Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/1/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa
File:                     323830343a333762633a3a2f33322d3438203d3e20323636343333.roa (raw, json)
Hash identifier:          7+aIvvVvLyMwRpLTWABei1ju9CLEJZZ3miHWYQwN/mU=
Subject key identifier:   DC:00:ED:7A:97:43:67:4F:4F:DE:E5:3B:61:8E:8D:2A:3E:E6:F2:70
Certificate issuer:       /CN=8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6
Certificate serial:       5DD098DD090E63B2B886E4AD81FFC048A07E91CE
Authority key identifier: 8D:FD:8A:1B:66:FA:FB:D8:7A:52:D0:D5:1C:57:DE:C0:55:81:68:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/1/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa
Signing time:             Thu 04 Apr 2024 08:02:57 +0000
ROA not before:           Thu 04 Apr 2024 07:57:57 +0000
ROA not after:            Thu 03 Apr 2025 08:02:57 +0000
asID:                     266433
IP address blocks:        2804:37bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d0:98:dd:09:0e:63:b2:b8:86:e4:ad:81:ff:c0:48:a0:7e:91:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6
        Validity
            Not Before: Apr  4 07:57:57 2024 GMT
            Not After : Apr  3 08:02:57 2025 GMT
        Subject: CN=DC00ED7A9743674F4FDEE53B618E8D2A3EE6F270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:d0:0a:bb:d2:39:c0:9d:0b:80:50:34:fe:
                    2a:7d:a5:f2:e1:cb:51:81:ce:60:fe:09:ff:b3:f6:
                    8d:eb:9a:5e:0a:b5:5f:c3:a3:dd:56:1c:e2:96:72:
                    11:dd:3d:93:a5:67:6e:09:9f:e1:7d:84:77:b0:ce:
                    dc:e3:a3:43:95:95:bb:62:47:92:c9:fd:27:d3:55:
                    68:be:d1:df:8f:f0:fd:28:08:64:b8:e0:b3:d4:c5:
                    58:43:45:d8:fe:11:b4:22:4b:67:2b:7c:75:93:90:
                    ce:59:08:00:f2:11:41:c0:00:9b:dd:34:c2:a9:2c:
                    fc:82:59:b8:c1:f8:1a:da:19:58:91:68:06:aa:1e:
                    58:c4:40:b4:a5:f9:2d:7d:f0:65:9b:cf:19:21:81:
                    ad:02:f8:5f:9c:96:fd:2b:fa:08:5c:89:96:8c:bb:
                    e9:5f:1a:e8:72:7e:ec:74:2e:e2:7d:11:80:47:e9:
                    04:4a:b2:fb:99:ab:26:34:9c:bc:45:6d:49:88:4c:
                    4d:81:34:41:55:c6:e2:dc:b7:cd:48:c0:03:63:e6:
                    96:52:c3:12:1b:3f:c7:a0:5e:f3:45:d0:9f:87:b9:
                    41:8a:23:7f:17:82:e6:5c:9d:75:f2:a5:39:04:8e:
                    f2:95:7f:6d:d4:20:7f:71:80:d0:93:36:ba:91:3e:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:00:ED:7A:97:43:67:4F:4F:DE:E5:3B:61:8E:8D:2A:3E:E6:F2:70
            X509v3 Authority Key Identifier:
                keyid:8D:FD:8A:1B:66:FA:FB:D8:7A:52:D0:D5:1C:57:DE:C0:55:81:68:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/1/8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DFD8A1B66FAFBD87A52D0D51C57DEC0558168B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/1/323830343a333762633a3a2f33322d3438203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:2e:01:63:a0:c6:66:ad:a1:26:68:3d:31:06:45:88:c2:
         03:87:40:ee:ba:ce:73:95:9f:81:84:6b:3b:3e:d9:28:54:58:
         79:cc:99:31:ff:f8:d4:97:a2:b3:de:15:74:61:bd:f3:21:9c:
         f0:ac:0a:2e:c7:eb:f8:7c:7d:07:09:67:6f:e6:4d:ac:95:00:
         c1:ce:08:a2:55:7a:1e:77:e7:b4:6b:d1:1f:51:a1:ef:9f:71:
         13:99:4a:5d:1b:2f:01:23:84:80:57:14:9f:d2:b0:8d:26:77:
         15:c1:5b:32:bb:46:a3:11:1e:64:eb:f5:3b:c7:ae:50:eb:80:
         5e:79:7a:24:95:52:fb:7d:69:c6:0f:7a:09:31:4b:bd:1e:68:
         e0:4f:ee:12:b8:91:bd:82:ea:4a:da:a8:62:be:d5:00:23:68:
         e4:66:50:81:38:df:48:f8:e7:4f:3b:50:fe:66:30:cb:2b:88:
         2a:7e:4d:31:52:b4:d9:d6:67:9b:50:9d:d1:69:10:33:6f:47:
         1e:1f:1b:3b:ad:e2:1b:95:6e:1a:45:fb:ac:96:bb:e6:96:c9:
         6c:04:c7:6d:04:b0:7c:61:70:c5:1e:11:23:45:f7:ce:f3:af:
         cc:50:6e:61:f0:ae:d6:cc:45:bd:71:04:7b:95:41:73:b0:cb:
         8f:a6:e6:14
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXdCY3QkOY7K4huStgf/ASKB+kc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERGRDhBMUI2NkZBRkJEODdBNTJEMEQ1MUM1N0RFQzA1
NTgxNjhCNjAeFw0yNDA0MDQwNzU3NTdaFw0yNTA0MDMwODAyNTdaMDMxMTAvBgNV
BAMTKERDMDBFRDdBOTc0MzY3NEY0RkRFRTUzQjYxOEU4RDJBM0VFNkYyNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9f9AKu9I5wJ0LgFA0/ip9pfLh
y1GBzmD+Cf+z9o3rml4KtV/Do91WHOKWchHdPZOlZ24Jn+F9hHewztzjo0OVlbti
R5LJ/SfTVWi+0d+P8P0oCGS44LPUxVhDRdj+EbQiS2crfHWTkM5ZCADyEUHAAJvd
NMKpLPyCWbjB+BraGViRaAaqHljEQLSl+S198GWbzxkhga0C+F+clv0r+ghciZaM
u+lfGuhyfux0LuJ9EYBH6QRKsvuZqyY0nLxFbUmITE2BNEFVxuLct81IwANj5pZS
wxIbP8egXvNF0J+HuUGKI38XguZcnXXypTkEjvKVf23UIH9xgNCTNrqRPrYzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3ADtepdDZ09P3uU7YY6NKj7m8nAwHwYDVR0j
BBgwFoAUjf2KG2b6+9h6UtDVHFfewFWBaLYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMS84REZEOEExQjY2RkFGQkQ4N0E1MkQwRDUxQzU3REVDMDU1ODE2OEI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERkQ4QTFCNjZGQUZCRDg3
QTUyRDBENTFDNTdERUMwNTU4MTY4QjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4YjF0R05vcmpMNEpkQ0czM2czR29xV0dUbkJVN2JBN3lUVEJNeGVoOVVmLzEv
MzIzODMwMzQzYTMzMzc2MjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzQzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ3vDANBgkqhkiG9w0BAQsFAAOCAQEAeaMuAWOg
xmatoSZoPTEGRYjCA4dA7rrOc5WfgYRrOz7ZKFRYecyZMf/41Jeis94VdGG98yGc
8KwKLsfr+Hx9Bwlnb+ZNrJUAwc4IolV6HnfntGvRH1Gh759xE5lKXRsvASOEgFcU
n9KwjSZ3FcFbMrtGoxEeZOv1O8euUOuAXnl6JJVS+31pxg96CTFLvR5o4E/uEriR
vYLqStqoYr7VACNo5GZQgTjfSPjnTztQ/mYwyyuIKn5NMVK02dZnm1Cd0WkQM29H
Hh8bO63iG5VuGkX7rJa75pbJbATHbQSwfGFwxR4RI0X3zvOvzFBuYfCu1sxFvXEE
e5VBc7DLj6bmFA==
-----END CERTIFICATE-----