Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33322d3332203d3e20323634333131.roa (raw, json)
Hash identifier:          lq/ENztPsEHhPjnChnqystFsfD7rSl6xC/6+Iy6BgTY=
Subject key identifier:   28:08:59:1D:EC:B8:E6:C2:A4:B8:99:90:A7:6C:A0:5A:48:17:55:25
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       6883B1E641A8E32F75A319027BF925C0F360B90A
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:01 +0000
ROA not before:           Fri 08 Sep 2023 12:55:01 +0000
ROA not after:            Fri 06 Sep 2024 13:00:01 +0000
asID:                     264311
IP address blocks:        2804:25f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:b1:e6:41:a8:e3:2f:75:a3:19:02:7b:f9:25:c0:f3:60:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:01 2023 GMT
            Not After : Sep  6 13:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:54:64:ec:38:92:cb:5f:54:d6:d6:a4:a5:
                    79:09:92:75:6b:cd:8f:38:02:da:5b:61:01:7b:e3:
                    65:19:23:ec:87:7c:40:b5:f7:c5:c4:b8:67:8d:82:
                    51:79:90:89:b0:a7:f5:05:7c:d3:c0:c5:f2:92:f8:
                    4a:91:db:e7:03:45:c6:4a:7f:42:f9:46:0b:db:2a:
                    02:1f:1a:55:9f:e5:e5:ab:29:1e:41:62:5a:08:bc:
                    57:82:84:29:a8:55:e6:17:4b:88:34:dc:a3:11:b1:
                    58:52:5b:70:8c:be:c4:47:5e:53:10:e3:a1:32:0d:
                    02:5f:38:e5:6c:e3:dd:22:eb:20:1b:b1:35:8b:be:
                    c6:10:a8:30:2c:3c:ef:c3:ad:82:08:cc:52:b9:4d:
                    84:30:6d:ca:26:f6:ce:ff:fa:2d:21:c4:0f:b3:e5:
                    c4:61:b2:a1:91:51:0e:24:75:ba:9e:5c:7e:b1:f5:
                    e3:49:a7:74:24:ab:c1:3f:89:9e:f0:6a:a4:6c:62:
                    b4:ab:9e:f5:dc:93:df:76:d2:5f:45:02:26:80:bf:
                    a3:71:c7:f3:9d:69:ac:a8:9f:f7:e4:8e:a0:7f:8a:
                    f9:66:53:60:49:80:ed:11:79:ab:5f:86:1c:55:65:
                    8b:34:30:5c:dd:17:a8:b3:a6:94:29:16:58:83:aa:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:08:59:1D:EC:B8:E6:C2:A4:B8:99:90:A7:6C:A0:5A:48:17:55:25
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:4e:11:82:3f:f0:ca:45:ca:2c:04:f9:3f:15:59:bd:65:e1:
         4e:d7:1d:5c:e7:15:e2:7e:a5:6c:63:44:d2:81:36:46:de:b0:
         88:0c:8c:35:c7:1a:03:3f:0c:d3:12:a0:aa:c9:84:6c:78:88:
         19:5c:19:86:96:46:67:e1:de:d5:30:33:92:75:60:de:99:63:
         a1:f2:a2:df:c5:5e:fa:1d:ff:5f:b6:18:da:3d:72:be:e8:32:
         9a:d2:f2:65:61:76:2a:71:6a:27:78:7a:bb:70:d6:75:f2:94:
         0a:f7:5f:05:f8:e1:1a:76:24:79:39:92:85:5e:4b:fe:22:dd:
         d2:a2:3f:11:bf:2f:6a:2f:5d:b8:7e:86:f8:2b:cf:2a:ae:d9:
         02:a0:97:32:4d:c2:37:48:4e:a7:0a:a7:17:d3:cc:84:89:76:
         42:a1:f0:98:21:d1:d5:63:36:c1:2c:96:21:9c:ec:e9:9c:96:
         2e:42:b0:1d:21:81:17:0b:af:6e:9b:3a:c3:17:64:82:da:c5:
         b5:a1:0d:3b:ba:8d:96:8c:fa:da:ea:60:d1:ff:b2:db:90:f4:
         4d:5a:a6:a3:aa:27:47:f6:89:c4:6d:ad:f8:9c:f7:92:10:05:
         8d:98:11:cd:32:a7:5c:f3:6f:a6:af:a9:f3:3b:97:cf:6d:25:
         4e:e0:7f:a7
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUaIOx5kGo4y91oxkCe/klwPNguQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFFNTlCNTQ4QjkxNjIxNjM2N0ExREJDQTVBRDE3NDc5
QzY1RjZEQTAeFw0yMzA5MDgxMjU1MDFaFw0yNDA5MDYxMzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ4MDU0NjRFQzM4OTJDQjVG
NTRENkQ2QTRBNTc5MDk5Mjc1NkJDRDhGMzgwMkRBNUI2MTAxN0JFMzY1MTkyM0VD
ODc3QzQwQjVGN0M1QzRCODY3OEQ4MjUxNzk5MDg5QjBBN0Y1MDU3Q0QzQzBDNUYy
OTJGODRBOTFEQkU3MDM0NUM2NEE3RjQyRjk0NjBCREIyQTAyMUYxQTU1OUZFNUU1
QUIyOTFFNDE2MjVBMDhCQzU3ODI4NDI5QTg1NUU2MTc0Qjg4MzREQ0EzMTFCMTU4
NTI1QjcwOENCRUM0NDc1RTUzMTBFM0ExMzIwRDAyNUYzOEU1NkNFM0REMjJFQjIw
MUJCMTM1OEJCRUM2MTBBODMwMkMzQ0VGQzNBRDgyMDhDQzUyQjk0RDg0MzA2RENB
MjZGNkNFRkZGQTJEMjFDNDBGQjNFNUM0NjFCMkExOTE1MTBFMjQ3NUJBOUU1QzdF
QjFGNUUzNDlBNzc0MjRBQkMxM0Y4OTlFRjA2QUE0NkM2MkI0QUI5RUY1REM5M0RG
NzZEMjVGNDUwMjI2ODBCRkEzNzFDN0YzOUQ2OUFDQTg5RkY3RTQ4RUEwN0Y4QUY5
NjY1MzYwNDk4MEVEMTE3OUFCNUY4NjFDNTU2NThCMzQzMDVDREQxN0E4QjNBNjk0
MjkxNjU4ODNBQUQ3NDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxIBUZOw4kstfVNbWpKV5CZJ1a82POALaW2EBe+NlGSPsh3xAtffF
xLhnjYJReZCJsKf1BXzTwMXykvhKkdvnA0XGSn9C+UYL2yoCHxpVn+XlqykeQWJa
CLxXgoQpqFXmF0uINNyjEbFYUltwjL7ER15TEOOhMg0CXzjlbOPdIusgG7E1i77G
EKgwLDzvw62CCMxSuU2EMG3KJvbO//otIcQPs+XEYbKhkVEOJHW6nlx+sfXjSad0
JKvBP4me8GqkbGK0q5713JPfdtJfRQImgL+jccfznWmsqJ/35I6gf4r5ZlNgSYDt
EXmrX4YcVWWLNDBc3Reos6aUKRZYg6rXQQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FCgIWR3suObCpLiZkKdsoFpIF1UlMB8GA1UdIwQYMBaAFEHlm1SLkWIWNnodvKWt
F0ecZfbaMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NDbXdzVEgzZ3F0UUdI
d2VWRGtWVjV6RXdRS1JkUHZVQWNEYWpBUXQ5V1JmLzAvNDFFNTlCNTQ4QjkxNjIx
NjM2N0ExREJDQTVBRDE3NDc5QzY1RjZEQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80MUU1OUI1NDhCOTE2MjE2MzY3QTFEQkNBNUFEMTc0NzlDNjVG
NkRBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQ213c1RIM2dxdFFHSHdlVkRr
VlY1ekV3UUtSZFB2VUFjRGFqQVF0OVdSZi8wLzMyMzgzMDM0M2EzMjM1NjYzMDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDMzMzEzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
JfAwDQYJKoZIhvcNAQELBQADggEBAKFOEYI/8MpFyiwE+T8VWb1l4U7XHVznFeJ+
pWxjRNKBNkbesIgMjDXHGgM/DNMSoKrJhGx4iBlcGYaWRmfh3tUwM5J1YN6ZY6Hy
ot/FXvod/1+2GNo9cr7oMprS8mVhdipxaid4ertw1nXylAr3XwX44Rp2JHk5koVe
S/4i3dKiPxG/L2ovXbh+hvgrzyqu2QKglzJNwjdITqcKpxfTzISJdkKh8Jgh0dVj
NsEsliGc7Omcli5CsB0hgRcLr26bOsMXZILaxbWhDTu6jZaM+trqYNH/stuQ9E1a
pqOqJ0f2icRtrfic95IQBY2YEc0yp1zzb6avqfM7l89tJU7gf6c=
-----END CERTIFICATE-----