Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          yGcdTRxkxrs4BwhqT6A/ohhY1zfb30zRy6QzhGgAJ7k=
Subject key identifier:   82:D6:E7:32:2E:86:D4:24:0B:CA:01:2D:98:76:CC:D0:2C:E9:BF:68
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       2FBDE8430BC78CA2D0CC4D1E5ADA5EC90F7E726D
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:37 +0000
ROA not before:           Sat 11 Nov 2023 20:54:37 +0000
ROA not after:            Sat 09 Nov 2024 20:59:37 +0000
asID:                     267027
IP address blocks:        2804:4708:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bd:e8:43:0b:c7:8c:a2:d0:cc:4d:1e:5a:da:5e:c9:0f:7e:72:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:37 2023 GMT
            Not After : Nov  9 20:59:37 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:87:d6:fc:e1:fb:58:af:c3:fe:05:bb:9d:
                    1d:78:c9:b1:d8:7b:a4:f5:01:b4:73:48:22:43:66:
                    09:5a:7e:14:b5:1d:eb:02:54:b7:91:67:70:b6:8f:
                    4e:98:24:fd:4f:14:2d:28:32:dc:55:72:fc:01:f0:
                    07:85:25:d5:86:e5:13:24:63:87:09:e6:6a:e0:70:
                    1c:c6:96:34:a4:6c:63:77:c0:ec:e5:26:df:e4:db:
                    e2:b7:cd:6b:bb:3f:19:b6:7b:92:c4:1e:9b:24:5e:
                    08:ea:f1:2a:d5:0a:7c:9a:73:cf:c8:e4:a6:de:0f:
                    74:8a:4d:6e:6f:d7:14:6e:96:86:21:bd:83:ca:e1:
                    e3:70:64:1b:09:15:b0:f0:06:46:34:30:ed:a8:29:
                    2b:8a:97:29:9e:3b:14:b6:71:f3:80:b0:e8:e5:15:
                    d5:a1:68:84:c8:d9:fd:74:9c:ee:5f:61:f8:71:ba:
                    85:cf:0e:d5:22:c0:36:dd:4f:a8:62:cf:dd:93:9b:
                    ec:a3:a9:92:31:f2:79:f2:94:2c:0a:18:6b:55:f5:
                    ed:c2:9d:49:c6:62:a2:e1:a9:37:7a:e6:31:4e:5b:
                    4f:74:7d:55:35:ef:ea:ce:dc:5c:31:f4:9c:72:68:
                    0f:7e:9c:8c:aa:a2:b9:fd:8a:56:6d:98:1b:7e:29:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:E7:32:2E:86:D4:24:0B:CA:01:2D:98:76:CC:D0:2C:E9:BF:68
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:71:ce:9d:66:35:d4:3d:84:d6:ab:f4:83:12:2e:6e:c8:
         d9:fb:e3:d7:90:dc:c8:e5:ef:db:54:52:09:7f:72:80:e1:55:
         96:a3:3a:06:54:ce:d4:49:bf:b7:2c:f1:b6:92:b3:1e:97:be:
         6a:5d:66:3f:f3:cc:32:73:2f:f1:ea:34:9e:b5:77:db:2f:b5:
         e4:21:27:95:89:a4:11:91:c1:e8:51:24:05:52:15:db:44:69:
         da:51:ad:f4:0b:2c:79:51:94:4b:a3:25:f9:1f:b7:47:57:43:
         fa:06:63:fc:19:95:33:76:b1:92:85:98:7e:10:bd:eb:eb:f9:
         d8:2b:06:c3:7a:b7:16:4b:9c:8d:dc:bf:72:0a:b0:4b:52:61:
         20:8d:97:a0:77:54:5b:fa:2b:82:0a:2a:36:1a:ce:ee:db:c7:
         ed:fb:d5:36:c7:df:c4:9d:b4:f7:bd:26:d9:6a:d3:2c:c9:7e:
         2f:9c:03:7a:db:34:bd:ed:75:03:50:d1:37:46:5c:b1:f2:aa:
         07:ca:0e:ca:25:3d:ad:7a:8f:ed:2c:5e:64:8c:35:b5:7b:47:
         c6:e1:fe:b4:f3:f8:29:b8:07:ee:5a:ba:c0:84:20:7a:6f:48:
         9d:4c:7b:77:99:0b:66:cf:32:71:5b:f6:80:db:8f:71:b3:42:
         45:8c:8d:ab
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUL73oQwvHjKLQzE0eWtpeyQ9+cm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc3Njc1NEEyQzhCMTAwMjE4QjA2MUFBNzlCRTkxODZG
MTkxNTAwRDAeFw0yMzExMTEyMDU0MzdaFw0yNDExMDkyMDU5MzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzkyNTg3RDZGQ0UxRkI1OEFG
QzNGRTA1QkI5RDFENzhDOUIxRDg3QkE0RjUwMUI0NzM0ODIyNDM2NjA5NUE3RTE0
QjUxREVCMDI1NEI3OTE2NzcwQjY4RjRFOTgyNEZENEYxNDJEMjgzMkRDNTU3MkZD
MDFGMDA3ODUyNUQ1ODZFNTEzMjQ2Mzg3MDlFNjZBRTA3MDFDQzY5NjM0QTQ2QzYz
NzdDMEVDRTUyNkRGRTREQkUyQjdDRDZCQkIzRjE5QjY3QjkyQzQxRTlCMjQ1RTA4
RUFGMTJBRDUwQTdDOUE3M0NGQzhFNEE2REUwRjc0OEE0RDZFNkZENzE0NkU5Njg2
MjFCRDgzQ0FFMUUzNzA2NDFCMDkxNUIwRjAwNjQ2MzQzMEVEQTgyOTJCOEE5NzI5
OUUzQjE0QjY3MUYzODBCMEU4RTUxNUQ1QTE2ODg0QzhEOUZENzQ5Q0VFNUY2MUY4
NzFCQTg1Q0YwRUQ1MjJDMDM2REQ0RkE4NjJDRkREOTM5QkVDQTNBOTkyMzFGMjc5
RjI5NDJDMEExODZCNTVGNUVEQzI5RDQ5QzY2MkEyRTFBOTM3N0FFNjMxNEU1QjRG
NzQ3RDU1MzVFRkVBQ0VEQzVDMzFGNDlDNzI2ODBGN0U5QzhDQUFBMkI5RkQ4QTU2
NkQ5ODFCN0UyOUQ0NzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAySWH1vzh+1ivw/4Fu50deMmx2Huk9QG0c0giQ2YJWn4UtR3rAlS3
kWdwto9OmCT9TxQtKDLcVXL8AfAHhSXVhuUTJGOHCeZq4HAcxpY0pGxjd8Ds5Sbf
5Nvit81ruz8ZtnuSxB6bJF4I6vEq1Qp8mnPPyOSm3g90ik1ub9cUbpaGIb2DyuHj
cGQbCRWw8AZGNDDtqCkripcpnjsUtnHzgLDo5RXVoWiEyNn9dJzuX2H4cbqFzw7V
IsA23U+oYs/dk5vso6mSMfJ58pQsChhrVfXtwp1JxmKi4ak3euYxTltPdH1VNe/q
ztxcMfSccmgPfpyMqqK5/YpWbZgbfinUeQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FILW5zIuhtQkC8oBLZh2zNAs6b9oMB8GA1UdIwQYMBaAFLd2dUosixACGLBhqnm+
kYbxkVANMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV1dURacWdMcVlQb3RF
Y2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAvQjc3Njc1NEEyQzhCMTAw
MjE4QjA2MUFBNzlCRTkxODZGMTkxNTAwRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNzc2NzU0QTJDOEIxMDAyMThCMDYxQUE3OUJFOTE4NkYxOTE1
MDBELmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81dXVEWnFnTHFZUG90RWNlQnNt
Y1M2U2VNZHdweXFYVnVhaGh2cmFXdEpZei8wLzMyMzgzMDM0M2EzNDM3MzAzODNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzczMDMyMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBEcIQDANBgkqhkiG9w0BAQsFAAOCAQEAT1xxzp1mNdQ9hNar9IMS
Lm7I2fvj15DcyOXv21RSCX9ygOFVlqM6BlTO1Em/tyzxtpKzHpe+al1mP/PMMnMv
8eo0nrV32y+15CEnlYmkEZHB6FEkBVIV20Rp2lGt9AsseVGUS6Ml+R+3R1dD+gZj
/BmVM3axkoWYfhC96+v52CsGw3q3Fkucjdy/cgqwS1JhII2XoHdUW/orggoqNhrO
7tvH7fvVNsffxJ20970m2WrTLMl+L5wDets0ve11A1DRN0ZcsfKqB8oOyiU9rXqP
7SxeZIw1tXtHxuH+tPP4KbgH7lq6wIQgem9InUx7d5kLZs8ycVv2gNuPcbNCRYyN
qw==
-----END CERTIFICATE-----