Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3332203d3e203532353932.roa
File:                     323830343a333937633a3a2f33322d3332203d3e203532353932.roa (raw, json)
Hash identifier:          Am7u9+2THwCc7CxZXMn3ltGxmKrXcUy0xkvQLoMjZdQ=
Subject key identifier:   49:18:09:69:53:09:B2:2A:7B:D9:92:49:8B:1D:2C:F4:A5:4A:B8:4A
Certificate issuer:       /CN=4613768E155A5129847F26ACD1FEA8A145AE5FAE
Certificate serial:       6EE7635FEE9D330207D61244D4765CDDE057E94D
Authority key identifier: 46:13:76:8E:15:5A:51:29:84:7F:26:AC:D1:FE:A8:A1:45:AE:5F:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3332203d3e203532353932.roa
Signing time:             Fri 29 Dec 2023 14:34:45 +0000
ROA not before:           Fri 29 Dec 2023 14:29:45 +0000
ROA not after:            Fri 27 Dec 2024 14:34:45 +0000
asID:                     52592
IP address blocks:        2804:397c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e7:63:5f:ee:9d:33:02:07:d6:12:44:d4:76:5c:dd:e0:57:e9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4613768E155A5129847F26ACD1FEA8A145AE5FAE
        Validity
            Not Before: Dec 29 14:29:45 2023 GMT
            Not After : Dec 27 14:34:45 2024 GMT
        Subject: CN=491809695309B22A7BD992498B1D2CF4A54AB84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:75:f5:fa:a3:4d:c2:7e:c2:74:6b:19:17:
                    c6:06:9b:6a:ea:db:a6:d3:41:f9:5a:f4:0d:1b:c2:
                    49:d0:13:c0:b0:4b:a6:b6:0d:68:2c:b0:68:be:39:
                    4f:c7:fc:f0:40:74:23:1d:61:36:cd:d2:1f:ce:0b:
                    35:7d:a8:a5:92:20:18:31:48:13:35:e5:ba:76:96:
                    76:45:27:b0:04:22:f6:ca:3f:62:f8:5a:04:99:70:
                    36:41:2b:fe:53:25:3e:b7:96:d5:e7:ea:00:db:12:
                    61:5a:fc:e3:36:ee:8e:c0:8c:44:d1:74:3e:bb:b7:
                    7f:a0:f3:86:ac:b0:02:b0:8d:3a:0a:39:c8:a5:b6:
                    05:85:aa:dc:dc:ce:b3:ae:7f:c3:0e:7e:84:f3:00:
                    41:41:eb:53:84:84:cf:41:a7:1a:78:93:a2:f2:b7:
                    01:75:e3:11:10:87:65:a5:b8:45:3f:6e:a6:03:64:
                    a2:a0:0c:d0:fc:bb:37:2a:7e:f1:41:40:16:9f:97:
                    5d:d6:99:33:84:f9:6a:c4:84:43:36:cd:4d:e7:28:
                    9b:52:38:b5:62:02:c5:ba:f6:2b:db:85:cf:30:05:
                    57:4a:f7:26:e6:52:55:97:51:0b:10:ac:97:f0:13:
                    b6:dd:fb:b0:72:a7:02:fc:8e:25:ef:07:94:10:44:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:18:09:69:53:09:B2:2A:7B:D9:92:49:8B:1D:2C:F4:A5:4A:B8:4A
            X509v3 Authority Key Identifier:
                keyid:46:13:76:8E:15:5A:51:29:84:7F:26:AC:D1:FE:A8:A1:45:AE:5F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3332203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:397c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:bc:e2:af:bb:b0:69:98:ac:7c:43:14:6b:31:6e:93:92:
         d7:79:6b:a3:69:37:43:a5:83:ff:aa:77:e3:14:7c:5b:63:5d:
         51:51:c9:cb:f6:29:57:e6:0d:60:d1:20:33:3b:8e:4f:f8:da:
         28:15:ce:d6:2c:ab:92:11:03:24:d2:79:27:79:4c:99:5b:ee:
         16:28:5f:e0:01:ae:96:02:8f:15:f4:03:42:7d:75:07:06:68:
         58:e6:66:76:72:56:6e:28:0d:5c:83:9f:90:6e:ca:47:1f:00:
         fb:bd:95:54:3b:e8:6f:4d:34:28:6b:03:74:25:11:6d:e3:f4:
         3e:82:aa:75:90:cc:8a:39:eb:99:b0:83:7d:74:3e:a0:8f:eb:
         b7:7c:60:74:8e:e7:69:08:d4:6c:0b:7b:d5:ee:88:1e:a9:f2:
         55:50:1e:b1:f6:4e:af:a5:5b:46:81:ed:af:45:3c:49:d8:02:
         21:e0:96:db:6b:10:eb:57:3d:81:5e:49:a6:7b:7e:59:23:3e:
         cf:1e:eb:a7:1d:c8:01:6d:6b:57:2e:f5:9e:3c:98:cf:1c:31:
         b9:1f:96:44:f5:01:49:bd:d7:8c:80:0d:a1:5d:64:0f:bb:a9:
         ad:9d:eb:ec:3b:c4:49:25:b8:7b:32:a7:5b:01:03:73:41:e0:
         94:9e:26:b1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbudjX+6dMwIH1hJE1HZc3eBX6U0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxMzc2OEUxNTVBNTEyOTg0N0YyNkFDRDFGRUE4QTE0
NUFFNUZBRTAeFw0yMzEyMjkxNDI5NDVaFw0yNDEyMjcxNDM0NDVaMDMxMTAvBgNV
BAMTKDQ5MTgwOTY5NTMwOUIyMkE3QkQ5OTI0OThCMUQyQ0Y0QTU0QUI4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2HX1+qNNwn7CdGsZF8YGm2rq
26bTQfla9A0bwknQE8CwS6a2DWgssGi+OU/H/PBAdCMdYTbN0h/OCzV9qKWSIBgx
SBM15bp2lnZFJ7AEIvbKP2L4WgSZcDZBK/5TJT63ltXn6gDbEmFa/OM27o7AjETR
dD67t3+g84assAKwjToKOciltgWFqtzczrOuf8MOfoTzAEFB61OEhM9Bpxp4k6Ly
twF14xEQh2WluEU/bqYDZKKgDND8uzcqfvFBQBafl13WmTOE+WrEhEM2zU3nKJtS
OLViAsW69ivbhc8wBVdK9ybmUlWXUQsQrJfwE7bd+7BypwL8jiXvB5QQROdNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUSRgJaVMJsip72ZJJix0s9KVKuEowHwYDVR0j
BBgwFoAURhN2jhVaUSmEfyas0f6ooUWuX64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdj
SFUvMC80NjEzNzY4RTE1NUE1MTI5ODQ3RjI2QUNEMUZFQThBMTQ1QUU1RkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2MTM3NjhFMTU1QTUxMjk4
NDdGMjZBQ0QxRkVBOEExNDVBRTVGQUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWNFFSMXJib1FqdWNidUx6REJFWktXTFpybmp0UHlZek05a0ZjNm1XY0hVLzAv
MzIzODMwMzQzYTMzMzkzNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM1
MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEOXwwDQYJKoZIhvcNAQELBQADggEBAKCGvOKvu7Bp
mKx8QxRrMW6Tktd5a6NpN0Olg/+qd+MUfFtjXVFRycv2KVfmDWDRIDM7jk/42igV
ztYsq5IRAyTSeSd5TJlb7hYoX+ABrpYCjxX0A0J9dQcGaFjmZnZyVm4oDVyDn5Bu
ykcfAPu9lVQ76G9NNChrA3QlEW3j9D6CqnWQzIo565mwg310PqCP67d8YHSO52kI
1GwLe9XuiB6p8lVQHrH2Tq+lW0aB7a9FPEnYAiHglttrEOtXPYFeSaZ7flkjPs8e
66cdyAFta1cu9Z48mM8cMbkflkT1AUm914yADaFdZA+7qa2d6+w7xEkluHsyp1sB
A3NB4JSeJrE=
-----END CERTIFICATE-----