Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/323830343a336335383a3a2f33322d3334203d3e20323636323035.roa
File:                     323830343a336335383a3a2f33322d3334203d3e20323636323035.roa (raw, json)
Hash identifier:          5AEnUxFVhHaU4mIEp8L92sv1WLQNtQwntGT9Q79uSB4=
Subject key identifier:   DC:FB:86:92:39:01:56:70:99:C3:F8:45:6F:73:79:F3:B0:38:EF:B8
Certificate issuer:       /CN=4460B4AA93E985A9AA92DBCFD1A0643DE7669047
Certificate serial:       6CB95A866F0F4EE966622935F935932CEC19B285
Authority key identifier: 44:60:B4:AA:93:E9:85:A9:AA:92:DB:CF:D1:A0:64:3D:E7:66:90:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/323830343a336335383a3a2f33322d3334203d3e20323636323035.roa
Signing time:             Thu 31 Aug 2023 14:02:00 +0000
ROA not before:           Thu 31 Aug 2023 13:57:00 +0000
ROA not after:            Thu 29 Aug 2024 14:02:00 +0000
asID:                     266205
IP address blocks:        2804:3c58::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b9:5a:86:6f:0f:4e:e9:66:62:29:35:f9:35:93:2c:ec:19:b2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4460B4AA93E985A9AA92DBCFD1A0643DE7669047
        Validity
            Not Before: Aug 31 13:57:00 2023 GMT
            Not After : Aug 29 14:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:7a:41:87:53:c8:35:e0:72:79:e5:29:be:
                    bf:45:65:ce:96:d9:90:56:64:35:65:e0:41:bf:a4:
                    28:de:c1:39:45:67:7e:7c:fa:51:18:59:15:2d:5a:
                    60:3b:b8:22:40:6a:ae:eb:3e:0f:05:66:26:86:8a:
                    62:21:9f:aa:96:d1:df:35:d1:0c:39:df:a3:ba:68:
                    bc:b9:91:4b:82:18:59:44:45:81:15:3f:21:af:f5:
                    4d:ef:29:a8:54:81:d5:39:40:cc:38:e4:8d:4b:40:
                    e4:f0:9d:b0:60:ec:06:ba:6d:7d:c9:a9:78:94:7d:
                    df:26:39:a3:6b:97:53:0a:98:a2:3e:42:84:58:70:
                    05:51:40:27:6a:d2:3d:dd:ea:37:d5:97:7c:6d:f4:
                    35:21:94:bd:e6:91:e7:c8:9f:8e:ab:17:44:d0:79:
                    66:ce:96:c0:5d:85:55:2f:63:97:29:ef:ce:fd:22:
                    a6:43:33:a7:97:86:ba:34:bf:5b:8b:2f:0c:07:26:
                    cb:9d:64:80:19:89:e5:ca:60:e0:7d:bb:af:62:f9:
                    1c:da:ec:ec:f3:e5:27:7c:8c:56:0b:5a:1e:4d:81:
                    87:c1:f8:4c:47:74:94:88:b6:68:ed:a7:0b:d5:4c:
                    29:82:c4:8c:c1:3c:06:0e:9c:b8:43:e8:8c:9d:20:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:86:92:39:01:56:70:99:C3:F8:45:6F:73:79:F3:B0:38:EF:B8
            X509v3 Authority Key Identifier:
                keyid:44:60:B4:AA:93:E9:85:A9:AA:92:DB:CF:D1:A0:64:3D:E7:66:90:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/323830343a336335383a3a2f33322d3334203d3e20323636323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c58::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:f2:ae:23:50:91:e9:87:ff:21:e8:28:ba:41:69:97:20:
         8f:e4:db:87:bb:c1:9b:2c:5b:e2:45:74:6e:ca:a4:6e:b3:cc:
         0f:0f:bb:16:ab:10:64:8b:a9:78:03:44:70:7d:2b:eb:4e:0f:
         22:3f:43:24:1a:92:19:ed:3b:dd:b2:c6:eb:4a:49:29:77:f2:
         21:ed:f0:89:96:e4:4c:70:bb:4d:4e:51:a4:ce:24:a9:25:f9:
         44:ff:ff:a4:49:ba:41:07:e2:6f:62:22:96:84:78:6e:42:19:
         ca:31:30:63:8f:c0:dd:e5:02:00:db:f9:72:f6:2a:34:00:5b:
         27:ab:2b:aa:19:57:dc:9d:ae:25:ff:14:11:c4:d2:16:91:37:
         55:1c:7a:6f:1f:6f:75:4c:5e:d5:75:b9:3f:36:c8:2e:e4:3e:
         68:7d:26:2d:4e:da:04:01:3a:a3:93:06:ce:7b:bb:0e:d7:73:
         63:21:e5:43:07:2b:2d:9a:eb:ec:a6:45:a1:1b:27:ca:78:78:
         15:52:5f:13:e8:e6:ec:48:73:84:0c:1b:cd:57:04:c4:6e:a3:
         47:63:ee:fb:29:4a:77:28:48:18:fb:22:28:cd:b3:dd:af:32:
         25:4c:c9:0c:7d:7c:8d:83:7e:24:e2:d5:60:a6:cf:6e:9a:b0:
         58:09:a5:6f
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUbLlahm8PTulmYik1+TWTLOwZsoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ2MEI0QUE5M0U5ODVBOUFBOTJEQkNGRDFBMDY0M0RF
NzY2OTA0NzAeFw0yMzA4MzExMzU3MDBaFw0yNDA4MjkxNDAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQURBQjdBNDE4NzUzQzgzNUUw
NzI3OUU1MjlCRUJGNDU2NUNFOTZEOTkwNTY2NDM1NjVFMDQxQkZBNDI4REVDMTM5
NDU2NzdFN0NGQTUxMTg1OTE1MkQ1QTYwM0JCODIyNDA2QUFFRUIzRTBGMDU2NjI2
ODY4QTYyMjE5RkFBOTZEMURGMzVEMTBDMzlERkEzQkE2OEJDQjk5MTRCODIxODU5
NDQ0NTgxMTUzRjIxQUZGNTRERUYyOUE4NTQ4MUQ1Mzk0MENDMzhFNDhENEI0MEU0
RjA5REIwNjBFQzA2QkE2RDdEQzlBOTc4OTQ3RERGMjYzOUEzNkI5NzUzMEE5OEEy
M0U0Mjg0NTg3MDA1NTE0MDI3NkFEMjNERERFQTM3RDU5NzdDNkRGNDM1MjE5NEJE
RTY5MUU3Qzg5RjhFQUIxNzQ0RDA3OTY2Q0U5NkMwNUQ4NTU1MkY2Mzk3MjlFRkNF
RkQyMkE2NDMzM0E3OTc4NkJBMzRCRjVCOEIyRjBDMDcyNkNCOUQ2NDgwMTk4OUU1
Q0E2MEUwN0RCQkFGNjJGOTFDREFFQ0VDRjNFNTI3N0M4QzU2MEI1QTFFNEQ4MTg3
QzFGODRDNDc3NDk0ODhCNjY4RURBNzBCRDU0QzI5ODJDNDhDQzEzQzA2MEU5Q0I4
NDNFODhDOUQyMDBEOUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArat6QYdTyDXgcnnlKb6/RWXOltmQVmQ1ZeBBv6Qo3sE5RWd+fPpR
GFkVLVpgO7giQGqu6z4PBWYmhopiIZ+qltHfNdEMOd+jumi8uZFLghhZREWBFT8h
r/VN7ymoVIHVOUDMOOSNS0Dk8J2wYOwGum19yal4lH3fJjmja5dTCpiiPkKEWHAF
UUAnatI93eo31Zd8bfQ1IZS95pHnyJ+OqxdE0HlmzpbAXYVVL2OXKe/O/SKmQzOn
l4a6NL9biy8MBybLnWSAGYnlymDgfbuvYvkc2uzs8+UnfIxWC1oeTYGHwfhMR3SU
iLZo7acL1UwpgsSMwTwGDpy4Q+iMnSANnQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FNz7hpI5AVZwmcP4RW9zefOwOO+4MB8GA1UdIwQYMBaAFERgtKqT6YWpqpLbz9Gg
ZD3nZpBHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hwSzRKSld4a0QxZzJS
bjZNaEVycG5zaVZ3Z241UHlSZWoxc2pvRnJwYW15LzAvNDQ2MEI0QUE5M0U5ODVB
OUFBOTJEQkNGRDFBMDY0M0RFNzY2OTA0Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NDYwQjRBQTkzRTk4NUE5QUE5MkRCQ0ZEMUEwNjQzREU3NjY5
MDQ3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IcEs0SkpXeGtEMWcyUm42TWhF
cnBuc2lWd2duNVB5UmVqMXNqb0ZycGFteS8wLzMyMzgzMDM0M2EzMzYzMzUzODNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNjMyMzAzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
PFgwDQYJKoZIhvcNAQELBQADggEBAK7M8q4jUJHph/8h6Ci6QWmXII/k24e7wZss
W+JFdG7KpG6zzA8PuxarEGSLqXgDRHB9K+tODyI/QyQakhntO92yxutKSSl38iHt
8ImW5Exwu01OUaTOJKkl+UT//6RJukEH4m9iIpaEeG5CGcoxMGOPwN3lAgDb+XL2
KjQAWyerK6oZV9ydriX/FBHE0haRN1Ucem8fb3VMXtV1uT82yC7kPmh9Ji1O2gQB
OqOTBs57uw7Xc2Mh5UMHKy2a6+ymRaEbJ8p4eBVSXxPo5uxIc4QMG81XBMRuo0dj
7vspSncoSBj7IijNs92vMiVMyQx9fI2DfiTi1WCmz26asFgJpW8=
-----END CERTIFICATE-----