Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a663233323a3a2f34372d3437203d3e20323632333534.roa
File:                     323830343a3832383a663233323a3a2f34372d3437203d3e20323632333534.roa (raw, json)
Hash identifier:          0PuXr/vonIJk+Ic8yz9TK+Z7IrXtv96fXbvDhHjGibo=
Subject key identifier:   5A:82:81:A1:6B:0B:A5:4B:0C:F6:DB:0A:E1:2B:ED:4C:FD:21:EA:43
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       2F567EE6439C49884A9DDCA0B3AAAC6C16E8F848
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a663233323a3a2f34372d3437203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:33 +0000
ROA not before:           Wed 06 Mar 2024 14:09:33 +0000
ROA not after:            Wed 05 Mar 2025 14:14:33 +0000
asID:                     262354
IP address blocks:        2804:828:f232::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:56:7e:e6:43:9c:49:88:4a:9d:dc:a0:b3:aa:ac:6c:16:e8:f8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:33 2024 GMT
            Not After : Mar  5 14:14:33 2025 GMT
        Subject: CN=5A8281A16B0BA54B0CF6DB0AE12BED4CFD21EA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:6d:7e:4f:a5:78:48:c6:2f:1f:db:a1:5f:
                    cd:b8:6a:d1:e2:86:0b:ac:ee:48:2f:ac:f4:e7:29:
                    85:e2:97:61:e9:0c:d8:80:33:85:30:93:73:4c:d2:
                    8a:91:55:1b:79:87:3e:67:ae:26:4c:7e:a7:1f:22:
                    ca:11:ae:54:60:15:4d:f8:8a:af:a9:89:78:f0:b8:
                    97:5d:a5:84:d7:9c:48:d7:df:6e:a1:be:cb:d4:85:
                    c9:80:54:18:56:4b:05:66:d3:43:a6:e7:3c:49:6a:
                    92:1d:93:f5:5e:6c:88:21:2a:79:93:4b:c9:d0:50:
                    50:44:c0:f7:4e:e0:77:c3:cf:c2:77:c7:b4:80:e1:
                    bf:15:d1:3c:9b:c4:a6:62:e3:d3:8a:ac:3b:4b:b5:
                    d6:1c:52:f0:2c:52:1b:4c:cc:c4:f0:18:75:aa:1d:
                    b8:9d:3b:3b:b0:90:00:08:e0:ce:71:af:f1:87:4d:
                    6b:0e:f8:10:62:10:7d:3f:ae:a8:1c:48:d4:b6:43:
                    94:c8:67:0c:47:25:e7:29:3e:29:23:8a:f9:18:08:
                    cc:cc:a7:ea:19:7a:c4:82:6c:6c:88:3e:a9:df:af:
                    f2:3e:f2:50:f5:41:6d:90:a1:96:75:e4:54:15:c1:
                    b4:f5:57:d5:1e:7f:f3:08:fe:e7:0e:84:17:ff:a7:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:82:81:A1:6B:0B:A5:4B:0C:F6:DB:0A:E1:2B:ED:4C:FD:21:EA:43
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/323830343a3832383a663233323a3a2f34372d3437203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828:f232::/47

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:d9:e2:8d:a4:15:78:8d:12:25:5c:69:b3:e4:95:ba:c2:
         c2:d8:c1:99:d3:58:f3:f3:18:78:be:ee:04:40:e5:a0:a1:a9:
         6b:d9:56:10:95:1f:6d:1b:f7:55:85:fc:cf:26:0b:3e:06:72:
         c2:ae:a8:2f:f0:bc:aa:e0:4c:b4:21:4b:5c:8e:59:28:b7:12:
         9d:3b:59:29:69:d6:a5:1f:33:40:07:36:02:c8:ed:68:91:25:
         6e:ba:f2:55:66:ed:b3:db:69:d6:82:5d:72:d4:13:0d:b4:c4:
         83:b3:5a:78:e1:b3:14:75:bb:72:2c:4f:3b:96:99:b1:90:99:
         5e:3a:68:9b:24:ce:3a:d1:09:a7:50:a9:94:56:49:21:02:f5:
         0b:b8:3e:92:32:e2:73:b5:82:1d:6f:46:5b:48:be:f8:32:aa:
         6a:34:91:b0:f0:4c:b1:a0:00:3c:ae:b0:68:72:8e:a9:77:4f:
         c2:48:b4:2b:ab:20:91:a2:af:d5:1d:63:70:3f:1c:57:de:ed:
         06:fa:42:2c:08:f2:01:0e:b0:2e:5f:35:8c:b8:9d:9d:3e:6e:
         b2:78:d6:b2:0b:d4:9e:99:7b:33:75:a6:f5:2b:12:2d:f7:06:
         fd:0c:aa:b6:e3:f9:df:48:61:f8:9c:87:0b:99:dc:8f:06:e4:
         7b:c7:48:88
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUL1Z+5kOcSYhKndygs6qsbBbo+EgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0NTMyNzQ1MUNFODRFMzlGQjczNjNCQzAyNTQ5QkIw
RjAwNEY0QjAeFw0yNDAzMDYxNDA5MzNaFw0yNTAzMDUxNDE0MzNaMDMxMTAvBgNV
BAMTKDVBODI4MUExNkIwQkE1NEIwQ0Y2REIwQUUxMkJFRDRDRkQyMUVBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Zm1+T6V4SMYvH9uhX824atHi
hgus7kgvrPTnKYXil2HpDNiAM4Uwk3NM0oqRVRt5hz5nriZMfqcfIsoRrlRgFU34
iq+piXjwuJddpYTXnEjX326hvsvUhcmAVBhWSwVm00Om5zxJapIdk/VebIghKnmT
S8nQUFBEwPdO4HfDz8J3x7SA4b8V0TybxKZi49OKrDtLtdYcUvAsUhtMzMTwGHWq
HbidOzuwkAAI4M5xr/GHTWsO+BBiEH0/rqgcSNS2Q5TIZwxHJecpPikjivkYCMzM
p+oZesSCbGyIPqnfr/I+8lD1QW2QoZZ15FQVwbT1V9Uef/MI/ucOhBf/p1o/AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUWoKBoWsLpUsM9tsK4SvtTP0h6kMwHwYDVR0j
BBgwFoAUlEUydFHOhOOftzY7wCVJuw8AT0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMC85NDQ1MzI3NDUxQ0U4NEUzOUZCNzM2M0JDMDI1NDlCQjBGMDA0RjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0NDUzMjc0NTFDRTg0RTM5
RkI3MzYzQkMwMjU0OUJCMEYwMDRGNEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzAv
MzIzODMwMzQzYTM4MzIzODNhNjYzMjMzMzIzYTNhMmYzNDM3MmQzNDM3MjAzZDNl
MjAzMjM2MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEoBAgo8jIwDQYJKoZIhvcNAQELBQAD
ggEBACD52eKNpBV4jRIlXGmz5JW6wsLYwZnTWPPzGHi+7gRA5aChqWvZVhCVH20b
91WF/M8mCz4GcsKuqC/wvKrgTLQhS1yOWSi3Ep07WSlp1qUfM0AHNgLI7WiRJW66
8lVm7bPbadaCXXLUEw20xIOzWnjhsxR1u3IsTzuWmbGQmV46aJskzjrRCadQqZRW
SSEC9Qu4PpIy4nO1gh1vRltIvvgyqmo0kbDwTLGgADyusGhyjql3T8JItCurIJGi
r9UdY3A/HFfe7Qb6QiwI8gEOsC5fNYy4nZ0+brJ41rIL1J6ZezN1pvUrEi33Bv0M
qrbj+d9IYfichwuZ3I8G5HvHSIg=
-----END CERTIFICATE-----