Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/323830343a313437303a3a2f33322d3332203d3e203131393231.roa
File:                     323830343a313437303a3a2f33322d3332203d3e203131393231.roa (raw, json)
Hash identifier:          To1gpp74kpK0uqUE9kRP7M4WfLkU2AguPztSWgz1I3E=
Subject key identifier:   7A:B7:BE:F4:74:44:5F:D2:55:FF:30:71:08:2D:41:CA:95:09:B8:DD
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       302B1DDAD9767FE8B61F74CDA8838409E30CA83D
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/323830343a313437303a3a2f33322d3332203d3e203131393231.roa
Signing time:             Fri 05 Apr 2024 13:42:01 +0000
ROA not before:           Fri 05 Apr 2024 13:37:01 +0000
ROA not after:            Fri 04 Apr 2025 13:42:01 +0000
asID:                     11921
IP address blocks:        2804:1470::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2b:1d:da:d9:76:7f:e8:b6:1f:74:cd:a8:83:84:09:e3:0c:a8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Apr  5 13:37:01 2024 GMT
            Not After : Apr  4 13:42:01 2025 GMT
        Subject: CN=7AB7BEF474445FD255FF3071082D41CA9509B8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:45:6f:cf:53:5d:bf:bf:a6:4a:e6:f6:cb:
                    ef:b2:32:0d:7f:16:93:b8:de:a2:79:60:01:a8:ba:
                    e3:dc:66:0c:25:b2:22:a1:6b:ea:e8:df:04:29:80:
                    c3:c0:5d:7a:49:28:9f:37:0e:e4:d9:35:d5:0e:ad:
                    7c:d0:ad:51:60:3c:77:b8:f5:ff:cd:65:23:c9:6e:
                    1c:da:7a:1b:ec:e3:f5:ce:49:fc:4d:0b:3d:61:72:
                    b8:a0:77:31:02:8c:0c:ee:6c:57:6d:94:1a:18:db:
                    29:61:42:57:55:92:13:34:36:c6:57:87:f0:cb:31:
                    85:2c:64:80:82:16:ff:45:2b:3f:03:8b:20:98:b1:
                    95:85:b7:2d:f9:67:5e:51:fc:ba:9f:e9:f4:92:8a:
                    f9:87:1b:d0:47:0d:22:50:ac:6f:09:76:a4:66:9d:
                    cd:8f:6d:1c:07:0e:87:66:6d:1e:12:79:e7:43:56:
                    0b:66:f6:2e:df:17:90:ac:a1:45:a8:d3:4b:0f:a3:
                    54:82:4f:1b:77:a3:18:83:c4:84:45:c5:8c:27:70:
                    72:4b:3e:b1:fe:a5:f0:79:6b:0c:e8:6c:04:09:ba:
                    f9:84:e3:dc:81:4d:b8:cc:9f:9b:9e:bd:91:92:12:
                    2e:b5:70:99:7d:ea:a8:04:04:5a:a0:95:ab:4e:97:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B7:BE:F4:74:44:5F:D2:55:FF:30:71:08:2D:41:CA:95:09:B8:DD
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/323830343a313437303a3a2f33322d3332203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1470::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:62:23:c8:17:fa:39:87:32:f3:17:7f:7d:55:ea:8a:98:bb:
         4c:34:f4:7f:25:a1:27:5b:11:6d:e7:08:b3:a5:68:db:17:82:
         92:b5:bc:c6:65:7b:7c:be:27:19:35:c1:70:8d:1d:26:49:14:
         4c:a4:e7:06:0b:93:48:e1:58:83:f3:6e:94:4f:e5:4d:bf:36:
         3b:02:3c:69:ab:be:af:3b:c4:9a:88:36:df:48:1a:8b:0c:1d:
         0c:16:46:69:ab:88:84:02:32:fd:75:43:38:58:e8:ef:c9:a4:
         5f:ec:81:08:38:02:76:8a:81:12:20:b1:7b:29:bc:22:b7:5f:
         a6:0b:3e:90:7c:7b:96:6f:e5:25:0b:8e:5d:35:0f:d7:d3:03:
         15:a2:14:64:f8:e9:4f:4b:0e:f1:0c:ab:34:aa:83:9c:94:95:
         97:36:8d:a6:37:88:2e:a9:c6:78:72:fd:77:57:8f:f7:a1:4d:
         a1:db:2a:51:b6:61:d0:54:e2:9a:a7:11:f3:04:6e:b5:23:b3:
         98:76:28:40:cb:83:64:ec:6b:f9:33:4a:f3:6b:54:41:35:49:
         d7:72:0e:d7:73:5a:30:d8:dc:4b:9b:c7:8f:30:39:d9:51:10:
         19:8c:0e:0b:af:4d:8d:43:64:72:44:ab:45:ca:80:38:91:bb:
         b7:bf:56:25
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUMCsd2tl2f+i2H3TNqIOECeMMqD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDA0MDUxMzM3MDFaFw0yNTA0MDQxMzQyMDFaMDMxMTAvBgNV
BAMTKDdBQjdCRUY0NzQ0NDVGRDI1NUZGMzA3MTA4MkQ0MUNBOTUwOUI4REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+0Vvz1Ndv7+mSub2y++yMg1/
FpO43qJ5YAGouuPcZgwlsiKha+ro3wQpgMPAXXpJKJ83DuTZNdUOrXzQrVFgPHe4
9f/NZSPJbhzaehvs4/XOSfxNCz1hcrigdzECjAzubFdtlBoY2ylhQldVkhM0NsZX
h/DLMYUsZICCFv9FKz8DiyCYsZWFty35Z15R/Lqf6fSSivmHG9BHDSJQrG8JdqRm
nc2PbRwHDodmbR4SeedDVgtm9i7fF5CsoUWo00sPo1SCTxt3oxiDxIRFxYwncHJL
PrH+pfB5awzobAQJuvmE49yBTbjMn5uevZGSEi61cJl96qgEBFqglatOl/LVAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUere+9HREX9JV/zBxCC1BypUJuN0wHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzODMwMzQzYTMxMzQzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFHAwDQYJKoZIhvcNAQELBQADggEBAJpiI8gX+jmH
MvMXf31V6oqYu0w09H8loSdbEW3nCLOlaNsXgpK1vMZle3y+Jxk1wXCNHSZJFEyk
5wYLk0jhWIPzbpRP5U2/NjsCPGmrvq87xJqINt9IGosMHQwWRmmriIQCMv11QzhY
6O/JpF/sgQg4AnaKgRIgsXspvCK3X6YLPpB8e5Zv5SULjl01D9fTAxWiFGT46U9L
DvEMqzSqg5yUlZc2jaY3iC6pxnhy/XdXj/ehTaHbKlG2YdBU4pqnEfMEbrUjs5h2
KEDLg2Tsa/kzSvNrVEE1SddyDtdzWjDY3Eubx48wOdlREBmMDguvTY1DZHJEq0XK
gDiRu7e/ViU=
-----END CERTIFICATE-----