Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa
File:                     323830343a363631343a3a2f33322d3332203d3e20323639353332.roa (raw, json)
Hash identifier:          PQZ2m6+Qh33Ugd2LsSXszE3Kd+Q9xtzwfscETjlPsHA=
Subject key identifier:   2A:D8:36:4A:8A:89:82:D9:5F:0F:E6:73:FC:D2:DE:45:9D:A9:27:31
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       61B72BF567575B6DB9835B6441645D0756295541
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa
Signing time:             Sun 13 Aug 2023 02:00:01 +0000
ROA not before:           Sun 13 Aug 2023 01:55:01 +0000
ROA not after:            Sun 11 Aug 2024 02:00:01 +0000
asID:                     269532
IP address blocks:        2804:6614::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b7:2b:f5:67:57:5b:6d:b9:83:5b:64:41:64:5d:07:56:29:55:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Aug 13 01:55:01 2023 GMT
            Not After : Aug 11 02:00:01 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:f7:b4:62:3a:ad:54:2e:e7:db:01:dc:7a:
                    fa:53:7d:25:0c:e1:d9:81:35:20:6a:de:70:35:e4:
                    43:ee:ee:e1:0f:5c:76:41:2a:13:1b:dc:65:37:73:
                    1a:4c:f1:14:49:7f:f3:30:df:ee:79:5f:5a:b4:7a:
                    c3:31:ce:7b:5b:14:0b:ff:ca:13:da:44:8d:52:e2:
                    b4:a5:64:e8:42:be:b0:da:00:ce:dc:4b:d1:e0:8b:
                    7e:1d:c4:0a:c0:f4:16:e3:e8:d8:a4:9d:ef:84:90:
                    f1:f8:ad:b5:e4:87:04:e9:df:de:82:6e:e4:20:57:
                    1f:da:44:45:a1:b8:27:b4:43:6a:ca:c9:fd:de:19:
                    ea:5f:1b:3f:b1:b9:e3:f6:40:6b:fe:e3:5a:78:9f:
                    4a:dc:73:3a:c0:b7:fd:32:18:1e:bb:36:11:c5:2b:
                    2c:d4:6a:5f:41:5f:61:47:42:2d:64:42:b0:49:d2:
                    04:23:52:36:3b:bf:04:42:2a:4c:7c:65:0f:c7:cc:
                    12:7c:97:74:2f:dd:07:0c:ff:08:09:e2:ca:d9:d6:
                    bc:7d:e4:11:8e:a2:ea:08:e0:57:6e:ea:31:3d:5d:
                    1b:f9:be:88:03:ac:ac:58:7f:49:90:de:c1:dd:0a:
                    ee:0c:95:bf:6c:6e:7e:c1:0d:4b:a3:a5:c5:df:e4:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D8:36:4A:8A:89:82:D9:5F:0F:E6:73:FC:D2:DE:45:9D:A9:27:31
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a3a2f33322d3332203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:75:d8:06:f8:d9:d4:8c:41:6f:bf:0c:78:95:6c:3d:84:87:
         94:ba:16:97:4c:43:5f:c9:2a:4b:fa:2f:e4:83:24:01:d3:4f:
         77:01:3c:0a:57:af:79:dc:d4:18:0e:0e:0b:05:6e:5c:77:58:
         31:38:76:25:b9:e8:67:57:17:db:29:4e:4c:03:99:7b:00:cb:
         f7:3b:0f:bd:20:5e:69:4f:2f:32:89:f2:59:2c:70:b4:80:4c:
         5d:a6:ea:36:7c:dd:f0:66:25:9b:9d:2f:ac:b5:5f:19:4e:08:
         28:b4:b4:9b:0d:5c:b0:3a:6c:6a:76:0b:ea:9f:0f:1e:da:7c:
         3c:2f:c5:e0:3a:f5:4c:98:bc:e5:30:ac:78:ba:54:fb:2f:82:
         9c:e7:d3:7c:69:05:f1:22:7d:54:de:b1:33:ec:51:f0:1f:ff:
         f2:c1:e8:61:8b:b9:2c:69:f0:6e:f1:d8:c3:01:9a:25:4a:34:
         a0:1e:39:64:15:97:2e:1c:e4:c4:4b:4a:b2:f2:e9:af:3a:00:
         2e:e1:75:55:d4:8f:bb:b5:f6:8b:a6:b8:de:ec:03:c9:4e:08:
         d4:8e:11:24:95:8d:d9:30:4e:80:a2:d1:23:83:3f:6a:8b:0c:
         71:6b:1f:9c:57:fa:b6:dc:3a:93:3f:68:94:6a:cf:b6:d7:28:
         38:e1:2b:a5
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUYbcr9WdXW225g1tkQWRdB1YpVUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxQzdBQkFBQzc2MkU4ODk0ODMyQTNDRDMyNkUxMEZF
QUIzQzZCNjAeFw0yMzA4MTMwMTU1MDFaFw0yNDA4MTEwMjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkIxREY3QjQ2MjNBQUQ1NDJF
RTdEQjAxREM3QUZBNTM3RDI1MENFMUQ5ODEzNTIwNkFERTcwMzVFNDQzRUVFRUUx
MEY1Qzc2NDEyQTEzMUJEQzY1Mzc3MzFBNENGMTE0NDk3RkYzMzBERkVFNzk1RjVB
QjQ3QUMzMzFDRTdCNUIxNDBCRkZDQTEzREE0NDhENTJFMkI0QTU2NEU4NDJCRUIw
REEwMENFREM0QkQxRTA4QjdFMURDNDBBQzBGNDE2RTNFOEQ4QTQ5REVGODQ5MEYx
RjhBREI1RTQ4NzA0RTlERkRFODI2RUU0MjA1NzFGREE0NDQ1QTFCODI3QjQ0MzZB
Q0FDOUZEREUxOUVBNUYxQjNGQjFCOUUzRjY0MDZCRkVFMzVBNzg5RjRBREM3MzNB
QzBCN0ZEMzIxODFFQkIzNjExQzUyQjJDRDQ2QTVGNDE1RjYxNDc0MjJENjQ0MkIw
NDlEMjA0MjM1MjM2M0JCRjA0NDIyQTRDN0M2NTBGQzdDQzEyN0M5Nzc0MkZERDA3
MENGRjA4MDlFMkNBRDlENkJDN0RFNDExOEVBMkVBMDhFMDU3NkVFQTMxM0Q1RDFC
RjlCRTg4MDNBQ0FDNTg3RjQ5OTBERUMxREQwQUVFMEM5NUJGNkM2RTdFQzEwRDRC
QTNBNUM1REZFNDJBOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAux33tGI6rVQu59sB3Hr6U30lDOHZgTUgat5wNeRD7u7hD1x2QSoT
G9xlN3MaTPEUSX/zMN/ueV9atHrDMc57WxQL/8oT2kSNUuK0pWToQr6w2gDO3EvR
4It+HcQKwPQW4+jYpJ3vhJDx+K215IcE6d/egm7kIFcf2kRFobgntENqysn93hnq
Xxs/sbnj9kBr/uNaeJ9K3HM6wLf9MhgeuzYRxSss1GpfQV9hR0ItZEKwSdIEI1I2
O78EQipMfGUPx8wSfJd0L90HDP8ICeLK2da8feQRjqLqCOBXbuoxPV0b+b6IA6ys
WH9JkN7B3QruDJW/bG5+wQ1Lo6XF3+QqiwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FCrYNkqKiYLZXw/mc/zS3kWdqScxMB8GA1UdIwQYMBaAFI4cerqsdi6IlIMqPNMm
4Q/qs8a2MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FLVmJiMU1OU0w4UkFy
ZWdBYzNNa1dzZ01rdzdmSzJGYkV6a0RmU3drOE4yLzAvOEUxQzdBQkFBQzc2MkU4
ODk0ODMyQTNDRDMyNkUxMEZFQUIzQzZCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84RTFDN0FCQUFDNzYyRTg4OTQ4MzJBM0NEMzI2RTEwRkVBQjND
NkI2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BS1ZiYjFNTlNMOFJBcmVnQWMz
TWtXc2dNa3c3ZksyRmJFemtEZlN3azhOMi8wLzMyMzgzMDM0M2EzNjM2MzEzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM1MzMzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
ZhQwDQYJKoZIhvcNAQELBQADggEBAGd12Ab42dSMQW+/DHiVbD2Eh5S6FpdMQ1/J
Kkv6L+SDJAHTT3cBPApXr3nc1BgODgsFblx3WDE4diW56GdXF9spTkwDmXsAy/c7
D70gXmlPLzKJ8lkscLSATF2m6jZ83fBmJZudL6y1XxlOCCi0tJsNXLA6bGp2C+qf
Dx7afDwvxeA69UyYvOUwrHi6VPsvgpzn03xpBfEifVTesTPsUfAf//LB6GGLuSxp
8G7x2MMBmiVKNKAeOWQVly4c5MRLSrLy6a86AC7hdVXUj7u19oumuN7sA8lOCNSO
ESSVjdkwToCi0SODP2qLDHFrH5xX+rbcOpM/aJRqz7bXKDjhK6U=
-----END CERTIFICATE-----