Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a383030303a3a2f33332d3333203d3e20323633333834.roa
File:                     323830343a313535343a383030303a3a2f33332d3333203d3e20323633333834.roa (raw, json)
Hash identifier:          NB3QhbJ5XHQJMCiredvvrA9hXPhXMCBMY8tvdZcBIwE=
Subject key identifier:   DC:65:2D:43:F6:4D:46:56:07:8C:AA:69:81:C2:74:14:7A:1E:00:E7
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       51282F9C97DA982381C5FFA30BEA7FA3829CF2D2
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a383030303a3a2f33332d3333203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:11 +0000
ROA not before:           Thu 23 Nov 2023 20:06:11 +0000
ROA not after:            Thu 21 Nov 2024 20:11:11 +0000
asID:                     263384
IP address blocks:        2804:1554:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:28:2f:9c:97:da:98:23:81:c5:ff:a3:0b:ea:7f:a3:82:9c:f2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:11 2023 GMT
            Not After : Nov 21 20:11:11 2024 GMT
        Subject: CN=DC652D43F64D4656078CAA6981C274147A1E00E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:a7:c7:fe:2b:00:37:59:8d:81:18:06:9e:
                    7b:06:4a:3a:2a:3e:7d:9c:a2:20:5e:69:a2:f8:fa:
                    6e:37:73:82:13:96:f8:35:09:8f:66:6b:2a:7e:43:
                    95:e8:11:75:bd:13:f6:9a:2d:c7:b5:5b:0d:82:96:
                    5a:3b:1b:8c:26:f1:d2:61:c8:2d:8e:28:10:a7:6a:
                    cd:e2:3e:8d:66:e4:fd:ea:b3:67:8d:50:5d:78:a6:
                    98:31:9b:95:dc:77:55:2b:13:da:c8:38:55:f7:df:
                    44:03:bf:4e:ce:18:4c:8f:c2:b0:98:01:8c:88:1f:
                    f5:75:e6:e3:23:ec:44:4b:44:5c:0c:64:ef:8d:32:
                    81:48:d4:d9:ee:62:fc:08:46:7a:19:3a:6c:3e:a3:
                    71:e4:4c:bf:bb:15:74:5c:d2:98:9b:fc:d7:a6:50:
                    b7:bd:1a:3e:e5:98:e2:73:8e:8f:b0:fc:11:b9:ea:
                    2f:f0:c9:44:2a:11:b8:b6:ad:3b:ff:bb:e0:94:c3:
                    e1:a6:d8:79:e3:dd:12:aa:a0:67:69:7a:b6:99:c9:
                    df:ea:d3:0a:c4:8d:fb:55:7d:2e:1e:cc:c3:79:57:
                    57:7a:99:89:d7:cf:6b:4f:d3:a3:08:32:12:82:39:
                    ea:14:10:f5:4a:10:53:29:32:12:56:15:9a:ef:4c:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:2D:43:F6:4D:46:56:07:8C:AA:69:81:C2:74:14:7A:1E:00:E7
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/323830343a313535343a383030303a3a2f33332d3333203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1554:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:7f:2c:e4:93:a4:1b:7e:90:f4:d6:1a:ca:eb:91:54:8c:c3:
         32:c1:3f:f1:c9:c4:ab:56:42:13:38:8c:71:ce:f0:93:62:8a:
         2d:8c:50:2b:ae:d0:9c:a7:bd:f1:99:d4:9e:91:82:84:1c:63:
         1c:33:c2:ed:d3:84:6e:c4:69:d1:6f:17:11:5c:95:3e:90:9d:
         fb:ed:27:a9:1e:5e:7b:51:54:a4:d0:85:16:db:c6:c3:c1:3c:
         9f:62:f3:fc:e8:58:98:54:ed:9a:97:bd:0b:2b:d3:ad:78:fb:
         e3:80:03:5e:30:38:03:30:b2:20:2e:d3:cd:e2:99:c7:e8:82:
         53:dc:26:8a:de:8f:d4:92:e8:cd:4e:7e:d1:0c:52:0f:e2:0a:
         f8:d3:35:be:73:9c:26:0d:5a:5b:4b:9c:fe:69:6b:c9:f7:d6:
         ab:0c:af:3f:ca:1a:01:18:9d:05:ad:81:ce:a5:0a:d6:c7:67:
         8e:a8:30:bf:98:87:b8:db:dc:f2:ba:54:65:c1:73:91:f3:44:
         e8:fa:59:f0:dc:0f:61:70:a7:a1:cf:1e:c8:5c:b8:a4:a1:3a:
         5d:75:20:3c:36:50:2e:8a:8c:65:4c:e9:e3:59:11:33:12:f5:
         f1:ba:32:0c:a4:d3:13:e9:ec:4f:d4:4a:d1:bd:9e:5f:5b:38:
         be:07:38:13
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUSgvnJfamCOBxf+jC+p/o4Kc8tIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwNjlFOEU2ODc1OUQ3RTkyQ0E3MDcxMTYxOUVBNERD
NEUyNzcyMTAeFw0yMzExMjMyMDA2MTFaFw0yNDExMjEyMDExMTFaMDMxMTAvBgNV
BAMTKERDNjUyRDQzRjY0RDQ2NTYwNzhDQUE2OTgxQzI3NDE0N0ExRTAwRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZafH/isAN1mNgRgGnnsGSjoq
Pn2coiBeaaL4+m43c4ITlvg1CY9mayp+Q5XoEXW9E/aaLce1Ww2Cllo7G4wm8dJh
yC2OKBCnas3iPo1m5P3qs2eNUF14ppgxm5Xcd1UrE9rIOFX330QDv07OGEyPwrCY
AYyIH/V15uMj7ERLRFwMZO+NMoFI1NnuYvwIRnoZOmw+o3HkTL+7FXRc0pib/Nem
ULe9Gj7lmOJzjo+w/BG56i/wyUQqEbi2rTv/u+CUw+Gm2Hnj3RKqoGdperaZyd/q
0wrEjftVfS4ezMN5V1d6mYnXz2tP06MIMhKCOeoUEPVKEFMpMhJWFZrvTNWtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3GUtQ/ZNRlYHjKppgcJ0FHoeAOcwHwYDVR0j
BBgwFoAUQgaejmh1nX6SynBxFhnqTcTidyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMC80MjA2OUU4RTY4NzU5RDdFOTJDQTcwNzExNjE5RUE0REM0RTI3NzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMDY5RThFNjg3NTlEN0U5
MkNBNzA3MTE2MTlFQTREQzRFMjc3MjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQV1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzAv
MzIzODMwMzQzYTMxMzUzNTM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMzMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEFVSAMA0GCSqGSIb3DQEBCwUA
A4IBAQC0fyzkk6QbfpD01hrK65FUjMMywT/xycSrVkITOIxxzvCTYootjFArrtCc
p73xmdSekYKEHGMcM8Lt04RuxGnRbxcRXJU+kJ377SepHl57UVSk0IUW28bDwTyf
YvP86FiYVO2al70LK9OtePvjgANeMDgDMLIgLtPN4pnH6IJT3CaK3o/UkujNTn7R
DFIP4gr40zW+c5wmDVpbS5z+aWvJ99arDK8/yhoBGJ0FrYHOpQrWx2eOqDC/mIe4
29zyulRlwXOR80To+lnw3A9hcKehzx7IXLikoTpddSA8NlAuioxlTOnjWREzEvXx
ujIMpNMT6exP1ErRvZ5fWzi+BzgT
-----END CERTIFICATE-----