Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a343030303a3a2f34382d3438203d3e20323637363134.roa
File:                     323830343a343366633a343030303a3a2f34382d3438203d3e20323637363134.roa (raw, json)
Hash identifier:          Zo7vdZYRBaRhm6ZVtdIQ0fu5kaoi7bXlhQZLr5RHMz4=
Subject key identifier:   09:27:34:B3:F7:93:7D:77:D6:32:5C:C9:3B:41:BA:B3:D9:18:34:23
Certificate issuer:       /CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
Certificate serial:       1427AD9549211AB0C9C549CD91F7E5925AB1DEAD
Authority key identifier: 7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a343030303a3a2f34382d3438203d3e20323637363134.roa
Signing time:             Wed 06 Mar 2024 14:55:01 +0000
ROA not before:           Wed 06 Mar 2024 14:50:01 +0000
ROA not after:            Wed 05 Mar 2025 14:55:01 +0000
asID:                     267614
IP address blocks:        2804:43fc:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:27:ad:95:49:21:1a:b0:c9:c5:49:cd:91:f7:e5:92:5a:b1:de:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC
        Validity
            Not Before: Mar  6 14:50:01 2024 GMT
            Not After : Mar  5 14:55:01 2025 GMT
        Subject: CN=092734B3F7937D77D6325CC93B41BAB3D9183423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:62:1b:51:3d:cb:cc:1d:8a:34:0a:5d:bb:
                    71:ae:dd:cb:c8:e1:7a:90:b8:cf:a4:48:f5:d7:c7:
                    d8:4a:02:5f:d1:72:a5:67:2f:23:b9:c0:05:4c:eb:
                    67:c6:ab:84:ea:f3:85:16:9c:40:19:51:1b:30:70:
                    71:79:f4:1b:ac:71:16:f5:d1:39:e8:3f:02:5d:6c:
                    62:b9:89:13:19:60:7e:62:31:d8:ae:bc:54:a0:94:
                    fc:7d:d6:f2:aa:b3:c5:f0:98:5c:c9:17:fe:81:31:
                    18:a1:21:64:17:82:6c:8f:bd:e2:56:ca:b1:4a:19:
                    03:d9:89:3e:55:eb:5f:3c:fa:c8:71:16:5f:39:96:
                    41:d5:dc:ac:96:7a:13:91:4a:51:8f:a6:0b:24:06:
                    47:0e:78:df:66:96:75:df:67:54:98:aa:0b:b3:ef:
                    f4:4f:4b:b8:cd:4f:4a:9e:54:ac:cb:8c:c2:be:9a:
                    25:d0:c0:c1:f5:1a:83:5c:a7:74:c9:ff:cb:fa:41:
                    f6:c7:b9:9f:99:bd:6a:38:db:ec:74:de:18:f3:d8:
                    cc:8b:a1:e7:2f:ec:48:e8:5f:41:6c:2c:53:5a:e8:
                    48:73:94:5f:00:bc:d7:d3:94:36:db:cb:23:f3:e7:
                    35:ef:08:45:31:e9:2c:0e:22:c7:f0:fa:f8:1c:c3:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:27:34:B3:F7:93:7D:77:D6:32:5C:C9:3B:41:BA:B3:D9:18:34:23
            X509v3 Authority Key Identifier:
                keyid:7A:35:57:CA:7C:23:66:DC:18:DE:EB:B7:43:3B:1A:3D:93:D4:5F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3557CA7C2366DC18DEEBB7433B1A3D93D45FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/0/323830343a343366633a343030303a3a2f34382d3438203d3e20323637363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43fc:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:cf:dc:53:a5:0e:fc:04:f0:70:5e:5e:14:63:ca:9f:5f:
         b7:de:ba:4d:e2:95:01:9f:b6:03:8c:d2:e2:de:a4:65:9b:d7:
         8d:a4:98:52:39:d8:33:9d:cb:31:aa:61:a4:3f:ec:63:51:5e:
         22:14:7f:8d:c5:7f:88:42:c2:76:8b:dc:53:72:ad:84:f0:d4:
         18:7f:93:ec:49:5f:5b:c0:a2:d9:87:87:2b:1b:6e:3e:01:12:
         78:3e:4f:21:0d:c1:3e:5c:58:bf:ef:3a:ce:b4:58:f9:a1:ba:
         3d:91:ab:65:d5:e8:5b:f6:6b:8a:85:a0:62:c7:58:96:df:21:
         13:31:4b:33:26:50:26:82:1f:a6:0d:5e:b0:d2:bc:b1:00:7f:
         3e:22:2d:05:9e:e5:61:af:70:f1:21:d0:5e:2a:73:36:82:b8:
         ea:79:6c:7e:db:b6:52:22:09:dc:63:d5:47:bb:cb:fe:01:ba:
         39:8c:18:be:fa:d5:f1:50:95:81:3d:0b:3d:fb:36:79:12:60:
         5c:2b:f3:56:2b:a5:e3:31:80:7a:20:68:9b:fa:f3:34:85:dc:
         c4:64:d6:e5:8a:9d:2b:5b:e1:ce:9d:f6:17:76:a5:62:35:41:
         8a:50:64:81:8e:e9:41:71:cb:72:af:1b:a3:b5:b6:57:77:70:
         ba:60:e5:12
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUFCetlUkhGrDJxUnNkfflklqx3q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EzNTU3Q0E3QzIzNjZEQzE4REVFQkI3NDMzQjFBM0Q5
M0Q0NUZGQzAeFw0yNDAzMDYxNDUwMDFaFw0yNTAzMDUxNDU1MDFaMDMxMTAvBgNV
BAMTKDA5MjczNEIzRjc5MzdENzdENjMyNUNDOTNCNDFCQUIzRDkxODM0MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMmIbUT3LzB2KNApdu3Gu3cvI
4XqQuM+kSPXXx9hKAl/RcqVnLyO5wAVM62fGq4Tq84UWnEAZURswcHF59BuscRb1
0TnoPwJdbGK5iRMZYH5iMdiuvFSglPx91vKqs8XwmFzJF/6BMRihIWQXgmyPveJW
yrFKGQPZiT5V6188+shxFl85lkHV3KyWehORSlGPpgskBkcOeN9mlnXfZ1SYqguz
7/RPS7jNT0qeVKzLjMK+miXQwMH1GoNcp3TJ/8v6QfbHuZ+ZvWo42+x03hjz2MyL
oecv7EjoX0FsLFNa6EhzlF8AvNfTlDbbyyPz5zXvCEUx6SwOIsfw+vgcww7zAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUCSc0s/eTfXfWMlzJO0G6s9kYNCMwHwYDVR0j
BBgwFoAUejVXynwjZtwY3uu3QzsaPZPUX/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1NNNzJ6Y2hXNHRhbmlveGJweTc4UFJkSmduc2lOTkpja0JGdEdhMTFi
SEIvMC83QTM1NTdDQTdDMjM2NkRDMThERUVCQjc0MzNCMUEzRDkzRDQ1RkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBMzU1N0NBN0MyMzY2REMx
OERFRUJCNzQzM0IxQTNEOTNENDVGRkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NTTTcyemNoVzR0YW5pb3hicHk3OFBSZEpnbnNpTk5KY2tCRnRHYTExYkhCLzAv
MzIzODMwMzQzYTM0MzM2NjYzM2EzNDMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNzM2MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEQ/xAADANBgkqhkiG9w0BAQsF
AAOCAQEAjonP3FOlDvwE8HBeXhRjyp9ft966TeKVAZ+2A4zS4t6kZZvXjaSYUjnY
M53LMaphpD/sY1FeIhR/jcV/iELCdovcU3KthPDUGH+T7ElfW8Ci2YeHKxtuPgES
eD5PIQ3BPlxYv+86zrRY+aG6PZGrZdXoW/ZrioWgYsdYlt8hEzFLMyZQJoIfpg1e
sNK8sQB/PiItBZ7lYa9w8SHQXipzNoK46nlsftu2UiIJ3GPVR7vL/gG6OYwYvvrV
8VCVgT0LPfs2eRJgXCvzViul4zGAeiBom/rzNIXcxGTW5YqdK1vhzp32F3alYjVB
ilBkgY7pQXHLcq8bo7W2V3dwumDlEg==
-----END CERTIFICATE-----