Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a636166653a3a2f34382d3438203d3e20323638373037.roa
File:                     323830343a353938343a636166653a3a2f34382d3438203d3e20323638373037.roa (raw, json)
Hash identifier:          TrTxefgX7LghXBOmHhnLOl5WDrOr3uJauwF0zD0ao9s=
Subject key identifier:   86:65:60:67:8C:38:2E:44:33:6E:35:07:AC:CE:64:63:B2:3C:D0:C5
Certificate issuer:       /CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
Certificate serial:       4CE09115AD87D13E84DF25DC38D9595A299AC7A4
Authority key identifier: 5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a636166653a3a2f34382d3438203d3e20323638373037.roa
Signing time:             Tue 26 Mar 2024 13:32:17 +0000
ROA not before:           Tue 26 Mar 2024 13:27:17 +0000
ROA not after:            Tue 25 Mar 2025 13:32:17 +0000
asID:                     268707
IP address blocks:        2804:5984:cafe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e0:91:15:ad:87:d1:3e:84:df:25:dc:38:d9:59:5a:29:9a:c7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
        Validity
            Not Before: Mar 26 13:27:17 2024 GMT
            Not After : Mar 25 13:32:17 2025 GMT
        Subject: CN=866560678C382E44336E3507ACCE6463B23CD0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:5b:53:5d:44:42:71:67:44:f6:5c:07:d9:
                    19:6f:69:8d:89:56:1c:39:4b:7f:a2:58:77:13:a7:
                    af:74:5f:75:d0:63:e7:ab:61:83:f4:69:a7:f2:60:
                    10:43:12:33:8e:89:4b:6d:e0:7b:4d:2f:54:62:74:
                    bc:1f:f2:bf:42:60:d8:57:e5:8a:90:30:fb:8c:c0:
                    6a:07:24:28:3a:e7:27:cf:9b:0a:af:d0:de:f7:b0:
                    79:5e:ac:a0:70:fd:f9:2c:cf:42:1e:53:e2:48:87:
                    a7:96:2b:19:a3:e0:df:e4:1f:b4:a4:e2:c4:4b:8d:
                    8f:f1:94:53:62:bf:06:d6:8a:1b:8e:9d:19:23:18:
                    ce:66:f5:81:63:74:9a:23:ba:c7:92:3d:38:84:ad:
                    d9:68:07:35:2e:12:c1:ab:95:06:0a:b7:87:c0:2b:
                    46:b0:5c:89:19:ae:91:5d:54:ac:b9:64:09:e4:c4:
                    25:5c:3f:fd:dd:b9:5c:df:f6:b3:26:72:6a:8e:43:
                    82:a1:06:fd:a1:3b:32:48:d5:13:da:4a:8f:92:53:
                    da:c9:f1:54:d1:9d:4d:fe:ad:88:c0:15:f4:d7:f8:
                    f5:15:3f:d8:ba:38:fa:76:c2:48:0b:f9:e9:f9:8e:
                    c2:33:88:bf:0c:b9:9f:c1:5b:b0:57:1e:7f:88:f9:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:65:60:67:8C:38:2E:44:33:6E:35:07:AC:CE:64:63:B2:3C:D0:C5
            X509v3 Authority Key Identifier:
                keyid:5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a636166653a3a2f34382d3438203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:82:f4:b5:bc:29:ca:c6:ee:e3:30:a6:14:ca:0f:e5:f7:86:
         af:6c:23:40:90:22:0f:bf:93:ff:59:2e:0f:78:5f:46:70:54:
         f3:b4:ba:03:d6:1e:e0:68:a8:b1:a9:2c:eb:dc:1e:e5:0b:06:
         93:24:1b:bd:6f:e3:63:8a:50:f2:0c:49:bc:96:ef:fc:96:de:
         18:30:b9:f4:86:83:4e:67:bf:40:7d:28:b7:25:88:9b:22:83:
         d5:e9:ae:ff:1b:84:95:6e:2e:ff:e9:f8:33:57:03:f6:34:34:
         94:f1:5c:68:b9:75:52:89:0e:f1:5b:c1:29:1a:e8:e7:37:38:
         8e:eb:9c:a0:d8:03:60:25:18:d1:c7:5c:9a:b8:66:46:a6:1c:
         3d:7a:90:14:97:f9:3d:a5:29:77:8f:40:e6:13:7f:7d:9f:b4:
         78:93:c1:4c:8d:8d:2e:13:62:c9:42:7d:0d:8f:0c:75:f8:5a:
         c5:5e:b8:4d:ad:44:b0:7c:62:b1:1b:a0:da:df:45:bb:13:31:
         9b:e6:fc:0a:94:d4:eb:7b:57:63:22:a2:8c:42:ec:5c:0c:40:
         5c:47:27:31:25:bd:db:b4:7a:36:c5:30:0a:44:8a:ca:bb:bf:
         f1:58:aa:cd:56:b7:98:18:b0:d8:11:64:3f:51:6e:aa:46:f9:
         89:d2:cf:c9
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUTOCRFa2H0T6E3yXcONlZWimax6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE3MzBGQzRCQzVDMUFBN0NCNTJBMjE5Rjg3QkQxRTND
NkVENzY0MzAeFw0yNDAzMjYxMzI3MTdaFw0yNTAzMjUxMzMyMTdaMDMxMTAvBgNV
BAMTKDg2NjU2MDY3OEMzODJFNDQzMzZFMzUwN0FDQ0U2NDYzQjIzQ0QwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhVtTXURCcWdE9lwH2RlvaY2J
Vhw5S3+iWHcTp690X3XQY+erYYP0aafyYBBDEjOOiUtt4HtNL1RidLwf8r9CYNhX
5YqQMPuMwGoHJCg65yfPmwqv0N73sHlerKBw/fksz0IeU+JIh6eWKxmj4N/kH7Sk
4sRLjY/xlFNivwbWihuOnRkjGM5m9YFjdJojuseSPTiErdloBzUuEsGrlQYKt4fA
K0awXIkZrpFdVKy5ZAnkxCVcP/3duVzf9rMmcmqOQ4KhBv2hOzJI1RPaSo+SU9rJ
8VTRnU3+rYjAFfTX+PUVP9i6OPp2wkgL+en5jsIziL8MuZ/BW7BXHn+I+XMFAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUhmVgZ4w4LkQzbjUHrM5kY7I80MUwHwYDVR0j
BBgwFoAUWnMPxLxcGqfLUqIZ+HvR48btdkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC81QTczMEZDNEJDNUMxQUE3Q0I1MkEyMTlGODdCRDFFM0M2RUQ3NjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBNzMwRkM0QkM1QzFBQTdD
QjUyQTIxOUY4N0JEMUUzQzZFRDc2NDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzIzODMwMzQzYTM1MzkzODM0M2E2MzYxNjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEWYTK/jANBgkqhkiG9w0BAQsF
AAOCAQEA0IL0tbwpysbu4zCmFMoP5feGr2wjQJAiD7+T/1kuD3hfRnBU87S6A9Ye
4Giosaks69we5QsGkyQbvW/jY4pQ8gxJvJbv/JbeGDC59IaDTme/QH0otyWImyKD
1emu/xuElW4u/+n4M1cD9jQ0lPFcaLl1UokO8VvBKRro5zc4juucoNgDYCUY0cdc
mrhmRqYcPXqQFJf5PaUpd49A5hN/fZ+0eJPBTI2NLhNiyUJ9DY8MdfhaxV64Ta1E
sHxisRug2t9FuxMxm+b8CpTU63tXYyKijELsXAxAXEcnMSW927R6NsUwCkSKyru/
8ViqzVa3mBiw2BFkP1Fuqkb5idLPyQ==
-----END CERTIFICATE-----