Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
File:                     323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa (raw, json)
Hash identifier:          /5bHFipjM5r1wqw8zwf1ltD1rgqAIONncVw7Q338FhU=
Subject key identifier:   70:83:96:ED:99:A2:D1:52:23:41:A1:D9:F6:F3:F8:80:14:2B:15:8C
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       44B5D51B428F333232EDFC8EF8ABB8DEA964D655
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
Signing time:             Fri 23 Feb 2024 01:44:11 +0000
ROA not before:           Fri 23 Feb 2024 01:39:11 +0000
ROA not after:            Fri 21 Feb 2025 01:44:11 +0000
asID:                     266385
IP address blocks:        2804:3708:8040::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b5:d5:1b:42:8f:33:32:32:ed:fc:8e:f8:ab:b8:de:a9:64:d6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Feb 23 01:39:11 2024 GMT
            Not After : Feb 21 01:44:11 2025 GMT
        Subject: CN=708396ED99A2D1522341A1D9F6F3F880142B158C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:95:28:05:4a:04:b2:2d:cb:b1:6d:54:2b:
                    f4:87:4a:de:d1:ce:e8:aa:78:9e:e1:41:91:29:da:
                    14:0b:e9:f2:72:04:37:ad:83:2c:bc:11:23:1f:e9:
                    00:d0:47:f1:5c:db:46:a3:40:78:de:0f:1d:93:eb:
                    49:17:86:9d:ae:58:cd:92:39:cc:4a:58:c5:9d:85:
                    9f:eb:a0:1e:2e:84:c8:bc:47:0a:9f:6d:93:00:fe:
                    1c:15:ab:55:f9:67:0c:81:09:2d:24:a5:85:c6:c0:
                    56:32:dc:3f:09:c5:da:13:a3:9b:70:c9:b3:d9:42:
                    80:1a:62:2a:95:f0:a6:de:96:1e:88:5f:29:d5:0e:
                    bb:9f:f8:fc:21:2c:de:1f:72:08:ff:8b:82:82:a9:
                    b8:4b:c3:62:7e:e3:e4:9d:a3:51:2d:2b:b4:48:3d:
                    84:87:1e:9a:86:cf:b7:d4:ea:f6:7c:62:2b:4e:03:
                    25:70:f4:74:99:23:6b:1a:1e:df:08:62:b1:2f:78:
                    31:d5:eb:56:28:53:8b:18:36:d5:7c:96:bd:a1:5f:
                    91:de:b8:10:52:ba:ef:2d:9b:44:e3:4d:05:22:60:
                    a4:56:ec:6d:c7:ab:b5:7a:18:a2:51:7c:4b:60:b5:
                    e1:64:5a:5c:b8:dc:64:9c:a1:04:5f:e3:66:fc:b5:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:83:96:ED:99:A2:D1:52:23:41:A1:D9:F6:F3:F8:80:14:2B:15:8C
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708:8040::/42

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:68:6e:41:65:cb:8b:bb:b3:57:0b:62:d2:7a:08:d4:72:
         c9:3e:85:97:87:5e:40:62:46:da:4e:ce:c2:fe:3d:06:7c:b1:
         32:e6:fd:f9:51:bb:89:61:66:4b:ea:7d:0f:af:3c:b2:a6:a0:
         da:48:a0:3f:c7:15:bd:08:70:3b:6b:77:8e:1a:3d:9c:1f:7b:
         f1:6d:00:d0:60:e0:87:cc:83:18:bd:60:95:f2:04:25:10:3d:
         32:7b:75:ed:59:68:1d:b2:5d:af:2b:c4:99:2a:fc:a6:87:76:
         a7:a9:77:01:a0:8b:64:eb:e4:c9:df:62:55:2e:14:4c:d7:42:
         b6:76:6c:46:17:0e:ad:28:50:52:c6:36:a4:ad:21:51:be:77:
         35:cd:20:36:33:54:7c:fb:9b:77:f2:9d:3f:1f:30:b6:0d:09:
         51:eb:82:8a:fa:74:62:15:e7:88:8b:e1:84:5e:6b:35:69:d4:
         5c:92:50:b0:1c:55:fc:d7:43:7d:4f:a1:97:7d:e5:d4:57:67:
         dd:2b:68:ca:26:cb:f7:3c:9e:2a:01:54:c0:80:eb:d0:96:f8:
         ec:f4:7f:37:2e:49:1c:1b:00:46:07:c1:47:c7:15:f9:08:09:
         84:ce:5a:1c:cd:17:9f:93:7e:ad:4e:08:d4:3e:bb:08:f5:bf:
         ea:27:18:60
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIURLXVG0KPMzIy7fyO+Ku43qlk1lUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzNDBCQkNGMzUxMUU3RkYwQzBEOTc5MDMwRENDODU1
M0UxNjY3NjAeFw0yNDAyMjMwMTM5MTFaFw0yNTAyMjEwMTQ0MTFaMDMxMTAvBgNV
BAMTKDcwODM5NkVEOTlBMkQxNTIyMzQxQTFEOUY2RjNGODgwMTQyQjE1OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZM5UoBUoEsi3LsW1UK/SHSt7R
zuiqeJ7hQZEp2hQL6fJyBDetgyy8ESMf6QDQR/Fc20ajQHjeDx2T60kXhp2uWM2S
OcxKWMWdhZ/roB4uhMi8RwqfbZMA/hwVq1X5ZwyBCS0kpYXGwFYy3D8JxdoTo5tw
ybPZQoAaYiqV8Kbelh6IXynVDruf+PwhLN4fcgj/i4KCqbhLw2J+4+Sdo1EtK7RI
PYSHHpqGz7fU6vZ8YitOAyVw9HSZI2saHt8IYrEveDHV61YoU4sYNtV8lr2hX5He
uBBSuu8tm0TjTQUiYKRW7G3Hq7V6GKJRfEtgteFkWly43GScoQRf42b8tYVfAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUcIOW7Zmi0VIjQaHZ9vP4gBQrFYwwHwYDVR0j
BBgwFoAU1DQLvPNRHn/wwNl5Aw3MhVPhZnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdGUkc0ODZVTlFwOE14dE5SWWhvTW1nZFh2dUN5WWs5MXhxSHpROGRM
elAvMC9ENDM0MEJCQ0YzNTExRTdGRjBDMEQ5NzkwMzBEQ0M4NTUzRTE2Njc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0MzQwQkJDRjM1MTFFN0ZG
MEMwRDk3OTAzMERDQzg1NTNFMTY2NzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3RlJHNDg2VU5RcDhNeHROUllob01tZ2RYdnVDeVlrOTF4cUh6UThkTHpQLzAv
MzIzODMwMzQzYTMzMzczMDM4M2EzODMwMzQzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzYzNjMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigENwiAQDANBgkqhkiG9w0BAQsF
AAOCAQEANKNobkFly4u7s1cLYtJ6CNRyyT6Fl4deQGJG2k7Owv49BnyxMub9+VG7
iWFmS+p9D688sqag2kigP8cVvQhwO2t3jho9nB978W0A0GDgh8yDGL1glfIEJRA9
Mnt17VloHbJdryvEmSr8pod2p6l3AaCLZOvkyd9iVS4UTNdCtnZsRhcOrShQUsY2
pK0hUb53Nc0gNjNUfPubd/KdPx8wtg0JUeuCivp0YhXniIvhhF5rNWnUXJJQsBxV
/NdDfU+hl33l1Fdn3StoyibL9zyeKgFUwIDr0Jb47PR/Ny5JHBsARgfBR8cV+QgJ
hM5aHM0Xn5N+rU4I1D67CPW/6icYYA==
-----END CERTIFICATE-----