Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          xUtECz5ooRK2Y/xu3TVH6FBza4lk9UFt8vYSJwMirH0=
Subject key identifier:   F5:DE:8E:05:D4:03:7A:45:6A:98:D9:3C:90:5E:A3:72:0A:D3:E0:20
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       0C6859EF50539AE496A46D04EB09820E78DB3E1E
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:01 +0000
ROA not before:           Fri 08 Sep 2023 12:55:01 +0000
ROA not after:            Fri 06 Sep 2024 13:00:01 +0000
asID:                     264311
IP address blocks:        2804:25f0:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:68:59:ef:50:53:9a:e4:96:a4:6d:04:eb:09:82:0e:78:db:3e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:01 2023 GMT
            Not After : Sep  6 13:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:73:5d:d8:fa:91:ec:64:fe:2d:93:dc:af:ff:
                    10:c8:75:b7:05:91:9f:ea:03:c3:6e:a6:94:92:be:
                    92:0b:4b:a0:66:d1:de:33:8e:1f:92:f3:7f:d5:9e:
                    b4:6b:c2:79:5d:9c:f1:5d:ca:6e:c0:06:fd:78:84:
                    cf:d3:93:af:a2:e3:3c:0f:a2:8f:00:c1:6e:6b:34:
                    53:81:20:3e:cc:6a:fb:45:7b:d2:6a:b1:0c:92:7a:
                    42:66:30:74:70:bb:7a:28:c1:b6:3b:5c:a3:01:f8:
                    67:c7:d4:37:be:68:ea:cd:21:27:ff:aa:73:b2:f0:
                    1e:b1:24:82:aa:03:30:11:b4:1c:5a:72:f4:25:e7:
                    50:ec:59:ff:5b:6c:ea:ab:40:b4:bc:4d:16:a9:ec:
                    af:bc:d2:a2:2e:7f:5a:d8:7e:c1:64:29:bc:33:58:
                    f0:32:98:1e:3a:52:09:1b:cb:13:2c:c7:48:12:6a:
                    2d:49:5e:15:ae:09:52:5d:a6:de:3a:92:71:b7:53:
                    4f:42:24:d1:d6:9a:ea:f0:63:e3:c2:95:6a:99:be:
                    22:d4:2f:51:78:32:20:9a:ea:18:4b:bb:fb:31:cf:
                    4f:a1:b8:e9:e0:9f:79:0f:a9:38:0a:dc:1d:07:e2:
                    8e:0e:33:a4:29:96:31:04:1f:2f:4b:d5:b0:c9:cf:
                    bc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DE:8E:05:D4:03:7A:45:6A:98:D9:3C:90:5E:A3:72:0A:D3:E0:20
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:00:aa:b3:ff:04:93:27:ea:66:e3:f4:ff:1f:51:73:17:
         21:78:65:f5:b3:22:ca:0c:f2:08:80:6d:ff:09:c2:a2:bd:9e:
         e7:56:04:60:6a:5e:12:33:e6:0a:73:ad:40:e6:2a:22:d5:14:
         56:04:e6:b1:81:45:53:82:f8:d3:9d:49:f3:19:56:34:2d:34:
         d1:f0:07:66:53:38:d3:c9:a7:67:9e:06:35:df:c6:0f:fb:10:
         99:4c:99:14:09:19:eb:fa:d6:20:8b:ff:ac:3f:03:f4:a9:1e:
         56:6c:c2:56:31:c7:7c:dc:4d:7c:80:e2:80:03:fc:c7:1c:9b:
         68:26:7b:4c:39:d7:76:28:19:07:fe:68:67:fe:33:6a:6e:94:
         bd:50:b9:fe:55:b8:3a:75:10:30:51:7a:09:a3:b9:0e:d4:fa:
         bb:fc:8f:e5:b8:c0:c4:94:6b:59:ee:7d:99:1e:fe:3c:91:63:
         b3:9b:74:b5:0c:63:16:94:e8:ec:db:fd:e6:af:7f:80:b9:75:
         04:ff:cd:92:82:73:d6:f3:1b:98:9b:eb:74:c2:84:d0:74:15:
         65:86:59:07:84:6a:58:b1:7d:38:8b:e9:d5:ad:22:9c:8a:20:
         ca:73:aa:3f:b1:cf:62:9d:43:31:92:4b:8f:fb:c5:8b:25:62:
         b1:aa:05:53
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUDGhZ71BTmuSWpG0E6wmCDnjbPh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFFNTlCNTQ4QjkxNjIxNjM2N0ExREJDQTVBRDE3NDc5
QzY1RjZEQTAeFw0yMzA5MDgxMjU1MDFaFw0yNDA5MDYxMzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTA3MzVERDhGQTkxRUM2NEZF
MkQ5M0RDQUZGRjEwQzg3NUI3MDU5MTlGRUEwM0MzNkVBNjk0OTJCRTkyMEI0QkEw
NjZEMURFMzM4RTFGOTJGMzdGRDU5RUI0NkJDMjc5NUQ5Q0YxNURDQTZFQzAwNkZE
Nzg4NENGRDM5M0FGQTJFMzNDMEZBMjhGMDBDMTZFNkIzNDUzODEyMDNFQ0M2QUZC
NDU3QkQyNkFCMTBDOTI3QTQyNjYzMDc0NzBCQjdBMjhDMUI2M0I1Q0EzMDFGODY3
QzdENDM3QkU2OEVBQ0QyMTI3RkZBQTczQjJGMDFFQjEyNDgyQUEwMzMwMTFCNDFD
NUE3MkY0MjVFNzUwRUM1OUZGNUI2Q0VBQUI0MEI0QkM0RDE2QTlFQ0FGQkNEMkEy
MkU3RjVBRDg3RUMxNjQyOUJDMzM1OEYwMzI5ODFFM0E1MjA5MUJDQjEzMkNDNzQ4
MTI2QTJENDk1RTE1QUUwOTUyNURBNkRFM0E5MjcxQjc1MzRGNDIyNEQxRDY5QUVB
RjA2M0UzQzI5NTZBOTlCRTIyRDQyRjUxNzgzMjIwOUFFQTE4NEJCQkZCMzFDRjRG
QTFCOEU5RTA5Rjc5MEZBOTM4MEFEQzFEMDdFMjhFMEUzM0E0Mjk5NjMxMDQxRjJG
NEJENUIwQzlDRkJDMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4HNd2PqR7GT+LZPcr/8QyHW3BZGf6gPDbqaUkr6SC0ugZtHeM44f
kvN/1Z60a8J5XZzxXcpuwAb9eITP05OvouM8D6KPAMFuazRTgSA+zGr7RXvSarEM
knpCZjB0cLt6KMG2O1yjAfhnx9Q3vmjqzSEn/6pzsvAesSSCqgMwEbQcWnL0JedQ
7Fn/W2zqq0C0vE0WqeyvvNKiLn9a2H7BZCm8M1jwMpgeOlIJG8sTLMdIEmotSV4V
rglSXabeOpJxt1NPQiTR1prq8GPjwpVqmb4i1C9ReDIgmuoYS7v7Mc9Pobjp4J95
D6k4CtwdB+KODjOkKZYxBB8vS9Wwyc+8LQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FPXejgXUA3pFapjZPJBeo3IK0+AgMB8GA1UdIwQYMBaAFEHlm1SLkWIWNnodvKWt
F0ecZfbaMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NDbXdzVEgzZ3F0UUdI
d2VWRGtWVjV6RXdRS1JkUHZVQWNEYWpBUXQ5V1JmLzAvNDFFNTlCNTQ4QjkxNjIx
NjM2N0ExREJDQTVBRDE3NDc5QzY1RjZEQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80MUU1OUI1NDhCOTE2MjE2MzY3QTFEQkNBNUFEMTc0NzlDNjVG
NkRBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQ213c1RIM2dxdFFHSHdlVkRr
VlY1ekV3UUtSZFB2VUFjRGFqQVF0OVdSZi8wLzMyMzgzMDM0M2EzMjM1NjYzMDNh
MzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzQzMzMxMzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBCXwgDANBgkqhkiG9w0BAQsFAAOCAQEApS8AqrP/BJMn6mbj9P8f
UXMXIXhl9bMiygzyCIBt/wnCor2e51YEYGpeEjPmCnOtQOYqItUUVgTmsYFFU4L4
051J8xlWNC000fAHZlM408mnZ54GNd/GD/sQmUyZFAkZ6/rWIIv/rD8D9KkeVmzC
VjHHfNxNfIDigAP8xxybaCZ7TDnXdigZB/5oZ/4zam6UvVC5/lW4OnUQMFF6CaO5
DtT6u/yP5bjAxJRrWe59mR7+PJFjs5t0tQxjFpTo7Nv95q9/gLl1BP/NkoJz1vMb
mJvrdMKE0HQVZYZZB4RqWLF9OIvp1a0inIogynOqP7HPYp1DMZJLj/vFiyVisaoF
Uw==
-----END CERTIFICATE-----