Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a343030303a3a2f33342d3334203d3e20323633313436.roa
File:                     323830343a313737383a343030303a3a2f33342d3334203d3e20323633313436.roa (raw, json)
Hash identifier:          JEfpZ3yMjtIsV8CwZjsTpTgMWVNlHd00LnfLzaNyKNw=
Subject key identifier:   CB:DB:AF:AD:2B:5F:04:D0:0D:69:51:D6:20:CB:1C:9A:60:D7:FA:AD
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       45BE1802BA805987B738D045A29AC38A157135C2
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a343030303a3a2f33342d3334203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:43 +0000
ROA not before:           Tue 27 Feb 2024 17:25:43 +0000
ROA not after:            Tue 25 Feb 2025 17:30:43 +0000
asID:                     263146
IP address blocks:        2804:1778:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:be:18:02:ba:80:59:87:b7:38:d0:45:a2:9a:c3:8a:15:71:35:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:43 2024 GMT
            Not After : Feb 25 17:30:43 2025 GMT
        Subject: CN=CBDBAFAD2B5F04D00D6951D620CB1C9A60D7FAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:6a:a9:73:48:ac:21:37:40:ad:01:1f:79:
                    f2:5e:ac:04:fb:eb:df:c3:b1:4b:f0:0c:3f:05:02:
                    16:ea:4a:3e:af:fe:ea:fe:30:d6:60:15:9d:14:42:
                    76:c9:36:d9:8c:79:37:66:fd:9b:3a:35:fc:98:df:
                    21:32:e9:c3:7c:a5:8c:70:19:2b:18:e5:52:cd:b3:
                    c8:82:f4:f0:73:99:63:aa:b5:48:51:f6:23:e0:2a:
                    6d:8a:0c:d6:3f:19:a6:7d:75:6c:70:af:41:cd:22:
                    22:48:57:2b:ee:95:33:d9:08:65:0f:bb:2c:7d:02:
                    5f:91:af:a9:17:7f:d4:4b:92:75:cf:11:96:37:cd:
                    97:4b:44:b5:cc:53:bf:0c:29:f2:ca:dd:a0:e8:86:
                    a3:e5:6f:15:be:72:ed:01:9e:3a:54:78:f7:22:4a:
                    9f:ac:21:4b:e7:0d:db:dd:27:63:f4:fb:6f:77:a7:
                    bf:c6:5e:fc:68:99:04:09:43:3f:f7:d1:29:f8:da:
                    62:89:ef:90:dc:6f:97:e8:50:f7:ea:09:4c:7b:72:
                    5f:a1:ac:d4:cd:74:6d:11:57:1d:65:7c:29:0d:1f:
                    94:35:52:06:7f:11:1e:69:19:58:ec:b3:ab:e1:35:
                    0d:c6:5d:15:28:c8:2e:8f:ed:3b:4c:64:5b:e4:f4:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:AF:AD:2B:5F:04:D0:0D:69:51:D6:20:CB:1C:9A:60:D7:FA:AD
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a343030303a3a2f33342d3334203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:61:77:5e:b1:6f:6b:2c:09:53:3c:a7:1b:5e:4c:b7:40:13:
         08:11:ed:c2:94:f4:3a:df:22:43:51:e8:e2:9d:88:72:d2:af:
         f8:68:e4:a1:bb:d8:de:e9:48:00:77:c2:3b:de:4b:2b:9b:bc:
         9b:9b:d9:50:04:15:e2:01:ec:9f:ab:7d:bf:7a:59:35:3f:9d:
         c3:8b:2c:3a:b5:66:b9:61:4d:14:d6:2e:53:8e:35:50:3f:cf:
         74:20:4b:61:49:ad:e9:c2:b8:41:5a:fa:34:3c:ca:0f:b4:2a:
         83:23:05:18:c4:12:03:ba:93:58:29:61:73:1c:d3:ab:89:c7:
         c5:c3:51:db:58:74:d1:80:ca:32:d6:85:d2:d1:78:4b:25:d1:
         06:d2:fb:23:14:ba:a5:30:6b:69:56:5f:6b:b6:07:46:49:bb:
         cf:a2:17:12:69:1d:e9:81:15:5d:b2:dd:55:c3:7e:b6:ed:38:
         25:45:9a:f7:81:87:a0:bf:c0:f9:e0:5b:62:af:0e:52:88:ef:
         92:78:4e:d3:fc:62:66:3a:ca:8e:b3:a2:db:2f:49:19:1c:9e:
         e7:d9:39:b4:4a:28:e1:4c:8e:73:7a:3b:8e:a6:0f:a0:81:77:
         93:19:c1:7c:d8:8c:30:43:3f:94:12:80:0c:fd:4d:23:eb:34:
         94:7e:3f:71
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURb4YArqAWYe3ONBFoprDihVxNcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxNzMwMzFGNEQ0MjVERjA5REI3MzFFNEY3QUMxMDEx
REU2NkYxOTAeFw0yNDAyMjcxNzI1NDNaFw0yNTAyMjUxNzMwNDNaMDMxMTAvBgNV
BAMTKENCREJBRkFEMkI1RjA0RDAwRDY5NTFENjIwQ0IxQzlBNjBEN0ZBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7Wqpc0isITdArQEfefJerAT7
69/DsUvwDD8FAhbqSj6v/ur+MNZgFZ0UQnbJNtmMeTdm/Zs6NfyY3yEy6cN8pYxw
GSsY5VLNs8iC9PBzmWOqtUhR9iPgKm2KDNY/GaZ9dWxwr0HNIiJIVyvulTPZCGUP
uyx9Al+Rr6kXf9RLknXPEZY3zZdLRLXMU78MKfLK3aDohqPlbxW+cu0BnjpUePci
Sp+sIUvnDdvdJ2P0+293p7/GXvxomQQJQz/30Sn42mKJ75Dcb5foUPfqCUx7cl+h
rNTNdG0RVx1lfCkNH5Q1UgZ/ER5pGVjss6vhNQ3GXRUoyC6P7TtMZFvk9EatAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUy9uvrStfBNANaVHWIMscmmDX+q0wHwYDVR0j
BBgwFoAUQhcwMfTUJd8J23MeT3rBAR3mbxkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMC80MjE3MzAzMUY0RDQyNURGMDlEQjczMUU0RjdBQzEwMTFERTY2RjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMTczMDMxRjRENDI1REYw
OURCNzMxRTRGN0FDMTAxMURFNjZGMTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzAv
MzIzODMwMzQzYTMxMzczNzM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEF3hAMA0GCSqGSIb3DQEBCwUA
A4IBAQAmYXdesW9rLAlTPKcbXky3QBMIEe3ClPQ63yJDUejinYhy0q/4aOShu9je
6UgAd8I73ksrm7ybm9lQBBXiAeyfq32/elk1P53Diyw6tWa5YU0U1i5TjjVQP890
IEthSa3pwrhBWvo0PMoPtCqDIwUYxBIDupNYKWFzHNOricfFw1HbWHTRgMoy1oXS
0XhLJdEG0vsjFLqlMGtpVl9rtgdGSbvPohcSaR3pgRVdst1Vw3627TglRZr3gYeg
v8D54Ftirw5SiO+SeE7T/GJmOsqOs6LbL0kZHJ7n2Tm0SijhTI5zejuOpg+ggXeT
GcF82IwwQz+UEoAM/U0j6zSUfj9x
-----END CERTIFICATE-----