Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a3a2f33322d3332203d3e203532393430.roa
File:                     323830343a313432343a3a2f33322d3332203d3e203532393430.roa (raw, json)
Hash identifier:          VqMPhiPfLM1G+79Vy4HgkP9LTwvmvl+RQ5i4j7AuY4o=
Subject key identifier:   55:A0:3C:59:CE:D9:BC:4A:D3:92:1C:07:E0:11:B9:05:F6:14:B8:68
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       6D2A3B858E7244A492B4520B5FD73AB885F778FD
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a3a2f33322d3332203d3e203532393430.roa
Signing time:             Tue 22 Aug 2023 18:26:34 +0000
ROA not before:           Tue 22 Aug 2023 18:21:34 +0000
ROA not after:            Tue 20 Aug 2024 18:26:34 +0000
asID:                     52940
IP address blocks:        2804:1424::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2a:3b:85:8e:72:44:a4:92:b4:52:0b:5f:d7:3a:b8:85:f7:78:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:21:34 2023 GMT
            Not After : Aug 20 18:26:34 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:67:44:00:2f:8d:3b:92:a4:f9:e9:12:21:
                    6e:5a:96:49:bf:55:1f:61:0c:a8:5d:59:92:fa:11:
                    9b:f1:3e:15:69:e8:e5:ca:62:9d:a1:be:6a:de:04:
                    ff:e4:67:61:26:d0:b3:e6:43:d1:2d:f0:58:ff:84:
                    d2:51:b0:22:23:46:9e:ce:0b:f2:1c:26:47:27:94:
                    f8:35:49:40:1f:20:30:b3:11:56:c6:48:73:de:85:
                    f2:5f:c7:b4:4b:41:b8:07:3d:fa:9b:e4:2e:9c:c5:
                    c3:d7:84:76:77:53:6d:e6:12:94:6e:70:16:45:fa:
                    49:11:f2:9c:2f:fa:77:6c:2f:c7:b4:25:9e:5f:b5:
                    05:b8:a5:5c:a0:70:05:70:cb:ed:19:d1:8f:17:77:
                    aa:f6:83:e7:cf:0f:a4:63:4e:2f:c0:d8:3d:b3:46:
                    76:13:9a:59:87:0a:ac:34:3f:24:3b:ad:e1:88:a2:
                    a6:98:69:e7:27:38:fa:06:6f:31:c9:6a:ad:a2:30:
                    39:0c:84:75:3e:53:33:d2:b3:f9:2a:7f:e7:1a:2f:
                    34:6f:a5:2b:ad:4f:2c:42:45:57:5b:07:60:32:1f:
                    00:6e:49:1b:30:c1:73:a2:26:d6:8f:a2:ba:f2:3b:
                    c8:a5:93:b4:5b:29:90:e2:32:57:4d:4b:f7:2e:fb:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A0:3C:59:CE:D9:BC:4A:D3:92:1C:07:E0:11:B9:05:F6:14:B8:68
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/323830343a313432343a3a2f33322d3332203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1424::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:d8:80:b5:11:44:ea:b4:12:61:a3:65:ee:b5:31:52:26:55:
         a3:3e:cb:31:13:5a:eb:17:6b:f6:8d:a7:bf:96:2c:9b:a6:2f:
         5b:a6:da:87:f0:9f:ec:6d:7c:0c:3e:e3:14:86:d7:55:82:c2:
         e0:a5:50:98:5e:a4:c5:97:02:6f:17:6e:07:53:98:0a:6c:3a:
         c8:eb:13:45:bb:07:f7:44:34:cf:c6:31:48:5b:4a:58:1b:08:
         c4:f7:47:7f:3f:b6:35:e1:7b:cf:26:af:4d:14:f3:a2:f2:aa:
         88:84:94:25:9f:ab:ea:9a:32:7e:1b:83:80:12:23:13:4f:16:
         17:d5:83:9b:45:9d:ba:9f:3e:a4:db:42:99:64:2c:a8:cc:d6:
         b9:a6:2c:24:71:4f:d2:09:82:a9:5e:bd:e0:e2:14:2a:56:e3:
         fb:65:65:69:0e:cd:45:e8:b5:ee:36:b4:59:c0:d9:a5:01:18:
         1a:df:65:e9:bb:e4:8d:aa:8c:c2:2e:5f:74:aa:cb:af:fb:50:
         35:0b:f0:b8:f7:c4:2d:70:ec:a1:b5:00:a4:d9:86:5a:f8:45:
         b6:2a:7d:97:a8:22:18:43:52:4b:3e:5e:aa:da:2d:39:64:ca:
         ad:f7:3d:ed:fa:9e:35:ee:76:0d:df:e6:a6:66:42:97:12:35:
         0a:a8:b2:97
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUbSo7hY5yRKSStFILX9c6uIX3eP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNEODgzMDNDRTJFODk3RDM0RkMyMDc3MzM3NTkwODA1
MEZCMjk5RTAeFw0yMzA4MjIxODIxMzRaFw0yNDA4MjAxODI2MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M4MTY3NDQwMDJGOEQzQjky
QTRGOUU5MTIyMTZFNUE5NjQ5QkY1NTFGNjEwQ0E4NUQ1OTkyRkExMTlCRjEzRTE1
NjlFOEU1Q0E2MjlEQTFCRTZBREUwNEZGRTQ2NzYxMjZEMEIzRTY0M0QxMkRGMDU4
RkY4NEQyNTFCMDIyMjM0NjlFQ0UwQkYyMUMyNjQ3Mjc5NEY4MzU0OTQwMUYyMDMw
QjMxMTU2QzY0ODczREU4NUYyNUZDN0I0NEI0MUI4MDczREZBOUJFNDJFOUNDNUMz
RDc4NDc2Nzc1MzZERTYxMjk0NkU3MDE2NDVGQTQ5MTFGMjlDMkZGQTc3NkMyRkM3
QjQyNTlFNUZCNTA1QjhBNTVDQTA3MDA1NzBDQkVEMTlEMThGMTc3N0FBRjY4M0U3
Q0YwRkE0NjM0RTJGQzBEODNEQjM0Njc2MTM5QTU5ODcwQUFDMzQzRjI0M0JBREUx
ODhBMkE2OTg2OUU3MjczOEZBMDY2RjMxQzk2QUFEQTIzMDM5MEM4NDc1M0U1MzMz
RDJCM0Y5MkE3RkU3MUEyRjM0NkZBNTJCQUQ0RjJDNDI0NTU3NUIwNzYwMzIxRjAw
NkU0OTFCMzBDMTczQTIyNkQ2OEZBMkJBRjIzQkM4QTU5M0I0NUIyOTkwRTIzMjU3
NEQ0QkY3MkVGQjVCMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzIFnRAAvjTuSpPnpEiFuWpZJv1UfYQyoXVmS+hGb8T4VaejlymKd
ob5q3gT/5GdhJtCz5kPRLfBY/4TSUbAiI0aezgvyHCZHJ5T4NUlAHyAwsxFWxkhz
3oXyX8e0S0G4Bz36m+QunMXD14R2d1Nt5hKUbnAWRfpJEfKcL/p3bC/HtCWeX7UF
uKVcoHAFcMvtGdGPF3eq9oPnzw+kY04vwNg9s0Z2E5pZhwqsND8kO63hiKKmmGnn
Jzj6Bm8xyWqtojA5DIR1PlMz0rP5Kn/nGi80b6UrrU8sQkVXWwdgMh8AbkkbMMFz
oibWj6K68jvIpZO0WymQ4jJXTUv3LvtbAwIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FFWgPFnO2bxK05IcB+ARuQX2FLhoMB8GA1UdIwQYMBaAFLzYgwPOLol9NPwgdzN1
kIBQ+ymeMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y0YWZDTHhrcUh3NHNq
TmlzbVRNTDVNNXU3VDl1TEdCWW5EbVNMNWE3cVhmLzAvQkNEODgzMDNDRTJFODk3
RDM0RkMyMDc3MzM3NTkwODA1MEZCMjk5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQ0Q4ODMwM0NFMkU4OTdEMzRGQzIwNzczMzc1OTA4MDUwRkIy
OTlFLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GNGFmQ0x4a3FIdzRzak5pc21U
TUw1TTV1N1Q5dUxHQlluRG1TTDVhN3FYZi8wLzMyMzgzMDM0M2EzMTM0MzIzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzOTM0MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBBQk
MA0GCSqGSIb3DQEBCwUAA4IBAQC92IC1EUTqtBJho2XutTFSJlWjPssxE1rrF2v2
jae/liybpi9bptqH8J/sbXwMPuMUhtdVgsLgpVCYXqTFlwJvF24HU5gKbDrI6xNF
uwf3RDTPxjFIW0pYGwjE90d/P7Y14XvPJq9NFPOi8qqIhJQln6vqmjJ+G4OAEiMT
TxYX1YObRZ26nz6k20KZZCyozNa5piwkcU/SCYKpXr3g4hQqVuP7ZWVpDs1F6LXu
NrRZwNmlARga32Xpu+SNqozCLl90qsuv+1A1C/C498QtcOyhtQCk2YZa+EW2Kn2X
qCIYQ1JLPl6q2i05ZMqt9z3t+p417nYN3+amZkKXEjUKqLKX
-----END CERTIFICATE-----