Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/323830343a373465383a3a2f33322d3336203d3e20323731303131.roa
File:                     323830343a373465383a3a2f33322d3336203d3e20323731303131.roa (raw, json)
Hash identifier:          xwjqPOwAPwqISuCUteloVzNvIwxNOrHzdMjJE+xUcUA=
Subject key identifier:   A4:C9:C7:FE:A9:19:C2:26:B5:24:95:80:94:9E:04:56:D0:95:94:BA
Certificate issuer:       /CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
Certificate serial:       7224B501453798C5C16B7F7A6E707ADA8940C5A3
Authority key identifier: F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/323830343a373465383a3a2f33322d3336203d3e20323731303131.roa
Signing time:             Tue 16 Jan 2024 17:00:00 +0000
ROA not before:           Tue 16 Jan 2024 16:55:00 +0000
ROA not after:            Tue 14 Jan 2025 17:00:00 +0000
asID:                     271011
IP address blocks:        2804:74e8::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:24:b5:01:45:37:98:c5:c1:6b:7f:7a:6e:70:7a:da:89:40:c5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
        Validity
            Not Before: Jan 16 16:55:00 2024 GMT
            Not After : Jan 14 17:00:00 2025 GMT
        Subject: CN=3082010A0282010100A4DE09644FD397EDA5907D5EF4DFFA3FD6D993D39BB2FD40D64492972BD716636B692C2A37078FD903FC39CE1E72DD8A2660F988AA3D1B85947989A2728582F1CDD2F7FCA6E78157C2C656F9D081D863FA41EE35026B32EE4F27F9514EC14ECF6D838BD4996886CC7CA3B2380CAFA048044BD85059932A256C679F22196C75D1F3B936D1F256B1C5FD1CA5FE625C683C56E2D38E31C357A4614CE376B1932F3E311B3A48EAFD33D21DB7EF12B51DF51357F231E4A651F6B49CDAE89B3AE90B76DD1DB022D96CFBC084FA6F2D34A671618E338688C27834DC81CC99C27D3317CB9910746656EE4F292AC34F2239F0D46C3404724DD05368787783C2F65536711D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:09:64:4f:d3:97:ed:a5:90:7d:5e:f4:df:
                    fa:3f:d6:d9:93:d3:9b:b2:fd:40:d6:44:92:97:2b:
                    d7:16:63:6b:69:2c:2a:37:07:8f:d9:03:fc:39:ce:
                    1e:72:dd:8a:26:60:f9:88:aa:3d:1b:85:94:79:89:
                    a2:72:85:82:f1:cd:d2:f7:fc:a6:e7:81:57:c2:c6:
                    56:f9:d0:81:d8:63:fa:41:ee:35:02:6b:32:ee:4f:
                    27:f9:51:4e:c1:4e:cf:6d:83:8b:d4:99:68:86:cc:
                    7c:a3:b2:38:0c:af:a0:48:04:4b:d8:50:59:93:2a:
                    25:6c:67:9f:22:19:6c:75:d1:f3:b9:36:d1:f2:56:
                    b1:c5:fd:1c:a5:fe:62:5c:68:3c:56:e2:d3:8e:31:
                    c3:57:a4:61:4c:e3:76:b1:93:2f:3e:31:1b:3a:48:
                    ea:fd:33:d2:1d:b7:ef:12:b5:1d:f5:13:57:f2:31:
                    e4:a6:51:f6:b4:9c:da:e8:9b:3a:e9:0b:76:dd:1d:
                    b0:22:d9:6c:fb:c0:84:fa:6f:2d:34:a6:71:61:8e:
                    33:86:88:c2:78:34:dc:81:cc:99:c2:7d:33:17:cb:
                    99:10:74:66:56:ee:4f:29:2a:c3:4f:22:39:f0:d4:
                    6c:34:04:72:4d:d0:53:68:78:77:83:c2:f6:55:36:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:C7:FE:A9:19:C2:26:B5:24:95:80:94:9E:04:56:D0:95:94:BA
            X509v3 Authority Key Identifier:
                keyid:F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/323830343a373465383a3a2f33322d3336203d3e20323731303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:e1:5d:22:2a:16:85:bc:63:a9:4a:bd:c7:7e:15:db:6e:
         7b:79:27:44:63:d5:82:3e:f4:92:35:eb:0c:15:20:0a:3a:2e:
         46:c1:96:c5:91:0e:90:fd:c5:ca:d2:a4:d3:28:d8:f3:71:ce:
         90:93:80:5a:2d:b8:54:c1:4e:41:0f:2a:46:74:9a:a7:72:b3:
         2e:31:68:c7:77:69:e9:6a:35:c1:bc:5b:0d:84:ef:60:b5:a1:
         f6:a8:0c:f1:1b:5f:02:13:c9:25:d3:26:c4:1a:85:e8:2a:1e:
         f9:c1:b0:65:9d:b8:eb:bc:60:63:99:95:82:97:cb:41:aa:83:
         89:8c:ec:14:7e:df:12:d1:35:68:2e:c0:73:5b:47:32:ef:4c:
         09:b4:88:5e:8c:75:74:26:83:7a:f1:98:25:f6:5a:c4:48:82:
         c2:df:9c:9e:57:df:9b:34:11:92:b7:82:fa:c2:84:60:6a:5d:
         27:52:ff:22:ac:34:86:04:23:86:5a:a7:f7:37:30:b9:cf:50:
         47:4e:a7:3e:28:da:bd:6e:6f:b1:7f:fc:67:b3:9d:4b:27:54:
         04:6a:42:3a:16:ef:69:e4:ce:dd:72:8f:c7:ba:9a:5f:b6:c8:
         7b:75:19:ff:fd:d4:ce:c7:6f:b7:85:bf:57:92:cc:81:b9:81:
         8c:32:48:60
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUciS1AUU3mMXBa396bnB62olAxaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzM0VDMUQ5ODQxMjZDRDZCRDNBN0VGMkYwNEJDNkUx
NUYyNjFEOTAeFw0yNDAxMTYxNjU1MDBaFw0yNTAxMTQxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTRERTA5NjQ0RkQzOTdFREE1
OTA3RDVFRjRERkZBM0ZENkQ5OTNEMzlCQjJGRDQwRDY0NDkyOTcyQkQ3MTY2MzZC
NjkyQzJBMzcwNzhGRDkwM0ZDMzlDRTFFNzJERDhBMjY2MEY5ODhBQTNEMUI4NTk0
Nzk4OUEyNzI4NTgyRjFDREQyRjdGQ0E2RTc4MTU3QzJDNjU2RjlEMDgxRDg2M0ZB
NDFFRTM1MDI2QjMyRUU0RjI3Rjk1MTRFQzE0RUNGNkQ4MzhCRDQ5OTY4ODZDQzdD
QTNCMjM4MENBRkEwNDgwNDRCRDg1MDU5OTMyQTI1NkM2NzlGMjIxOTZDNzVEMUYz
QjkzNkQxRjI1NkIxQzVGRDFDQTVGRTYyNUM2ODNDNTZFMkQzOEUzMUMzNTdBNDYx
NENFMzc2QjE5MzJGM0UzMTFCM0E0OEVBRkQzM0QyMURCN0VGMTJCNTFERjUxMzU3
RjIzMUU0QTY1MUY2QjQ5Q0RBRTg5QjNBRTkwQjc2REQxREIwMjJEOTZDRkJDMDg0
RkE2RjJEMzRBNjcxNjE4RTMzODY4OEMyNzgzNERDODFDQzk5QzI3RDMzMTdDQjk5
MTA3NDY2NTZFRTRGMjkyQUMzNEYyMjM5RjBENDZDMzQwNDcyNEREMDUzNjg3ODc3
ODNDMkY2NTUzNjcxMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApN4JZE/Tl+2lkH1e9N/6P9bZk9Obsv1A1kSSlyvXFmNraSwqNweP
2QP8Oc4ect2KJmD5iKo9G4WUeYmicoWC8c3S9/ym54FXwsZW+dCB2GP6Qe41Amsy
7k8n+VFOwU7PbYOL1Jlohsx8o7I4DK+gSARL2FBZkyolbGefIhlsddHzuTbR8lax
xf0cpf5iXGg8VuLTjjHDV6RhTON2sZMvPjEbOkjq/TPSHbfvErUd9RNX8jHkplH2
tJza6Js66Qt23R2wItls+8CE+m8tNKZxYY4zhojCeDTcgcyZwn0zF8uZEHRmVu5P
KSrDTyI58NRsNARyTdBTaHh3g8L2VTZxHQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FKTJx/6pGcImtSSVgJSeBFbQlZS6MB8GA1UdIwQYMBaAFPYz7B2YQSbNa9On7y8E
vG4V8mHZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl2VUhjRDdHaHhHa3Jj
Sjg1WDZVaXgzUGhvUGdRWnBwZ1pMMlRWWW1acmtBLzAvRjYzM0VDMUQ5ODQxMjZD
RDZCRDNBN0VGMkYwNEJDNkUxNUYyNjFEOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNjMzRUMxRDk4NDEyNkNENkJEM0E3RUYyRjA0QkM2RTE1RjI2
MUQ5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85dlVIY0Q3R2h4R2tyY0o4NVg2
VWl4M1Bob1BnUVpwcGdaTDJUVlltWnJrQS8wLzMyMzgzMDM0M2EzNzM0NjUzODNh
M2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzczMTMwMzEzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
dOgwDQYJKoZIhvcNAQELBQADggEBAIX04V0iKhaFvGOpSr3HfhXbbnt5J0Rj1YI+
9JI16wwVIAo6LkbBlsWRDpD9xcrSpNMo2PNxzpCTgFotuFTBTkEPKkZ0mqdysy4x
aMd3aelqNcG8Ww2E72C1ofaoDPEbXwITySXTJsQahegqHvnBsGWduOu8YGOZlYKX
y0Gqg4mM7BR+3xLRNWguwHNbRzLvTAm0iF6MdXQmg3rxmCX2WsRIgsLfnJ5X35s0
EZK3gvrChGBqXSdS/yKsNIYEI4Zap/c3MLnPUEdOpz4o2r1ub7F//GeznUsnVARq
QjoW72nkzt1yj8e6ml+2yHt1Gf/91M7Hb7eFv1eSzIG5gYwySGA=
-----END CERTIFICATE-----