Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33322d3332203d3e203533313132.roa
File:                     323830343a6430633a3a2f33322d3332203d3e203533313132.roa (raw, json)
Hash identifier:          QnfJDXQySu2+RjqH62PQ3ZsAtysVF4alx+7/A1+IlDw=
Subject key identifier:   F3:79:ED:26:2C:86:A0:9A:48:5E:1A:A9:91:56:B3:ED:F1:67:D5:2A
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       08C15703B8A4168E3F692349887EE3D9A0EB07EB
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33322d3332203d3e203533313132.roa
Signing time:             Thu 25 Jan 2024 23:56:24 +0000
ROA not before:           Thu 25 Jan 2024 23:51:24 +0000
ROA not after:            Thu 23 Jan 2025 23:56:24 +0000
asID:                     53112
IP address blocks:        2804:d0c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c1:57:03:b8:a4:16:8e:3f:69:23:49:88:7e:e3:d9:a0:eb:07:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Jan 25 23:51:24 2024 GMT
            Not After : Jan 23 23:56:24 2025 GMT
        Subject: CN=F379ED262C86A09A485E1AA99156B3EDF167D52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:05:e6:8e:56:35:42:25:db:31:89:e8:57:
                    2e:91:c4:99:8f:7b:d5:96:6f:c2:28:d5:dd:a0:df:
                    f9:67:21:23:34:f5:f9:57:c0:26:07:c5:1a:75:e4:
                    48:a3:66:9e:2e:d4:ca:c4:67:62:94:1d:99:51:b5:
                    24:fb:53:68:de:a1:d6:9b:34:2e:80:51:d7:21:a2:
                    5d:c3:79:88:b3:56:cb:7a:12:24:95:62:30:73:f3:
                    84:e5:b1:f3:b3:75:f7:22:22:f5:f7:48:1b:fa:55:
                    c7:f7:2d:ef:82:1f:fc:2a:cc:98:e6:40:66:13:21:
                    ed:c1:48:52:1e:c2:aa:95:5b:93:70:9f:5b:63:4a:
                    54:12:0e:4b:14:f8:ad:75:e9:70:de:cb:36:d1:d5:
                    4b:d6:10:5e:cf:bb:83:1d:03:b7:8a:28:4d:ca:0a:
                    66:f3:c0:f6:3d:c0:d1:f1:3f:81:09:8d:62:5b:5c:
                    68:d4:ab:54:5b:f8:7d:cf:64:25:c0:d6:f2:b3:a1:
                    34:e0:c7:b6:15:d1:c8:60:4d:28:fd:ba:c8:ed:35:
                    23:fb:cb:1e:f0:b6:86:48:c6:7f:38:c1:28:00:f2:
                    50:69:d6:83:50:fa:a9:13:cc:60:d5:70:6c:cb:5c:
                    6d:04:a8:43:5f:7e:5a:3c:06:d3:13:61:02:a7:79:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:79:ED:26:2C:86:A0:9A:48:5E:1A:A9:91:56:B3:ED:F1:67:D5:2A
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33322d3332203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:91:3d:94:ab:24:32:f3:fb:db:8e:6e:5a:11:87:89:1a:
         72:35:ae:56:6e:aa:f8:0e:f7:8d:56:f6:d5:12:a9:cc:5b:6d:
         9b:5d:2b:87:b9:ba:6d:cd:91:27:cf:50:6d:c6:8e:40:1c:44:
         e8:a1:2b:b7:9f:2e:49:d0:ea:77:67:5c:db:85:df:25:18:48:
         84:b5:1a:23:4e:22:31:e0:f9:4d:d7:64:bb:a7:5f:4e:e8:69:
         d4:d9:e0:65:60:b2:a7:db:aa:72:a7:eb:70:fb:42:6c:4f:a7:
         20:77:83:82:4d:ce:16:d2:7d:cb:c6:00:5a:8f:16:62:8e:34:
         70:a9:30:54:4c:b4:28:b1:14:0c:2e:17:59:7c:fb:42:34:a0:
         4b:bf:5b:39:e1:1e:bb:c4:a6:2c:65:75:db:e6:01:85:4a:86:
         b8:d5:71:e6:df:76:1c:ef:b8:ff:b5:60:8e:20:d6:39:6d:85:
         7f:4f:df:b1:cc:f0:75:dd:70:aa:d6:4e:22:21:3d:91:6f:ce:
         c8:25:bc:ef:a2:8f:0c:49:de:f3:0f:72:66:f1:56:c8:2f:d8:
         1d:94:88:08:15:51:12:b2:c7:f9:37:d1:e6:01:bc:0c:4c:68:
         53:ed:45:41:84:cc:c6:18:21:97:9a:78:3f:d5:8d:f5:a1:bb:
         1d:23:c9:0b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUCMFXA7ikFo4/aSNJiH7j2aDrB+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3N0Y0OTU3NENCRTA4NDM5NjFBMjMyMzgyMzBGQTM0
MTdFNDE1OTAeFw0yNDAxMjUyMzUxMjRaFw0yNTAxMjMyMzU2MjRaMDMxMTAvBgNV
BAMTKEYzNzlFRDI2MkM4NkEwOUE0ODVFMUFBOTkxNTZCM0VERjE2N0Q1MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDngXmjlY1QiXbMYnoVy6RxJmP
e9WWb8Io1d2g3/lnISM09flXwCYHxRp15EijZp4u1MrEZ2KUHZlRtST7U2jeodab
NC6AUdchol3DeYizVst6EiSVYjBz84TlsfOzdfciIvX3SBv6Vcf3Le+CH/wqzJjm
QGYTIe3BSFIewqqVW5Nwn1tjSlQSDksU+K116XDeyzbR1UvWEF7Pu4MdA7eKKE3K
CmbzwPY9wNHxP4EJjWJbXGjUq1Rb+H3PZCXA1vKzoTTgx7YV0chgTSj9usjtNSP7
yx7wtoZIxn84wSgA8lBp1oNQ+qkTzGDVcGzLXG0EqENfflo8BtMTYQKneXbrAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU83ntJiyGoJpIXhqpkVaz7fFn1SowHwYDVR0j
BBgwFoAU+3f0lXTL4IQ5YaIyOCMPo0F+QVkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVmVEdWZkFzeTFOMzJTMmJIdG9MMlltV1hLU01Gd0hlZUhvVTJEWVFR
WjEvMC9GQjc3RjQ5NTc0Q0JFMDg0Mzk2MUEyMzIzODIzMEZBMzQxN0U0MTU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCNzdGNDk1NzRDQkUwODQz
OTYxQTIzMjM4MjMwRkEzNDE3RTQxNTkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1ZlRHVmZBc3kxTjMyUzJiSHRvTDJZbVdYS1NNRndIZWVIb1UyRFlRUVoxLzAv
MzIzODMwMzQzYTY0MzA2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzMzMTMx
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA0MMA0GCSqGSIb3DQEBCwUAA4IBAQBBzJE9lKskMvP7
245uWhGHiRpyNa5Wbqr4DveNVvbVEqnMW22bXSuHubptzZEnz1Btxo5AHETooSu3
ny5J0Op3Z1zbhd8lGEiEtRojTiIx4PlN12S7p19O6GnU2eBlYLKn26pyp+tw+0Js
T6cgd4OCTc4W0n3LxgBajxZijjRwqTBUTLQosRQMLhdZfPtCNKBLv1s54R67xKYs
ZXXb5gGFSoa41XHm33Yc77j/tWCOINY5bYV/T9+xzPB13XCq1k4iIT2Rb87IJbzv
oo8MSd7zD3Jm8VbIL9gdlIgIFVESssf5N9HmAbwMTGhT7UVBhMzGGCGXmng/1Y31
obsdI8kL
-----END CERTIFICATE-----