Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d3438203d3e203631373435.roa
File:                     323830343a316262383a3a2f33322d3438203d3e203631373435.roa (raw, json)
Hash identifier:          uwMZSv2gkmbcss8KjUSYvMMywcUC6kbXHV8zWyU9q6s=
Subject key identifier:   48:A3:0E:74:9A:56:AC:2D:97:B5:C3:CC:B4:31:CE:92:B7:0D:A4:8C
Certificate issuer:       /CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
Certificate serial:       40CDE0C69A4CCF0602A76AC1106D025EFDDC81F7
Authority key identifier: 57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d3438203d3e203631373435.roa
Signing time:             Wed 07 Jun 2023 17:14:42 +0000
ROA not before:           Wed 07 Jun 2023 17:09:42 +0000
ROA not after:            Wed 05 Jun 2024 17:14:42 +0000
asID:                     61745
IP address blocks:        2804:1bb8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cd:e0:c6:9a:4c:cf:06:02:a7:6a:c1:10:6d:02:5e:fd:dc:81:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
        Validity
            Not Before: Jun  7 17:09:42 2023 GMT
            Not After : Jun  5 17:14:42 2024 GMT
        Subject: CN=48A30E749A56AC2D97B5C3CCB431CE92B70DA48C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:70:42:22:76:2a:47:f6:a4:98:d7:b7:94:
                    34:60:e2:08:67:2f:23:e9:9f:81:d9:e7:51:a6:18:
                    6f:76:e6:0d:0a:68:f7:0e:a5:18:ff:1a:d5:c7:9c:
                    85:01:af:e7:1e:da:ea:79:fa:7f:ce:54:c0:1a:fe:
                    7c:6b:8a:1b:55:ae:0e:96:74:c1:c3:be:06:6a:da:
                    7c:6c:5c:13:df:8f:f0:cd:89:49:09:53:34:e9:a8:
                    e3:2d:48:0a:49:c7:fe:af:d3:f0:a1:9d:10:d9:2a:
                    41:7e:ce:50:db:f0:19:01:3e:61:38:a0:b5:e4:ec:
                    d2:e1:cf:f5:d8:78:08:ae:bf:cb:c3:0c:7a:cd:43:
                    56:2b:91:86:f4:33:aa:39:0b:67:f1:b7:3e:e3:ac:
                    6e:0b:4f:6e:fc:90:7a:c2:23:97:f8:de:90:01:a7:
                    63:73:ee:12:1f:08:13:44:c9:35:4a:05:dd:ef:3e:
                    c9:30:ce:a3:a0:c0:2e:a7:8d:64:5b:d0:63:9b:4f:
                    8b:5e:19:ee:d9:d4:1b:a8:4b:17:b9:39:49:1b:0b:
                    29:ae:bc:46:3e:7d:8a:01:64:a3:6c:88:ec:58:78:
                    f0:93:26:85:31:af:e1:a8:8b:c5:00:b0:07:4c:93:
                    eb:2b:97:06:d1:d7:f3:9c:62:65:42:d1:ec:3f:e7:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:0E:74:9A:56:AC:2D:97:B5:C3:CC:B4:31:CE:92:B7:0D:A4:8C
            X509v3 Authority Key Identifier:
                keyid:57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/323830343a316262383a3a2f33322d3438203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:e1:f0:0f:d5:ca:26:82:77:8c:a0:63:0f:2e:25:6b:bd:
         51:d6:cc:c9:22:c6:c7:34:39:ef:90:04:b2:c5:69:88:db:c3:
         37:21:ea:72:4c:fe:e8:49:cb:d4:03:f8:9e:45:13:2d:c6:d0:
         4a:94:ea:04:b9:41:3f:7a:93:25:4b:ed:3f:e0:ee:37:11:73:
         dd:6c:8e:64:78:28:c6:cd:76:25:86:da:cc:ad:24:aa:4e:29:
         8d:d4:b7:fc:3a:95:f4:99:f9:34:03:e3:5f:07:4c:6f:17:87:
         62:34:e3:c2:36:1d:07:e4:c7:e7:c0:21:50:4b:3e:80:69:19:
         05:1c:9b:7c:d5:39:41:78:fb:1b:96:71:47:ec:6d:3a:6f:f0:
         7e:63:10:9c:98:42:ef:1c:5e:97:e8:fa:c5:de:bd:76:b6:d5:
         40:7b:e8:a7:3c:73:ee:62:cf:2f:10:39:e8:d9:c2:c1:d0:34:
         3e:6e:b4:7b:b7:a4:45:14:fc:73:ad:32:89:18:97:af:11:6c:
         99:5d:28:f7:4e:c3:ae:e2:9f:2e:f1:d4:e9:ac:89:e2:11:79:
         fc:75:a2:28:1f:fd:2c:50:0c:3e:88:5a:2f:a4:0a:6b:3a:d4:
         5e:92:ac:df:b9:c2:af:5c:4d:3c:08:71:6f:dd:4d:6b:cc:ef:
         d6:c7:55:fa
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQM3gxppMzwYCp2rBEG0CXv3cgfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCQkYwRkU2RjQ1QzMyMUU0QTJDMjFDMEIzNjgyQTdF
OEZEMTQ2NTAeFw0yMzA2MDcxNzA5NDJaFw0yNDA2MDUxNzE0NDJaMDMxMTAvBgNV
BAMTKDQ4QTMwRTc0OUE1NkFDMkQ5N0I1QzNDQ0I0MzFDRTkyQjcwREE0OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUHBCInYqR/akmNe3lDRg4ghn
LyPpn4HZ51GmGG925g0KaPcOpRj/GtXHnIUBr+ce2up5+n/OVMAa/nxrihtVrg6W
dMHDvgZq2nxsXBPfj/DNiUkJUzTpqOMtSApJx/6v0/ChnRDZKkF+zlDb8BkBPmE4
oLXk7NLhz/XYeAiuv8vDDHrNQ1YrkYb0M6o5C2fxtz7jrG4LT278kHrCI5f43pAB
p2Nz7hIfCBNEyTVKBd3vPskwzqOgwC6njWRb0GObT4teGe7Z1BuoSxe5OUkbCymu
vEY+fYoBZKNsiOxYePCTJoUxr+Goi8UAsAdMk+srlwbR1/OcYmVC0ew/57OXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUSKMOdJpWrC2XtcPMtDHOkrcNpIwwHwYDVR0j
BBgwFoAUV7vw/m9FwyHkosIcCzaCp+j9FGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgx
NGcvMC81N0JCRjBGRTZGNDVDMzIxRTRBMkMyMUMwQjM2ODJBN0U4RkQxNDY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3QkJGMEZFNkY0NUMzMjFF
NEEyQzIxQzBCMzY4MkE3RThGRDE0NjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4Q1Q4RWtRU25FcndVUjlhdjFoMXVjUFVRSmhxVG53VEY5YTg3NDRoMTRnLzAv
MzIzODMwMzQzYTMxNjI2MjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM3
MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEG7gwDQYJKoZIhvcNAQELBQADggEBAJbD4fAP1com
gneMoGMPLiVrvVHWzMkixsc0Oe+QBLLFaYjbwzch6nJM/uhJy9QD+J5FEy3G0EqU
6gS5QT96kyVL7T/g7jcRc91sjmR4KMbNdiWG2sytJKpOKY3Ut/w6lfSZ+TQD418H
TG8Xh2I048I2HQfkx+fAIVBLPoBpGQUcm3zVOUF4+xuWcUfsbTpv8H5jEJyYQu8c
Xpfo+sXevXa21UB76Kc8c+5izy8QOejZwsHQND5utHu3pEUU/HOtMokYl68RbJld
KPdOw67iny7x1OmsieIRefx1oigf/SxQDD6IWi+kCms61F6SrN+5wq9cTTwIcW/d
TWvM79bHVfo=
-----END CERTIFICATE-----