Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/0/323830343a333063303a3a2f33322d3438203d3e20323634393732.roa
File:                     323830343a333063303a3a2f33322d3438203d3e20323634393732.roa (raw, json)
Hash identifier:          CIFwvevbrvirV0sptFnkk1ABEVSWD9T4dBA8c7xKxTs=
Subject key identifier:   6C:12:28:74:31:62:3F:F1:26:AD:F8:55:61:3B:F9:8F:E4:0F:FD:C7
Certificate issuer:       /CN=7CF43A57517C789B2BE267EAA44CF309FD33CC5D
Certificate serial:       568E35B3A8C8F1239A501C354BE21249C265596F
Authority key identifier: 7C:F4:3A:57:51:7C:78:9B:2B:E2:67:EA:A4:4C:F3:09:FD:33:CC:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CF43A57517C789B2BE267EAA44CF309FD33CC5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/0/323830343a333063303a3a2f33322d3438203d3e20323634393732.roa
Signing time:             Wed 29 Nov 2023 19:32:17 +0000
ROA not before:           Wed 29 Nov 2023 19:27:17 +0000
ROA not after:            Wed 27 Nov 2024 19:32:17 +0000
asID:                     264972
IP address blocks:        2804:30c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8e:35:b3:a8:c8:f1:23:9a:50:1c:35:4b:e2:12:49:c2:65:59:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF43A57517C789B2BE267EAA44CF309FD33CC5D
        Validity
            Not Before: Nov 29 19:27:17 2023 GMT
            Not After : Nov 27 19:32:17 2024 GMT
        Subject: CN=6C12287431623FF126ADF855613BF98FE40FFDC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:cc:71:eb:ec:a9:02:8a:80:85:66:06:28:
                    9c:d5:61:f1:b4:c4:31:a9:96:ea:7f:88:68:db:48:
                    76:6f:3b:66:7c:87:61:78:ab:77:ca:e5:d8:6f:a7:
                    b1:21:d0:94:b6:c1:ae:24:ce:51:ce:e8:33:b2:64:
                    f0:0a:29:20:26:e3:fd:bb:78:b7:28:23:f1:b9:bd:
                    b0:21:30:b1:ce:b4:d8:80:69:02:de:a7:0c:0b:b4:
                    70:ab:91:16:f7:ed:1f:5a:7d:04:53:c5:d2:a1:43:
                    ff:5c:da:45:d1:3f:bb:18:9f:ef:cd:8f:95:dd:8b:
                    a3:b4:54:9d:72:01:25:12:47:fb:9f:78:9a:71:43:
                    92:a9:61:06:e7:8c:93:c7:a4:3d:63:3d:ba:bf:90:
                    35:49:7d:31:28:33:a1:bf:b7:b5:6e:2e:c3:9d:f2:
                    5f:30:0d:0f:7e:58:03:53:3e:7e:1b:dc:b7:dc:81:
                    9f:ca:f7:fd:b5:9a:a6:92:26:da:84:96:02:c2:63:
                    80:b1:a5:55:bf:b4:1c:e5:2a:8a:10:bb:31:a4:a1:
                    79:ea:d2:9d:ed:94:c3:53:e6:04:7a:69:95:ab:5f:
                    82:f2:4b:30:dd:6a:eb:a8:88:eb:8e:b6:f0:09:ce:
                    b9:6d:62:4d:ad:47:cc:3e:5c:18:53:db:54:36:32:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:12:28:74:31:62:3F:F1:26:AD:F8:55:61:3B:F9:8F:E4:0F:FD:C7
            X509v3 Authority Key Identifier:
                keyid:7C:F4:3A:57:51:7C:78:9B:2B:E2:67:EA:A4:4C:F3:09:FD:33:CC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/0/7CF43A57517C789B2BE267EAA44CF309FD33CC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CF43A57517C789B2BE267EAA44CF309FD33CC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/0/323830343a333063303a3a2f33322d3438203d3e20323634393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:ea:de:a6:8b:88:66:e7:dc:59:7b:d3:7c:49:91:fd:bb:
         f6:ab:3c:00:43:3a:82:37:50:8c:e5:f4:5c:9f:66:f3:1f:ae:
         bb:7f:f9:7b:7a:e1:5d:ac:cf:1c:2c:01:78:b6:b4:98:d6:67:
         93:23:51:ad:b2:42:25:f0:a1:ee:a8:32:33:70:c0:a0:13:c4:
         3f:5f:d9:f8:c0:0a:43:1c:6e:d6:5b:95:e7:fb:a5:c8:84:b9:
         6f:12:de:46:a0:e1:48:23:fa:71:b6:07:3e:9e:9f:29:f5:b4:
         e4:84:e2:11:bd:10:f4:f6:60:37:0d:44:7c:84:85:d7:39:5f:
         6f:f2:c8:b7:03:dc:2f:56:a2:f7:1f:06:81:04:e5:ba:bb:bf:
         a9:7f:d7:13:0e:b5:60:01:4a:48:ba:de:ce:59:c1:68:ad:75:
         9b:86:f1:80:09:62:30:36:39:8b:44:ee:c2:25:43:d7:4d:ab:
         f7:2f:ae:04:16:26:d7:50:5e:8e:d7:7e:cf:46:0f:dc:fe:27:
         6d:45:3e:97:92:e5:b6:85:c9:33:cd:78:d0:76:11:e2:8c:ec:
         86:22:c9:51:5a:1e:c9:77:f0:bb:64:24:6e:ce:5a:83:48:d7:
         b0:fa:a5:08:42:4e:46:de:c0:6e:50:36:a6:6e:d1:75:fd:b4:
         0b:65:4f:df
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVo41s6jI8SOaUBw1S+ISScJlWW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGNDNBNTc1MTdDNzg5QjJCRTI2N0VBQTQ0Q0YzMDlG
RDMzQ0M1RDAeFw0yMzExMjkxOTI3MTdaFw0yNDExMjcxOTMyMTdaMDMxMTAvBgNV
BAMTKDZDMTIyODc0MzE2MjNGRjEyNkFERjg1NTYxM0JGOThGRTQwRkZEQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Msxx6+ypAoqAhWYGKJzVYfG0
xDGplup/iGjbSHZvO2Z8h2F4q3fK5dhvp7Eh0JS2wa4kzlHO6DOyZPAKKSAm4/27
eLcoI/G5vbAhMLHOtNiAaQLepwwLtHCrkRb37R9afQRTxdKhQ/9c2kXRP7sYn+/N
j5Xdi6O0VJ1yASUSR/ufeJpxQ5KpYQbnjJPHpD1jPbq/kDVJfTEoM6G/t7VuLsOd
8l8wDQ9+WANTPn4b3LfcgZ/K9/21mqaSJtqElgLCY4CxpVW/tBzlKooQuzGkoXnq
0p3tlMNT5gR6aZWrX4LySzDdauuoiOuOtvAJzrltYk2tR8w+XBhT21Q2Mm3FAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbBIodDFiP/EmrfhVYTv5j+QP/ccwHwYDVR0j
BBgwFoAUfPQ6V1F8eJsr4mfqpEzzCf0zzF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlYyOWpZZnJZM0hpYTFhVWtvUUVmNWhacGNlTEhDN1J0SnpmMm9VZjlx
ZTIvMC83Q0Y0M0E1NzUxN0M3ODlCMkJFMjY3RUFBNDRDRjMwOUZEMzNDQzVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDRjQzQTU3NTE3Qzc4OUIy
QkUyNjdFQUE0NENGMzA5RkQzM0NDNUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWMjlqWWZyWTNIaWExYVVrb1FFZjVoWnBjZUxIQzdSdEp6ZjJvVWY5cWUyLzAv
MzIzODMwMzQzYTMzMzA2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwwDANBgkqhkiG9w0BAQsFAAOCAQEAlOPq3qaL
iGbn3Fl703xJkf279qs8AEM6gjdQjOX0XJ9m8x+uu3/5e3rhXazPHCwBeLa0mNZn
kyNRrbJCJfCh7qgyM3DAoBPEP1/Z+MAKQxxu1luV5/ulyIS5bxLeRqDhSCP6cbYH
Pp6fKfW05ITiEb0Q9PZgNw1EfISF1zlfb/LItwPcL1ai9x8GgQTluru/qX/XEw61
YAFKSLrezlnBaK11m4bxgAliMDY5i0TuwiVD102r9y+uBBYm11Bejtd+z0YP3P4n
bUU+l5LltoXJM8140HYR4ozshiLJUVoeyXfwu2Qkbs5ag0jXsPqlCEJORt7AblA2
pm7Rdf20C2VP3w==
-----END CERTIFICATE-----