Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33332d3333203d3e20323637333435.roa
File:                     323830343a346330633a383030303a3a2f33332d3333203d3e20323637333435.roa (raw, json)
Hash identifier:          jMRQjgnmpGqvvYvkegywxRvi+gA+OZDcmiXCWN3Gi4o=
Subject key identifier:   7E:C5:1B:4F:DA:99:D1:B7:8C:53:AF:22:E5:FC:A7:B5:A3:12:6E:6F
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       2DFB168A2C2F0D05B75E4D2C6D2B3040328FE7E4
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33332d3333203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:34:12 +0000
ROA not before:           Tue 30 Jan 2024 16:29:12 +0000
ROA not after:            Tue 28 Jan 2025 16:34:12 +0000
asID:                     267345
IP address blocks:        2804:4c0c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fb:16:8a:2c:2f:0d:05:b7:5e:4d:2c:6d:2b:30:40:32:8f:e7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:29:12 2024 GMT
            Not After : Jan 28 16:34:12 2025 GMT
        Subject: CN=3082010A0282010100B1E489903638E1E0AB12BD66C172C62930B948F1E8C669D4BD45256AED9CFA723C10204E876FB89AF338D92255A466DA85B3C3F9B22DD8F4DA2772978A7A0038D4DBA4B91D98C9239B54A0F0D29B502AD0AED7401DE36F16E98F5B0A3089E5443E61C1CFB589784043EB1E1D6A2C6DA19E3A24B387B2D1B8FA529FEB47E83415D0C5F7A9F470BDFCFE1D9B041888127ADCD6C5DA2B2299C6D8A2010F3325AAB8AAF2A1655EBDAF3A5CFB3A28D6D06753E596131F11751CCD0C65B919C6689BE1BE587D43D54CCA0960E7D873D3C50CE073C98F2B193A34096611F987CAEE369E247035CE4D480C80B123AFCEBB71F6D230468062DFCF6C300A89E79AB1904BC90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:89:90:36:38:e1:e0:ab:12:bd:66:c1:72:
                    c6:29:30:b9:48:f1:e8:c6:69:d4:bd:45:25:6a:ed:
                    9c:fa:72:3c:10:20:4e:87:6f:b8:9a:f3:38:d9:22:
                    55:a4:66:da:85:b3:c3:f9:b2:2d:d8:f4:da:27:72:
                    97:8a:7a:00:38:d4:db:a4:b9:1d:98:c9:23:9b:54:
                    a0:f0:d2:9b:50:2a:d0:ae:d7:40:1d:e3:6f:16:e9:
                    8f:5b:0a:30:89:e5:44:3e:61:c1:cf:b5:89:78:40:
                    43:eb:1e:1d:6a:2c:6d:a1:9e:3a:24:b3:87:b2:d1:
                    b8:fa:52:9f:eb:47:e8:34:15:d0:c5:f7:a9:f4:70:
                    bd:fc:fe:1d:9b:04:18:88:12:7a:dc:d6:c5:da:2b:
                    22:99:c6:d8:a2:01:0f:33:25:aa:b8:aa:f2:a1:65:
                    5e:bd:af:3a:5c:fb:3a:28:d6:d0:67:53:e5:96:13:
                    1f:11:75:1c:cd:0c:65:b9:19:c6:68:9b:e1:be:58:
                    7d:43:d5:4c:ca:09:60:e7:d8:73:d3:c5:0c:e0:73:
                    c9:8f:2b:19:3a:34:09:66:11:f9:87:ca:ee:36:9e:
                    24:70:35:ce:4d:48:0c:80:b1:23:af:ce:bb:71:f6:
                    d2:30:46:80:62:df:cf:6c:30:0a:89:e7:9a:b1:90:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C5:1B:4F:DA:99:D1:B7:8C:53:AF:22:E5:FC:A7:B5:A3:12:6E:6F
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/323830343a346330633a383030303a3a2f33332d3333203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:32:86:39:6b:3a:e2:33:d2:4d:90:32:38:46:9a:1f:e1:
         66:43:72:fc:df:a9:44:da:e0:8f:84:47:f7:06:06:9f:3a:d0:
         0e:b3:34:cf:4e:4b:31:42:ae:23:07:6c:b1:01:85:07:34:4a:
         a1:76:34:26:d5:c9:8a:81:cb:f7:48:76:68:22:b1:6e:0e:49:
         b8:aa:61:58:2f:2d:e6:91:b3:4e:fc:20:48:5a:74:3b:c3:98:
         b3:8e:cb:40:fa:a6:a0:94:44:f4:14:32:f3:f1:88:08:c5:ce:
         6e:aa:c3:64:03:0e:3f:1c:3e:da:cd:10:23:b1:3d:53:81:1e:
         33:4d:24:ec:cb:23:a6:55:b1:c7:10:c2:0a:95:b0:3c:ce:36:
         4f:b4:13:ea:eb:f7:8b:4d:ec:5b:62:46:43:ad:39:b3:2b:c7:
         7f:7f:7b:e0:9a:93:a5:96:df:d9:30:31:3a:89:6d:e3:91:2d:
         62:a0:5b:2f:8e:16:15:5e:2a:96:45:aa:52:78:4d:20:2b:e4:
         9b:ba:ab:b2:42:70:2b:0a:7e:3e:fd:2d:20:c0:5e:ac:58:81:
         32:62:0e:c6:a1:f5:22:c8:4d:8a:a6:ab:ca:5a:f8:2e:56:a5:
         4d:ec:68:af:77:b2:b6:0a:4c:28:e9:34:97:aa:eb:3a:2f:b7:
         d9:f7:8c:5c
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIULfsWiiwvDQW3Xk0sbSswQDKP5+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY3RUE4QTBBNjlGNzhFNjI2RUY1QjQ1MTgwMDE4OTU4
QzNDQTE2NzAeFw0yNDAxMzAxNjI5MTJaFw0yNTAxMjgxNjM0MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjFFNDg5OTAzNjM4RTFFMEFC
MTJCRDY2QzE3MkM2MjkzMEI5NDhGMUU4QzY2OUQ0QkQ0NTI1NkFFRDlDRkE3MjND
MTAyMDRFODc2RkI4OUFGMzM4RDkyMjU1QTQ2NkRBODVCM0MzRjlCMjJERDhGNERB
Mjc3Mjk3OEE3QTAwMzhENERCQTRCOTFEOThDOTIzOUI1NEEwRjBEMjlCNTAyQUQw
QUVENzQwMURFMzZGMTZFOThGNUIwQTMwODlFNTQ0M0U2MUMxQ0ZCNTg5Nzg0MDQz
RUIxRTFENkEyQzZEQTE5RTNBMjRCMzg3QjJEMUI4RkE1MjlGRUI0N0U4MzQxNUQw
QzVGN0E5RjQ3MEJERkNGRTFEOUIwNDE4ODgxMjdBRENENkM1REEyQjIyOTlDNkQ4
QTIwMTBGMzMyNUFBQjhBQUYyQTE2NTVFQkRBRjNBNUNGQjNBMjhENkQwNjc1M0U1
OTYxMzFGMTE3NTFDQ0QwQzY1QjkxOUM2Njg5QkUxQkU1ODdENDNENTRDQ0EwOTYw
RTdEODczRDNDNTBDRTA3M0M5OEYyQjE5M0EzNDA5NjYxMUY5ODdDQUVFMzY5RTI0
NzAzNUNFNEQ0ODBDODBCMTIzQUZDRUJCNzFGNkQyMzA0NjgwNjJERkNGNkMzMDBB
ODlFNzlBQjE5MDRCQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAseSJkDY44eCrEr1mwXLGKTC5SPHoxmnUvUUlau2c+nI8ECBOh2+4
mvM42SJVpGbahbPD+bIt2PTaJ3KXinoAONTbpLkdmMkjm1Sg8NKbUCrQrtdAHeNv
FumPWwowieVEPmHBz7WJeEBD6x4daixtoZ46JLOHstG4+lKf60foNBXQxfep9HC9
/P4dmwQYiBJ63NbF2isimcbYogEPMyWquKryoWVeva86XPs6KNbQZ1PllhMfEXUc
zQxluRnGaJvhvlh9Q9VMyglg59hz08UM4HPJjysZOjQJZhH5h8ruNp4kcDXOTUgM
gLEjr867cfbSMEaAYt/PbDAKieeasZBLyQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FH7FG0/amdG3jFOvIuX8p7WjEm5vMB8GA1UdIwQYMBaAFIZ+qKCmn3jmJu9bRRgA
GJWMPKFnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzAvODY3RUE4QTBBNjlGNzhF
NjI2RUY1QjQ1MTgwMDE4OTU4QzNDQTE2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84NjdFQThBMEE2OUY3OEU2MjZFRjVCNDUxODAwMTg5NThDM0NB
MTY3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8wLzMyMzgzMDM0M2EzNDYzMzA2MzNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBEwMgDANBgkqhkiG9w0BAQsFAAOCAQEAfHoyhjlrOuIz0k2QMjhG
mh/hZkNy/N+pRNrgj4RH9wYGnzrQDrM0z05LMUKuIwdssQGFBzRKoXY0JtXJioHL
90h2aCKxbg5JuKphWC8t5pGzTvwgSFp0O8OYs47LQPqmoJRE9BQy8/GICMXObqrD
ZAMOPxw+2s0QI7E9U4EeM00k7MsjplWxxxDCCpWwPM42T7QT6uv3i03sW2JGQ605
syvHf3974JqTpZbf2TAxOolt45EtYqBbL44WFV4qlkWqUnhNICvkm7qrskJwKwp+
Pv0tIMBerFiBMmIOxqH1IshNiqarylr4LlalTexor3eytgpMKOk0l6rrOi+32feM
XA==
-----END CERTIFICATE-----