Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a3a2f33322d3438203d3e20323638383733.roa
File:                     323830343a356264633a3a2f33322d3438203d3e20323638383733.roa (raw, json)
Hash identifier:          mDRpNqCZpR/f9SJRKG1bD5MGwcnHIthLvffXOiAMenQ=
Subject key identifier:   55:24:50:2A:EE:53:9F:1C:DE:0F:7D:29:CD:89:AC:1D:85:99:01:28
Certificate issuer:       /CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
Certificate serial:       381FDC9273A9D6B771E634462BE02BD3A538CB1B
Authority key identifier: 47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a3a2f33322d3438203d3e20323638383733.roa
Signing time:             Mon 18 Mar 2024 19:15:15 +0000
ROA not before:           Mon 18 Mar 2024 19:10:15 +0000
ROA not after:            Mon 17 Mar 2025 19:15:15 +0000
asID:                     268873
IP address blocks:        2804:5bdc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1f:dc:92:73:a9:d6:b7:71:e6:34:46:2b:e0:2b:d3:a5:38:cb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
        Validity
            Not Before: Mar 18 19:10:15 2024 GMT
            Not After : Mar 17 19:15:15 2025 GMT
        Subject: CN=5524502AEE539F1CDE0F7D29CD89AC1D85990128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:dc:a4:6b:98:0e:34:70:eb:45:8f:df:ac:
                    5d:9a:08:5f:e1:17:83:dd:bc:b8:b6:5d:9a:28:02:
                    c1:9f:a9:79:fe:6b:19:05:17:c1:9d:fd:9b:31:b0:
                    d0:bb:23:2c:27:44:c5:03:92:ea:c6:fd:7a:f6:e5:
                    a6:e3:14:54:cf:ac:dc:78:73:7e:52:fa:21:43:ba:
                    5d:f9:c9:91:a1:fa:a7:d0:3e:85:ca:27:53:2c:16:
                    73:5b:bc:f2:46:5d:8c:2e:f2:40:a7:1c:cf:4e:58:
                    cb:16:54:61:c2:70:f2:02:7f:14:51:66:c2:d4:85:
                    35:d5:35:d0:7f:92:ee:70:cf:15:89:2b:31:38:77:
                    8a:48:0c:cd:38:16:ea:33:c2:ac:28:9d:74:68:7b:
                    62:8e:51:20:00:04:94:00:4b:26:74:02:fc:99:cf:
                    70:e2:20:03:ca:4f:0f:06:fb:2f:ff:95:11:52:ab:
                    66:c4:6b:63:22:cb:d2:fd:fd:c0:05:22:63:db:7c:
                    f2:71:e3:ac:87:69:97:24:9f:7c:ef:44:0a:57:82:
                    2c:e2:c3:2a:85:b8:4b:99:c9:49:a8:bb:d4:e7:af:
                    c4:a4:d4:06:72:c9:ca:44:00:13:3b:c6:ea:6f:03:
                    1a:10:78:d9:63:99:d5:a7:d2:d6:04:c1:22:55:51:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:24:50:2A:EE:53:9F:1C:DE:0F:7D:29:CD:89:AC:1D:85:99:01:28
            X509v3 Authority Key Identifier:
                keyid:47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a3a2f33322d3438203d3e20323638383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:72:d4:48:a1:6d:d9:5d:e4:85:4c:46:79:da:11:57:cf:
         cf:6a:3d:a9:6a:57:63:aa:95:a1:71:10:23:0e:e3:b6:a7:51:
         60:14:47:01:79:55:bc:1e:3e:bc:37:71:1e:ae:63:f8:6e:49:
         0e:c2:fe:1a:fe:9b:64:c3:23:79:04:ba:9b:5e:44:2c:b7:96:
         09:64:a9:c5:72:23:d6:7f:78:b9:49:23:b2:32:00:f1:d5:32:
         ee:77:22:c1:d7:d4:92:81:7f:b4:2d:38:24:c4:5b:9a:03:55:
         31:97:9f:ea:a5:ae:82:53:33:0e:10:b3:46:13:71:34:f3:47:
         88:4f:d3:b3:04:0d:8a:ad:22:4f:6c:66:7a:45:98:6c:81:2d:
         22:44:42:4a:b9:cd:8d:03:e1:31:64:17:a2:26:c8:51:aa:f5:
         e0:cb:c0:18:33:30:43:48:fa:06:e2:d7:c0:4a:6d:a3:80:fe:
         10:09:1f:89:dc:6c:20:76:55:19:b4:1e:5a:b7:77:38:1c:e5:
         e4:79:21:5e:49:6b:33:d4:a1:f3:2f:63:50:11:3a:69:a0:6b:
         1c:0c:e1:2a:7b:4b:61:cd:b0:a9:15:55:69:88:03:bb:dd:e5:
         5d:56:31:21:fe:17:16:e0:41:b8:37:53:b3:9b:9a:59:5e:6c:
         e9:f8:20:2d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOB/cknOp1rdx5jRGK+Ar06U4yxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdCOUY4Rjc4RUQ2QkM2NjA5QTBGRDE4OTQ4RkRBODRG
RjY5N0NCMjAeFw0yNDAzMTgxOTEwMTVaFw0yNTAzMTcxOTE1MTVaMDMxMTAvBgNV
BAMTKDU1MjQ1MDJBRUU1MzlGMUNERTBGN0QyOUNEODlBQzFEODU5OTAxMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCI9yka5gONHDrRY/frF2aCF/h
F4PdvLi2XZooAsGfqXn+axkFF8Gd/ZsxsNC7IywnRMUDkurG/Xr25abjFFTPrNx4
c35S+iFDul35yZGh+qfQPoXKJ1MsFnNbvPJGXYwu8kCnHM9OWMsWVGHCcPICfxRR
ZsLUhTXVNdB/ku5wzxWJKzE4d4pIDM04FuozwqwonXRoe2KOUSAABJQASyZ0AvyZ
z3DiIAPKTw8G+y//lRFSq2bEa2Miy9L9/cAFImPbfPJx46yHaZckn3zvRApXgizi
wyqFuEuZyUmou9Tnr8Sk1AZyycpEABM7xupvAxoQeNljmdWn0tYEwSJVUTyfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVSRQKu5TnxzeD30pzYmsHYWZASgwHwYDVR0j
BBgwFoAUR7n4947WvGYJoP0YlI/ahP9pfLIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVBSS0VQQjQ5TEZSZWNrUTRIOW1jY0d6aFpnR0I1ckF2VnlyTDQ2V1lm
UWgvMC80N0I5RjhGNzhFRDZCQzY2MDlBMEZEMTg5NDhGREE4NEZGNjk3Q0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3QjlGOEY3OEVENkJDNjYw
OUEwRkQxODk0OEZEQTg0RkY2OTdDQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVQUktFUEI0OUxGUmVja1E0SDltY2NHemhaZ0dCNXJBdlZ5ckw0NldZZlFoLzAv
MzIzODMwMzQzYTM1NjI2NDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARb3DANBgkqhkiG9w0BAQsFAAOCAQEAb69y1Eih
bdld5IVMRnnaEVfPz2o9qWpXY6qVoXEQIw7jtqdRYBRHAXlVvB4+vDdxHq5j+G5J
DsL+Gv6bZMMjeQS6m15ELLeWCWSpxXIj1n94uUkjsjIA8dUy7nciwdfUkoF/tC04
JMRbmgNVMZef6qWuglMzDhCzRhNxNPNHiE/TswQNiq0iT2xmekWYbIEtIkRCSrnN
jQPhMWQXoibIUar14MvAGDMwQ0j6BuLXwEpto4D+EAkfidxsIHZVGbQeWrd3OBzl
5HkhXklrM9Sh8y9jUBE6aaBrHAzhKntLYc2wqRVVaYgDu93lXVYxIf4XFuBBuDdT
s5uaWV5s6fggLQ==
-----END CERTIFICATE-----