Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a3a2f33342d3335203d3e20323637313538.roa
File:                     323830343a343930303a3a2f33342d3335203d3e20323637313538.roa (raw, json)
Hash identifier:          jHV88qYseMxs5KP0dtfGnfcUfHilIkgqg3JYYjWomNk=
Subject key identifier:   C7:A0:B4:88:E5:E0:4B:1C:EE:0D:39:89:DD:45:BF:DC:D1:92:4D:A9
Certificate issuer:       /CN=52451CBA75931AC98AB5376E8F45C16C90C08B18
Certificate serial:       22C743F86D05ACB9C093A0DF577FFAF6BD775C2B
Authority key identifier: 52:45:1C:BA:75:93:1A:C9:8A:B5:37:6E:8F:45:C1:6C:90:C0:8B:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a3a2f33342d3335203d3e20323637313538.roa
Signing time:             Wed 24 Jan 2024 12:17:09 +0000
ROA not before:           Wed 24 Jan 2024 12:12:09 +0000
ROA not after:            Wed 22 Jan 2025 12:17:09 +0000
asID:                     267158
IP address blocks:        2804:4900::/34 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c7:43:f8:6d:05:ac:b9:c0:93:a0:df:57:7f:fa:f6:bd:77:5c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52451CBA75931AC98AB5376E8F45C16C90C08B18
        Validity
            Not Before: Jan 24 12:12:09 2024 GMT
            Not After : Jan 22 12:17:09 2025 GMT
        Subject: CN=C7A0B488E5E04B1CEE0D3989DD45BFDCD1924DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e9:ea:6e:f2:0b:01:4f:c2:97:06:d6:ef:d8:
                    7f:7f:9e:98:b9:f3:c1:ac:c2:b2:c8:37:20:f7:34:
                    ed:15:c0:62:52:91:9c:f1:c2:1e:1d:6b:53:30:84:
                    7f:1c:1f:af:8d:d2:d9:44:f0:8e:3c:d6:3f:fe:7a:
                    71:f4:06:bf:24:f8:31:a0:14:0c:ff:76:0c:97:13:
                    eb:04:8b:6e:eb:4f:23:26:e8:22:d5:ff:c2:df:5f:
                    7d:8e:a8:f4:4a:10:7f:ec:20:cd:86:03:13:28:d6:
                    20:23:4e:c1:b6:fe:95:33:95:85:a4:65:2b:b9:e4:
                    a5:c8:eb:50:92:02:c8:b2:6b:f6:84:bc:93:c9:46:
                    45:1a:95:f7:69:f5:7d:75:f0:19:39:9b:50:49:cd:
                    fe:a3:1a:6d:eb:ec:44:60:38:76:0a:27:b4:dc:de:
                    b9:c9:99:da:1c:06:cf:f2:11:ac:83:63:21:ef:40:
                    50:19:e4:55:d1:b7:30:81:29:e8:e4:e4:ff:75:28:
                    1e:26:6f:03:0e:62:5b:76:02:6a:32:e5:cc:05:ea:
                    2b:8a:18:e1:a7:20:91:2b:ed:f9:49:df:f2:7d:5b:
                    96:97:37:a2:14:4f:b3:3e:5e:55:58:18:08:dd:8d:
                    d6:11:9e:77:14:b5:a1:ac:16:63:73:ab:4e:00:69:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:B4:88:E5:E0:4B:1C:EE:0D:39:89:DD:45:BF:DC:D1:92:4D:A9
            X509v3 Authority Key Identifier:
                keyid:52:45:1C:BA:75:93:1A:C9:8A:B5:37:6E:8F:45:C1:6C:90:C0:8B:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a3a2f33342d3335203d3e20323637313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4900::/34

    Signature Algorithm: sha256WithRSAEncryption
         d6:5d:1d:40:59:c6:6e:1c:1a:ae:fa:30:87:0c:48:7c:09:72:
         ec:d4:08:d2:5c:c8:f4:6c:2b:ea:99:9c:4a:86:98:a5:eb:e6:
         c3:9f:02:fa:6e:e7:89:85:b2:f7:b0:d6:b2:ce:21:b7:ee:00:
         76:9b:47:78:73:bd:2e:03:45:9f:cc:2c:2f:cd:82:39:82:d8:
         b9:44:fd:3c:2d:75:00:56:b2:c2:f4:44:1f:41:a3:83:3e:a7:
         0e:cb:e6:ad:74:66:a3:70:8b:d5:41:f2:4c:8e:fb:c2:d5:17:
         83:26:6d:bc:cc:e5:f8:81:00:ce:4f:b2:ac:17:81:a9:11:04:
         93:ee:61:e2:34:e4:e3:91:9b:23:73:d6:bd:d3:68:c5:55:e6:
         65:7e:a7:ae:18:4c:f2:d8:5b:64:04:9a:d8:a2:36:3e:4f:33:
         f8:09:93:5f:ea:ea:f4:51:83:b8:c7:d2:85:2a:d4:5c:f4:d1:
         12:a6:c2:78:05:af:58:16:c9:bb:f8:5e:fd:e2:f8:e4:05:1b:
         8a:4f:fd:47:c3:dd:a4:e8:f9:8a:4c:d6:d7:f6:94:23:6b:60:
         25:1a:95:6e:5a:3e:55:38:a6:60:81:13:d2:c9:6c:0f:fe:d8:
         94:0a:fa:4f:4b:76:4d:4e:72:62:19:37:e5:49:09:dc:14:fe:
         eb:7a:6b:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIsdD+G0FrLnAk6DfV3/69r13XCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI0NTFDQkE3NTkzMUFDOThBQjUzNzZFOEY0NUMxNkM5
MEMwOEIxODAeFw0yNDAxMjQxMjEyMDlaFw0yNTAxMjIxMjE3MDlaMDMxMTAvBgNV
BAMTKEM3QTBCNDg4RTVFMDRCMUNFRTBEMzk4OURENDVCRkRDRDE5MjREQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi6epu8gsBT8KXBtbv2H9/npi5
88GswrLINyD3NO0VwGJSkZzxwh4da1MwhH8cH6+N0tlE8I481j/+enH0Br8k+DGg
FAz/dgyXE+sEi27rTyMm6CLV/8LfX32OqPRKEH/sIM2GAxMo1iAjTsG2/pUzlYWk
ZSu55KXI61CSAsiya/aEvJPJRkUalfdp9X118Bk5m1BJzf6jGm3r7ERgOHYKJ7Tc
3rnJmdocBs/yEayDYyHvQFAZ5FXRtzCBKejk5P91KB4mbwMOYlt2Amoy5cwF6iuK
GOGnIJEr7flJ3/J9W5aXN6IUT7M+XlVYGAjdjdYRnncUtaGsFmNzq04AacFbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUx6C0iOXgSxzuDTmJ3UW/3NGSTakwHwYDVR0j
BBgwFoAUUkUcunWTGsmKtTduj0XBbJDAixgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJORThqMTh5N2FDaTM4VThHdE13ZXJhWDdTcVVnQ3FVYU5VNmtnZGpt
UVQvMC81MjQ1MUNCQTc1OTMxQUM5OEFCNTM3NkU4RjQ1QzE2QzkwQzA4QjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUyNDUxQ0JBNzU5MzFBQzk4
QUI1Mzc2RThGNDVDMTZDOTBDMDhCMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyTkU4ajE4eTdhQ2kzOFU4R3RNd2VyYVg3U3FVZ0NxVWFOVTZrZ2RqbVFULzAv
MzIzODMwMzQzYTM0MzkzMDMwM2EzYTJmMzMzNDJkMzMzNTIwM2QzZTIwMzIzNjM3
MzEzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARJAAAwDQYJKoZIhvcNAQELBQADggEBANZdHUBZ
xm4cGq76MIcMSHwJcuzUCNJcyPRsK+qZnEqGmKXr5sOfAvpu54mFsvew1rLOIbfu
AHabR3hzvS4DRZ/MLC/NgjmC2LlE/TwtdQBWssL0RB9Bo4M+pw7L5q10ZqNwi9VB
8kyO+8LVF4MmbbzM5fiBAM5PsqwXgakRBJPuYeI05OORmyNz1r3TaMVV5mV+p64Y
TPLYW2QEmtiiNj5PM/gJk1/q6vRRg7jH0oUq1Fz00RKmwngFr1gWybv4Xv3i+OQF
G4pP/UfD3aTo+YpM1tf2lCNrYCUalW5aPlU4pmCBE9LJbA/+2JQK+k9Ldk1OcmIZ
N+VJCdwU/ut6a7k=
-----END CERTIFICATE-----