Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa
File:                     323830343a343032343a3a2f33322d3438203d3e20323635393337.roa (raw, json)
Hash identifier:          1y+a8Z68+re3K0F9zvcKnssyd0AHSDaxlYuhvFrxz5A=
Subject key identifier:   12:09:8C:10:44:01:EF:28:12:3F:6E:90:B3:E0:9A:57:C4:58:D5:B4
Certificate issuer:       /CN=0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1
Certificate serial:       1858CAB655FD5007F93B91CDA30C4CE0BA661D77
Authority key identifier: 0E:49:84:FF:BE:02:3C:CC:1B:7F:A4:F3:9E:F6:B2:8B:D4:02:92:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa
Signing time:             Mon 19 Feb 2024 14:55:19 +0000
ROA not before:           Mon 19 Feb 2024 14:50:19 +0000
ROA not after:            Mon 17 Feb 2025 14:55:19 +0000
asID:                     265937
IP address blocks:        2804:4024::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:58:ca:b6:55:fd:50:07:f9:3b:91:cd:a3:0c:4c:e0:ba:66:1d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1
        Validity
            Not Before: Feb 19 14:50:19 2024 GMT
            Not After : Feb 17 14:55:19 2025 GMT
        Subject: CN=12098C104401EF28123F6E90B3E09A57C458D5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2d:a8:bf:d3:26:86:23:ff:84:57:bc:cb:7a:
                    ee:ad:1c:19:0e:dd:1e:61:ac:db:d4:32:c1:11:84:
                    e8:72:7f:9a:68:98:96:fe:78:8c:a7:ac:ab:19:dc:
                    8f:a7:c0:ef:e2:fd:e1:6b:a3:7a:95:82:8d:4e:a9:
                    e3:7a:55:ab:6c:01:10:d5:9c:b6:55:38:74:24:37:
                    79:44:3f:a3:84:b5:d8:60:13:ab:87:ba:e1:25:69:
                    f8:f1:e7:76:57:b0:c7:6a:a0:8d:09:94:09:42:12:
                    cd:1f:1d:58:82:be:7e:39:ee:6a:b2:6f:c7:fa:9b:
                    87:32:b5:ee:a3:67:dc:a4:9d:20:10:a6:da:22:7e:
                    13:32:55:00:75:d4:6e:fe:e0:07:f3:c4:4e:fe:e1:
                    c5:b5:66:28:5c:bc:31:9d:a5:ed:d9:8f:78:70:31:
                    58:0b:00:a3:8a:90:9f:a5:4a:b6:ef:50:1f:2a:05:
                    4b:6c:63:24:41:b8:49:ab:14:a1:6c:ef:89:7c:5f:
                    9e:dc:c1:ba:63:8f:bd:d6:e3:e4:32:32:63:b7:00:
                    50:a1:c5:c5:bf:02:f9:c7:56:c8:c0:1c:a6:54:a0:
                    7b:70:c0:0d:61:b7:0a:8c:f1:a0:ac:46:ff:5f:7d:
                    a1:fc:f0:d5:10:c1:1c:db:ef:71:41:94:d2:97:31:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:09:8C:10:44:01:EF:28:12:3F:6E:90:B3:E0:9A:57:C4:58:D5:B4
            X509v3 Authority Key Identifier:
                keyid:0E:49:84:FF:BE:02:3C:CC:1B:7F:A4:F3:9E:F6:B2:8B:D4:02:92:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4024::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:ec:3a:d5:48:bf:cd:0d:d7:08:ba:39:37:09:1b:cd:92:5d:
         f4:2f:76:ae:b1:f6:54:d1:10:bd:58:ab:b0:2b:db:99:cc:b8:
         5b:f3:1f:7d:f5:c1:5e:49:d0:4c:55:da:0e:c5:29:9c:40:e0:
         cd:90:14:dd:0b:31:1a:fb:f9:0d:43:52:c8:97:5b:ea:2d:1b:
         ab:d1:21:e9:60:7f:20:6d:68:a9:47:c2:c1:43:1c:13:b7:e7:
         71:c3:68:d4:82:32:92:1e:b6:96:e3:08:dd:4b:2d:b7:0d:50:
         31:72:30:5c:90:19:a0:ea:56:cb:7c:ea:7c:9c:5b:a3:1a:dc:
         47:3c:1b:51:1a:be:d3:7b:00:af:84:97:68:e7:fe:5b:b4:bc:
         01:00:20:2c:47:ab:e9:a7:1b:8b:b3:2d:a4:4f:21:e1:79:82:
         26:4e:15:2b:00:5f:75:c1:ac:93:14:bd:2f:c0:69:73:69:43:
         26:ba:9e:a6:1a:3f:b4:ce:06:50:24:f5:78:4f:b4:36:bb:a9:
         cd:43:02:2c:88:91:2b:b3:3e:90:35:9b:87:d5:dc:11:de:7a:
         fc:06:61:80:e9:d7:8d:53:bf:64:61:19:7e:0f:6c:1f:05:be:
         eb:44:b7:f9:37:a7:35:44:e7:f0:33:7b:3d:f0:3b:9f:d9:79:
         25:30:2c:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGFjKtlX9UAf5O5HNowxM4LpmHXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0OTg0RkZCRTAyM0NDQzFCN0ZBNEYzOUVGNkIyOEJE
NDAyOTJGMTAeFw0yNDAyMTkxNDUwMTlaFw0yNTAyMTcxNDU1MTlaMDMxMTAvBgNV
BAMTKDEyMDk4QzEwNDQwMUVGMjgxMjNGNkU5MEIzRTA5QTU3QzQ1OEQ1QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLai/0yaGI/+EV7zLeu6tHBkO
3R5hrNvUMsERhOhyf5pomJb+eIynrKsZ3I+nwO/i/eFro3qVgo1OqeN6VatsARDV
nLZVOHQkN3lEP6OEtdhgE6uHuuElafjx53ZXsMdqoI0JlAlCEs0fHViCvn457mqy
b8f6m4cyte6jZ9yknSAQptoifhMyVQB11G7+4AfzxE7+4cW1ZihcvDGdpe3Zj3hw
MVgLAKOKkJ+lSrbvUB8qBUtsYyRBuEmrFKFs74l8X57cwbpjj73W4+QyMmO3AFCh
xcW/AvnHVsjAHKZUoHtwwA1htwqM8aCsRv9ffaH88NUQwRzb73FBlNKXMZhZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUEgmMEEQB7ygSP26Qs+CaV8RY1bQwHwYDVR0j
BBgwFoAUDkmE/74CPMwbf6Tznvayi9QCkvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5RcTdxZkwxZjRmamFVNGp4VDd2VDZZMmthbW0xcDJrdDJrWHpDbzZw
QTMvMC8wRTQ5ODRGRkJFMDIzQ0NDMUI3RkE0RjM5RUY2QjI4QkQ0MDI5MkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBFNDk4NEZGQkUwMjNDQ0Mx
QjdGQTRGMzlFRjZCMjhCRDQwMjkyRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuUXE3cWZMMWY0ZmphVTRqeFQ3dlQ2WTJrYW1tMXAya3Qya1h6Q282cEEzLzAv
MzIzODMwMzQzYTM0MzAzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzkzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARAJDANBgkqhkiG9w0BAQsFAAOCAQEAFew61Ui/
zQ3XCLo5NwkbzZJd9C92rrH2VNEQvVirsCvbmcy4W/MfffXBXknQTFXaDsUpnEDg
zZAU3QsxGvv5DUNSyJdb6i0bq9Eh6WB/IG1oqUfCwUMcE7fnccNo1IIykh62luMI
3Usttw1QMXIwXJAZoOpWy3zqfJxboxrcRzwbURq+03sAr4SXaOf+W7S8AQAgLEer
6acbi7MtpE8h4XmCJk4VKwBfdcGskxS9L8Bpc2lDJrqepho/tM4GUCT1eE+0Nrup
zUMCLIiRK7M+kDWbh9XcEd56/AZhgOnXjVO/ZGEZfg9sHwW+60S3+TenNUTn8DN7
PfA7n9l5JTAsLA==
-----END CERTIFICATE-----