Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/1/323830343a343132303a3a2f33322d3335203d3e20323636303035.roa
File:                     323830343a343132303a3a2f33322d3335203d3e20323636303035.roa (raw, json)
Hash identifier:          rFhXMjSRsFTR58w6GqRSgQ5Gzsn2wAeXHXgJNaUNJAw=
Subject key identifier:   E7:E7:82:0C:B0:26:F5:FE:48:40:16:F4:BA:74:E2:CF:42:48:C1:61
Certificate issuer:       /CN=8CBE574C1ECF9DA517C6FCD57457C402DE79E150
Certificate serial:       74DEB2F0C88237E5246EF7462FC3338ED43AB173
Authority key identifier: 8C:BE:57:4C:1E:CF:9D:A5:17:C6:FC:D5:74:57:C4:02:DE:79:E1:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CBE574C1ECF9DA517C6FCD57457C402DE79E150.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/1/323830343a343132303a3a2f33322d3335203d3e20323636303035.roa
Signing time:             Thu 04 Apr 2024 11:19:07 +0000
ROA not before:           Thu 04 Apr 2024 11:14:07 +0000
ROA not after:            Thu 03 Apr 2025 11:19:07 +0000
asID:                     266005
IP address blocks:        2804:4120::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:de:b2:f0:c8:82:37:e5:24:6e:f7:46:2f:c3:33:8e:d4:3a:b1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CBE574C1ECF9DA517C6FCD57457C402DE79E150
        Validity
            Not Before: Apr  4 11:14:07 2024 GMT
            Not After : Apr  3 11:19:07 2025 GMT
        Subject: CN=E7E7820CB026F5FE484016F4BA74E2CF4248C161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:b5:28:2b:ac:43:24:24:3b:03:2c:33:b0:
                    bf:99:00:2b:e2:d4:1e:1f:95:ba:59:7b:fa:80:31:
                    d3:67:e6:47:0d:69:ce:70:cf:ef:8d:b2:ca:97:22:
                    c9:b9:3c:74:b7:1a:64:4e:81:10:fd:b3:3a:d0:67:
                    87:4c:db:d1:2e:3e:4f:8a:7d:a9:3d:19:a9:28:2c:
                    d1:4c:97:62:18:db:8b:9e:aa:68:78:5e:1d:89:06:
                    73:67:50:03:1b:26:07:71:c9:6f:21:df:bd:49:bc:
                    be:44:c8:ca:df:a1:71:28:ea:89:73:83:68:1c:8a:
                    21:d2:01:26:8d:c9:21:1e:2a:03:51:32:f9:a9:5b:
                    b3:07:54:14:d1:63:9d:93:b6:4c:47:ed:52:6a:09:
                    cf:18:91:10:0d:fc:e9:95:50:fc:9b:84:3a:9f:0e:
                    aa:3f:67:f9:ed:74:f7:1b:62:ba:20:e4:33:9b:03:
                    40:17:90:44:a5:20:1f:91:0e:7f:ea:3f:4c:56:ba:
                    f3:ae:00:0d:04:85:54:29:cd:f6:20:e7:06:b1:fd:
                    b0:22:4f:8c:60:a6:31:bb:09:c3:23:8c:c0:6a:72:
                    31:82:2b:7c:38:ce:c5:86:1f:d6:30:e3:51:37:ce:
                    0d:37:b5:bd:b4:a8:e0:a9:90:1b:98:6b:8b:2e:70:
                    9e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E7:82:0C:B0:26:F5:FE:48:40:16:F4:BA:74:E2:CF:42:48:C1:61
            X509v3 Authority Key Identifier:
                keyid:8C:BE:57:4C:1E:CF:9D:A5:17:C6:FC:D5:74:57:C4:02:DE:79:E1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/1/8CBE574C1ECF9DA517C6FCD57457C402DE79E150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CBE574C1ECF9DA517C6FCD57457C402DE79E150.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/1/323830343a343132303a3a2f33322d3335203d3e20323636303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:ac:1b:9a:67:c8:db:0d:00:fc:1e:b1:6c:56:cb:7f:0c:a9:
         6b:f2:e9:56:d5:87:a1:e5:83:92:a2:06:5b:3d:3f:97:6d:c4:
         42:69:1d:4b:32:de:4d:1d:68:4b:d6:98:08:59:e6:54:68:c5:
         de:bc:96:7c:34:a5:6d:7f:a1:a8:39:e3:bf:0f:2a:e4:18:7f:
         eb:97:c6:37:6b:b1:ef:4f:66:e3:75:a3:52:55:15:4b:2b:88:
         0a:e9:47:a8:ce:20:c6:2f:52:0b:57:b8:9f:e4:d6:80:21:d4:
         b9:c3:74:51:2e:f0:b3:46:15:52:2b:22:fa:a7:75:07:8b:d1:
         1c:55:a5:41:a7:3b:57:e7:3d:bb:11:e3:97:a9:bd:ef:10:11:
         4f:4d:9f:37:c4:14:9b:80:b9:4f:21:9e:db:23:b4:9d:d9:3b:
         7b:15:f3:fb:97:ec:d3:82:9a:9a:93:82:a4:44:ee:a0:48:70:
         6a:9a:41:fc:23:ff:51:1b:8d:4c:18:d5:7c:63:4f:3c:36:46:
         c1:91:cd:b7:69:ee:fd:77:25:df:14:4a:6d:5b:08:4c:b5:da:
         6f:b3:3e:a5:ff:f6:e8:df:fc:e0:48:d9:f4:94:32:da:5c:4a:
         f3:d3:ed:ad:7d:74:7c:8c:40:e6:47:90:48:e6:9f:a7:8e:20:
         a3:e6:72:1d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdN6y8MiCN+UkbvdGL8MzjtQ6sXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENCRTU3NEMxRUNGOURBNTE3QzZGQ0Q1NzQ1N0M0MDJE
RTc5RTE1MDAeFw0yNDA0MDQxMTE0MDdaFw0yNTA0MDMxMTE5MDdaMDMxMTAvBgNV
BAMTKEU3RTc4MjBDQjAyNkY1RkU0ODQwMTZGNEJBNzRFMkNGNDI0OEMxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVbUoK6xDJCQ7AywzsL+ZACvi
1B4flbpZe/qAMdNn5kcNac5wz++NssqXIsm5PHS3GmROgRD9szrQZ4dM29EuPk+K
fak9GakoLNFMl2IY24ueqmh4Xh2JBnNnUAMbJgdxyW8h371JvL5EyMrfoXEo6olz
g2gciiHSASaNySEeKgNRMvmpW7MHVBTRY52TtkxH7VJqCc8YkRAN/OmVUPybhDqf
Dqo/Z/ntdPcbYrog5DObA0AXkESlIB+RDn/qP0xWuvOuAA0EhVQpzfYg5wax/bAi
T4xgpjG7CcMjjMBqcjGCK3w4zsWGH9Yw41E3zg03tb20qOCpkBuYa4sucJ7PAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5+eCDLAm9f5IQBb0unTiz0JIwWEwHwYDVR0j
BBgwFoAUjL5XTB7PnaUXxvzVdFfEAt554VAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHZjQXg3VWtuTFpZakhkbUFIVlFoTHNBSDdHNmoyYlVkUzltTWF5dWti
NXQvMS84Q0JFNTc0QzFFQ0Y5REE1MTdDNkZDRDU3NDU3QzQwMkRFNzlFMTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQkU1NzRDMUVDRjlEQTUx
N0M2RkNENTc0NTdDNDAyREU3OUUxNTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R2Y0F4N1VrbkxaWWpIZG1BSFZRaExzQUg3RzZqMmJVZFM5bU1heXVrYjV0LzEv
MzIzODMwMzQzYTM0MzEzMjMwM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM2
MzAzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARBIDANBgkqhkiG9w0BAQsFAAOCAQEAwqwbmmfI
2w0A/B6xbFbLfwypa/LpVtWHoeWDkqIGWz0/l23EQmkdSzLeTR1oS9aYCFnmVGjF
3ryWfDSlbX+hqDnjvw8q5Bh/65fGN2ux709m43WjUlUVSyuICulHqM4gxi9SC1e4
n+TWgCHUucN0US7ws0YVUisi+qd1B4vRHFWlQac7V+c9uxHjl6m97xART02fN8QU
m4C5TyGe2yO0ndk7exXz+5fs04KampOCpETuoEhwappB/CP/URuNTBjVfGNPPDZG
wZHNt2nu/Xcl3xRKbVsITLXab7M+pf/26N/84EjZ9JQy2lxK89PtrX10fIxA5keQ
SOafp44go+ZyHQ==
-----END CERTIFICATE-----