Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/323830343a323964303a3a2f33322d3332203d3e20323634303336.roa
File:                     323830343a323964303a3a2f33322d3332203d3e20323634303336.roa (raw, json)
Hash identifier:          v8HscXVYpOtTYeXz724f4RDtr9Gi5bgX7kHJ2hRLfyQ=
Subject key identifier:   00:0E:CF:23:52:96:6F:7C:EC:D7:84:D8:28:8F:65:B4:E2:17:01:17
Certificate issuer:       /CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
Certificate serial:       094CB6E57737B63B44479998FC42A4EA54DB5BBD
Authority key identifier: B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/323830343a323964303a3a2f33322d3332203d3e20323634303336.roa
Signing time:             Thu 29 Jun 2023 14:18:40 +0000
ROA not before:           Thu 29 Jun 2023 14:13:40 +0000
ROA not after:            Thu 27 Jun 2024 14:18:40 +0000
asID:                     264036
IP address blocks:        2804:29d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4c:b6:e5:77:37:b6:3b:44:47:99:98:fc:42:a4:ea:54:db:5b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
        Validity
            Not Before: Jun 29 14:13:40 2023 GMT
            Not After : Jun 27 14:18:40 2024 GMT
        Subject: CN=000ECF2352966F7CECD784D8288F65B4E2170117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:9b:99:bd:89:bd:65:a6:df:fc:5c:9f:11:
                    7f:f5:75:9e:ac:29:e1:ec:0e:3a:86:b8:3e:52:33:
                    fa:98:2a:3d:48:66:64:cf:26:0e:f3:e4:a6:d8:3a:
                    29:13:db:95:8f:a2:6d:f0:7d:ce:c7:af:90:2e:16:
                    7d:82:bf:39:85:3c:22:20:91:52:31:81:94:dc:63:
                    56:ec:d9:1f:b7:df:c7:c2:f6:41:ec:0b:f6:15:c3:
                    f4:3d:b5:c0:e1:da:e9:0a:9a:b5:05:72:f9:1b:90:
                    3b:3c:8e:d7:f4:11:a3:74:cb:a3:9f:84:cf:f6:5d:
                    45:70:7f:a0:dc:5c:d6:0c:30:ac:1f:5d:3a:87:d7:
                    0d:7a:2f:88:d2:86:cf:82:63:9f:cb:e6:35:d6:6c:
                    70:c2:66:b2:07:3b:d0:bb:67:7a:9a:c5:6c:ac:5b:
                    ee:db:cd:d9:60:60:d8:25:50:8e:57:2a:68:2f:f5:
                    bd:56:49:a9:a6:f9:d9:cf:83:76:ff:1b:78:66:01:
                    2c:a8:62:2b:cb:24:31:a1:55:cf:32:53:12:76:f2:
                    6e:eb:a4:06:03:92:bb:46:ec:9d:12:70:7d:09:c9:
                    91:69:29:47:ba:a9:49:cf:d6:3c:52:3e:ab:2e:e3:
                    a5:86:6e:f3:57:14:f9:aa:14:cd:67:3a:07:8e:16:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:CF:23:52:96:6F:7C:EC:D7:84:D8:28:8F:65:B4:E2:17:01:17
            X509v3 Authority Key Identifier:
                keyid:B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/323830343a323964303a3a2f33322d3332203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:12:33:b1:d4:8f:a5:fb:7b:97:09:96:00:57:a4:12:82:d9:
         a1:9f:d0:e6:22:fd:b9:53:d5:0c:24:c3:23:91:03:88:c6:12:
         8a:61:23:38:05:fa:24:5d:68:e9:d1:4a:95:e7:83:c0:60:b6:
         0a:fa:b8:1c:bb:45:1c:51:25:58:4c:e3:24:8b:fc:4e:b9:f4:
         86:19:c7:67:db:1a:29:18:bf:a3:ef:a9:a7:41:6e:03:17:a1:
         f0:d0:8c:48:4b:fc:37:3a:5a:b6:95:ba:7b:00:0d:90:bc:bf:
         82:24:f5:4e:44:d5:1c:1b:8e:06:82:5a:d5:ae:9f:b6:4b:b9:
         38:bb:9d:dc:a6:43:10:81:11:a0:20:20:d7:0c:89:c2:34:76:
         14:ed:5a:ce:d6:36:3f:6f:1e:e3:3f:3b:08:b2:19:5b:08:81:
         88:5a:77:0d:59:7b:cc:8a:19:65:03:e5:2b:f1:e1:2b:25:85:
         a6:f3:0b:47:ed:93:de:c4:33:c1:ed:7d:54:7e:e4:f0:84:af:
         3d:5e:cd:e7:85:e2:07:2e:5c:b1:f3:13:4f:e3:ee:bf:03:88:
         2e:79:b6:f7:b2:db:e2:c7:12:86:b8:71:ee:ae:e1:10:7c:41:
         b8:9c:28:35:56:02:35:46:af:b2:b4:cc:13:e1:ec:40:6a:18:
         c8:5e:7a:ce
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCUy25Xc3tjtER5mY/EKk6lTbW70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBRDE5QjJFMzRENjAyODZERTcxQjE1RDUzRjRERUEz
NENCRTVFQTAeFw0yMzA2MjkxNDEzNDBaFw0yNDA2MjcxNDE4NDBaMDMxMTAvBgNV
BAMTKDAwMEVDRjIzNTI5NjZGN0NFQ0Q3ODREODI4OEY2NUI0RTIxNzAxMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuZuZvYm9Zabf/FyfEX/1dZ6s
KeHsDjqGuD5SM/qYKj1IZmTPJg7z5KbYOikT25WPom3wfc7Hr5AuFn2CvzmFPCIg
kVIxgZTcY1bs2R+338fC9kHsC/YVw/Q9tcDh2ukKmrUFcvkbkDs8jtf0EaN0y6Of
hM/2XUVwf6DcXNYMMKwfXTqH1w16L4jShs+CY5/L5jXWbHDCZrIHO9C7Z3qaxWys
W+7bzdlgYNglUI5XKmgv9b1WSamm+dnPg3b/G3hmASyoYivLJDGhVc8yUxJ28m7r
pAYDkrtG7J0ScH0JyZFpKUe6qUnP1jxSPqsu46WGbvNXFPmqFM1nOgeOFh63AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAA7PI1KWb3zs14TYKI9ltOIXARcwHwYDVR0j
BBgwFoAUsq0ZsuNNYCht5xsV1T9N6jTL5eowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JmVGhhbmliUDliZTQ1cFhxc3J6VE1KYkRtQmYxeW1ONDVDQkRRcm1u
eGIvMC9CMkFEMTlCMkUzNEQ2MDI4NkRFNzFCMTVENTNGNERFQTM0Q0JFNUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQUQxOUIyRTM0RDYwMjg2
REU3MUIxNUQ1M0Y0REVBMzRDQkU1RUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCZlRoYW5pYlA5YmU0NXBYcXNyelRNSmJEbUJmMXltTjQ1Q0JEUXJtbnhiLzAv
MzIzODMwMzQzYTMyMzk2NDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQp0DANBgkqhkiG9w0BAQsFAAOCAQEAxxIzsdSP
pft7lwmWAFekEoLZoZ/Q5iL9uVPVDCTDI5EDiMYSimEjOAX6JF1o6dFKleeDwGC2
Cvq4HLtFHFElWEzjJIv8Trn0hhnHZ9saKRi/o++pp0FuAxeh8NCMSEv8NzpatpW6
ewANkLy/giT1TkTVHBuOBoJa1a6ftku5OLud3KZDEIERoCAg1wyJwjR2FO1aztY2
P28e4z87CLIZWwiBiFp3DVl7zIoZZQPlK/HhKyWFpvMLR+2T3sQzwe19VH7k8ISv
PV7N54XiBy5csfMTT+PuvwOILnm297Lb4scShrhx7q7hEHxBuJwoNVYCNUavsrTM
E+HsQGoYyF56zg==
-----END CERTIFICATE-----