Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa
File:                     323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa (raw, json)
Hash identifier:          VJTE41LdEre6ETzcRHck2t6OpDYlnkp8f3KCP9EH6bw=
Subject key identifier:   C4:D9:8B:AF:A9:27:C1:97:FB:D7:06:6B:5D:6C:74:7F:C0:B4:BC:A1
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       0E41D2A06C86465CD790F2C6ECD2074EA6D31E1D
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:31 +0000
ROA not before:           Thu 29 Jun 2023 14:08:31 +0000
ROA not after:            Thu 27 Jun 2024 14:13:31 +0000
asID:                     53086
IP address blocks:        2804:4fe4:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:41:d2:a0:6c:86:46:5c:d7:90:f2:c6:ec:d2:07:4e:a6:d3:1e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:31 2023 GMT
            Not After : Jun 27 14:13:31 2024 GMT
        Subject: CN=C4D98BAFA927C197FBD7066B5D6C747FC0B4BCA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:a2:3d:ee:2b:f3:bb:0d:6b:22:11:5c:c3:
                    c0:cc:0c:e4:11:af:a9:5c:0c:2a:6f:15:55:ae:fa:
                    5b:84:77:91:4a:16:fc:56:6b:70:66:b5:e7:05:f0:
                    1e:3f:67:b8:0a:fa:99:83:07:c2:bc:76:35:c8:37:
                    75:d1:4d:83:02:a3:79:90:88:32:22:89:f2:1b:88:
                    ff:f3:f4:a8:d7:ea:b3:3e:55:2d:29:8f:c8:a5:76:
                    c0:73:3b:8f:31:97:8f:1e:69:df:82:1e:e9:13:35:
                    6e:d3:70:4f:e3:83:74:43:21:89:d4:ec:75:b1:32:
                    fc:28:54:22:99:b2:0a:02:74:fd:4f:46:e1:b4:13:
                    3b:bf:cc:9e:66:c8:25:00:1f:e7:28:83:9e:b9:3f:
                    c1:29:4a:f9:b6:fe:9c:39:6e:a8:ca:a0:28:f0:a7:
                    29:a2:33:b1:d0:21:4c:c4:3a:e5:b9:16:0c:6b:09:
                    a7:fd:17:df:a9:21:2e:6a:dd:92:bf:e4:c3:8b:5e:
                    0c:4d:86:d6:98:96:2d:77:b1:2e:bf:de:0a:f1:bc:
                    53:ff:26:85:c0:57:c1:44:c5:23:e4:24:8f:2f:12:
                    51:3c:00:25:54:3f:aa:ff:bc:71:4d:66:79:b0:87:
                    98:6a:d7:08:a5:00:7b:f1:10:f1:f5:62:8c:60:a2:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D9:8B:AF:A9:27:C1:97:FB:D7:06:6B:5D:6C:74:7F:C0:B4:BC:A1
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/323830343a346665343a383030303a3a2f33342d3334203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:a4:8f:f2:27:a2:c0:7b:a7:76:69:e2:1b:9c:44:b4:ac:5f:
         03:0d:0a:37:3b:1e:6c:d1:45:bc:8f:fd:62:74:fe:26:7c:ad:
         c7:c3:d6:f0:d8:3c:f8:da:76:77:3d:3a:57:0b:92:53:68:4e:
         c6:18:e2:ad:30:9b:6f:06:ed:af:26:e4:4f:9b:d8:63:aa:ac:
         65:4f:cf:ae:7d:75:8e:e2:68:a4:e4:e5:38:e2:ae:83:9c:8e:
         70:ae:98:7b:12:04:fd:fd:10:84:dd:ad:cb:a1:e1:49:f7:2e:
         c4:c8:c5:d6:a0:af:d4:d6:e3:03:3a:11:54:5a:44:42:a9:99:
         16:ea:e6:1e:08:ed:45:65:72:65:6b:25:df:ae:eb:2b:df:24:
         58:20:3f:85:d6:ac:60:e2:ff:71:5a:ca:fa:0c:e3:b8:08:ec:
         3d:0b:56:c8:5b:3c:25:36:79:8b:af:af:62:2b:ae:e5:42:07:
         c1:f8:84:be:c6:ce:ad:17:49:cb:31:3f:97:bb:5f:ef:96:f3:
         c6:a1:5f:af:2c:81:8d:09:bb:2e:6e:d1:91:03:5e:8b:91:db:
         ec:e6:1e:92:4f:5d:cf:bb:74:36:43:52:5f:71:be:a8:97:62:
         a8:e5:e5:22:8c:e6:59:6b:7e:03:da:40:32:e5:b0:47:ed:7a:
         22:6a:2f:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDkHSoGyGRlzXkPLG7NIHTqbTHh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU2NjcxQ0QwQkJENjdDQzYwMEQzQTNERkQ5N0QxMjlB
MDUwQ0EwODAeFw0yMzA2MjkxNDA4MzFaFw0yNDA2MjcxNDEzMzFaMDMxMTAvBgNV
BAMTKEM0RDk4QkFGQTkyN0MxOTdGQkQ3MDY2QjVENkM3NDdGQzBCNEJDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kqI97ivzuw1rIhFcw8DMDOQR
r6lcDCpvFVWu+luEd5FKFvxWa3BmtecF8B4/Z7gK+pmDB8K8djXIN3XRTYMCo3mQ
iDIiifIbiP/z9KjX6rM+VS0pj8ildsBzO48xl48ead+CHukTNW7TcE/jg3RDIYnU
7HWxMvwoVCKZsgoCdP1PRuG0Ezu/zJ5myCUAH+cog565P8EpSvm2/pw5bqjKoCjw
pymiM7HQIUzEOuW5FgxrCaf9F9+pIS5q3ZK/5MOLXgxNhtaYli13sS6/3grxvFP/
JoXAV8FExSPkJI8vElE8ACVUP6r/vHFNZnmwh5hq1wilAHvxEPH1YoxgoqodAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxNmLr6knwZf71wZrXWx0f8C0vKEwHwYDVR0j
BBgwFoAUbmZxzQu9Z8xgDTo9/ZfRKaBQyggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMC82RTY2NzFDRDBCQkQ2N0NDNjAwRDNBM0RGRDk3RDEyOUEwNTBDQTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZFNjY3MUNEMEJCRDY3Q0M2
MDBEM0EzREZEOTdEMTI5QTA1MENBMDguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzAv
MzIzODMwMzQzYTM0NjY2NTM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM1MzMzMDM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBE/kgDANBgkqhkiG9w0BAQsFAAOC
AQEAgqSP8ieiwHundmniG5xEtKxfAw0KNzsebNFFvI/9YnT+Jnytx8PW8Ng8+Np2
dz06VwuSU2hOxhjirTCbbwbtrybkT5vYY6qsZU/Prn11juJopOTlOOKug5yOcK6Y
exIE/f0QhN2ty6HhSfcuxMjF1qCv1NbjAzoRVFpEQqmZFurmHgjtRWVyZWsl367r
K98kWCA/hdasYOL/cVrK+gzjuAjsPQtWyFs8JTZ5i6+vYiuu5UIHwfiEvsbOrRdJ
yzE/l7tf75bzxqFfryyBjQm7Lm7RkQNei5Hb7OYekk9dz7t0NkNSX3G+qJdiqOXl
IozmWWt+A9pAMuWwR+16Imovbg==
-----END CERTIFICATE-----