Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33332d3333203d3e20323638393235.roa
File:                     323830343a356362343a3a2f33332d3333203d3e20323638393235.roa (raw, json)
Hash identifier:          GqPNLZTin/KAAORL4ghHyYJ4C6RvsUogdTG5oK6k/vU=
Subject key identifier:   15:EC:52:06:B3:47:80:81:2B:D3:3E:03:25:BE:53:BA:C0:77:53:08
Certificate issuer:       /CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
Certificate serial:       39B33F4B42892DC3336F3EA24CF3654946303901
Authority key identifier: E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33332d3333203d3e20323638393235.roa
Signing time:             Thu 01 Feb 2024 14:27:01 +0000
ROA not before:           Thu 01 Feb 2024 14:22:01 +0000
ROA not after:            Thu 30 Jan 2025 14:27:01 +0000
asID:                     268925
IP address blocks:        2804:5cb4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b3:3f:4b:42:89:2d:c3:33:6f:3e:a2:4c:f3:65:49:46:30:39:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
        Validity
            Not Before: Feb  1 14:22:01 2024 GMT
            Not After : Jan 30 14:27:01 2025 GMT
        Subject: CN=15EC5206B34780812BD33E0325BE53BAC0775308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:08:f3:59:af:7b:de:c8:d2:7f:e4:c9:67:
                    f2:11:97:6c:10:8d:6d:70:a3:be:4d:9f:c0:a5:48:
                    c8:46:1a:5e:1f:7e:51:65:c4:b8:96:07:5f:e6:65:
                    5c:8e:b8:83:59:01:2e:4d:da:68:57:d0:3f:36:d3:
                    35:25:34:26:9f:d9:fd:74:45:3e:ac:99:1b:b1:3d:
                    55:61:d7:7c:c3:b0:64:fc:15:37:96:01:06:a7:8f:
                    34:89:09:39:f1:17:b1:d2:39:3b:20:7b:b3:49:78:
                    73:a3:88:16:4f:2d:9a:1f:ac:cd:11:b5:b4:9f:62:
                    f1:65:94:40:7c:8e:6c:b5:17:f0:5d:69:d0:a9:62:
                    ee:38:1d:9a:5a:81:4b:f9:cc:bc:72:86:5f:48:0e:
                    dd:eb:1a:a2:5e:d3:72:c7:4c:cf:54:55:fd:16:62:
                    bf:73:6c:d2:87:1d:2e:50:5e:4d:93:93:d7:36:a4:
                    55:ab:d6:c5:f5:4b:13:08:ae:18:cc:74:d9:19:31:
                    2d:42:82:9b:33:18:92:1b:15:d2:48:11:00:59:81:
                    11:be:66:fa:05:d8:f3:bc:17:de:db:06:97:df:14:
                    39:49:d7:81:96:cb:f8:b7:cb:d9:a9:09:88:a3:43:
                    fe:7b:01:a4:01:2f:2b:8e:c8:14:8b:4a:87:02:62:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EC:52:06:B3:47:80:81:2B:D3:3E:03:25:BE:53:BA:C0:77:53:08
            X509v3 Authority Key Identifier:
                keyid:E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33332d3333203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cb4::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:ff:f1:77:1a:ea:41:5d:a4:bf:19:42:39:06:fc:a7:37:3e:
         3e:96:56:57:15:6e:fd:4b:a6:a4:98:ff:7e:a5:75:ab:da:99:
         28:94:d9:4c:43:e5:33:52:9b:6f:e3:3b:25:3b:6f:5d:66:24:
         38:f5:f1:79:e8:00:40:e2:5d:e5:86:8e:37:34:68:06:52:a7:
         f0:c4:1d:be:b8:cc:b2:ba:42:f1:65:a9:f2:81:1e:21:4f:a2:
         98:c4:5e:c8:1d:01:db:62:28:92:3b:99:f9:07:06:63:fa:7e:
         eb:0a:62:ba:71:6c:00:9e:e3:ec:11:f0:a2:94:5e:01:94:88:
         6c:63:06:10:d2:31:c3:e3:a3:a8:f7:bb:a2:2e:24:3a:78:9e:
         f7:08:9c:d7:16:f8:6e:7b:e4:a3:2b:df:cb:8c:fe:a4:e4:8a:
         45:72:4e:9b:52:52:e3:2b:c4:e7:48:73:79:a1:21:79:29:66:
         8c:8e:2e:4d:19:92:75:85:1d:ec:1f:b4:96:ab:65:d9:a1:b0:
         c0:28:59:97:3f:84:a9:6a:db:f2:7d:ee:9e:83:f0:c4:bd:00:
         c9:da:08:5a:83:58:58:0c:80:42:75:c7:6f:9d:49:a5:9a:87:
         9f:c7:20:fe:37:4c:69:89:75:3e:cd:33:1f:0a:74:fe:9c:31:
         77:7a:cd:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUObM/S0KJLcMzbz6iTPNlSUYwOQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGRjQ5QTYyNkM4QjMzMDU4NjM3N0QyQjQzOThDQkMy
NEZBNTg2RTAeFw0yNDAyMDExNDIyMDFaFw0yNTAxMzAxNDI3MDFaMDMxMTAvBgNV
BAMTKDE1RUM1MjA2QjM0NzgwODEyQkQzM0UwMzI1QkU1M0JBQzA3NzUzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/gjzWa973sjSf+TJZ/IRl2wQ
jW1wo75Nn8ClSMhGGl4fflFlxLiWB1/mZVyOuINZAS5N2mhX0D820zUlNCaf2f10
RT6smRuxPVVh13zDsGT8FTeWAQanjzSJCTnxF7HSOTsge7NJeHOjiBZPLZofrM0R
tbSfYvFllEB8jmy1F/BdadCpYu44HZpagUv5zLxyhl9IDt3rGqJe03LHTM9UVf0W
Yr9zbNKHHS5QXk2Tk9c2pFWr1sX1SxMIrhjMdNkZMS1CgpszGJIbFdJIEQBZgRG+
ZvoF2PO8F97bBpffFDlJ14GWy/i3y9mpCYijQ/57AaQBLyuOyBSLSocCYln3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFexSBrNHgIEr0z4DJb5TusB3UwgwHwYDVR0j
BBgwFoAU4v9JpibIszBYY3fStDmMvCT6WG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1l
S3QvMC9FMkZGNDlBNjI2QzhCMzMwNTg2Mzc3RDJCNDM5OENCQzI0RkE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyRkY0OUE2MjZDOEIzMzA1
ODYzNzdEMkI0Mzk4Q0JDMjRGQTU4NkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZdXBMQXB5RThwMWphQmFNUlZzVFdxcG9UZ1FKdGM0VVNUV2g2VmVtZUt0LzAv
MzIzODMwMzQzYTM1NjM2MjM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzkzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARctAAwDQYJKoZIhvcNAQELBQADggEBAB//8Xca
6kFdpL8ZQjkG/Kc3Pj6WVlcVbv1LpqSY/36ldavamSiU2UxD5TNSm2/jOyU7b11m
JDj18XnoAEDiXeWGjjc0aAZSp/DEHb64zLK6QvFlqfKBHiFPopjEXsgdAdtiKJI7
mfkHBmP6fusKYrpxbACe4+wR8KKUXgGUiGxjBhDSMcPjo6j3u6IuJDp4nvcInNcW
+G575KMr38uM/qTkikVyTptSUuMrxOdIc3mhIXkpZoyOLk0ZknWFHewftJarZdmh
sMAoWZc/hKlq2/J97p6D8MS9AMnaCFqDWFgMgEJ1x2+dSaWah5/HIP43TGmJdT7N
Mx8KdP6cMXd6zfk=
-----END CERTIFICATE-----