Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/323830343a313665633a3a2f33322d3332203d3e20323633313038.roa
File:                     323830343a313665633a3a2f33322d3332203d3e20323633313038.roa (raw, json)
Hash identifier:          XVKcRGbW6Umobtqr5GKi/SGY6438Fg9x7ULMn8PDGpA=
Subject key identifier:   9C:E0:88:C9:9B:20:14:7B:6D:7F:52:D2:60:A4:EC:1D:41:EC:CA:D1
Certificate issuer:       /CN=F123D9E392A5F8F42BBC61DA7F8201794967AA31
Certificate serial:       394E99167080603EE73FE14A55F59D0C96401264
Authority key identifier: F1:23:D9:E3:92:A5:F8:F4:2B:BC:61:DA:7F:82:01:79:49:67:AA:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/323830343a313665633a3a2f33322d3332203d3e20323633313038.roa
Signing time:             Mon 22 Jan 2024 14:43:30 +0000
ROA not before:           Mon 22 Jan 2024 14:38:30 +0000
ROA not after:            Mon 20 Jan 2025 14:43:30 +0000
asID:                     263108
IP address blocks:        2804:16ec::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4e:99:16:70:80:60:3e:e7:3f:e1:4a:55:f5:9d:0c:96:40:12:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F123D9E392A5F8F42BBC61DA7F8201794967AA31
        Validity
            Not Before: Jan 22 14:38:30 2024 GMT
            Not After : Jan 20 14:43:30 2025 GMT
        Subject: CN=9CE088C99B20147B6D7F52D260A4EC1D41ECCAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:5c:89:fa:65:ca:92:dd:f6:34:aa:4a:cb:
                    8c:4e:65:1c:68:c7:66:96:ea:fb:e7:36:95:fa:11:
                    f4:38:ca:d5:97:a8:9c:8c:a3:15:fc:40:fd:7b:ed:
                    af:30:bf:9f:87:1b:3d:1e:ca:ab:ea:9b:ac:60:ad:
                    6d:1f:68:0f:ea:3e:dd:bf:94:16:53:91:1a:5a:7a:
                    e2:66:06:86:9b:dd:85:ae:a1:8e:3f:4a:f2:b8:b8:
                    db:c8:65:20:7c:bb:86:46:a2:7e:a5:b1:ce:85:c7:
                    16:db:43:00:a9:fe:f8:0e:33:64:12:b8:62:c8:7e:
                    d2:9f:2a:3f:80:cb:b0:c4:d3:c9:1f:06:dc:15:c7:
                    9b:94:4e:39:5e:60:e9:3f:da:50:3f:34:a5:08:1f:
                    3b:f5:04:86:b7:43:9e:f6:bb:98:74:2e:df:99:3a:
                    00:a7:34:1a:d6:66:7b:24:1e:30:25:19:b1:79:16:
                    3f:1d:18:53:fc:db:da:18:ef:d7:6a:65:f3:63:2d:
                    36:44:b1:0f:71:cf:8d:75:69:94:9d:95:ed:6d:c2:
                    cf:6a:f1:53:15:41:8e:98:02:1d:4b:e8:69:a2:45:
                    8b:c9:4c:e6:8c:5f:f4:ad:3a:76:c0:6c:62:af:6b:
                    6b:d3:1a:59:a5:5a:29:48:d2:b9:06:c1:6e:72:58:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E0:88:C9:9B:20:14:7B:6D:7F:52:D2:60:A4:EC:1D:41:EC:CA:D1
            X509v3 Authority Key Identifier:
                keyid:F1:23:D9:E3:92:A5:F8:F4:2B:BC:61:DA:7F:82:01:79:49:67:AA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/323830343a313665633a3a2f33322d3332203d3e20323633313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:a1:ff:95:7e:20:f2:ae:18:69:cf:52:ee:e7:f1:6a:8a:
         da:8c:e7:74:02:3b:ba:51:4e:55:b0:21:1e:0d:4e:39:6f:af:
         66:e1:86:fd:7a:06:45:47:67:a4:48:df:c8:41:7e:0c:98:18:
         63:3b:68:e1:de:42:ff:80:8c:25:89:96:a1:8a:7a:3a:35:8d:
         44:79:b4:67:aa:d6:a7:a3:b0:98:3e:33:02:4a:cb:67:47:dc:
         04:6b:01:14:ca:cd:c5:dc:57:8a:1b:f9:58:bd:1b:c0:cf:a8:
         d9:76:5b:a8:26:18:4f:af:5e:06:dd:12:06:47:03:2e:28:d8:
         1a:5e:ac:d9:db:26:ce:5f:68:cc:e7:2a:66:91:b8:65:75:0a:
         5d:6b:bd:d0:ee:fd:c9:21:fc:e1:aa:41:9b:fa:91:8f:0b:52:
         a5:1e:a2:24:5f:c1:aa:ef:0f:3e:85:50:45:e3:3c:56:70:63:
         97:8d:1d:9a:17:b0:9f:cb:24:a6:ad:14:d2:0c:72:0f:22:e2:
         5d:a2:55:f6:4b:64:06:e0:07:e6:ff:7a:ae:7e:28:c9:ab:3c:
         94:87:e7:43:81:2c:f4:c0:22:d2:84:39:bd:aa:9d:ee:bf:01:
         4e:38:3d:03:23:68:1b:34:82:0a:37:72:1c:3f:19:e1:08:66:
         0e:b8:34:d8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOU6ZFnCAYD7nP+FKVfWdDJZAEmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEyM0Q5RTM5MkE1RjhGNDJCQkM2MURBN0Y4MjAxNzk0
OTY3QUEzMTAeFw0yNDAxMjIxNDM4MzBaFw0yNTAxMjAxNDQzMzBaMDMxMTAvBgNV
BAMTKDlDRTA4OEM5OUIyMDE0N0I2RDdGNTJEMjYwQTRFQzFENDFFQ0NBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JlyJ+mXKkt32NKpKy4xOZRxo
x2aW6vvnNpX6EfQ4ytWXqJyMoxX8QP177a8wv5+HGz0eyqvqm6xgrW0faA/qPt2/
lBZTkRpaeuJmBoab3YWuoY4/SvK4uNvIZSB8u4ZGon6lsc6FxxbbQwCp/vgOM2QS
uGLIftKfKj+Ay7DE08kfBtwVx5uUTjleYOk/2lA/NKUIHzv1BIa3Q572u5h0Lt+Z
OgCnNBrWZnskHjAlGbF5Fj8dGFP829oY79dqZfNjLTZEsQ9xz411aZSdle1tws9q
8VMVQY6YAh1L6GmiRYvJTOaMX/StOnbAbGKva2vTGlmlWilI0rkGwW5yWB/3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnOCIyZsgFHttf1LSYKTsHUHsytEwHwYDVR0j
BBgwFoAU8SPZ45Kl+PQrvGHaf4IBeUlnqjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRLRE1tNjVZNlJpTVQ1dVUzanFxSG1Zd1duamlyRkx3SE5XZFhnWWFT
SEMvMC9GMTIzRDlFMzkyQTVGOEY0MkJCQzYxREE3RjgyMDE3OTQ5NjdBQTMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxMjNEOUUzOTJBNUY4RjQy
QkJDNjFEQTdGODIwMTc5NDk2N0FBMzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkS0RNbTY1WTZSaU1UNXVVM2pxcUhtWXdXbmppckZMd0hOV2RYZ1lhU0hDLzAv
MzIzODMwMzQzYTMxMzY2NTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzEzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQW7DANBgkqhkiG9w0BAQsFAAOCAQEAdYyh/5V+
IPKuGGnPUu7n8WqK2ozndAI7ulFOVbAhHg1OOW+vZuGG/XoGRUdnpEjfyEF+DJgY
Yzto4d5C/4CMJYmWoYp6OjWNRHm0Z6rWp6OwmD4zAkrLZ0fcBGsBFMrNxdxXihv5
WL0bwM+o2XZbqCYYT69eBt0SBkcDLijYGl6s2dsmzl9ozOcqZpG4ZXUKXWu90O79
ySH84apBm/qRjwtSpR6iJF/Bqu8PPoVQReM8VnBjl40dmhewn8skpq0U0gxyDyLi
XaJV9ktkBuAH5v96rn4oyas8lIfnQ4Es9MAi0oQ5vaqd7r8BTjg9AyNoGzSCCjdy
HD8Z4QhmDrg02A==
-----END CERTIFICATE-----