Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d3438203d3e20323733363839.roa
File:                     323830343a386162633a3a2f33322d3438203d3e20323733363839.roa (raw, json)
Hash identifier:          HEgNqxvs20fEx6tMUCpl3EG6UjTLRflP0pl0HPNfr0Q=
Subject key identifier:   E7:90:2C:17:F2:B9:13:C3:90:21:5D:0C:30:83:23:1D:7E:C5:E1:74
Certificate issuer:       /CN=26D55ECB0BF195EB60DCF0757979EB9B6DB713BF
Certificate serial:       681070D10CF5A7E012D84B1AECA1913AF2D8F9D9
Authority key identifier: 26:D5:5E:CB:0B:F1:95:EB:60:DC:F0:75:79:79:EB:9B:6D:B7:13:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26D55ECB0BF195EB60DCF0757979EB9B6DB713BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d3438203d3e20323733363839.roa
Signing time:             Mon 11 Mar 2024 20:04:27 +0000
ROA not before:           Mon 11 Mar 2024 19:59:27 +0000
ROA not after:            Mon 10 Mar 2025 20:04:27 +0000
asID:                     273689
IP address blocks:        2804:8abc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:10:70:d1:0c:f5:a7:e0:12:d8:4b:1a:ec:a1:91:3a:f2:d8:f9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D55ECB0BF195EB60DCF0757979EB9B6DB713BF
        Validity
            Not Before: Mar 11 19:59:27 2024 GMT
            Not After : Mar 10 20:04:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:f7:a4:d4:92:2e:22:54:bb:5b:35:41:44:
                    a1:6f:b5:a3:c9:7c:2c:82:18:6b:c7:e8:b0:a2:fe:
                    67:a3:34:f0:96:34:9d:55:a3:d3:c0:1c:1e:5e:74:
                    0a:04:3d:bd:77:fc:ff:ae:1a:b2:29:da:68:4e:e9:
                    a5:ed:40:8b:f9:3b:21:13:78:d3:7d:c4:40:17:b7:
                    33:b3:00:ae:3a:ea:95:cc:15:2e:38:e0:c6:f6:1e:
                    85:a2:da:2f:52:17:ab:a9:6c:76:71:ac:1d:71:40:
                    d8:ea:bc:63:c7:bf:1a:3f:63:d0:d8:c7:3a:53:bd:
                    11:ea:38:0f:f5:a4:79:4d:90:2d:53:04:d4:b4:42:
                    55:46:10:c6:52:55:70:92:1e:9e:4f:0e:ce:c2:02:
                    2b:ae:6a:5e:b7:09:9a:9e:1c:b3:04:5f:a2:04:8a:
                    27:42:e1:95:60:41:b7:19:9e:cb:89:8b:d8:b3:e2:
                    24:46:03:4a:cf:c5:76:06:da:03:c9:f0:cd:37:61:
                    8a:cd:7f:4a:0c:7f:0f:0c:fe:5a:76:d8:ef:bd:5a:
                    53:d1:9d:e2:22:10:bb:c9:a2:bd:5a:69:d7:12:13:
                    fc:78:ed:cd:f0:29:9f:d5:2f:3e:54:01:2d:c8:7d:
                    c8:6d:05:71:b8:f2:db:db:ba:f0:c4:74:80:43:e6:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:2C:17:F2:B9:13:C3:90:21:5D:0C:30:83:23:1D:7E:C5:E1:74
            X509v3 Authority Key Identifier:
                keyid:26:D5:5E:CB:0B:F1:95:EB:60:DC:F0:75:79:79:EB:9B:6D:B7:13:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/26D55ECB0BF195EB60DCF0757979EB9B6DB713BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26D55ECB0BF195EB60DCF0757979EB9B6DB713BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d3438203d3e20323733363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:91:c7:60:6f:45:76:09:bd:51:4c:f3:6b:ce:ad:37:f2:
         e4:1d:24:16:7c:ee:ed:7d:37:92:a7:8f:81:af:20:f0:e0:e9:
         6b:63:82:5d:80:1e:75:4f:41:d7:bc:62:1f:64:80:41:69:f6:
         c4:0b:ab:e2:aa:18:9b:8d:44:7f:11:2d:5f:18:bd:8b:50:2a:
         d2:f1:23:c6:40:cf:29:05:b4:5d:2a:b4:de:7f:d9:49:3e:21:
         d1:0d:47:bc:6a:73:80:7d:e9:ab:d8:3d:91:a4:03:46:7e:62:
         73:ed:90:d5:7d:ff:22:f2:de:75:15:12:70:15:0a:fb:69:76:
         7d:c2:d0:58:09:10:63:fa:e5:14:3f:19:94:2f:7a:aa:06:ac:
         1a:52:e4:04:1c:53:f4:3e:22:0b:a5:46:49:57:7e:70:55:d6:
         de:65:54:14:15:4c:ee:7d:39:bc:e6:32:bb:4f:a5:cb:0b:d4:
         7c:47:85:49:aa:83:f2:cc:54:05:05:04:5f:ae:57:e2:cb:20:
         47:a6:87:8d:2d:3f:69:02:55:c9:d8:1d:a2:cc:1c:cb:08:06:
         86:47:a0:f3:a5:dd:c4:85:03:20:dd:57:d7:bb:8d:c1:a9:b9:
         c4:7e:88:48:60:5f:07:f1:95:78:b3:93:1d:60:e9:f3:79:1c:
         8c:13:8f:42
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUaBBw0Qz1p+AS2Esa7KGROvLY+dkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZENTVFQ0IwQkYxOTVFQjYwRENGMDc1Nzk3OUVCOUI2
REI3MTNCRjAeFw0yNDAzMTExOTU5MjdaFw0yNTAzMTAyMDA0MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNDNUY3QTRENDkyMkUyMjU0
QkI1QjM1NDE0NEExNkZCNUEzQzk3QzJDODIxODZCQzdFOEIwQTJGRTY3QTMzNEYw
OTYzNDlENTVBM0QzQzAxQzFFNUU3NDBBMDQzREJENzdGQ0ZGQUUxQUIyMjlEQTY4
NEVFOUE1RUQ0MDhCRjkzQjIxMTM3OEQzN0RDNDQwMTdCNzMzQjMwMEFFM0FFQTk1
Q0MxNTJFMzhFMEM2RjYxRTg1QTJEQTJGNTIxN0FCQTk2Qzc2NzFBQzFENzE0MEQ4
RUFCQzYzQzdCRjFBM0Y2M0QwRDhDNzNBNTNCRDExRUEzODBGRjVBNDc5NEQ5MDJE
NTMwNEQ0QjQ0MjU1NDYxMEM2NTI1NTcwOTIxRTlFNEYwRUNFQzIwMjJCQUU2QTVF
QjcwOTlBOUUxQ0IzMDQ1RkEyMDQ4QTI3NDJFMTk1NjA0MUI3MTk5RUNCODk4QkQ4
QjNFMjI0NDYwMzRBQ0ZDNTc2MDZEQTAzQzlGMENEMzc2MThBQ0Q3RjRBMEM3RjBG
MENGRTVBNzZEOEVGQkQ1QTUzRDE5REUyMjIxMEJCQzlBMkJENUE2OUQ3MTIxM0ZD
NzhFRENERjAyOTlGRDUyRjNFNTQwMTJEQzg3REM4NkQwNTcxQjhGMkRCREJCQUYw
QzQ3NDgwNDNFNjc4ODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw8X3pNSSLiJUu1s1QUShb7WjyXwsghhrx+iwov5nozTwljSdVaPT
wBweXnQKBD29d/z/rhqyKdpoTuml7UCL+TshE3jTfcRAF7czswCuOuqVzBUuOODG
9h6FotovUherqWx2cawdcUDY6rxjx78aP2PQ2Mc6U70R6jgP9aR5TZAtUwTUtEJV
RhDGUlVwkh6eTw7OwgIrrmpetwmanhyzBF+iBIonQuGVYEG3GZ7LiYvYs+IkRgNK
z8V2BtoDyfDNN2GKzX9KDH8PDP5adtjvvVpT0Z3iIhC7yaK9WmnXEhP8eO3N8Cmf
1S8+VAEtyH3IbQVxuPLb27rwxHSAQ+Z4gQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FOeQLBfyuRPDkCFdDDCDIx1+xeF0MB8GA1UdIwQYMBaAFCbVXssL8ZXrYNzwdXl5
65tttxO/MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VFOG1NcmFwaEVzZEdv
UFU4R0hMTEhta3Zuc0hqNFJaeHREWEpLUDh2OVpVLzAvMjZENTVFQ0IwQkYxOTVF
QjYwRENGMDc1Nzk3OUVCOUI2REI3MTNCRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yNkQ1NUVDQjBCRjE5NUVCNjBEQ0YwNzU3OTc5RUI5QjZEQjcx
M0JGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FRThtTXJhcGhFc2RHb1BVOEdI
TExIbWt2bnNIajRSWnh0RFhKS1A4djlaVS8wLzMyMzgzMDM0M2EzODYxNjI2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMzM2MzgzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
irwwDQYJKoZIhvcNAQELBQADggEBALTzkcdgb0V2Cb1RTPNrzq038uQdJBZ87u19
N5Knj4GvIPDg6Wtjgl2AHnVPQde8Yh9kgEFp9sQLq+KqGJuNRH8RLV8YvYtQKtLx
I8ZAzykFtF0qtN5/2Uk+IdENR7xqc4B96avYPZGkA0Z+YnPtkNV9/yLy3nUVEnAV
Cvtpdn3C0FgJEGP65RQ/GZQveqoGrBpS5AQcU/Q+IgulRklXfnBV1t5lVBQVTO59
ObzmMrtPpcsL1HxHhUmqg/LMVAUFBF+uV+LLIEemh40tP2kCVcnYHaLMHMsIBoZH
oPOl3cSFAyDdV9e7jcGpucR+iEhgXwfxlXizkx1g6fN5HIwTj0I=
-----END CERTIFICATE-----