Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/323830343a353130383a3a2f33322d3332203d3e20323638343236.roa
File:                     323830343a353130383a3a2f33322d3332203d3e20323638343236.roa (raw, json)
Hash identifier:          Q3GfFDUgW647hDlAagWk+kOQ4/jNok/DUO27pLBK6dc=
Subject key identifier:   CF:7C:19:20:1F:A2:98:E8:78:27:FF:94:F5:00:74:9A:12:8C:67:68
Certificate issuer:       /CN=9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED
Certificate serial:       4C2096FDAB92B51073D02A70F3B8E404A9B27795
Authority key identifier: 9D:84:1D:6D:EB:2E:8B:9D:0A:50:4C:0E:C9:F0:4B:E1:7C:45:29:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/323830343a353130383a3a2f33322d3332203d3e20323638343236.roa
Signing time:             Wed 14 Jun 2023 17:00:01 +0000
ROA not before:           Wed 14 Jun 2023 16:55:01 +0000
ROA not after:            Fri 14 Jun 2024 17:00:01 +0000
asID:                     268426
IP address blocks:        2804:5108::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:20:96:fd:ab:92:b5:10:73:d0:2a:70:f3:b8:e4:04:a9:b2:77:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED
        Validity
            Not Before: Jun 14 16:55:01 2023 GMT
            Not After : Jun 14 17:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:18:a7:be:55:1a:ca:6b:1d:96:b8:49:f8:81:
                    5f:cb:01:41:3f:52:9f:4c:1c:a6:52:40:30:2c:b7:
                    54:0b:61:fd:82:8b:45:9b:5a:6b:aa:8e:cb:f1:56:
                    1d:1d:14:c9:8d:23:63:3f:e9:da:fe:26:63:e0:e3:
                    fe:08:2b:fb:c8:23:62:cf:fc:53:60:06:40:74:c7:
                    45:ff:09:9f:97:35:e5:bb:25:89:de:c8:52:9f:20:
                    83:f8:cb:a1:0e:2e:48:cc:74:a6:db:7a:28:44:11:
                    bd:4b:d7:b5:c6:6a:30:98:da:fe:cd:30:fc:45:7d:
                    7f:7a:42:f1:0d:ea:35:99:92:c9:2f:63:e7:84:c4:
                    79:74:b3:00:7f:73:dc:2f:12:85:ea:f3:97:fe:ea:
                    f6:62:71:f6:df:3b:8d:99:bb:0d:7d:56:df:83:05:
                    96:35:ce:8d:5b:06:09:16:46:8b:9e:a6:68:21:f8:
                    f8:26:7a:45:39:3c:b8:f1:33:39:13:bd:5c:51:fe:
                    f4:c4:99:e8:f2:fb:af:44:46:62:cf:d3:51:c7:8e:
                    a6:24:bf:60:70:4f:62:38:5a:c6:00:e3:fd:67:fd:
                    f2:18:34:4a:7e:f9:d1:7a:ea:b1:d6:76:d7:46:d5:
                    28:a9:62:66:92:49:3f:57:a2:d8:ba:74:53:e7:1a:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7C:19:20:1F:A2:98:E8:78:27:FF:94:F5:00:74:9A:12:8C:67:68
            X509v3 Authority Key Identifier:
                keyid:9D:84:1D:6D:EB:2E:8B:9D:0A:50:4C:0E:C9:F0:4B:E1:7C:45:29:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D841D6DEB2E8B9D0A504C0EC9F04BE17C4529ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/0/323830343a353130383a3a2f33322d3332203d3e20323638343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5108::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:ee:6c:95:28:31:92:fb:97:df:f4:fb:cf:c9:98:64:b0:7a:
         70:f2:e2:c1:8d:05:97:be:8e:03:ac:d8:c7:e7:0a:a8:15:3f:
         8c:fe:b7:cc:11:05:7a:37:75:f4:f5:b1:65:42:99:cb:7b:0c:
         1b:66:e3:31:52:47:41:ac:4f:f7:66:e7:04:70:bb:9a:5b:78:
         18:c4:23:6c:21:2b:3a:e5:17:10:c0:be:1c:6c:81:be:ec:3d:
         1f:8d:2d:9d:e6:c9:50:db:14:93:9c:cc:43:17:0d:be:e7:8e:
         54:90:0e:d7:c6:68:47:97:a4:4d:f1:4d:b2:22:8c:26:89:38:
         5b:82:50:56:37:e3:a3:2e:fb:1a:63:d5:15:3a:e1:b3:e1:67:
         67:cc:74:1a:7e:ee:e2:b6:bf:22:cb:e8:3a:9e:63:4f:30:b1:
         09:d2:6c:4e:c9:70:1d:3f:95:39:2a:13:d4:45:9c:1e:24:87:
         32:6c:20:5a:cb:eb:33:0a:49:8d:ff:4e:93:43:6c:85:75:83:
         3f:73:8f:b1:d6:a0:9a:4b:ce:9d:7a:fe:39:c5:04:27:14:e3:
         ab:34:90:d7:6b:f7:be:43:f4:52:a0:53:7c:25:07:29:71:60:
         b4:6b:39:d3:17:47:4a:be:b5:51:17:fc:68:c1:ca:33:a1:cc:
         fe:dc:a5:60
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUTCCW/auStRBz0Cpw87jkBKmyd5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ4NDFENkRFQjJFOEI5RDBBNTA0QzBFQzlGMDRCRTE3
QzQ1MjlFRDAeFw0yMzA2MTQxNjU1MDFaFw0yNDA2MTQxNzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkMxOEE3QkU1NTFBQ0E2QjFE
OTZCODQ5Rjg4MTVGQ0IwMTQxM0Y1MjlGNEMxQ0E2NTI0MDMwMkNCNzU0MEI2MUZE
ODI4QjQ1OUI1QTZCQUE4RUNCRjE1NjFEMUQxNEM5OEQyMzYzM0ZFOURBRkUyNjYz
RTBFM0ZFMDgyQkZCQzgyMzYyQ0ZGQzUzNjAwNjQwNzRDNzQ1RkYwOTlGOTczNUU1
QkIyNTg5REVDODUyOUYyMDgzRjhDQkExMEUyRTQ4Q0M3NEE2REI3QTI4NDQxMUJE
NEJEN0I1QzY2QTMwOThEQUZFQ0QzMEZDNDU3RDdGN0E0MkYxMERFQTM1OTk5MkM5
MkY2M0U3ODRDNDc5NzRCMzAwN0Y3M0RDMkYxMjg1RUFGMzk3RkVFQUY2NjI3MUY2
REYzQjhEOTlCQjBEN0Q1NkRGODMwNTk2MzVDRThENUIwNjA5MTY0NjhCOUVBNjY4
MjFGOEY4MjY3QTQ1MzkzQ0I4RjEzMzM5MTNCRDVDNTFGRUY0QzQ5OUU4RjJGQkFG
NDQ0NjYyQ0ZEMzUxQzc4RUE2MjRCRjYwNzA0RjYyMzg1QUM2MDBFM0ZENjdGREYy
MTgzNDRBN0VGOUQxN0FFQUIxRDY3NkQ3NDZENTI4QTk2MjY2OTI0OTNGNTdBMkQ4
QkE3NDUzRTcxQTkxQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA/BinvlUaymsdlrhJ+IFfywFBP1KfTBymUkAwLLdUC2H9gotFm1pr
qo7L8VYdHRTJjSNjP+na/iZj4OP+CCv7yCNiz/xTYAZAdMdF/wmflzXluyWJ3shS
nyCD+MuhDi5IzHSm23ooRBG9S9e1xmowmNr+zTD8RX1/ekLxDeo1mZLJL2PnhMR5
dLMAf3PcLxKF6vOX/ur2YnH23zuNmbsNfVbfgwWWNc6NWwYJFkaLnqZoIfj4JnpF
OTy48TM5E71cUf70xJno8vuvREZiz9NRx46mJL9gcE9iOFrGAOP9Z/3yGDRKfvnR
euqx1nbXRtUoqWJmkkk/V6LYunRT5xqRuwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FM98GSAfopjoeCf/lPUAdJoSjGdoMB8GA1UdIwQYMBaAFJ2EHW3rLoudClBMDsnw
S+F8RSntMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RiMjdiNWNocFBRM3My
WjU1aVBTN3B4ZnlhUDJuVkpvbWJ6ZEI5eHl3RWVULzAvOUQ4NDFENkRFQjJFOEI5
RDBBNTA0QzBFQzlGMDRCRTE3QzQ1MjlFRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85RDg0MUQ2REVCMkU4QjlEMEE1MDRDMEVDOUYwNEJFMTdDNDUy
OUVELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EYjI3YjVjaHBQUTNzMlo1NWlQ
UzdweGZ5YVAyblZKb21iemRCOXh5d0VlVC8wLzMyMzgzMDM0M2EzNTMxMzAzODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzODM0MzIzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
UQgwDQYJKoZIhvcNAQELBQADggEBAELubJUoMZL7l9/0+8/JmGSwenDy4sGNBZe+
jgOs2MfnCqgVP4z+t8wRBXo3dfT1sWVCmct7DBtm4zFSR0GsT/dm5wRwu5pbeBjE
I2whKzrlFxDAvhxsgb7sPR+NLZ3myVDbFJOczEMXDb7njlSQDtfGaEeXpE3xTbIi
jCaJOFuCUFY346Mu+xpj1RU64bPhZ2fMdBp+7uK2vyLL6DqeY08wsQnSbE7JcB0/
lTkqE9RFnB4khzJsIFrL6zMKSY3/TpNDbIV1gz9zj7HWoJpLzp16/jnFBCcU46s0
kNdr975D9FKgU3wlBylxYLRrOdMXR0q+tVEX/GjByjOhzP7cpWA=
-----END CERTIFICATE-----