Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          DrLz7o6TXlqXcibl9YYQ+7rpHhKWcheVT0piFVt6gaU=
Subject key identifier:   16:AD:F8:67:EB:71:80:AA:FC:3A:04:E6:F8:6B:20:0A:EF:AD:4B:68
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       3D585073A6DC27AAFB28DC3EDDB8C420B3FB7EE0
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:48 +0000
ROA not before:           Tue 27 Feb 2024 17:25:48 +0000
ROA not after:            Tue 25 Feb 2025 17:30:48 +0000
asID:                     263146
IP address blocks:        2804:1778:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:58:50:73:a6:dc:27:aa:fb:28:dc:3e:dd:b8:c4:20:b3:fb:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:48 2024 GMT
            Not After : Feb 25 17:30:48 2025 GMT
        Subject: CN=16ADF867EB7180AAFC3A04E6F86B200AEFAD4B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:1f:7b:91:bd:e8:e4:bb:1e:f2:1f:8a:89:
                    13:cc:b0:c1:0d:77:1d:fd:15:d6:3c:70:be:ac:62:
                    71:0d:cc:d2:0e:b1:6d:ae:81:34:47:42:fe:af:42:
                    e3:7f:7d:0d:82:09:91:e5:59:aa:4d:ec:79:84:66:
                    a1:39:d8:17:60:cf:a7:2f:ee:d5:2c:21:e9:59:e5:
                    8c:74:f0:3f:9d:6d:0c:02:c1:a7:de:f1:9e:a5:c3:
                    87:ce:60:ec:14:22:27:d3:0f:c4:4b:72:44:1b:c6:
                    81:ba:5e:82:4b:fb:04:b7:4a:e0:9e:33:7f:95:74:
                    d4:b4:4e:cf:38:cd:03:75:61:e5:ed:c6:4e:c9:0c:
                    25:7b:e5:85:c4:06:30:14:cb:0d:5a:03:61:cf:8c:
                    92:dc:5f:26:44:cb:d1:f5:85:c7:c8:40:f9:f7:6f:
                    75:24:e6:07:2b:23:10:70:76:25:9c:b8:59:9b:bc:
                    a6:c7:53:24:57:96:17:f7:c8:3a:2b:87:b2:67:45:
                    f7:70:16:84:fd:84:5f:3f:0a:6e:b2:96:1c:ab:05:
                    c0:d9:fc:ba:be:50:4a:03:72:cf:79:39:f5:a5:a4:
                    c3:97:7e:de:2a:b3:bd:be:28:88:a3:4d:6e:58:8e:
                    78:96:88:99:e6:62:d6:09:bb:48:00:02:1b:ef:c0:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:F8:67:EB:71:80:AA:FC:3A:04:E6:F8:6B:20:0A:EF:AD:4B:68
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a363030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a5:d6:20:9f:84:a9:4a:97:08:c5:1f:7a:62:8e:8a:03:0d:42:
         bb:84:d6:e4:05:e6:55:b9:05:9f:85:15:77:43:f7:4b:af:29:
         fc:03:8e:9f:f5:b6:9f:15:69:41:b3:a8:02:fd:c1:fb:c6:b5:
         8a:e2:06:d3:89:d3:ab:d2:42:8c:fb:11:49:9c:22:b3:b7:2a:
         78:e7:56:98:e3:f5:aa:60:cd:0b:8d:a9:f1:38:2b:ef:23:e8:
         77:dd:05:ca:f3:09:f9:60:1b:ec:bf:68:91:4f:46:2e:70:4b:
         b6:9f:7f:33:e2:fb:f0:1a:6b:2a:e0:80:a2:c7:f7:f1:25:7a:
         55:5e:4c:fc:dc:52:da:35:a4:6f:42:4f:70:3b:77:52:d9:45:
         46:62:7c:79:45:2b:62:d6:ef:a7:c6:9c:52:4f:41:ef:b6:2c:
         e4:1e:4e:cc:1b:28:25:00:66:04:1f:0c:d6:8d:a0:53:e4:46:
         93:eb:5f:5c:15:ec:ff:97:57:27:3c:e6:13:6a:42:d2:b3:18:
         ac:1c:13:41:16:2b:0b:90:31:52:eb:ba:6d:31:f7:e7:96:d0:
         03:a3:11:67:2f:db:b0:7d:3f:09:58:65:ba:21:db:50:24:c2:
         af:eb:b7:61:c1:88:4d:9a:ec:56:65:11:f1:a0:38:24:a7:d7:
         85:31:2c:17
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPVhQc6bcJ6r7KNw+3bjEILP7fuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxNzMwMzFGNEQ0MjVERjA5REI3MzFFNEY3QUMxMDEx
REU2NkYxOTAeFw0yNDAyMjcxNzI1NDhaFw0yNTAyMjUxNzMwNDhaMDMxMTAvBgNV
BAMTKDE2QURGODY3RUI3MTgwQUFGQzNBMDRFNkY4NkIyMDBBRUZBRDRCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNcR97kb3o5Lse8h+KiRPMsMEN
dx39FdY8cL6sYnENzNIOsW2ugTRHQv6vQuN/fQ2CCZHlWapN7HmEZqE52Bdgz6cv
7tUsIelZ5Yx08D+dbQwCwafe8Z6lw4fOYOwUIifTD8RLckQbxoG6XoJL+wS3SuCe
M3+VdNS0Ts84zQN1YeXtxk7JDCV75YXEBjAUyw1aA2HPjJLcXyZEy9H1hcfIQPn3
b3Uk5gcrIxBwdiWcuFmbvKbHUyRXlhf3yDorh7JnRfdwFoT9hF8/Cm6ylhyrBcDZ
/Lq+UEoDcs95OfWlpMOXft4qs72+KIijTW5YjniWiJnmYtYJu0gAAhvvwC4xAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFq34Z+txgKr8OgTm+GsgCu+tS2gwHwYDVR0j
BBgwFoAUQhcwMfTUJd8J23MeT3rBAR3mbxkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMC80MjE3MzAzMUY0RDQyNURGMDlEQjczMUU0RjdBQzEwMTFERTY2RjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMTczMDMxRjRENDI1REYw
OURCNzMxRTRGN0FDMTAxMURFNjZGMTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzAv
MzIzODMwMzQzYTMxMzczNzM4M2EzNjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMzMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEF3hgMA0GCSqGSIb3DQEBCwUA
A4IBAQCl1iCfhKlKlwjFH3pijooDDUK7hNbkBeZVuQWfhRV3Q/dLryn8A46f9baf
FWlBs6gC/cH7xrWK4gbTidOr0kKM+xFJnCKztyp451aY4/WqYM0LjanxOCvvI+h3
3QXK8wn5YBvsv2iRT0YucEu2n38z4vvwGmsq4ICix/fxJXpVXkz83FLaNaRvQk9w
O3dS2UVGYnx5RSti1u+nxpxST0HvtizkHk7MGyglAGYEHwzWjaBT5EaT619cFez/
l1cnPOYTakLSsxisHBNBFisLkDFS67ptMffnltADoxFnL9uwfT8JWGW6IdtQJMKv
67dhwYhNmuxWZRHxoDgkp9eFMSwX
-----END CERTIFICATE-----