Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa
File:                     323830343a313731303a3a2f33322d3335203d3e20323633313230.roa (raw, json)
Hash identifier:          oXWTsT+hvKo+tvnLIjv0QGP884IuGYwQ6kDqh5PT/U8=
Subject key identifier:   88:9A:F0:03:54:82:99:C3:A8:21:16:E5:DD:EC:10:1C:9A:67:9C:1A
Certificate issuer:       /CN=A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5
Certificate serial:       29791F6500C23DCC8D69B51D87D24F677162A602
Authority key identifier: A4:A2:8C:FE:B5:0F:C9:3F:90:5F:F9:7F:3B:8E:3F:A4:F8:B6:F4:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa
Signing time:             Tue 10 Oct 2023 21:00:03 +0000
ROA not before:           Tue 10 Oct 2023 20:55:03 +0000
ROA not after:            Tue 08 Oct 2024 21:00:03 +0000
asID:                     263120
IP address blocks:        2804:1710::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:79:1f:65:00:c2:3d:cc:8d:69:b5:1d:87:d2:4f:67:71:62:a6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5
        Validity
            Not Before: Oct 10 20:55:03 2023 GMT
            Not After : Oct  8 21:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:ac:11:0f:16:f0:f6:1b:ad:d8:a7:f3:01:
                    81:81:e1:d7:1d:56:f1:67:0f:f0:16:72:2c:f8:ff:
                    51:a1:6a:96:0d:2e:08:dd:03:b8:c6:5e:d7:81:38:
                    cd:a2:cf:91:bc:83:dc:0f:9a:b7:b3:d0:3f:9d:89:
                    88:92:a2:e8:4c:2f:b8:67:b6:cf:97:05:c9:b2:1c:
                    69:21:bb:26:1e:f4:e8:49:4d:67:9b:55:44:8d:4a:
                    19:c8:84:27:7c:2d:4a:c0:35:63:a0:28:de:52:68:
                    49:65:7a:61:64:c1:b4:ef:16:91:81:68:d2:76:bd:
                    84:a2:82:89:e4:44:ba:f1:88:88:9e:99:7b:e6:3a:
                    68:c5:12:e2:c8:69:64:84:51:76:c4:4d:56:af:7a:
                    57:6b:e3:c1:d1:f3:26:f1:b4:18:62:c9:82:c0:be:
                    e9:9e:47:16:a1:26:f4:a2:e1:d4:09:17:e0:06:56:
                    8a:90:40:86:73:9a:b8:21:0f:a3:86:7e:ec:7e:26:
                    98:c3:58:71:16:d3:2b:fd:99:41:74:f3:72:59:77:
                    ed:8f:4a:a0:72:b3:c8:eb:d6:02:fc:05:11:ba:61:
                    5e:e3:db:7b:06:9f:be:3a:99:c0:13:d2:d7:a3:bb:
                    ec:d0:b8:02:68:a7:93:0d:52:f8:a5:41:a6:56:aa:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9A:F0:03:54:82:99:C3:A8:21:16:E5:DD:EC:10:1C:9A:67:9C:1A
            X509v3 Authority Key Identifier:
                keyid:A4:A2:8C:FE:B5:0F:C9:3F:90:5F:F9:7F:3B:8E:3F:A4:F8:B6:F4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/323830343a313731303a3a2f33322d3335203d3e20323633313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1710::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:24:86:e9:72:f3:fa:fa:59:5f:2a:ad:76:38:98:fa:a2:9d:
         8b:e5:d4:cc:6d:84:a7:ba:2f:52:39:48:dc:65:a9:cf:69:85:
         68:83:41:a3:5f:4c:72:df:cf:5e:37:6a:af:ca:32:71:2c:ef:
         6b:c1:f1:79:8a:e0:89:9e:d8:d1:d5:a9:06:48:ad:44:d7:46:
         09:01:c7:a1:3a:42:06:b6:85:93:5b:4b:c3:5a:0c:b2:e1:d8:
         fc:b9:83:15:f5:08:e7:13:cc:be:ec:fd:ab:81:93:8d:ca:4c:
         ba:56:2c:2e:2f:2c:06:a9:a4:a9:0b:55:56:c0:0d:1c:b8:45:
         39:4d:29:71:32:2e:99:44:75:df:4f:58:b1:75:43:fc:80:82:
         08:ef:98:3a:92:76:9e:4f:23:a8:6d:d6:d2:fb:02:b3:d0:79:
         53:5a:fd:bd:8b:6d:08:57:a2:56:c7:ea:e6:9d:10:cc:5a:a9:
         dc:f9:8f:97:47:bf:f7:be:10:ef:30:91:f5:91:0d:91:30:59:
         af:95:4a:30:bd:99:aa:03:d4:28:25:62:4a:57:c0:a6:43:35:
         e9:e3:23:93:45:cb:63:b1:bf:f9:5a:e0:77:07:fa:ea:56:94:
         09:c8:0e:14:dd:c9:30:56:df:a9:5f:2c:4d:0c:97:9f:40:32:
         39:54:69:82
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUKXkfZQDCPcyNabUdh9JPZ3FipgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRBMjhDRkVCNTBGQzkzRjkwNUZGOTdGM0I4RTNGQTRG
OEI2RjRBNTAeFw0yMzEwMTAyMDU1MDNaFw0yNDEwMDgyMTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk3RkFDMTEwRjE2RjBGNjFC
QUREOEE3RjMwMTgxODFFMUQ3MUQ1NkYxNjcwRkYwMTY3MjJDRjhGRjUxQTE2QTk2
MEQyRTA4REQwM0I4QzY1RUQ3ODEzOENEQTJDRjkxQkM4M0RDMEY5QUI3QjNEMDNG
OUQ4OTg4OTJBMkU4NEMyRkI4NjdCNkNGOTcwNUM5QjIxQzY5MjFCQjI2MUVGNEU4
NDk0RDY3OUI1NTQ0OEQ0QTE5Qzg4NDI3N0MyRDRBQzAzNTYzQTAyOERFNTI2ODQ5
NjU3QTYxNjRDMUI0RUYxNjkxODE2OEQyNzZCRDg0QTI4Mjg5RTQ0NEJBRjE4ODg4
OUU5OTdCRTYzQTY4QzUxMkUyQzg2OTY0ODQ1MTc2QzQ0RDU2QUY3QTU3NkJFM0Mx
RDFGMzI2RjFCNDE4NjJDOTgyQzBCRUU5OUU0NzE2QTEyNkY0QTJFMUQ0MDkxN0Uw
MDY1NjhBOTA0MDg2NzM5QUI4MjEwRkEzODY3RUVDN0UyNjk4QzM1ODcxMTZEMzJC
RkQ5OTQxNzRGMzcyNTk3N0VEOEY0QUEwNzJCM0M4RUJENjAyRkMwNTExQkE2MTVF
RTNEQjdCMDY5RkJFM0E5OUMwMTNEMkQ3QTNCQkVDRDBCODAyNjhBNzkzMEQ1MkY4
QTU0MUE2NTZBQUFFQUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyX+sEQ8W8PYbrdin8wGBgeHXHVbxZw/wFnIs+P9RoWqWDS4I3QO4
xl7XgTjNos+RvIPcD5q3s9A/nYmIkqLoTC+4Z7bPlwXJshxpIbsmHvToSU1nm1VE
jUoZyIQnfC1KwDVjoCjeUmhJZXphZMG07xaRgWjSdr2EooKJ5ES68YiInpl75jpo
xRLiyGlkhFF2xE1Wr3pXa+PB0fMm8bQYYsmCwL7pnkcWoSb0ouHUCRfgBlaKkECG
c5q4IQ+jhn7sfiaYw1hxFtMr/ZlBdPNyWXftj0qgcrPI69YC/AURumFe49t7Bp++
OpnAE9LXo7vs0LgCaKeTDVL4pUGmVqqurQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FIia8ANUgpnDqCEW5d3sEByaZ5waMB8GA1UdIwQYMBaAFKSijP61D8k/kF/5fzuO
P6T4tvSlMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RrODFTcGFLTEJDb3NX
WW1rUjVBQnhNWGMya0pTTW93UDlTNlVnUTgxaDdxLzAvQTRBMjhDRkVCNTBGQzkz
RjkwNUZGOTdGM0I4RTNGQTRGOEI2RjRBNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNEEyOENGRUI1MEZDOTNGOTA1RkY5N0YzQjhFM0ZBNEY4QjZG
NEE1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EazgxU3BhS0xCQ29zV1lta1I1
QUJ4TVhjMmtKU01vd1A5UzZVZ1E4MWg3cS8wLzMyMzgzMDM0M2EzMTM3MzEzMDNh
M2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzMzMxMzIzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
FxAwDQYJKoZIhvcNAQELBQADggEBAIUkhuly8/r6WV8qrXY4mPqinYvl1MxthKe6
L1I5SNxlqc9phWiDQaNfTHLfz143aq/KMnEs72vB8XmK4Ime2NHVqQZIrUTXRgkB
x6E6Qga2hZNbS8NaDLLh2Py5gxX1COcTzL7s/auBk43KTLpWLC4vLAappKkLVVbA
DRy4RTlNKXEyLplEdd9PWLF1Q/yAggjvmDqSdp5PI6ht1tL7ArPQeVNa/b2LbQhX
olbH6uadEMxaqdz5j5dHv/e+EO8wkfWRDZEwWa+VSjC9maoD1CglYkpXwKZDNenj
I5NFy2Oxv/la4HcH+upWlAnIDhTdyTBW36lfLE0Ml59AMjlUaYI=
-----END CERTIFICATE-----