23:a2:
         07:47:9f:77:6e:87:39:49:fb:6e:31:6e:fb:2c:b4:cd:bf:06:
         1d:42:df:36:b3:f7:57:89:2f:e2:a2:4e:83:7c:ef:7c:da:85:
         6a:31:da:c2:e4:2b:7b:66:3b:0f:4e:b1:15:95:cb:4b:02:0e:
         3e:c9:2b:2f:eb:7f:74:56:db:af:f5:40:87:ea:57:e8:d9:42:
         b8:2d:fe:7e:a1:58:54:3b:73:89:c3:0b:c5:93:8e:e2:c5:9e:
         0c:d7:cf:85:61:3b:59:b7:e4:cb:0a:f3:e0:c9:54:20:04:76:
         04:50:3a:6b:87:bb:34:4c:74:14:81:b9:8b:2d:ea:50:63:c6:
         f6:51:78:45:80:98:27:a1:3d:9a:15:a6:0c:ce:40:45:60:3b:
         92:da:a9:cf:71:0a:5d:4b:69:c5:e4:77:cc:5b:93:93:d8:f0:
         66:cf:ea:04:05:a8:f4:92:ad:f2:70:70:c8:bf:8b:d5:9a:8a:
         26:66:4a:67
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeLfLgExj3GcZL8y/FoOTPYOCNdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEOTUwNDgzNDU5QkIyODZFODMyMjFDQzY2N0MyQ0E2
MTMyREI1QzAeFw0yMzEyMTkxNTE0MjJaFw0yNDEyMTcxNTE5MjJaMDMxMTAvBgNV
BAMTKDUyMTM1QzQzNEE1OTM3QzY2NjdBNzdBOTM2RjE0NDlCRjgwNjRBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlVJDq/HaSyGx5Hyzs4Th9TUG
TDgffu901hzLeppUB6Ev2OpIlwLrfw/oYhX27dMMyskl8tn+nHU9Q7TNQ9ABL+PF
H8cHIsyxpyHN2BNo44kNwY4W10OkU1MWdxiwt7LSUXYgix74zgxzeuEOslznJWjv
yP6FbXgN2RgtC9Pm+e7T1w/LcXzsXNYxIZJa1pzzMioauKn74KoYqbtQIAH1z0A0
LTz971mh2AAp13XeEKcZYExIltG3Ce/LevtA+jCndPvPX4o67HuxD8R6wqOglS1V
EExGIVYTADMF5Gh/9cWSBFwccdZoAXdpqnrBYye5mIX7qHi8rtFQHqrWHjpZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUhNcQ0pZN8ZmenepNvFEm/gGSu4wHwYDVR0j
BBgwFoAUctlQSDRZuyhugyIcxmfCymEy21wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlTRFZnakI0WVFoUmFKenZ5WnYxSmpiQmhQQkNuZ1BmVjFtNHV2M1c1
bTYvMC83MkQ5NTA0ODM0NTlCQjI4NkU4MzIyMUNDNjY3QzJDQTYxMzJEQjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyRDk1MDQ4MzQ1OUJCMjg2
RTgzMjIxQ0M2NjdDMkNBNjEzMkRCNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5U0RWZ2pCNFlRaFJhSnp2eVp2MUpqYkJoUEJDbmdQZlYxbTR1djNXNW02LzAv
MzIzODMwMzQzYTM2MzUzMDMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM5
MzQzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARlADANBgkqhkiG9w0BAQsFAAOCAQEA6M7t3dKf
h9ZRBVLzLInA6n+jJcdOS7+kbB26rAakUtvncrErEqu+hXnnHSfui8BujmWOXI+8
4uEaoY+DY/tvaZyGxxwB+SOiB0efd26HOUn7bjFu+yy0zb8GHULfNrP3V4kv4qJO
g3zvfNqFajHawuQre2Y7D06xFZXLSwIOPskrL+t/dFbbr/VAh+pX6NlCuC3+fqFY
VDtzicMLxZOO4sWeDNfPhWE7Wbfkywrz4MlUIAR2BFA6a4e7NEx0FIG5iy3qUGPG
9lF4RYCYJ6E9mhWmDM5ARWA7ktqpz3EKXUtpxeR3zFuTk9jwZs/qBAWo9JKt8nBw
yL+L1ZqKJmZKZw==
-----END CERTIFICATE-----