Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/0/323830343a366165383a3a2f33322d3332203d3e20323730333635.roa
File:                     323830343a366165383a3a2f33322d3332203d3e20323730333635.roa (raw, json)
Hash identifier:          Ym+Y9PxnDDWHQJ3T/wEnO3Nin/Sd6PTRSmGkwA/zWBY=
Subject key identifier:   49:83:A0:14:C0:C0:7F:5A:10:CB:CC:CF:53:A4:02:FF:12:74:D8:F2
Certificate issuer:       /CN=00315794592FB567304049F79E01545A41977CA6
Certificate serial:       6D070ADD933A768207C8DC1416AF3EC3F4D4FBC4
Authority key identifier: 00:31:57:94:59:2F:B5:67:30:40:49:F7:9E:01:54:5A:41:97:7C:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00315794592FB567304049F79E01545A41977CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/0/323830343a366165383a3a2f33322d3332203d3e20323730333635.roa
Signing time:             Thu 05 Oct 2023 20:53:00 +0000
ROA not before:           Thu 05 Oct 2023 20:48:00 +0000
ROA not after:            Thu 03 Oct 2024 20:53:00 +0000
asID:                     270365
IP address blocks:        2804:6ae8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:07:0a:dd:93:3a:76:82:07:c8:dc:14:16:af:3e:c3:f4:d4:fb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00315794592FB567304049F79E01545A41977CA6
        Validity
            Not Before: Oct  5 20:48:00 2023 GMT
            Not After : Oct  3 20:53:00 2024 GMT
        Subject: CN=4983A014C0C07F5A10CBCCCF53A402FF1274D8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:5a:78:68:ee:e0:5e:87:37:a8:4c:8f:da:
                    25:0b:52:1e:7a:b9:b2:37:50:79:04:5d:07:8c:1b:
                    3f:1a:36:db:67:1a:2b:f0:74:53:3a:e4:81:2d:61:
                    39:2b:d0:f3:c1:7a:05:a0:bc:55:99:5d:c8:38:34:
                    55:78:b1:b6:5f:31:14:d7:ac:0f:5c:bc:8a:f4:32:
                    3b:6c:f9:6d:c0:90:95:7d:40:f9:6f:bf:0e:8a:dd:
                    f6:4a:ed:5f:b7:40:c8:5f:7a:c3:72:b1:49:d0:9e:
                    a3:ed:75:31:77:cd:eb:34:f9:2b:48:6b:91:d2:6b:
                    fa:5e:d3:e1:5f:71:8c:86:2f:7d:50:0b:24:8c:2c:
                    c0:42:f8:4a:8a:50:06:ac:de:39:81:a0:0d:3a:dd:
                    8d:cb:ae:d0:25:f7:f7:ca:b4:92:0f:2b:e9:62:c0:
                    83:bc:51:c2:fa:00:3f:33:cd:b5:71:3c:ae:85:83:
                    84:6b:5b:fe:56:4c:54:b9:f1:e8:fa:73:39:ba:fe:
                    e2:67:f3:df:6e:35:a3:48:10:d7:a2:db:6b:86:99:
                    ae:ee:72:b9:2b:f3:2f:8b:ce:cb:41:91:53:7c:86:
                    0f:b9:3d:ed:3a:77:a5:7f:cd:c8:7f:64:68:be:d9:
                    4e:c5:1a:4f:14:91:47:07:98:40:66:b1:ea:8a:86:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:83:A0:14:C0:C0:7F:5A:10:CB:CC:CF:53:A4:02:FF:12:74:D8:F2
            X509v3 Authority Key Identifier:
                keyid:00:31:57:94:59:2F:B5:67:30:40:49:F7:9E:01:54:5A:41:97:7C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/0/00315794592FB567304049F79E01545A41977CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00315794592FB567304049F79E01545A41977CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/0/323830343a366165383a3a2f33322d3332203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ae8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:1f:45:50:ca:7e:a2:0e:b9:e9:15:f0:33:2a:8d:5e:21:4f:
         ad:e1:79:d8:11:9a:98:89:b6:c3:88:08:23:7e:c7:36:f3:7f:
         02:96:43:56:16:c2:0e:76:80:cc:01:68:d4:93:46:83:87:4c:
         84:8a:4b:2e:c9:68:9d:4b:5b:ea:fc:96:ea:69:92:42:51:f3:
         34:45:1e:3e:8a:b3:34:8b:f4:18:72:72:e8:4b:17:8d:0c:71:
         07:f8:8e:95:28:9e:ce:17:ef:4f:04:06:f1:60:b7:7c:a7:b9:
         7f:6d:2f:89:db:2e:2e:f0:dd:fa:2e:22:cf:e2:ed:ed:72:f1:
         7c:b3:6c:2a:78:4b:e4:5c:ae:2c:65:1e:f0:d9:22:71:5a:39:
         ab:eb:a2:1e:a2:10:95:5f:b2:e6:57:3d:f6:99:01:81:37:ae:
         5d:73:e0:47:8f:94:40:8a:d1:3f:3c:a7:d7:83:47:22:81:c4:
         ef:c1:d0:36:6b:55:6a:2a:56:6c:f3:e1:99:1f:02:5e:79:c4:
         7d:92:e1:a0:0a:08:41:6c:e9:b6:4c:ee:5d:db:3e:42:eb:3c:
         32:93:1a:3a:cc:74:ee:9c:73:55:24:f9:9d:84:92:dc:0a:d6:
         8f:a6:2e:5b:6c:9f:3a:18:a7:04:c6:6b:79:5f:44:82:3b:50:
         b3:71:6b:2b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbQcK3ZM6doIHyNwUFq8+w/TU+8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAzMTU3OTQ1OTJGQjU2NzMwNDA0OUY3OUUwMTU0NUE0
MTk3N0NBNjAeFw0yMzEwMDUyMDQ4MDBaFw0yNDEwMDMyMDUzMDBaMDMxMTAvBgNV
BAMTKDQ5ODNBMDE0QzBDMDdGNUExMENCQ0NDRjUzQTQwMkZGMTI3NEQ4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCo1p4aO7gXoc3qEyP2iULUh56
ubI3UHkEXQeMGz8aNttnGivwdFM65IEtYTkr0PPBegWgvFWZXcg4NFV4sbZfMRTX
rA9cvIr0Mjts+W3AkJV9QPlvvw6K3fZK7V+3QMhfesNysUnQnqPtdTF3zes0+StI
a5HSa/pe0+FfcYyGL31QCySMLMBC+EqKUAas3jmBoA063Y3LrtAl9/fKtJIPK+li
wIO8UcL6AD8zzbVxPK6Fg4RrW/5WTFS58ej6czm6/uJn899uNaNIENei22uGma7u
crkr8y+LzstBkVN8hg+5Pe06d6V/zch/ZGi+2U7FGk8UkUcHmEBmseqKhjIHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSYOgFMDAf1oQy8zPU6QC/xJ02PIwHwYDVR0j
BBgwFoAUADFXlFkvtWcwQEn3ngFUWkGXfKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFydWdwTnZSNEdXdEI3UDlUTEQ5c3M0SG1kM2lXRHZONlg3Q3pHUnA2
U3kvMC8wMDMxNTc5NDU5MkZCNTY3MzA0MDQ5Rjc5RTAxNTQ1QTQxOTc3Q0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAwMzE1Nzk0NTkyRkI1Njcz
MDQwNDlGNzlFMDE1NDVBNDE5NzdDQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxcnVncE52UjRHV3RCN1A5VExEOXNzNEhtZDNpV0R2TjZYN0N6R1JwNlN5LzAv
MzIzODMwMzQzYTM2NjE2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzMzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARq6DANBgkqhkiG9w0BAQsFAAOCAQEAXB9FUMp+
og656RXwMyqNXiFPreF52BGamIm2w4gII37HNvN/ApZDVhbCDnaAzAFo1JNGg4dM
hIpLLslonUtb6vyW6mmSQlHzNEUePoqzNIv0GHJy6EsXjQxxB/iOlSiezhfvTwQG
8WC3fKe5f20vidsuLvDd+i4iz+Lt7XLxfLNsKnhL5FyuLGUe8NkicVo5q+uiHqIQ
lV+y5lc99pkBgTeuXXPgR4+UQIrRPzyn14NHIoHE78HQNmtVaipWbPPhmR8CXnnE
fZLhoAoIQWzptkzuXds+Qus8MpMaOsx07pxzVST5nYSS3ArWj6YuW2yfOhinBMZr
eV9EgjtQs3FrKw==
-----END CERTIFICATE-----