Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/323830343a316565633a3a2f33322d3336203d3e20323634343535.roa
File:                     323830343a316565633a3a2f33322d3336203d3e20323634343535.roa (raw, json)
Hash identifier:          3QNqNMUwS4yAqTJ/sL38KNbcVNL524ezvSLGEDFXwxg=
Subject key identifier:   68:C9:82:C0:8E:59:FC:75:CD:8B:17:2D:F8:B6:66:D2:C5:E0:8E:67
Certificate issuer:       /CN=BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11
Certificate serial:       6550D41AA491F5DBD3DBBF036693761F1960E92F
Authority key identifier: BA:91:9A:A3:A0:FA:6D:DD:DD:71:AB:94:6E:CA:11:DB:9D:13:3B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/323830343a316565633a3a2f33322d3336203d3e20323634343535.roa
Signing time:             Mon 19 Feb 2024 20:22:17 +0000
ROA not before:           Mon 19 Feb 2024 20:17:17 +0000
ROA not after:            Mon 17 Feb 2025 20:22:17 +0000
asID:                     264455
IP address blocks:        2804:1eec::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:50:d4:1a:a4:91:f5:db:d3:db:bf:03:66:93:76:1f:19:60:e9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11
        Validity
            Not Before: Feb 19 20:17:17 2024 GMT
            Not After : Feb 17 20:22:17 2025 GMT
        Subject: CN=68C982C08E59FC75CD8B172DF8B666D2C5E08E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:48:ac:bd:73:5f:93:c6:39:b9:a3:1d:4f:
                    53:f5:ba:bd:94:33:d8:75:09:c2:06:77:ad:92:20:
                    29:cc:b5:fc:81:54:a7:7b:fc:b6:c4:1f:ef:bb:12:
                    63:42:38:61:b3:4b:aa:4c:79:4b:aa:c3:80:d1:9e:
                    da:1d:69:e8:48:43:ff:13:c8:79:69:56:12:1a:07:
                    67:f4:2e:63:ff:91:d2:b5:a7:57:a9:84:d9:7d:56:
                    aa:4f:48:3e:6e:36:83:12:64:86:24:29:68:d9:da:
                    d9:03:b6:ba:d0:c4:20:38:d4:05:2d:62:04:4e:66:
                    96:a1:e8:97:d4:3d:97:39:23:b7:b4:c2:a0:b5:be:
                    ce:80:ea:1f:83:ed:c3:90:91:18:e9:58:c2:fe:fa:
                    74:36:e7:6c:2a:10:f0:af:30:bb:b0:0d:5e:82:5f:
                    7c:d4:53:60:23:bb:b8:ed:35:26:41:f9:ac:09:de:
                    0e:1e:0b:75:f3:e4:85:51:2c:de:cc:cf:50:82:6b:
                    a4:c6:3d:eb:7a:87:23:78:14:bb:0e:51:9e:17:1c:
                    aa:d3:cd:08:dd:8a:d0:88:3f:15:02:a6:1b:84:70:
                    38:2e:01:0d:47:0e:4d:0d:b0:ae:e4:a6:74:84:0b:
                    c3:53:69:c4:e1:43:4d:5b:b0:71:8a:ea:af:8e:4e:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C9:82:C0:8E:59:FC:75:CD:8B:17:2D:F8:B6:66:D2:C5:E0:8E:67
            X509v3 Authority Key Identifier:
                keyid:BA:91:9A:A3:A0:FA:6D:DD:DD:71:AB:94:6E:CA:11:DB:9D:13:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/323830343a316565633a3a2f33322d3336203d3e20323634343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eec::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:c1:d1:5c:67:d6:0c:22:fb:f4:93:43:67:85:4e:3a:47:11:
         ea:0a:6a:19:de:0d:70:f3:ba:a2:f6:2d:b6:91:99:a2:63:87:
         b2:8f:51:b2:12:f2:15:39:2a:80:a7:53:51:a0:0c:e2:60:3e:
         bc:8c:85:b7:8e:4b:a4:68:4f:3d:a9:20:94:52:3d:0b:f1:23:
         a1:f1:5d:3d:9b:70:38:76:01:fc:a9:69:4a:53:9b:a3:74:50:
         f6:68:ad:eb:c5:26:57:e9:9f:a6:6d:a5:ea:1c:85:df:0c:f4:
         92:47:91:42:0a:11:bb:95:d9:b1:45:88:17:8d:ea:96:e3:5e:
         c7:8a:93:fe:e1:a2:93:86:db:1b:11:23:39:3c:cb:b3:0e:3c:
         e4:03:41:03:15:bc:cf:1e:fb:ca:64:8a:58:96:aa:85:a1:0f:
         86:ab:ba:27:c8:38:aa:5a:22:46:91:45:10:b0:70:ed:d3:9b:
         13:50:c1:36:22:dc:f5:8b:14:66:5a:15:7a:29:8c:5f:b8:d9:
         98:5e:d1:dc:34:0b:44:36:83:ad:ed:65:26:c1:b8:95:ce:96:
         8f:24:92:25:0b:ec:28:c1:70:21:04:37:fe:a2:a7:d8:87:c7:
         c9:60:c5:f0:af:65:d7:ce:55:14:30:83:56:ee:18:87:db:29:
         d1:26:d4:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZVDUGqSR9dvT278DZpN2Hxlg6S8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE5MTlBQTNBMEZBNkRERERENzFBQjk0NkVDQTExREI5
RDEzM0IxMTAeFw0yNDAyMTkyMDE3MTdaFw0yNTAyMTcyMDIyMTdaMDMxMTAvBgNV
BAMTKDY4Qzk4MkMwOEU1OUZDNzVDRDhCMTcyREY4QjY2NkQyQzVFMDhFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2UisvXNfk8Y5uaMdT1P1ur2U
M9h1CcIGd62SICnMtfyBVKd7/LbEH++7EmNCOGGzS6pMeUuqw4DRntodaehIQ/8T
yHlpVhIaB2f0LmP/kdK1p1ephNl9VqpPSD5uNoMSZIYkKWjZ2tkDtrrQxCA41AUt
YgROZpah6JfUPZc5I7e0wqC1vs6A6h+D7cOQkRjpWML++nQ252wqEPCvMLuwDV6C
X3zUU2Aju7jtNSZB+awJ3g4eC3Xz5IVRLN7Mz1CCa6TGPet6hyN4FLsOUZ4XHKrT
zQjditCIPxUCphuEcDguAQ1HDk0NsK7kpnSEC8NTacThQ01bsHGK6q+OTlypAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUaMmCwI5Z/HXNixct+LZm0sXgjmcwHwYDVR0j
BBgwFoAUupGao6D6bd3dcauUbsoR250TOxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzJ0R2NUOTFNTFVwWXRqeUFhcG82UENvd1lXV3pVTWp1eXZ3bzdZc21o
d28vMC9CQTkxOUFBM0EwRkE2REREREQ3MUFCOTQ2RUNBMTFEQjlEMTMzQjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JBOTE5QUEzQTBGQTZERERE
RDcxQUI5NDZFQ0ExMURCOUQxMzNCMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcydEdjVDkxTUxVcFl0anlBYXBvNlBDb3dZV1d6VU1qdXl2d283WXNtaHdvLzAv
MzIzODMwMzQzYTMxNjU2NTYzM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM0
MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQe7DANBgkqhkiG9w0BAQsFAAOCAQEAY8HRXGfW
DCL79JNDZ4VOOkcR6gpqGd4NcPO6ovYttpGZomOHso9RshLyFTkqgKdTUaAM4mA+
vIyFt45LpGhPPakglFI9C/EjofFdPZtwOHYB/KlpSlObo3RQ9mit68UmV+mfpm2l
6hyF3wz0kkeRQgoRu5XZsUWIF43qluNex4qT/uGik4bbGxEjOTzLsw485ANBAxW8
zx77ymSKWJaqhaEPhqu6J8g4qloiRpFFELBw7dObE1DBNiLc9YsUZloVeimMX7jZ
mF7R3DQLRDaDre1lJsG4lc6WjySSJQvsKMFwIQQ3/qKn2IfHyWDF8K9l185VFDCD
Vu4Yh9sp0SbUfw==
-----END CERTIFICATE-----