Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a653030303a3a2f33352d3335203d3e20323633303236.roa
File:                     323830343a6132383a653030303a3a2f33352d3335203d3e20323633303236.roa (raw, json)
Hash identifier:          EaKutl6Wjdoi6RgjLQr8X9xlvhDUVdkFpSnNAaUIoDw=
Subject key identifier:   18:74:03:FD:2F:EF:13:E3:17:EA:C9:3E:3B:F5:3A:DA:D9:DB:6A:22
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       52FA93F5A41500A650A4E6AF6F69F8757A7A4B2B
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a653030303a3a2f33352d3335203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:24:55 +0000
ROA not before:           Thu 30 Nov 2023 20:19:55 +0000
ROA not after:            Thu 28 Nov 2024 20:24:55 +0000
asID:                     263026
IP address blocks:        2804:a28:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:93:f5:a4:15:00:a6:50:a4:e6:af:6f:69:f8:75:7a:7a:4b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:19:55 2023 GMT
            Not After : Nov 28 20:24:55 2024 GMT
        Subject: CN=187403FD2FEF13E317EAC93E3BF53ADAD9DB6A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:22:2e:58:da:b8:61:39:f9:93:bb:42:e5:
                    86:80:db:c7:99:2c:44:1a:5b:a4:ad:44:16:e7:d6:
                    35:bc:dc:8f:bd:4f:08:48:df:03:87:36:77:53:69:
                    b1:f3:e9:ee:e9:c1:2b:23:30:2c:5d:b3:82:9e:bd:
                    fe:fd:07:ec:7d:4a:f7:c6:44:81:c6:10:bf:c5:d8:
                    f9:ca:4d:cb:dc:e3:cb:ac:c8:2f:97:f7:6a:17:a5:
                    52:ca:65:93:4e:5c:e8:04:08:d4:a5:bf:7a:a7:bc:
                    6c:30:ea:1e:65:80:91:23:71:c6:a1:81:09:58:3c:
                    86:7a:f9:fc:e7:9c:98:8f:e6:9d:96:56:cd:0d:b4:
                    31:5e:2e:f8:df:ad:0a:76:d2:c9:0f:29:7e:79:25:
                    e5:b4:65:43:d9:78:ab:38:bf:49:71:ef:ad:94:d3:
                    87:d4:98:c6:a0:13:d7:91:5e:07:31:36:ca:90:02:
                    ba:88:19:84:f5:fe:c3:00:da:83:58:a0:86:0a:c2:
                    34:1a:bc:e0:bd:7b:30:5f:2b:58:12:83:83:3b:7a:
                    02:a1:86:2a:84:dd:74:02:f9:d6:78:c7:25:f1:cd:
                    bd:07:f7:55:84:ba:0b:46:65:ca:b7:fb:8d:c9:5f:
                    5e:34:5e:1e:91:dd:dd:cc:39:f4:19:6f:36:39:79:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:74:03:FD:2F:EF:13:E3:17:EA:C9:3E:3B:F5:3A:DA:D9:DB:6A:22
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a653030303a3a2f33352d3335203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6b:b6:b3:17:82:58:23:74:f7:f5:45:db:d9:c0:00:81:97:96:
         e0:70:6c:c2:95:9e:cd:af:e3:cb:c1:89:df:18:2a:b1:3f:1c:
         d7:df:87:5f:fa:ec:b5:5e:9f:56:2b:96:e0:c3:49:6e:47:46:
         e8:38:83:6c:07:bb:d7:5f:85:a3:6e:07:5f:c4:88:cb:6a:8f:
         f4:4f:76:b8:18:2d:c0:14:9b:c2:22:8d:bf:df:b2:fa:34:c5:
         d3:7f:4c:5e:17:4c:c2:da:36:79:df:92:09:0c:27:6b:00:a3:
         a8:42:5e:d2:93:ac:f8:d0:76:47:11:63:e8:dd:96:fd:de:83:
         4b:5b:df:68:3c:df:35:59:cf:68:c1:39:3e:3c:49:29:f5:4f:
         cb:7b:a6:da:49:2b:0a:97:28:5c:cb:7c:fa:06:d3:1a:e2:d2:
         57:8c:eb:18:c0:40:f7:75:fc:d3:d4:64:c8:0c:dc:48:b0:f1:
         58:84:db:df:aa:f1:ee:f6:c6:3a:83:c5:43:0f:a5:d6:7c:28:
         10:65:df:d8:c0:1d:82:dd:0e:26:fe:f1:09:c7:ee:91:76:2a:
         49:bc:a0:57:7b:3f:b4:f9:bc:1a:d3:76:b5:6a:6a:4d:e1:45:
         83:44:79:31:23:c4:3f:1f:69:60:81:54:4a:7f:73:c3:06:d9:
         6f:c7:d4:4f
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUUvqT9aQVAKZQpOavb2n4dXp6SyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBC
M0E5RDAxNzAeFw0yMzExMzAyMDE5NTVaFw0yNDExMjgyMDI0NTVaMDMxMTAvBgNV
BAMTKDE4NzQwM0ZEMkZFRjEzRTMxN0VBQzkzRTNCRjUzQURBRDlEQjZBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJiIuWNq4YTn5k7tC5YaA28eZ
LEQaW6StRBbn1jW83I+9TwhI3wOHNndTabHz6e7pwSsjMCxds4Kevf79B+x9SvfG
RIHGEL/F2PnKTcvc48usyC+X92oXpVLKZZNOXOgECNSlv3qnvGww6h5lgJEjccah
gQlYPIZ6+fznnJiP5p2WVs0NtDFeLvjfrQp20skPKX55JeW0ZUPZeKs4v0lx762U
04fUmMagE9eRXgcxNsqQArqIGYT1/sMA2oNYoIYKwjQavOC9ezBfK1gSg4M7egKh
hiqE3XQC+dZ4xyXxzb0H91WEugtGZcq3+43JX140Xh6R3d3MOfQZbzY5eaaNAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUGHQD/S/vE+MX6sk+O/U62tnbaiIwHwYDVR0j
BBgwFoAUjxLnkOE7oh5pKtRzVp8bkLOp0BcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzAvOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBCM0E5RDAxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84RjEyRTc5MEUxM0JBMjFFNjky
QUQ0NzM1NjlGMUI5MEIzQTlEMDE3LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzIz
ODMwMzQzYTYxMzIzODNhNjUzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAz
MjM2MzMzMDMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAoo4DANBgkqhkiG9w0BAQsFAAOCAQEA
a7azF4JYI3T39UXb2cAAgZeW4HBswpWeza/jy8GJ3xgqsT8c19+HX/rstV6fViuW
4MNJbkdG6DiDbAe711+Fo24HX8SIy2qP9E92uBgtwBSbwiKNv9+y+jTF039MXhdM
wto2ed+SCQwnawCjqEJe0pOs+NB2RxFj6N2W/d6DS1vfaDzfNVnPaME5PjxJKfVP
y3um2kkrCpcoXMt8+gbTGuLSV4zrGMBA93X809RkyAzcSLDxWITb36rx7vbGOoPF
Qw+l1nwoEGXf2MAdgt0OJv7xCcfukXYqSbygV3s/tPm8GtN2tWpqTeFFg0R5MSPE
Px9pYIFUSn9zwwbZb8fUTw==
-----END CERTIFICATE-----