Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/323830343a326435633a3a2f33322d3438203d3e20323635323737.roa
File:                     323830343a326435633a3a2f33322d3438203d3e20323635323737.roa (raw, json)
Hash identifier:          nXLCbtsYydUhjpDDILWnzKMHbW7Brq1xJg35HuJqtHo=
Subject key identifier:   98:C6:FF:9E:51:42:C0:6C:47:26:55:29:11:FD:B8:60:EC:DD:36:BC
Certificate issuer:       /CN=0FD498029BCE26073F3E355B9D561769EF0BCABB
Certificate serial:       5033F54FFB15A53C408101C06EC5FB48112E0081
Authority key identifier: 0F:D4:98:02:9B:CE:26:07:3F:3E:35:5B:9D:56:17:69:EF:0B:CA:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FD498029BCE26073F3E355B9D561769EF0BCABB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/323830343a326435633a3a2f33322d3438203d3e20323635323737.roa
Signing time:             Fri 29 Dec 2023 15:18:41 +0000
ROA not before:           Fri 29 Dec 2023 15:13:41 +0000
ROA not after:            Fri 27 Dec 2024 15:18:41 +0000
asID:                     265277
IP address blocks:        2804:2d5c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:f5:4f:fb:15:a5:3c:40:81:01:c0:6e:c5:fb:48:11:2e:00:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD498029BCE26073F3E355B9D561769EF0BCABB
        Validity
            Not Before: Dec 29 15:13:41 2023 GMT
            Not After : Dec 27 15:18:41 2024 GMT
        Subject: CN=98C6FF9E5142C06C4726552911FDB860ECDD36BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:94:da:ef:ee:dd:30:99:9e:57:77:47:93:
                    4e:2a:98:ce:61:4b:66:39:ce:74:87:f9:42:d3:a4:
                    41:b0:02:d8:db:05:a4:8d:1f:d9:e1:87:54:50:b7:
                    a8:2c:01:6d:5a:5d:51:3a:19:db:37:45:dc:18:0f:
                    d5:07:4c:57:7e:4b:26:33:d8:b4:f7:f8:37:18:db:
                    c7:11:13:1c:c1:83:02:a9:ed:c3:8c:61:35:30:40:
                    d1:b5:34:bd:d7:e8:93:f7:0e:bd:04:75:26:6d:59:
                    ed:3f:96:e6:ec:6d:f0:65:93:ae:ab:4f:48:0b:cc:
                    dc:66:d4:eb:e1:b6:84:5b:28:92:12:17:f9:5f:40:
                    b4:79:a4:2f:20:77:1b:ef:60:9d:45:0f:83:08:7e:
                    e3:c6:0e:06:fc:3f:ef:2f:38:12:32:5e:54:97:e9:
                    b5:73:cf:68:43:bb:1e:ad:fb:58:a3:0d:f0:d6:25:
                    d6:59:88:07:7a:80:61:85:7a:d1:ff:9a:0e:3c:83:
                    20:8f:44:31:18:60:ec:10:e5:6d:e8:cd:f7:f9:18:
                    4e:27:6c:ad:6e:c0:da:94:be:f0:89:04:e7:a5:3a:
                    b8:ce:b0:e4:60:a6:bb:3d:85:39:ae:bc:a4:25:83:
                    90:41:37:3b:97:3a:80:e1:28:27:94:bf:64:b1:11:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C6:FF:9E:51:42:C0:6C:47:26:55:29:11:FD:B8:60:EC:DD:36:BC
            X509v3 Authority Key Identifier:
                keyid:0F:D4:98:02:9B:CE:26:07:3F:3E:35:5B:9D:56:17:69:EF:0B:CA:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/0FD498029BCE26073F3E355B9D561769EF0BCABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FD498029BCE26073F3E355B9D561769EF0BCABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/0/323830343a326435633a3a2f33322d3438203d3e20323635323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:a3:84:ca:68:25:40:88:3a:ea:9f:7b:4c:a2:f0:95:c1:
         da:31:2c:d9:8e:25:30:5f:24:32:7d:6f:f5:b5:9c:d4:27:fa:
         00:8d:df:7d:ff:51:e3:2c:4f:1b:41:5a:d0:ee:80:b4:7d:f1:
         ea:4c:b2:32:bd:eb:36:b2:d2:b7:bb:75:a2:33:63:53:cc:6e:
         94:04:a7:0a:20:df:22:dd:07:25:eb:31:08:b5:12:57:8d:0e:
         5f:40:4c:4d:b9:23:f0:38:10:a1:80:65:12:c1:11:12:94:56:
         5d:8e:ae:10:16:93:b4:7d:d7:55:43:a8:85:2e:4c:e2:85:e1:
         5e:b6:5f:13:cc:ad:89:4e:24:fd:27:ab:75:1e:f0:2c:50:8a:
         3f:fe:58:95:c3:84:3d:66:85:4e:8e:5f:14:d7:8c:0d:7e:ed:
         5b:02:a1:6f:0c:19:9b:ce:60:1a:83:ff:6c:e7:58:dd:4c:32:
         fb:c4:b1:5c:27:06:4c:34:a2:0c:be:4f:d5:25:11:e1:6b:d0:
         5e:98:74:b7:6b:ac:d9:a1:b2:64:5d:e3:9e:70:82:57:03:8d:
         37:62:00:89:42:9b:6d:06:a3:8f:0d:0b:5a:05:4a:5d:17:76:
         8f:a8:67:75:42:ce:5f:c4:ee:a1:e0:b1:72:1e:11:fd:0f:3e:
         8e:a7:ce:8f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUDP1T/sVpTxAgQHAbsX7SBEuAIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZENDk4MDI5QkNFMjYwNzNGM0UzNTVCOUQ1NjE3NjlF
RjBCQ0FCQjAeFw0yMzEyMjkxNTEzNDFaFw0yNDEyMjcxNTE4NDFaMDMxMTAvBgNV
BAMTKDk4QzZGRjlFNTE0MkMwNkM0NzI2NTUyOTExRkRCODYwRUNERDM2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17JTa7+7dMJmeV3dHk04qmM5h
S2Y5znSH+ULTpEGwAtjbBaSNH9nhh1RQt6gsAW1aXVE6Gds3RdwYD9UHTFd+SyYz
2LT3+DcY28cRExzBgwKp7cOMYTUwQNG1NL3X6JP3Dr0EdSZtWe0/lubsbfBlk66r
T0gLzNxm1OvhtoRbKJISF/lfQLR5pC8gdxvvYJ1FD4MIfuPGDgb8P+8vOBIyXlSX
6bVzz2hDux6t+1ijDfDWJdZZiAd6gGGFetH/mg48gyCPRDEYYOwQ5W3ozff5GE4n
bK1uwNqUvvCJBOelOrjOsORgprs9hTmuvKQlg5BBNzuXOoDhKCeUv2SxEUVHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmMb/nlFCwGxHJlUpEf24YOzdNrwwHwYDVR0j
BBgwFoAUD9SYApvOJgc/PjVbnVYXae8LyrswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXVCMkZYZXAzYlFuYjZLRVF2R0Z0MVpNaDhXald4TUFIa1Z3ZVp1WEo0
QkMvMC8wRkQ0OTgwMjlCQ0UyNjA3M0YzRTM1NUI5RDU2MTc2OUVGMEJDQUJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGRDQ5ODAyOUJDRTI2MDcz
RjNFMzU1QjlENTYxNzY5RUYwQkNBQkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V1QjJGWGVwM2JRbmI2S0VRdkdGdDFaTWg4V2pXeE1BSGtWd2VadVhKNEJDLzAv
MzIzODMwMzQzYTMyNjQzNTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzIzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtXDANBgkqhkiG9w0BAQsFAAOCAQEAa6ujhMpo
JUCIOuqfe0yi8JXB2jEs2Y4lMF8kMn1v9bWc1Cf6AI3fff9R4yxPG0Fa0O6AtH3x
6kyyMr3rNrLSt7t1ojNjU8xulASnCiDfIt0HJesxCLUSV40OX0BMTbkj8DgQoYBl
EsEREpRWXY6uEBaTtH3XVUOohS5M4oXhXrZfE8ytiU4k/SerdR7wLFCKP/5YlcOE
PWaFTo5fFNeMDX7tWwKhbwwZm85gGoP/bOdY3Uwy+8SxXCcGTDSiDL5P1SUR4WvQ
Xph0t2us2aGyZF3jnnCCVwONN2IAiUKbbQajjw0LWgVKXRd2j6hndULOX8TuoeCx
ch4R/Q8+jqfOjw==
-----END CERTIFICATE-----