Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          TGb0xznpox9j3BAQr9AHRnK5FSj/WxhwKQF5YQg0xVg=
Subject key identifier:   28:1B:F7:35:C4:95:F0:CB:58:20:08:0C:BA:5C:BF:84:20:05:09:0F
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       5A4D29942B010E1817DA843488BF724D89E680B6
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Thu 03 Aug 2023 19:00:00 +0000
ROA not before:           Thu 03 Aug 2023 18:55:00 +0000
ROA not after:            Thu 01 Aug 2024 19:00:00 +0000
asID:                     265187
IP address blocks:        2804:2c00:100::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4d:29:94:2b:01:0e:18:17:da:84:34:88:bf:72:4d:89:e6:80:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Aug  3 18:55:00 2023 GMT
            Not After : Aug  1 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:a1:02:3d:01:ec:b7:1c:7f:e6:8f:31:47:
                    c3:71:ae:bc:b3:b3:a1:9c:df:17:f1:fa:03:a8:54:
                    75:93:a9:54:b6:77:a6:9c:b9:ba:96:ac:09:9a:f2:
                    8d:98:ca:1e:c3:2d:37:aa:99:74:86:0e:b8:26:a7:
                    7b:d6:49:ef:72:64:13:61:d3:b8:69:4d:e0:7c:75:
                    a4:23:60:71:ec:64:1b:a4:27:0e:18:dd:8d:51:d7:
                    9c:f4:e6:33:a7:12:10:61:e4:d7:d0:aa:c8:f4:c5:
                    16:ed:51:98:3e:ac:ab:d8:84:e6:d5:f2:2b:14:f9:
                    ea:7a:aa:ee:73:c9:26:c2:ce:07:43:f8:a4:41:b4:
                    53:52:c4:37:37:d1:a4:be:4e:a3:b4:a3:9f:54:a8:
                    dd:06:c5:6a:b8:ed:4d:4b:a1:2d:8e:56:45:24:c9:
                    42:02:a6:9b:c3:b6:a2:84:ca:f3:74:2b:30:35:08:
                    af:68:77:5a:1e:96:ac:fc:14:9a:63:fe:99:d5:b4:
                    68:eb:53:91:38:03:0a:66:18:db:6c:75:45:f8:a5:
                    0f:b1:2f:bb:44:da:14:4c:1c:97:7e:b7:14:b3:ea:
                    6b:4e:b6:bf:73:5b:10:bb:f0:35:7b:c6:91:b3:32:
                    00:c5:6a:1c:65:9d:86:b2:b3:3d:22:7c:f5:b7:4e:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1B:F7:35:C4:95:F0:CB:58:20:08:0C:BA:5C:BF:84:20:05:09:0F
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:08:62:c5:c8:dd:b4:d7:48:99:7a:0f:09:ec:aa:2f:9b:
         09:27:a4:9c:08:5f:6b:fa:fb:87:59:66:bc:c9:d9:9b:03:16:
         da:e1:78:81:68:1e:77:a2:3b:d7:b9:f1:46:6a:de:a7:af:3c:
         34:1c:fc:14:22:fc:e7:94:96:0f:17:bb:fa:a8:a8:52:97:f3:
         46:18:7a:48:b8:de:22:78:ce:5f:ee:3f:92:85:40:d7:24:62:
         38:e8:70:50:21:07:e3:23:3f:30:a4:cf:18:e8:56:ed:c2:95:
         8e:20:03:41:71:65:f7:fe:f9:f4:39:3c:da:53:25:65:1f:69:
         48:2e:88:0d:0c:d6:b8:11:1e:2c:c3:00:0e:2b:c9:96:61:f8:
         14:91:af:d7:5a:b1:80:4e:57:f2:7a:7e:9b:20:b2:a3:f1:56:
         d7:e2:ef:f4:6f:23:de:c9:f1:b6:bf:20:55:86:b0:24:b9:d3:
         c1:70:f6:c3:29:03:a3:58:8c:6f:0d:ff:ce:2f:29:7a:a2:12:
         f8:1c:e1:92:47:8c:7e:60:80:14:35:38:22:56:ec:d5:b8:ae:
         c9:22:60:a5:0b:4b:ce:a3:e7:56:3b:17:0f:2d:02:f6:d8:f7:
         16:00:5b:a1:74:d5:04:cf:ea:15:14:97:d2:fa:5e:a4:c4:04:
         e3:05:d6:a3
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUWk0plCsBDhgX2oQ0iL9yTYnmgLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODExNzUzNzAyMjFFMjYxODFGMzlGQjQwN0U2MzA2NERF
QjIwRTZFRTAeFw0yMzA4MDMxODU1MDBaFw0yNDA4MDExOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjg2RkExMDIzRDAxRUNCNzFD
N0ZFNjhGMzE0N0MzNzFBRUJDQjNCM0ExOUNERjE3RjFGQTAzQTg1NDc1OTNBOTU0
QjY3N0E2OUNCOUJBOTZBQzA5OUFGMjhEOThDQTFFQzMyRDM3QUE5OTc0ODYwRUI4
MjZBNzdCRDY0OUVGNzI2NDEzNjFEM0I4Njk0REUwN0M3NUE0MjM2MDcxRUM2NDFC
QTQyNzBFMThERDhENTFENzlDRjRFNjMzQTcxMjEwNjFFNEQ3RDBBQUM4RjRDNTE2
RUQ1MTk4M0VBQ0FCRDg4NEU2RDVGMjJCMTRGOUVBN0FBQUVFNzNDOTI2QzJDRTA3
NDNGOEE0NDFCNDUzNTJDNDM3MzdEMUE0QkU0RUEzQjRBMzlGNTRBOEREMDZDNTZB
QjhFRDRENEJBMTJEOEU1NjQ1MjRDOTQyMDJBNjlCQzNCNkEyODRDQUYzNzQyQjMw
MzUwOEFGNjg3NzVBMUU5NkFDRkMxNDlBNjNGRTk5RDVCNDY4RUI1MzkxMzgwMzBB
NjYxOERCNkM3NTQ1RjhBNTBGQjEyRkJCNDREQTE0NEMxQzk3N0VCNzE0QjNFQTZC
NEVCNkJGNzM1QjEwQkJGMDM1N0JDNjkxQjMzMjAwQzU2QTFDNjU5RDg2QjJCMzNE
MjI3Q0Y1Qjc0RUY0QjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuG+hAj0B7Lccf+aPMUfDca68s7OhnN8X8foDqFR1k6lUtnemnLm6
lqwJmvKNmMoewy03qpl0hg64Jqd71knvcmQTYdO4aU3gfHWkI2Bx7GQbpCcOGN2N
Udec9OYzpxIQYeTX0KrI9MUW7VGYPqyr2ITm1fIrFPnqeqruc8kmws4HQ/ikQbRT
UsQ3N9Gkvk6jtKOfVKjdBsVquO1NS6EtjlZFJMlCAqabw7aihMrzdCswNQivaHda
Hpas/BSaY/6Z1bRo61OROAMKZhjbbHVF+KUPsS+7RNoUTByXfrcUs+prTra/c1sQ
u/A1e8aRszIAxWocZZ2GsrM9Inz1t070uQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FCgb9zXElfDLWCAIDLpcv4QgBQkPMB8GA1UdIwQYMBaAFIEXU3AiHiYYHzn7QH5j
Bk3rIObuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3RkhRN2JZMzdWeFZK
bzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAvODExNzUzNzAyMjFFMjYx
ODFGMzlGQjQwN0U2MzA2NERFQjIwRTZFRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MTE3NTM3MDIyMUUyNjE4MUYzOUZCNDA3RTYzMDY0REVCMjBF
NkVFLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EN0ZIUTdiWTM3VnhWSm8zZEVW
anBQYXB4cGJ6SGtNTGdRS1R6bkdiUWF4Yi8wLzMyMzgzMDM0M2EzMjYzMzAzMDNh
MzEzMDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNjM1MzEzODM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcGKAQsAAEAMA0GCSqGSIb3DQEBCwUAA4IBAQBi7whixcjdtNdImXoPCeyq
L5sJJ6ScCF9r+vuHWWa8ydmbAxba4XiBaB53ojvXufFGat6nrzw0HPwUIvznlJYP
F7v6qKhSl/NGGHpIuN4ieM5f7j+ShUDXJGI46HBQIQfjIz8wpM8Y6FbtwpWOIANB
cWX3/vn0OTzaUyVlH2lILogNDNa4ER4swwAOK8mWYfgUka/XWrGATlfyen6bILKj
8VbX4u/0byPeyfG2vyBVhrAkudPBcPbDKQOjWIxvDf/OLyl6ohL4HOGSR4x+YIAU
NTgiVuzVuK7JImClC0vOo+dWOxcPLQL22PcWAFuhdNUEz+oVFJfS+l6kxATjBdaj
-----END CERTIFICATE-----