Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33332d3333203d3e20323732353636.roa (raw, json)
Hash identifier:          WK2SrpbkWcW3DW+J7UP21RsK5l8Lo76+jbERB6aILTI=
Subject key identifier:   B8:7A:FE:26:B1:50:1C:E9:6A:7C:49:0E:1A:31:F8:75:D8:24:31:EF
Certificate issuer:       /CN=883688265763EC4B7AD8148EC2953C24728E63D5
Certificate serial:       5210678E507D5E41FE1A2BA57F25153852111D17
Authority key identifier: 88:36:88:26:57:63:EC:4B:7A:D8:14:8E:C2:95:3C:24:72:8E:63:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/883688265763EC4B7AD8148EC2953C24728E63D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa
Signing time:             Fri 08 Dec 2023 01:00:00 +0000
ROA not before:           Fri 08 Dec 2023 00:55:00 +0000
ROA not after:            Fri 06 Dec 2024 01:00:00 +0000
asID:                     272566
IP address blocks:        2804:853c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:10:67:8e:50:7d:5e:41:fe:1a:2b:a5:7f:25:15:38:52:11:1d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883688265763EC4B7AD8148EC2953C24728E63D5
        Validity
            Not Before: Dec  8 00:55:00 2023 GMT
            Not After : Dec  6 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:02:d9:14:eb:b7:65:9b:e7:4c:d6:20:89:
                    ad:34:79:35:8e:09:f3:04:68:14:ef:db:ae:ae:4a:
                    98:1e:8e:2b:49:69:87:c5:fe:b0:bb:b1:a0:6e:b2:
                    12:d7:21:44:a7:28:2e:0a:be:ca:8c:d9:c0:bc:19:
                    19:39:17:b8:91:58:14:75:db:ac:5f:62:0a:4b:10:
                    8e:cc:79:75:2d:73:bd:c6:89:1b:6f:a8:50:dc:9e:
                    0b:1b:40:23:fc:67:f9:68:d5:bb:9c:8d:89:25:dd:
                    c0:99:e0:5e:21:32:e7:1b:52:cb:9f:b7:98:0d:a9:
                    c6:21:82:78:71:22:95:96:b0:53:5e:ab:ce:65:09:
                    74:1e:3f:ef:6c:aa:40:0f:19:a5:ee:1d:41:a6:aa:
                    02:80:ee:fa:8c:42:23:a4:26:94:4c:94:52:eb:74:
                    43:ce:e4:72:d9:fd:e5:6f:d4:5d:32:b9:93:76:b5:
                    13:7b:b0:49:e5:28:14:9b:6c:50:91:0c:50:12:28:
                    52:da:6b:4f:60:cb:5e:a8:fc:7f:04:0d:07:19:2e:
                    c1:9e:64:b7:8d:e5:07:e9:53:25:7f:bd:b0:44:da:
                    30:33:4b:fd:5e:d0:60:48:3e:e4:cf:57:68:fc:75:
                    6c:04:79:b8:92:36:6c:ed:c5:2f:4c:e8:8f:d6:b8:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7A:FE:26:B1:50:1C:E9:6A:7C:49:0E:1A:31:F8:75:D8:24:31:EF
            X509v3 Authority Key Identifier:
                keyid:88:36:88:26:57:63:EC:4B:7A:D8:14:8E:C2:95:3C:24:72:8E:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/883688265763EC4B7AD8148EC2953C24728E63D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/883688265763EC4B7AD8148EC2953C24728E63D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/33

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:90:c3:b6:f1:d4:2f:71:d9:36:63:31:40:f9:40:41:23:
         20:e6:42:8a:39:a6:70:15:d8:e3:ef:30:31:03:59:07:09:c4:
         b7:7c:c3:8a:31:dd:10:dc:b6:57:47:98:94:a8:a2:26:79:76:
         d5:15:55:c1:eb:86:47:f0:5b:cb:3b:7a:0c:e3:a3:5c:91:15:
         a3:00:4f:96:72:a5:52:ad:24:24:6e:c5:be:c5:4e:d2:fb:a5:
         58:97:2d:98:0a:d5:4f:31:8f:2d:fb:8a:14:b0:03:00:25:2f:
         9d:ad:f5:f3:d1:e8:8e:5a:7e:a8:32:8f:d6:64:e5:6c:aa:f1:
         40:7b:dc:eb:6e:58:53:67:d5:08:1a:eb:2f:88:66:c2:27:f8:
         74:0c:03:75:43:f8:ce:82:f2:f9:46:fb:a7:e2:5e:f1:e9:a9:
         ac:24:ba:90:74:b1:77:5e:61:c8:e3:c3:78:0f:bd:2a:b4:d2:
         28:a1:62:cc:1d:1a:58:8e:a4:55:13:7e:c3:50:bd:0e:12:5c:
         bb:0a:cf:37:c6:a7:69:0e:d8:76:fb:f6:ac:8d:dc:65:4f:cc:
         ff:8a:41:13:e4:c9:51:ef:3d:1b:88:9d:4c:56:f7:4f:bd:1d:
         98:a6:38:49:96:48:d8:67:13:69:d2:2e:ca:55:28:61:88:21:
         dd:c0:f5:6e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUUhBnjlB9XkH+GiulfyUVOFIRHRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzNjg4MjY1NzYzRUM0QjdBRDgxNDhFQzI5NTNDMjQ3
MjhFNjNENTAeFw0yMzEyMDgwMDU1MDBaFw0yNDEyMDYwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUY5MTAyRDkxNEVCQjc2NTlC
RTc0Q0Q2MjA4OUFEMzQ3OTM1OEUwOUYzMDQ2ODE0RUZEQkFFQUU0QTk4MUU4RTJC
NDk2OTg3QzVGRUIwQkJCMUEwNkVCMjEyRDcyMTQ0QTcyODJFMEFCRUNBOENEOUMw
QkMxOTE5MzkxN0I4OTE1ODE0NzVEQkFDNUY2MjBBNEIxMDhFQ0M3OTc1MkQ3M0JE
QzY4OTFCNkZBODUwREM5RTBCMUI0MDIzRkM2N0Y5NjhENUJCOUM4RDg5MjVEREMw
OTlFMDVFMjEzMkU3MUI1MkNCOUZCNzk4MERBOUM2MjE4Mjc4NzEyMjk1OTZCMDUz
NUVBQkNFNjUwOTc0MUUzRkVGNkNBQTQwMEYxOUE1RUUxRDQxQTZBQTAyODBFRUZB
OEM0MjIzQTQyNjk0NEM5NDUyRUI3NDQzQ0VFNDcyRDlGREU1NkZENDVEMzJCOTkz
NzZCNTEzN0JCMDQ5RTUyODE0OUI2QzUwOTEwQzUwMTIyODUyREE2QjRGNjBDQjVF
QThGQzdGMDQwRDA3MTkyRUMxOUU2NEI3OERFNTA3RTk1MzI1N0ZCREIwNDREQTMw
MzM0QkZENUVEMDYwNDgzRUU0Q0Y1NzY4RkM3NTZDMDQ3OUI4OTIzNjZDRURDNTJG
NENFODhGRDZCODBGRUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr5EC2RTrt2Wb50zWIImtNHk1jgnzBGgU79uurkqYHo4rSWmHxf6w
u7GgbrIS1yFEpyguCr7KjNnAvBkZORe4kVgUddusX2IKSxCOzHl1LXO9xokbb6hQ
3J4LG0Aj/Gf5aNW7nI2JJd3AmeBeITLnG1LLn7eYDanGIYJ4cSKVlrBTXqvOZQl0
Hj/vbKpADxml7h1BpqoCgO76jEIjpCaUTJRS63RDzuRy2f3lb9RdMrmTdrUTe7BJ
5SgUm2xQkQxQEihS2mtPYMteqPx/BA0HGS7BnmS3jeUH6VMlf72wRNowM0v9XtBg
SD7kz1do/HVsBHm4kjZs7cUvTOiP1rgP6wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLh6/iaxUBzpanxJDhox+HXYJDHvMB8GA1UdIwQYMBaAFIg2iCZXY+xLetgUjsKV
PCRyjmPVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N1ZXpXcGE4N1ZUYTl2
cmJCYjFmNmRSbkRWYUpnM3ZNVkRLN3BhS2hqa2FULzAvODgzNjg4MjY1NzYzRUM0
QjdBRDgxNDhFQzI5NTNDMjQ3MjhFNjNENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84ODM2ODgyNjU3NjNFQzRCN0FEODE0OEVDMjk1M0MyNDcyOEU2
M0Q1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DdWV6V3BhODdWVGE5dnJiQmIx
ZjZkUm5EVmFKZzN2TVZESzdwYUtoamthVC8wLzMyMzgzMDM0M2EzODM1MzM2MzNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzczMjM1MzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
hTwAMA0GCSqGSIb3DQEBCwUAA4IBAQBN7pDDtvHUL3HZNmMxQPlAQSMg5kKKOaZw
Fdjj7zAxA1kHCcS3fMOKMd0Q3LZXR5iUqKImeXbVFVXB64ZH8FvLO3oM46NckRWj
AE+WcqVSrSQkbsW+xU7S+6VYly2YCtVPMY8t+4oUsAMAJS+drfXz0eiOWn6oMo/W
ZOVsqvFAe9zrblhTZ9UIGusviGbCJ/h0DAN1Q/jOgvL5Rvun4l7x6amsJLqQdLF3
XmHI48N4D70qtNIooWLMHRpYjqRVE37DUL0OEly7Cs83xqdpDth2+/asjdxlT8z/
ikET5MlR7z0biJ1MVvdPvR2YpjhJlkjYZxNp0i7KVShhiCHdwPVu
-----END CERTIFICATE-----