Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/323830343a316133303a3a2f33322d3438203d3e203631383434.roa
File:                     323830343a316133303a3a2f33322d3438203d3e203631383434.roa (raw, json)
Hash identifier:          JwfQ95bkEMQ4y3w0rVnqbXK8kO/WmzKqhVpyqjbspao=
Subject key identifier:   98:09:72:95:DA:4D:25:49:DC:0C:2F:A3:91:58:69:97:D8:E3:5D:0A
Certificate issuer:       /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial:       70F8AFC78D0000F285ECDF89C10E70A097C3E2A0
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/323830343a316133303a3a2f33322d3438203d3e203631383434.roa
Signing time:             Tue 23 Jul 2024 12:02:30 +0000
ROA not before:           Tue 23 Jul 2024 11:57:30 +0000
ROA not after:            Tue 22 Jul 2025 12:02:30 +0000
asID:                     61844
IP address blocks:        2804:1a30::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f8:af:c7:8d:00:00:f2:85:ec:df:89:c1:0e:70:a0:97:c3:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
        Validity
            Not Before: Jul 23 11:57:30 2024 GMT
            Not After : Jul 22 12:02:30 2025 GMT
        Subject: CN=98097295DA4D2549DC0C2FA391586997D8E35D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:1d:b2:74:d0:34:56:be:43:65:8a:71:03:
                    e9:4b:e5:b3:52:78:e9:e8:db:be:c7:c8:d0:e6:f3:
                    94:49:38:2f:5a:f6:8a:76:ba:71:c5:c7:c8:e3:da:
                    20:11:1b:d6:0f:03:d9:37:a6:43:32:f9:60:20:63:
                    6a:d0:c0:2b:74:fb:84:57:a9:cf:76:b8:1e:94:44:
                    10:04:c8:02:fb:0a:ce:57:50:29:f6:68:f1:16:c7:
                    47:fb:7e:53:97:fb:76:b2:f1:8f:b6:94:cf:a0:4e:
                    19:67:e8:3b:ba:72:62:bd:06:c0:ce:b6:6e:3c:3f:
                    dd:66:30:85:6c:b7:c5:a9:de:e5:96:46:9c:06:e0:
                    4f:af:98:50:f0:69:f6:05:02:fa:3a:bf:55:3c:fe:
                    5b:6d:81:83:03:f5:40:5a:12:84:88:2a:dd:61:4a:
                    8c:f4:b2:12:19:19:a2:fb:4e:0c:75:1f:96:13:4b:
                    3b:4c:ca:5c:bb:72:e8:bc:1b:b9:de:e9:33:9b:90:
                    c4:58:47:5f:15:bb:f5:d4:b0:ac:f2:bd:3e:e6:a8:
                    9c:62:67:68:75:d9:0a:f6:01:f2:13:c1:bc:8e:4f:
                    20:e1:e5:32:7f:14:9c:0f:c4:68:a8:24:41:e4:ae:
                    68:4f:b9:f8:bd:71:b1:37:15:28:27:09:e9:1b:88:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:09:72:95:DA:4D:25:49:DC:0C:2F:A3:91:58:69:97:D8:E3:5D:0A
            X509v3 Authority Key Identifier:
                keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/323830343a316133303a3a2f33322d3438203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:0b:0a:47:d1:9d:bb:bc:64:57:a2:35:a2:52:cc:1b:f0:
         81:fe:ad:db:25:46:c2:59:f4:d7:07:50:62:33:c9:be:bd:b7:
         75:9d:22:7e:aa:6a:f0:7b:d0:c6:81:51:b6:91:f8:60:29:9d:
         b2:4f:7e:12:9f:f7:4e:6a:37:d6:a4:5f:13:7d:f5:80:29:8e:
         4f:34:4e:e3:45:8a:fe:08:f3:23:36:ab:ae:d2:36:7f:d1:cd:
         62:59:81:d4:4c:b7:29:7a:b4:b6:f9:96:2e:2f:fb:b0:e1:b8:
         49:20:b7:6e:61:59:64:26:0c:4e:77:b7:17:14:45:cc:f2:d5:
         05:28:e5:b1:ce:2c:a3:b1:92:69:34:21:4f:7b:57:96:50:9d:
         34:e4:5e:c0:42:c6:a9:f3:12:37:94:a9:a1:80:f1:82:8a:d5:
         db:4f:4d:0a:2c:14:0c:95:5c:27:e9:b9:bd:96:5a:3f:97:b2:
         67:18:ea:30:d4:ae:c3:f1:aa:c8:e8:ca:6a:f2:62:0d:45:8f:
         2c:4a:f8:7a:34:a3:46:0d:2d:68:ed:43:8c:99:b1:1b:51:6f:
         b5:cb:b9:6c:dc:73:6c:5c:5c:3b:fb:33:c8:64:dc:8b:4a:62:
         28:24:d1:08:72:90:38:04:d6:df:a5:84:88:9b:6d:40:92:8b:
         ac:fa:4c:a9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcPivx40AAPKF7N+JwQ5woJfD4qAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNCODJCMzJDOUREODNDN0U3MkRCODhDMEY5MTMyNkQ5
RkNGMDFENjAeFw0yNDA3MjMxMTU3MzBaFw0yNTA3MjIxMjAyMzBaMDMxMTAvBgNV
BAMTKDk4MDk3Mjk1REE0RDI1NDlEQzBDMkZBMzkxNTg2OTk3RDhFMzVEMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8h2ydNA0Vr5DZYpxA+lL5bNS
eOno277HyNDm85RJOC9a9op2unHFx8jj2iARG9YPA9k3pkMy+WAgY2rQwCt0+4RX
qc92uB6URBAEyAL7Cs5XUCn2aPEWx0f7flOX+3ay8Y+2lM+gThln6Du6cmK9BsDO
tm48P91mMIVst8Wp3uWWRpwG4E+vmFDwafYFAvo6v1U8/lttgYMD9UBaEoSIKt1h
Soz0shIZGaL7Tgx1H5YTSztMyly7cui8G7ne6TObkMRYR18Vu/XUsKzyvT7mqJxi
Z2h12Qr2AfITwbyOTyDh5TJ/FJwPxGioJEHkrmhPufi9cbE3FSgnCekbiHhjAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUmAlyldpNJUncDC+jkVhpl9jjXQowHwYDVR0j
BBgwFoAUrLgrMsndg8fnLbiMD5EybZ/PAdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjRhZkNMeGtxSHc0c2pOaXNtVE1MNU01dTdUOXVMR0JZbkRtU0w1YTdx
WGYvMi9BQ0I4MkIzMkM5REQ4M0M3RTcyREI4OEMwRjkxMzI2RDlGQ0YwMUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDQjgyQjMyQzlERDgzQzdF
NzJEQjg4QzBGOTEzMjZEOUZDRjAxRDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y0YWZDTHhrcUh3NHNqTmlzbVRNTDVNNXU3VDl1TEdCWW5EbVNMNWE3cVhmLzIv
MzIzODMwMzQzYTMxNjEzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGjAwDQYJKoZIhvcNAQELBQADggEBAB5LCwpH0Z27
vGRXojWiUswb8IH+rdslRsJZ9NcHUGIzyb69t3WdIn6qavB70MaBUbaR+GApnbJP
fhKf905qN9akXxN99YApjk80TuNFiv4I8yM2q67SNn/RzWJZgdRMtyl6tLb5li4v
+7DhuEkgt25hWWQmDE53txcURczy1QUo5bHOLKOxkmk0IU97V5ZQnTTkXsBCxqnz
EjeUqaGA8YKK1dtPTQosFAyVXCfpub2WWj+XsmcY6jDUrsPxqsjoymryYg1FjyxK
+Ho0o0YNLWjtQ4yZsRtRb7XLuWzcc2xcXDv7M8hk3ItKYigk0QhykDgE1t+lhIib
bUCSi6z6TKk=
-----END CERTIFICATE-----