Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a383030303a3a2f33332d3333203d3e20323635313837.roa
File:                     323830343a326330303a383030303a3a2f33332d3333203d3e20323635313837.roa (raw, json)
Hash identifier:          Q6+XbZS8783eRWrxa9Og4hPVIe8KTrhAfkydc7d9vMM=
Subject key identifier:   FD:D0:E3:78:A5:17:4A:9C:70:AF:C3:88:72:AC:8E:B3:B1:6C:61:37
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       2414798DCDF899E7D6570A15100FF8C6FD8FA251
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a383030303a3a2f33332d3333203d3e20323635313837.roa
Signing time:             Fri 28 Jul 2023 02:00:00 +0000
ROA not before:           Fri 28 Jul 2023 01:55:00 +0000
ROA not after:            Fri 26 Jul 2024 02:00:00 +0000
asID:                     265187
IP address blocks:        2804:2c00:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:14:79:8d:cd:f8:99:e7:d6:57:0a:15:10:0f:f8:c6:fd:8f:a2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Jul 28 01:55:00 2023 GMT
            Not After : Jul 26 02:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ef:a1:9d:ed:8d:73:5a:35:9f:19:dc:ab:5c:
                    38:68:6b:15:09:14:76:f9:b9:01:40:de:97:3c:36:
                    32:74:8e:74:5e:b8:35:30:1f:b3:41:56:6d:89:b2:
                    12:b5:60:fc:a9:c8:41:fc:bf:de:98:fe:18:10:57:
                    45:b8:e3:fd:a4:ad:b4:04:01:61:ce:c0:91:fb:4e:
                    c5:f3:89:c8:36:89:6e:7d:b9:b2:d8:74:b2:4f:82:
                    af:9a:6d:7b:39:e6:20:34:65:a5:34:eb:62:82:f7:
                    81:04:63:87:5a:56:cd:10:93:d3:21:ad:37:ea:58:
                    a7:41:a3:94:04:07:6a:8e:6e:9f:66:41:dd:5a:dd:
                    db:dd:81:fd:7b:8b:c3:73:15:72:4d:bd:b1:6f:09:
                    6c:13:98:5f:f8:f8:21:cd:18:7b:e3:e1:d7:c9:ee:
                    ec:b5:2a:9f:68:f5:a7:2d:7f:53:5e:5a:10:d6:b7:
                    08:d7:a6:c7:6e:19:aa:b0:f9:3c:06:21:5e:9c:5d:
                    12:b3:d1:f1:b1:ce:82:fb:c7:90:1d:df:c2:d0:24:
                    d4:b6:df:fe:31:c4:1b:c1:96:93:81:be:96:53:b4:
                    36:04:4f:f5:2c:d7:67:98:ec:6f:39:e2:50:b4:b9:
                    7e:e7:91:8e:19:fa:53:ba:ee:9a:bf:6d:8f:c0:b0:
                    c3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D0:E3:78:A5:17:4A:9C:70:AF:C3:88:72:AC:8E:B3:B1:6C:61:37
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a383030303a3a2f33332d3333203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:67:d8:67:22:d3:5a:aa:24:32:c7:4c:cd:2b:f1:da:3a:db:
         ee:18:62:e5:f2:1d:92:65:89:fe:61:92:d9:e8:84:c7:ab:1b:
         6f:d4:8e:11:70:d8:29:2a:1a:d8:b5:fe:fc:cd:76:d3:3f:c5:
         0e:2f:76:2a:37:85:00:28:13:a2:3d:7a:a9:78:90:e9:1c:a2:
         8b:06:0e:3b:3d:b4:47:7c:d7:05:d7:f9:33:88:5f:ee:c4:20:
         43:11:99:02:20:ec:65:7b:4e:6e:94:ed:b5:74:7f:34:5f:43:
         d8:ed:23:c1:54:52:69:84:b8:b6:10:77:1c:54:d2:33:55:cc:
         ce:c3:9f:9f:52:56:f0:7a:48:7f:34:5a:89:60:37:ed:ac:34:
         fa:c3:4e:da:de:12:07:14:6d:1c:0d:3e:f4:81:33:70:e3:b5:
         9e:67:24:0b:56:e4:4d:cb:04:dc:ad:6d:91:9b:b8:bb:ca:f1:
         a5:37:41:22:b8:5c:02:2b:0c:2d:cd:87:ac:d2:67:0b:e1:0b:
         e4:35:68:26:70:3c:4c:9d:f7:56:78:4c:e6:db:71:db:85:5f:
         f3:9b:c4:74:fd:b4:fd:94:b3:91:dd:a8:d8:3c:ec:55:cd:36:
         d3:22:52:1f:d2:10:1c:8e:ed:da:c4:db:3c:0c:b4:fe:82:d6:
         a7:a3:a9:32
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUJBR5jc34mefWVwoVEA/4xv2PolEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODExNzUzNzAyMjFFMjYxODFGMzlGQjQwN0U2MzA2NERF
QjIwRTZFRTAeFw0yMzA3MjgwMTU1MDBaFw0yNDA3MjYwMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUVFRkExOURFRDhENzM1QTM1
OUYxOURDQUI1QzM4Njg2QjE1MDkxNDc2RjlCOTAxNDBERTk3M0MzNjMyNzQ4RTc0
NUVCODM1MzAxRkIzNDE1NjZEODlCMjEyQjU2MEZDQTlDODQxRkNCRkRFOThGRTE4
MTA1NzQ1QjhFM0ZEQTRBREI0MDQwMTYxQ0VDMDkxRkI0RUM1RjM4OUM4MzY4OTZF
N0RCOUIyRDg3NEIyNEY4MkFGOUE2RDdCMzlFNjIwMzQ2NUE1MzRFQjYyODJGNzgx
MDQ2Mzg3NUE1NkNEMTA5M0QzMjFBRDM3RUE1OEE3NDFBMzk0MDQwNzZBOEU2RTlG
NjY0MURENUFERERCREQ4MUZEN0I4QkMzNzMxNTcyNERCREIxNkYwOTZDMTM5ODVG
RjhGODIxQ0QxODdCRTNFMUQ3QzlFRUVDQjUyQTlGNjhGNUE3MkQ3RjUzNUU1QTEw
RDZCNzA4RDdBNkM3NkUxOUFBQjBGOTNDMDYyMTVFOUM1RDEyQjNEMUYxQjFDRTgy
RkJDNzkwMURERkMyRDAyNEQ0QjZERkZFMzFDNDFCQzE5NjkzODFCRTk2NTNCNDM2
MDQ0RkY1MkNENzY3OThFQzZGMzlFMjUwQjRCOTdFRTc5MThFMTlGQTUzQkFFRTlB
QkY2RDhGQzBCMEMzN0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7u+hne2Nc1o1nxncq1w4aGsVCRR2+bkBQN6XPDYydI50Xrg1MB+z
QVZtibIStWD8qchB/L/emP4YEFdFuOP9pK20BAFhzsCR+07F84nINolufbmy2HSy
T4Kvmm17OeYgNGWlNOtigveBBGOHWlbNEJPTIa036linQaOUBAdqjm6fZkHdWt3b
3YH9e4vDcxVyTb2xbwlsE5hf+PghzRh74+HXye7stSqfaPWnLX9TXloQ1rcI16bH
bhmqsPk8BiFenF0Ss9Hxsc6C+8eQHd/C0CTUtt/+McQbwZaTgb6WU7Q2BE/1LNdn
mOxvOeJQtLl+55GOGfpTuu6av22PwLDDfwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FP3Q43ilF0qccK/DiHKsjrOxbGE3MB8GA1UdIwQYMBaAFIEXU3AiHiYYHzn7QH5j
Bk3rIObuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q3RkhRN2JZMzdWeFZK
bzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAvODExNzUzNzAyMjFFMjYx
ODFGMzlGQjQwN0U2MzA2NERFQjIwRTZFRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MTE3NTM3MDIyMUUyNjE4MUYzOUZCNDA3RTYzMDY0REVCMjBF
NkVFLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EN0ZIUTdiWTM3VnhWSm8zZEVW
anBQYXB4cGJ6SGtNTGdRS1R6bkdiUWF4Yi8wLzMyMzgzMDM0M2EzMjYzMzAzMDNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM2MzUzMTM4Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBCwAgDANBgkqhkiG9w0BAQsFAAOCAQEAZ2fYZyLTWqokMsdMzSvx
2jrb7hhi5fIdkmWJ/mGS2eiEx6sbb9SOEXDYKSoa2LX+/M120z/FDi92KjeFACgT
oj16qXiQ6RyiiwYOOz20R3zXBdf5M4hf7sQgQxGZAiDsZXtObpTttXR/NF9D2O0j
wVRSaYS4thB3HFTSM1XMzsOfn1JW8HpIfzRaiWA37aw0+sNO2t4SBxRtHA0+9IEz
cOO1nmckC1bkTcsE3K1tkZu4u8rxpTdBIrhcAisMLc2HrNJnC+EL5DVoJnA8TJ33
VnhM5ttx24Vf85vEdP20/ZSzkd2o2DzsVc020yJSH9IQHI7t2sTbPAy0/oLWp6Op
Mg==
-----END CERTIFICATE-----