Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33322d313238203d3e20323638323637.roa
File:                     323830343a346538383a3a2f33322d313238203d3e20323638323637.roa (raw, json)
Hash identifier:          soGyNsfTeOQeDieJ2gP/XX06lIm3omqLl6tQu36p2e8=
Subject key identifier:   5F:E3:F6:73:3E:16:1D:3C:42:83:90:C2:D9:61:6B:E8:29:C9:D8:0B
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       385AEB91F3881CC99F9F0924030A94F55CB92E34
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33322d313238203d3e20323638323637.roa
Signing time:             Sat 09 Dec 2023 17:00:00 +0000
ROA not before:           Sat 09 Dec 2023 16:55:00 +0000
ROA not after:            Sat 07 Dec 2024 17:00:00 +0000
asID:                     268267
IP address blocks:        2804:4e88::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5a:eb:91:f3:88:1c:c9:9f:9f:09:24:03:0a:94:f5:5c:b9:2e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Dec  9 16:55:00 2023 GMT
            Not After : Dec  7 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100B09B6F7ADF463A564369A7195A0893B051BD14159AB2B10EE714B5C83848E28E09A2F4123D84548FBB0F1D5849FBC397A09F7917184FA0A1CADCA2A343C3A5B25CB8D2F954EBCB5CF97E69754923EAE54C877F54B386AA774D3B0D8067C55C9C746B1D098F2B5E3E789434399368F72FF9319EB482061077A0AC5BC2E5E1FF142C761CB1F6CD44377ECE868B277D3C6222D04042D2815AB767B19305F3A61151885C1C30BF1947C2410C21A86B8CAE469489478196E73A1CC97B54DFDCC72764F49FA5070F7FE0D224897E381C4921EDB554CFEADF86008D314B2435D94D2873D846E7CDECA7658E0E22A2123F58E248903D984B1E4F688D90569562A74DD4550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:6f:7a:df:46:3a:56:43:69:a7:19:5a:08:
                    93:b0:51:bd:14:15:9a:b2:b1:0e:e7:14:b5:c8:38:
                    48:e2:8e:09:a2:f4:12:3d:84:54:8f:bb:0f:1d:58:
                    49:fb:c3:97:a0:9f:79:17:18:4f:a0:a1:ca:dc:a2:
                    a3:43:c3:a5:b2:5c:b8:d2:f9:54:eb:cb:5c:f9:7e:
                    69:75:49:23:ea:e5:4c:87:7f:54:b3:86:aa:77:4d:
                    3b:0d:80:67:c5:5c:9c:74:6b:1d:09:8f:2b:5e:3e:
                    78:94:34:39:93:68:f7:2f:f9:31:9e:b4:82:06:10:
                    77:a0:ac:5b:c2:e5:e1:ff:14:2c:76:1c:b1:f6:cd:
                    44:37:7e:ce:86:8b:27:7d:3c:62:22:d0:40:42:d2:
                    81:5a:b7:67:b1:93:05:f3:a6:11:51:88:5c:1c:30:
                    bf:19:47:c2:41:0c:21:a8:6b:8c:ae:46:94:89:47:
                    81:96:e7:3a:1c:c9:7b:54:df:dc:c7:27:64:f4:9f:
                    a5:07:0f:7f:e0:d2:24:89:7e:38:1c:49:21:ed:b5:
                    54:cf:ea:df:86:00:8d:31:4b:24:35:d9:4d:28:73:
                    d8:46:e7:cd:ec:a7:65:8e:0e:22:a2:12:3f:58:e2:
                    48:90:3d:98:4b:1e:4f:68:8d:90:56:95:62:a7:4d:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E3:F6:73:3E:16:1D:3C:42:83:90:C2:D9:61:6B:E8:29:C9:D8:0B
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a3a2f33322d313238203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:10:cc:93:d8:a3:71:6c:18:c2:75:cf:c2:e4:cb:e4:10:63:
         f9:49:61:2a:b4:6d:18:30:1f:28:14:27:f9:a4:78:32:0e:90:
         13:7a:9b:00:61:b8:de:94:f4:05:bf:37:7b:cd:e4:74:0b:f3:
         f4:b2:cf:5d:be:29:bd:d3:bd:82:8f:fb:27:e4:cd:d0:22:89:
         cd:7e:c4:32:f2:fa:78:fc:2c:67:40:ad:a7:94:d3:45:ee:81:
         56:87:d8:94:72:81:d2:1c:ac:c5:ad:27:b4:14:05:0e:5a:ad:
         7c:d9:dd:ac:6a:c7:9d:3f:a1:ec:54:d8:62:62:89:1c:2b:c7:
         55:16:c0:96:e7:2b:d0:ce:0d:84:cf:8e:d9:bd:d2:86:11:7b:
         8f:04:69:27:4b:2c:d3:3d:91:fe:b9:88:e8:73:f9:15:86:1b:
         08:8b:87:39:41:76:ad:39:6e:b1:4a:f9:5d:33:90:3b:d7:c7:
         84:e7:bf:89:fc:c7:bf:94:29:44:ca:2d:d9:98:06:b6:03:e9:
         8b:98:56:46:df:9b:79:c6:1d:d7:98:2f:96:13:18:e5:57:8e:
         29:a8:4e:6b:ce:11:4c:e6:2d:bf:ad:6d:13:e9:61:a6:3c:50:
         04:27:f9:55:2d:3f:c0:ee:51:75:4f:90:f9:11:ec:e6:b3:0d:
         e2:90:cd:94
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIUOFrrkfOIHMmfnwkkAwqU9Vy5LjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFQ0ZFN0I1NkM3OTU1MzVCODU1QjlENEYwQ0Q3RTAy
RTQ1MjY0OTAeFw0yMzEyMDkxNjU1MDBaFw0yNDEyMDcxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA5QjZGN0FERjQ2M0E1NjQz
NjlBNzE5NUEwODkzQjA1MUJEMTQxNTlBQjJCMTBFRTcxNEI1QzgzODQ4RTI4RTA5
QTJGNDEyM0Q4NDU0OEZCQjBGMUQ1ODQ5RkJDMzk3QTA5Rjc5MTcxODRGQTBBMUNB
RENBMkEzNDNDM0E1QjI1Q0I4RDJGOTU0RUJDQjVDRjk3RTY5NzU0OTIzRUFFNTRD
ODc3RjU0QjM4NkFBNzc0RDNCMEQ4MDY3QzU1QzlDNzQ2QjFEMDk4RjJCNUUzRTc4
OTQzNDM5OTM2OEY3MkZGOTMxOUVCNDgyMDYxMDc3QTBBQzVCQzJFNUUxRkYxNDJD
NzYxQ0IxRjZDRDQ0Mzc3RUNFODY4QjI3N0QzQzYyMjJEMDQwNDJEMjgxNUFCNzY3
QjE5MzA1RjNBNjExNTE4ODVDMUMzMEJGMTk0N0MyNDEwQzIxQTg2QjhDQUU0Njk0
ODk0NzgxOTZFNzNBMUNDOTdCNTRERkRDQzcyNzY0RjQ5RkE1MDcwRjdGRTBEMjI0
ODk3RTM4MUM0OTIxRURCNTU0Q0ZFQURGODYwMDhEMzE0QjI0MzVEOTREMjg3M0Q4
NDZFN0NERUNBNzY1OEUwRTIyQTIxMjNGNThFMjQ4OTAzRDk4NEIxRTRGNjg4RDkw
NTY5NTYyQTc0REQ0NTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsJtvet9GOlZDaacZWgiTsFG9FBWasrEO5xS1yDhI4o4JovQSPYRU
j7sPHVhJ+8OXoJ95FxhPoKHK3KKjQ8Olsly40vlU68tc+X5pdUkj6uVMh39Us4aq
d007DYBnxVycdGsdCY8rXj54lDQ5k2j3L/kxnrSCBhB3oKxbwuXh/xQsdhyx9s1E
N37OhosnfTxiItBAQtKBWrdnsZMF86YRUYhcHDC/GUfCQQwhqGuMrkaUiUeBluc6
HMl7VN/cxydk9J+lBw9/4NIkiX44HEkh7bVUz+rfhgCNMUskNdlNKHPYRufN7Kdl
jg4iohI/WOJIkD2YSx5PaI2QVpVip03UVQIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FF/j9nM+Fh08QoOQwtlha+gpydgLMB8GA1UdIwQYMBaAFNjs/ntWx5VTW4VbnU8M
1+AuRSZJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV3YllndEdGS0JRRjU1
aVFRRDhSemk5eHl3azZpZnEzZTJNQ05rTnRVc2syLzAvRDhFQ0ZFN0I1NkM3OTU1
MzVCODU1QjlENEYwQ0Q3RTAyRTQ1MjY0OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EOEVDRkU3QjU2Qzc5NTUzNUI4NTVCOUQ0RjBDRDdFMDJFNDUy
NjQ5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81d2JZZ3RHRktCUUY1NWlRUUQ4
UnppOXh5d2s2aWZxM2UyTUNOa050VXNrMi8wLzMyMzgzMDM0M2EzNDY1MzgzODNh
M2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjM4MzIzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KAROiDANBgkqhkiG9w0BAQsFAAOCAQEAQBDMk9ijcWwYwnXPwuTL5BBj+UlhKrRt
GDAfKBQn+aR4Mg6QE3qbAGG43pT0Bb83e83kdAvz9LLPXb4pvdO9go/7J+TN0CKJ
zX7EMvL6ePwsZ0Ctp5TTRe6BVofYlHKB0hysxa0ntBQFDlqtfNndrGrHnT+h7FTY
YmKJHCvHVRbAlucr0M4NhM+O2b3ShhF7jwRpJ0ss0z2R/rmI6HP5FYYbCIuHOUF2
rTlusUr5XTOQO9fHhOe/ifzHv5QpRMot2ZgGtgPpi5hWRt+becYd15gvlhMY5VeO
KahOa84RTOYtv61tE+lhpjxQBCf5VS0/wO5RdU+Q+RHs5rMN4pDNlA==
-----END CERTIFICATE-----