Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a3a2f33322d3332203d3e20323638363633.roa
File:                     323830343a353461383a3a2f33322d3332203d3e20323638363633.roa (raw, json)
Hash identifier:          k6K6KvPdvKHDZlEhN8sUTr4KIoWEUdFUSetwinx1AKI=
Subject key identifier:   66:D8:52:10:E7:F3:3A:65:73:02:90:D5:63:1F:36:BE:F0:EC:83:AB
Certificate issuer:       /CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
Certificate serial:       2B26AFDCAB669BDC4E7D83361AFB867307413DC9
Authority key identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a3a2f33322d3332203d3e20323638363633.roa
Signing time:             Mon 23 Sep 2024 13:32:32 +0000
ROA not before:           Mon 23 Sep 2024 13:27:32 +0000
ROA not after:            Mon 22 Sep 2025 13:32:32 +0000
asID:                     268663
IP address blocks:        2804:54a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:26:af:dc:ab:66:9b:dc:4e:7d:83:36:1a:fb:86:73:07:41:3d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
        Validity
            Not Before: Sep 23 13:27:32 2024 GMT
            Not After : Sep 22 13:32:32 2025 GMT
        Subject: CN=66D85210E7F33A65730290D5631F36BEF0EC83AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:90:ff:56:cf:21:60:ee:bb:e7:c5:c2:0a:
                    be:0e:bd:20:13:01:58:d6:47:84:27:c7:2e:97:7c:
                    ee:14:e0:80:a3:91:62:a6:16:7a:0c:d8:83:92:e1:
                    3c:34:9f:2c:64:fe:32:a5:2d:fd:83:bd:00:36:4c:
                    3e:fb:84:be:db:07:53:59:bd:b4:8e:c2:74:2b:61:
                    d5:aa:f8:41:97:84:2a:a2:c3:89:e6:b6:1a:95:4d:
                    33:54:fd:8a:3b:d7:2b:72:8e:3d:f0:a1:1d:7a:dc:
                    05:e1:0d:89:29:6d:ac:6d:03:2c:05:dd:22:4e:13:
                    7b:19:7a:8e:6c:99:ef:63:56:00:9c:52:4f:9b:46:
                    9d:42:3f:c5:2a:af:7f:0a:f4:03:4f:e8:b0:a0:f4:
                    b2:eb:ba:23:8a:c9:62:76:18:69:83:09:00:e3:51:
                    35:4c:56:32:3f:7c:e2:06:d4:ee:2b:36:f0:dd:d3:
                    c1:37:09:3e:1b:b0:12:24:24:4b:9a:10:79:9f:85:
                    b7:fb:74:9b:78:81:57:3e:ee:96:a4:a2:c0:0b:9e:
                    e1:26:dc:b5:4b:94:9e:b7:39:51:f8:8b:7d:a6:68:
                    a4:24:8c:6c:2a:64:2b:d3:4b:51:b9:ba:11:99:fc:
                    d8:ab:1a:a3:f9:21:e2:01:a8:3e:30:7d:7e:a6:ab:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D8:52:10:E7:F3:3A:65:73:02:90:D5:63:1F:36:BE:F0:EC:83:AB
            X509v3 Authority Key Identifier:
                keyid:8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a3a2f33322d3332203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:54:f7:a9:d1:d1:80:a3:7a:db:81:6d:3a:40:f3:9f:7b:34:
         41:c8:c1:41:88:1a:80:96:fd:a9:38:48:a4:88:ec:9f:06:66:
         e3:66:f3:82:68:63:c6:ca:79:5b:4a:e4:b6:3a:26:13:e8:89:
         03:79:e1:b2:4d:5a:b3:24:2f:cb:f7:bd:4d:6f:bc:1d:f8:c2:
         91:7d:a9:72:f2:15:21:9b:5d:cb:81:d4:49:7e:99:04:f6:92:
         23:1b:c8:3c:b9:b3:00:5f:d9:30:80:10:c5:ad:e4:80:4e:ab:
         9c:97:d4:c6:70:82:d9:af:72:77:01:1f:e7:b0:12:e5:38:a6:
         eb:1e:e2:48:3e:27:9f:79:03:dd:a9:8a:d6:38:61:2c:a0:3d:
         f2:dc:0e:c8:61:aa:e0:4a:33:cb:d3:da:13:36:44:b9:bf:9a:
         2d:6d:84:1f:5d:a9:d1:e3:97:53:ef:e7:c2:fe:a6:47:24:6b:
         9b:45:61:63:2b:6f:c1:d5:d2:10:52:cc:30:9c:3b:7b:9d:48:
         08:84:98:82:17:7b:75:7a:c8:65:b3:5c:9e:74:d3:c8:a2:61:
         aa:f8:f4:5e:5d:c1:33:65:45:dc:25:44:90:a3:ea:0d:6b:84:
         9e:b7:cc:46:6a:81:b5:3d:96:d6:26:da:cf:b8:d4:d2:37:6b:
         d6:b5:d2:c4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKyav3Ktmm9xOfYM2GvuGcwdBPckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENFMjRDRUI2QjE0MDE3QTAxNEIxQ0ZFODFCREM5OUFB
NzA3QjE4QTAeFw0yNDA5MjMxMzI3MzJaFw0yNTA5MjIxMzMyMzJaMDMxMTAvBgNV
BAMTKDY2RDg1MjEwRTdGMzNBNjU3MzAyOTBENTYzMUYzNkJFRjBFQzgzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LpD/Vs8hYO6758XCCr4OvSAT
AVjWR4Qnxy6XfO4U4ICjkWKmFnoM2IOS4Tw0nyxk/jKlLf2DvQA2TD77hL7bB1NZ
vbSOwnQrYdWq+EGXhCqiw4nmthqVTTNU/Yo71ytyjj3woR163AXhDYkpbaxtAywF
3SJOE3sZeo5sme9jVgCcUk+bRp1CP8Uqr38K9ANP6LCg9LLruiOKyWJ2GGmDCQDj
UTVMVjI/fOIG1O4rNvDd08E3CT4bsBIkJEuaEHmfhbf7dJt4gVc+7pakosALnuEm
3LVLlJ63OVH4i32maKQkjGwqZCvTS1G5uhGZ/NirGqP5IeIBqD4wfX6mq6/3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZthSEOfzOmVzApDVYx82vvDsg6swHwYDVR0j
BBgwFoAUjOJM62sUAXoBSxz+gb3JmqcHsYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1VhM1lDVkZrNXQ1TFVodDJVcEpQY2FoeG9rdEZoS1dHN0RSbURuNXk3
QWovMC84Q0UyNENFQjZCMTQwMTdBMDE0QjFDRkU4MUJEQzk5QUE3MDdCMThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRTI0Q0VCNkIxNDAxN0Ew
MTRCMUNGRTgxQkRDOTlBQTcwN0IxOEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NVYTNZQ1ZGazV0NUxVaHQyVXBKUGNhaHhva3RGaEtXRzdEUm1EbjV5N0FqLzAv
MzIzODMwMzQzYTM1MzQ2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARUqDANBgkqhkiG9w0BAQsFAAOCAQEAsVT3qdHR
gKN624FtOkDzn3s0QcjBQYgagJb9qThIpIjsnwZm42bzgmhjxsp5W0rktjomE+iJ
A3nhsk1asyQvy/e9TW+8HfjCkX2pcvIVIZtdy4HUSX6ZBPaSIxvIPLmzAF/ZMIAQ
xa3kgE6rnJfUxnCC2a9ydwEf57AS5Tim6x7iSD4nn3kD3amK1jhhLKA98twOyGGq
4Eozy9PaEzZEub+aLW2EH12p0eOXU+/nwv6mRyRrm0VhYytvwdXSEFLMMJw7e51I
CISYghd7dXrIZbNcnnTTyKJhqvj0Xl3BM2VF3CVEkKPqDWuEnrfMRmqBtT2W1iba
z7jU0jdr1rXSxA==
-----END CERTIFICATE-----