Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa
File:                     323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa (raw, json)
Hash identifier:          xlLFfOcGPopkBBeXRIebOHOQ+G6+TYpDrGHHDbqVLis=
Subject key identifier:   68:25:D2:B4:D6:ED:BF:6A:B4:42:D9:B2:75:E3:91:50:06:41:30:08
Certificate issuer:       /CN=755EF99A8BA2C7F836F67C1F5471E77A126358BA
Certificate serial:       746683C8E3AF7566265E51D79358D6D3E578D874
Authority key identifier: 75:5E:F9:9A:8B:A2:C7:F8:36:F6:7C:1F:54:71:E7:7A:12:63:58:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa
Signing time:             Wed 12 Jul 2023 11:37:00 +0000
ROA not before:           Wed 12 Jul 2023 11:32:00 +0000
ROA not after:            Wed 10 Jul 2024 11:37:00 +0000
asID:                     263486
IP address blocks:        2804:1298:4000::/35 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:66:83:c8:e3:af:75:66:26:5e:51:d7:93:58:d6:d3:e5:78:d8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755EF99A8BA2C7F836F67C1F5471E77A126358BA
        Validity
            Not Before: Jul 12 11:32:00 2023 GMT
            Not After : Jul 10 11:37:00 2024 GMT
        Subject: CN=6825D2B4D6EDBF6AB442D9B275E3915006413008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d9:a3:89:bf:24:f6:7d:c4:3d:c6:d9:05:f4:
                    eb:38:d5:88:67:ff:7a:70:85:8f:38:95:5d:11:53:
                    2f:a9:92:9f:d4:77:8b:ae:29:28:f6:b9:43:1d:57:
                    3c:f5:28:70:7b:0f:44:ac:c0:47:45:f5:36:7e:80:
                    30:75:95:23:be:a7:1c:b3:c9:49:3a:37:2f:f1:26:
                    dd:15:51:02:e5:3f:46:2b:73:11:26:6d:45:50:0a:
                    46:13:06:20:b5:a6:c7:38:4d:ae:fd:0a:35:65:99:
                    3f:29:52:40:68:78:b6:e4:c8:a0:59:9e:10:7a:11:
                    dd:f6:ee:44:73:6a:ec:7c:2c:c8:77:1b:aa:b9:36:
                    a8:36:e2:0a:ff:d6:97:95:97:c2:d6:eb:57:02:bd:
                    37:18:ff:c0:d8:24:a3:8f:76:e5:bf:42:2f:28:71:
                    58:3a:5a:c7:18:a3:d8:e2:e0:1c:ee:6f:4e:84:e5:
                    39:1f:eb:f3:57:75:07:5e:95:3f:63:62:ee:ee:a2:
                    02:70:bb:1e:5c:84:43:ce:b9:f5:c6:d9:84:d4:5a:
                    38:26:bf:f8:76:b2:16:1a:46:91:de:67:7d:e0:a5:
                    99:4d:31:c3:7b:9b:2d:c9:8a:4f:65:32:ec:49:d3:
                    5e:24:90:1a:78:8c:88:05:67:a2:5f:57:65:fb:ff:
                    93:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:25:D2:B4:D6:ED:BF:6A:B4:42:D9:B2:75:E3:91:50:06:41:30:08
            X509v3 Authority Key Identifier:
                keyid:75:5E:F9:9A:8B:A2:C7:F8:36:F6:7C:1F:54:71:E7:7A:12:63:58:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/755EF99A8BA2C7F836F67C1F5471E77A126358BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1298:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         03:f0:ff:81:2d:ec:53:0b:5f:0a:8c:2a:c5:95:a1:5b:3e:9d:
         ea:92:cf:10:f6:1c:33:5d:3a:c3:8b:02:4f:a8:c4:5c:d5:24:
         ab:d6:89:49:e3:45:03:bc:5f:d0:15:0f:44:52:91:ab:2c:70:
         92:ae:87:28:0e:a1:26:c1:5d:43:c6:24:ec:8e:f4:d7:6c:05:
         5a:d1:8a:e5:2c:3e:7c:9a:ea:f6:3a:0a:c9:d6:c4:aa:de:21:
         32:62:74:14:9f:14:0e:4b:7c:b5:84:34:a9:4b:22:3f:7f:78:
         d2:3d:85:72:3a:12:20:3e:e6:1f:3b:28:67:e0:34:b2:0c:f8:
         f3:79:98:04:32:20:d0:7c:1f:b0:99:42:9d:4e:5c:dc:db:f1:
         82:3f:b6:d8:94:6c:c2:25:6c:c1:6a:16:8e:5a:97:19:69:2e:
         cb:3b:5d:cc:86:de:25:46:82:be:34:4e:22:c6:cf:75:3a:00:
         b3:72:88:68:21:9c:ae:89:3b:e1:1b:64:2d:06:0d:7f:7d:5e:
         80:d3:cc:d6:f9:46:3a:1b:39:9b:92:e8:ac:8e:1e:b1:39:98:
         8c:6f:95:8d:78:47:9c:5f:98:d3:8e:48:d5:09:dd:f7:bb:e9:
         81:78:0e:72:4a:70:01:75:ae:c2:c3:70:da:f0:9c:9f:e2:44:
         1b:e1:2b:f1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdGaDyOOvdWYmXlHXk1jW0+V42HQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU1RUY5OUE4QkEyQzdGODM2RjY3QzFGNTQ3MUU3N0Ex
MjYzNThCQTAeFw0yMzA3MTIxMTMyMDBaFw0yNDA3MTAxMTM3MDBaMDMxMTAvBgNV
BAMTKDY4MjVEMkI0RDZFREJGNkFCNDQyRDlCMjc1RTM5MTUwMDY0MTMwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo2aOJvyT2fcQ9xtkF9Os41Yhn
/3pwhY84lV0RUy+pkp/Ud4uuKSj2uUMdVzz1KHB7D0SswEdF9TZ+gDB1lSO+pxyz
yUk6Ny/xJt0VUQLlP0YrcxEmbUVQCkYTBiC1psc4Ta79CjVlmT8pUkBoeLbkyKBZ
nhB6Ed327kRzaux8LMh3G6q5Nqg24gr/1peVl8LW61cCvTcY/8DYJKOPduW/Qi8o
cVg6WscYo9ji4Bzub06E5Tkf6/NXdQdelT9jYu7uogJwux5chEPOufXG2YTUWjgm
v/h2shYaRpHeZ33gpZlNMcN7my3Jik9lMuxJ014kkBp4jIgFZ6JfV2X7/5N9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUaCXStNbtv2q0QtmydeORUAZBMAgwHwYDVR0j
BBgwFoAUdV75mouix/g29nwfVHHnehJjWLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkz
ZmEvMC83NTVFRjk5QThCQTJDN0Y4MzZGNjdDMUY1NDcxRTc3QTEyNjM1OEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc1NUVGOTlBOEJBMkM3Rjgz
NkY2N0MxRjU0NzFFNzdBMTI2MzU4QkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGVEhkTGE3M3VKZlRwNURhUmE1bkh3TGN4UkJpTURmb2dxVHczN25pM2ZhLzAv
MzIzODMwMzQzYTMxMzIzOTM4M2EzNDMwMzAzMDNhM2EyZjMzMzUyZDM0MzgyMDNk
M2UyMDMyMzYzMzM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEEphAMA0GCSqGSIb3DQEBCwUA
A4IBAQAD8P+BLexTC18KjCrFlaFbPp3qks8Q9hwzXTrDiwJPqMRc1SSr1olJ40UD
vF/QFQ9EUpGrLHCSrocoDqEmwV1DxiTsjvTXbAVa0YrlLD58mur2OgrJ1sSq3iEy
YnQUnxQOS3y1hDSpSyI/f3jSPYVyOhIgPuYfOyhn4DSyDPjzeZgEMiDQfB+wmUKd
Tlzc2/GCP7bYlGzCJWzBahaOWpcZaS7LO13Mht4lRoK+NE4ixs91OgCzcohoIZyu
iTvhG2QtBg1/fV6A08zW+UY6Gzmbkuisjh6xOZiMb5WNeEecX5jTjkjVCd33u+mB
eA5ySnABda7Cw3Da8Jyf4kQb4Svx
-----END CERTIFICATE-----