Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d3438203d3e203532393130.roa
File:                     323830343a316633633a3a2f33362d3438203d3e203532393130.roa (raw, json)
Hash identifier:          KJCd2IozIbmIhP2ZdjnJn/UQJZMbb3RoAWCsNMkqlss=
Subject key identifier:   4D:E9:1D:95:31:9E:64:76:E7:D7:64:FE:BA:90:CA:75:40:8F:24:62
Certificate issuer:       /CN=14B8A893D2DF8796E715190F9C5D58E111E17482
Certificate serial:       1C18658CFA229525D0A751DE92091276492C0137
Authority key identifier: 14:B8:A8:93:D2:DF:87:96:E7:15:19:0F:9C:5D:58:E1:11:E1:74:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14B8A893D2DF8796E715190F9C5D58E111E17482.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d3438203d3e203532393130.roa
Signing time:             Mon 11 Mar 2024 13:00:00 +0000
ROA not before:           Mon 11 Mar 2024 12:55:00 +0000
ROA not after:            Mon 10 Mar 2025 13:00:00 +0000
asID:                     52910
IP address blocks:        2804:1f3c::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:18:65:8c:fa:22:95:25:d0:a7:51:de:92:09:12:76:49:2c:01:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14B8A893D2DF8796E715190F9C5D58E111E17482
        Validity
            Not Before: Mar 11 12:55:00 2024 GMT
            Not After : Mar 10 13:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:9a:e6:15:f9:c1:e3:cc:b6:d2:3f:a5:a5:
                    08:42:46:3f:1e:6d:8b:11:57:14:31:7b:89:1e:7c:
                    f4:6c:dd:1a:e6:22:29:88:39:a1:3f:2f:5b:90:4d:
                    90:94:a3:5c:f5:ff:c2:a8:ba:f0:35:df:3d:af:40:
                    74:83:ae:0a:a2:06:27:9f:2c:38:19:59:48:59:cd:
                    ff:a9:b8:3e:c8:51:fa:d9:6e:b6:1f:ab:d7:6d:67:
                    65:46:f0:ba:1b:4b:a6:f8:48:79:54:8b:f3:98:50:
                    25:92:08:8b:f6:d5:0e:c1:a1:3b:9f:14:5d:4c:bb:
                    80:36:65:59:11:ad:37:f4:ed:23:36:a6:8b:8c:d2:
                    47:64:44:c9:c5:9a:57:85:e8:fd:d3:9d:d0:9d:8d:
                    0e:c2:f9:03:6c:69:cc:66:95:dd:b5:dc:a5:4b:51:
                    04:29:ae:c3:a9:aa:e8:1c:de:8f:a8:6a:dd:75:03:
                    85:b2:f3:c9:eb:20:07:5d:55:dc:63:ad:d9:f1:0e:
                    b9:40:fe:c8:96:5e:7e:05:ab:c3:25:01:9c:42:0e:
                    c2:fa:02:01:f2:d9:00:e2:dc:91:9e:14:22:90:79:
                    61:f3:1b:4a:9d:54:63:39:b7:e0:21:90:e8:33:87:
                    1e:82:bb:b3:bf:ba:c6:b0:00:f6:d7:05:76:f6:11:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:1D:95:31:9E:64:76:E7:D7:64:FE:BA:90:CA:75:40:8F:24:62
            X509v3 Authority Key Identifier:
                keyid:14:B8:A8:93:D2:DF:87:96:E7:15:19:0F:9C:5D:58:E1:11:E1:74:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/14B8A893D2DF8796E715190F9C5D58E111E17482.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14B8A893D2DF8796E715190F9C5D58E111E17482.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d3438203d3e203532393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f3c::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:4c:c1:bd:26:da:f5:a0:ad:ca:7d:ef:c6:33:9f:44:45:
         49:ab:e2:0a:6c:12:5a:f7:5f:48:30:85:cc:54:be:35:16:4c:
         d3:de:32:4e:c0:38:dd:d5:61:e7:57:b4:16:73:d3:ed:ba:5d:
         37:af:99:44:ad:4a:c9:fe:59:91:be:b8:f7:ca:2f:f1:3f:08:
         66:0c:31:7d:0e:a0:33:ad:15:dd:d0:1d:d4:60:f9:1a:e3:62:
         0b:c2:1d:3b:3f:78:8b:b5:64:f3:83:e4:18:19:e2:09:e1:eb:
         88:42:e6:86:b6:5f:05:2f:e9:2c:1a:07:f8:4f:0e:ec:f8:e5:
         d3:40:22:18:83:07:8f:19:8d:cc:99:c8:a8:61:91:91:0c:94:
         9b:1a:6f:b1:e7:c4:2a:a1:0e:03:7b:5c:1d:c2:83:9e:3d:9c:
         3e:dc:28:26:1e:77:bb:0c:88:d0:fe:03:f2:ae:d4:ff:e0:34:
         c7:b0:24:ae:00:9a:8b:9e:b5:0c:4a:bb:6b:df:de:1e:a0:c5:
         9e:ea:5a:3e:25:58:c9:da:db:f3:dc:73:eb:4d:41:79:f6:72:
         51:22:bc:50:03:e6:5d:4d:a9:61:31:21:50:c3:93:68:e2:31:
         ef:68:4b:86:c8:ad:22:3f:7d:02:9e:46:3a:cb:2d:06:cd:16:
         cf:2c:b3:bb
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUHBhljPoilSXQp1HekgkSdkksATcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRCOEE4OTNEMkRGODc5NkU3MTUxOTBGOUM1RDU4RTEx
MUUxNzQ4MjAeFw0yNDAzMTExMjU1MDBaFw0yNTAzMTAxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRFNzlBRTYxNUY5QzFFM0ND
QjZEMjNGQTVBNTA4NDI0NjNGMUU2RDhCMTE1NzE0MzE3Qjg5MUU3Q0Y0NkNERDFB
RTYyMjI5ODgzOUExM0YyRjVCOTA0RDkwOTRBMzVDRjVGRkMyQThCQUYwMzVERjNE
QUY0MDc0ODNBRTBBQTIwNjI3OUYyQzM4MTk1OTQ4NTlDREZGQTlCODNFQzg1MUZB
RDk2RUI2MUZBQkQ3NkQ2NzY1NDZGMEJBMUI0QkE2Rjg0ODc5NTQ4QkYzOTg1MDI1
OTIwODhCRjZENTBFQzFBMTNCOUYxNDVENENCQjgwMzY2NTU5MTFBRDM3RjRFRDIz
MzZBNjhCOENEMjQ3NjQ0NEM5QzU5QTU3ODVFOEZERDM5REQwOUQ4RDBFQzJGOTAz
NkM2OUNDNjY5NUREQjVEQ0E1NEI1MTA0MjlBRUMzQTlBQUU4MUNERThGQTg2QURE
NzUwMzg1QjJGM0M5RUIyMDA3NUQ1NURDNjNBREQ5RjEwRUI5NDBGRUM4OTY1RTdF
MDVBQkMzMjUwMTlDNDIwRUMyRkEwMjAxRjJEOTAwRTJEQzkxOUUxNDIyOTA3OTYx
RjMxQjRBOUQ1NDYzMzlCN0UwMjE5MEU4MzM4NzFFODJCQkIzQkZCQUM2QjAwMEY2
RDcwNTc2RjYxMTI3MUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1Oea5hX5wePMttI/paUIQkY/Hm2LEVcUMXuJHnz0bN0a5iIpiDmh
Py9bkE2QlKNc9f/CqLrwNd89r0B0g64KogYnnyw4GVlIWc3/qbg+yFH62W62H6vX
bWdlRvC6G0um+Eh5VIvzmFAlkgiL9tUOwaE7nxRdTLuANmVZEa039O0jNqaLjNJH
ZETJxZpXhej9053QnY0OwvkDbGnMZpXdtdylS1EEKa7DqaroHN6PqGrddQOFsvPJ
6yAHXVXcY63Z8Q65QP7Ill5+BavDJQGcQg7C+gIB8tkA4tyRnhQikHlh8xtKnVRj
ObfgIZDoM4cegruzv7rGsAD21wV29hEnHwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FE3pHZUxnmR259dk/rqQynVAjyRiMB8GA1UdIwQYMBaAFBS4qJPS34eW5xUZD5xd
WOER4XSCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RCbkZtc0VuVnBoZkpt
aWFDYmJKNmZLUlRLN0xQQkZrQnBBUkxOdTlYS01QLzAvMTRCOEE4OTNEMkRGODc5
NkU3MTUxOTBGOUM1RDU4RTExMUUxNzQ4Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNEI4QTg5M0QyREY4Nzk2RTcxNTE5MEY5QzVENThFMTExRTE3
NDgyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EQm5GbXNFblZwaGZKbWlhQ2Ji
SjZmS1JUSzdMUEJGa0JwQVJMTnU5WEtNUC8wLzMyMzgzMDM0M2EzMTY2MzM2MzNh
M2EyZjMzMzYyZDM0MzgyMDNkM2UyMDM1MzIzOTMxMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBB88
ADANBgkqhkiG9w0BAQsFAAOCAQEAEvpMwb0m2vWgrcp978Yzn0RFSaviCmwSWvdf
SDCFzFS+NRZM094yTsA43dVh51e0FnPT7bpdN6+ZRK1Kyf5Zkb6498ov8T8IZgwx
fQ6gM60V3dAd1GD5GuNiC8IdOz94i7Vk84PkGBniCeHriELmhrZfBS/pLBoH+E8O
7Pjl00AiGIMHjxmNzJnIqGGRkQyUmxpvsefEKqEOA3tcHcKDnj2cPtwoJh53uwyI
0P4D8q7U/+A0x7AkrgCai561DEq7a9/eHqDFnupaPiVYydrb89xz601BefZyUSK8
UAPmXU2pYTEhUMOTaOIx72hLhsitIj99Ap5GOsstBs0Wzyyzuw==
-----END CERTIFICATE-----