Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a663133323a3a2f34372d3437203d3e20323632333534.roa
File:                     323830343a3832383a663133323a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier:          Ij4fCULH+VmWOktWQoMDpfb+S3KIvPK0zXOhI5bU408=
Subject key identifier:   19:8E:08:74:98:AA:A4:8C:62:4A:6A:2B:F4:E6:0B:AC:9D:F0:79:F1
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       28BAA1A7F135B1C6708F39DC87C4C6C440113B30
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a663133323a3a2f34372d3437203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:31 +0000
ROA not before:           Wed 06 Mar 2024 14:09:31 +0000
ROA not after:            Wed 05 Mar 2025 14:14:31 +0000
asID:                     262354
IP address blocks:        2804:828:f132::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ba:a1:a7:f1:35:b1:c6:70:8f:39:dc:87:c4:c6:c4:40:11:3b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:31 2024 GMT
            Not After : Mar  5 14:14:31 2025 GMT
        Subject: CN=198E087498AAA48C624A6A2BF4E60BAC9DF079F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:a6:94:93:08:bf:4c:03:56:a5:00:ec:98:
                    2a:18:a5:75:fc:78:8a:d3:31:cb:71:06:55:2d:8e:
                    88:ce:46:f3:12:77:4c:ba:cf:84:68:6b:0f:a0:96:
                    ff:d8:9c:7f:98:a3:0a:1c:7f:39:d6:70:2b:dc:27:
                    fd:d9:8e:d0:72:60:76:f1:58:99:da:ac:99:65:7f:
                    15:a1:2b:62:5d:80:fd:07:47:55:77:59:dc:63:ec:
                    c3:54:ef:9c:0b:5b:12:02:61:b8:c0:e9:a1:4a:74:
                    88:0a:26:64:e2:c5:22:e8:75:bb:13:53:bc:25:17:
                    e8:6b:da:c1:7c:a3:08:d1:97:b6:73:13:65:c3:68:
                    90:05:1a:43:33:3c:14:e6:aa:6f:33:d5:07:87:49:
                    c6:b1:25:b0:38:04:75:98:c8:fa:5b:b6:02:e5:b2:
                    33:e8:d2:1f:26:48:96:54:e9:de:7d:5d:fc:06:da:
                    2c:04:13:2f:a6:1f:75:e0:c7:9d:09:be:59:fd:74:
                    e8:b1:62:e4:f4:a1:50:60:00:d1:76:2e:fc:da:f3:
                    6d:f0:eb:ea:83:17:d0:ec:07:c3:85:f3:4e:8f:0f:
                    5f:16:62:d6:52:15:10:18:38:e1:49:0b:f2:95:92:
                    43:12:a3:13:e1:d2:da:21:ec:9c:5b:59:5c:9f:f6:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8E:08:74:98:AA:A4:8C:62:4A:6A:2B:F4:E6:0B:AC:9D:F0:79:F1
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a663133323a3a2f34372d3437203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:f132::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:f8:67:64:09:a3:9a:76:ff:13:81:0c:68:89:80:08:fd:84:
         9e:85:e3:6c:1e:99:9b:d1:89:75:0f:8e:5e:f1:3b:48:43:19:
         66:38:13:b0:19:3f:c4:db:00:72:a7:82:de:43:dc:f3:3d:78:
         d2:4c:53:80:89:df:d1:b1:16:7d:b3:02:08:08:f7:c8:15:84:
         15:3b:c5:b4:fb:8e:a9:7b:9c:c0:e4:8b:27:63:72:17:79:8d:
         31:10:c3:37:a0:d5:b8:1c:2f:b3:ec:7a:54:c5:62:2b:11:8e:
         c2:73:3b:1f:ba:26:a5:62:39:97:07:f7:11:6d:a3:74:4f:d4:
         64:6d:e6:9a:79:c2:cd:d1:8d:33:96:f4:26:88:64:2f:10:2e:
         f1:2a:92:bc:a7:93:d5:11:fd:f8:29:66:71:82:9a:29:21:62:
         3e:d0:c8:14:e3:90:67:20:f9:c9:36:2a:0f:c4:2e:b0:7c:ee:
         d1:7a:1b:f0:55:cf:19:31:bb:da:fc:56:61:eb:3f:98:e0:9a:
         75:55:11:9f:c6:1f:8e:33:38:65:22:f6:d6:32:6a:7e:8d:19:
         c5:81:34:42:38:cd:ea:7a:89:55:68:5e:12:53:a3:c5:59:31:
         55:48:67:2d:cf:39:ac:5b:21:5e:95:a7:21:8a:24:ca:2b:1b:
         51:f7:27:24
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUKLqhp/E1scZwjznch8TGxEAROzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0NTMyNzQ1MUNFODRFMzlGQjczNjNCQzAyNTQ5QkIw
RjAwNEY0QjAeFw0yNDAzMDYxNDA5MzFaFw0yNTAzMDUxNDE0MzFaMDMxMTAvBgNV
BAMTKDE5OEUwODc0OThBQUE0OEM2MjRBNkEyQkY0RTYwQkFDOURGMDc5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9aaUkwi/TANWpQDsmCoYpXX8
eIrTMctxBlUtjojORvMSd0y6z4Roaw+glv/YnH+YowocfznWcCvcJ/3ZjtByYHbx
WJnarJllfxWhK2JdgP0HR1V3Wdxj7MNU75wLWxICYbjA6aFKdIgKJmTixSLodbsT
U7wlF+hr2sF8owjRl7ZzE2XDaJAFGkMzPBTmqm8z1QeHScaxJbA4BHWYyPpbtgLl
sjPo0h8mSJZU6d59XfwG2iwEEy+mH3Xgx50Jvln9dOixYuT0oVBgANF2Lvza823w
6+qDF9DsB8OF806PD18WYtZSFRAYOOFJC/KVkkMSoxPh0toh7JxbWVyf9tR3AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUGY4IdJiqpIxiSmor9OYLrJ3wefEwHwYDVR0j
BBgwFoAUlEUydFHOhOOftzY7wCVJuw8AT0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMC85NDQ1MzI3NDUxQ0U4NEUzOUZCNzM2M0JDMDI1NDlCQjBGMDA0RjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0NDUzMjc0NTFDRTg0RTM5
RkI3MzYzQkMwMjU0OUJCMEYwMDRGNEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzAv
MzIzODMwMzQzYTM4MzIzODNhNjYzMTMzMzIzYTNhMmYzNDM3MmQzNDM3MjAzZDNl
MjAzMjM2MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEoBAgo8TIwDQYJKoZIhvcNAQELBQAD
ggEBAIL4Z2QJo5p2/xOBDGiJgAj9hJ6F42wemZvRiXUPjl7xO0hDGWY4E7AZP8Tb
AHKngt5D3PM9eNJMU4CJ39GxFn2zAggI98gVhBU7xbT7jql7nMDkiydjchd5jTEQ
wzeg1bgcL7PselTFYisRjsJzOx+6JqViOZcH9xFto3RP1GRt5pp5ws3RjTOW9CaI
ZC8QLvEqkrynk9UR/fgpZnGCmikhYj7QyBTjkGcg+ck2Kg/ELrB87tF6G/BVzxkx
u9r8VmHrP5jgmnVVEZ/GH44zOGUi9tYyan6NGcWBNEI4zep6iVVoXhJTo8VZMVVI
Zy3POaxbIV6VpyGKJMorG1H3JyQ=
-----END CERTIFICATE-----