Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d3334203d3e203533313233.roa
File:                     323830343a363437383a3a2f33322d3334203d3e203533313233.roa (raw, json)
Hash identifier:          xrZROrtb+Z9XCSSmQP5DmMlZhFg1oiqohkfY0qHsZxg=
Subject key identifier:   5C:E5:82:F4:4F:9F:F5:CF:9E:78:7D:79:9E:ED:76:A2:9A:49:F7:E0
Certificate issuer:       /CN=6451C693AABA83B71B79416CE6B3AE7E57DBEBC4
Certificate serial:       1870579CD9C6FEAE68E6935E1339B77FA7266C0A
Authority key identifier: 64:51:C6:93:AA:BA:83:B7:1B:79:41:6C:E6:B3:AE:7E:57:DB:EB:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6451C693AABA83B71B79416CE6B3AE7E57DBEBC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d3334203d3e203533313233.roa
Signing time:             Fri 02 Feb 2024 15:38:57 +0000
ROA not before:           Fri 02 Feb 2024 15:33:57 +0000
ROA not after:            Fri 31 Jan 2025 15:38:57 +0000
asID:                     53123
IP address blocks:        2804:6478::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:70:57:9c:d9:c6:fe:ae:68:e6:93:5e:13:39:b7:7f:a7:26:6c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6451C693AABA83B71B79416CE6B3AE7E57DBEBC4
        Validity
            Not Before: Feb  2 15:33:57 2024 GMT
            Not After : Jan 31 15:38:57 2025 GMT
        Subject: CN=5CE582F44F9FF5CF9E787D799EED76A29A49F7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:48:c0:04:11:4d:c6:38:47:0a:3b:fe:79:
                    13:7e:b2:51:80:3a:90:7d:cf:e8:b3:aa:8a:c5:19:
                    8c:91:e3:47:d2:e5:a2:44:f5:88:e2:87:8d:48:e3:
                    a5:82:86:88:b4:c1:b9:02:cf:14:31:25:70:32:f2:
                    1e:c1:98:e3:42:54:e2:03:d4:17:15:97:fc:f3:46:
                    be:c0:cb:2c:e4:c0:a4:5d:61:dd:9c:f7:68:36:27:
                    be:ee:8d:16:2e:e0:f3:5c:f7:a6:c6:38:49:d1:a9:
                    69:db:c2:ec:ea:cf:ff:df:5e:86:84:43:57:d9:31:
                    16:81:79:7a:fa:46:da:67:c2:cc:64:c0:91:0c:6b:
                    de:0d:a9:f1:7b:58:2a:2b:93:dd:69:fc:64:c1:e6:
                    68:bd:ab:46:47:b1:5f:da:89:06:4b:36:cb:aa:a0:
                    41:2a:a4:d0:e0:55:22:97:6a:67:d0:78:de:4d:f5:
                    3a:9b:10:2e:77:31:1a:1e:0c:64:a1:35:0d:ea:3e:
                    d5:25:d5:e8:9f:65:bb:25:ee:59:e7:2d:ba:e2:ec:
                    5b:8d:db:31:fa:d7:b7:a4:3e:24:ef:12:e5:10:4f:
                    aa:2b:cc:97:d2:78:c2:ff:f6:c2:cc:81:e2:2e:bc:
                    43:52:f6:8c:40:14:7f:49:58:e7:84:52:ab:10:60:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E5:82:F4:4F:9F:F5:CF:9E:78:7D:79:9E:ED:76:A2:9A:49:F7:E0
            X509v3 Authority Key Identifier:
                keyid:64:51:C6:93:AA:BA:83:B7:1B:79:41:6C:E6:B3:AE:7E:57:DB:EB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/6451C693AABA83B71B79416CE6B3AE7E57DBEBC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6451C693AABA83B71B79416CE6B3AE7E57DBEBC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/323830343a363437383a3a2f33322d3334203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6478::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:06:1f:59:45:67:0d:a5:9d:0e:7c:3d:0d:a5:4d:e5:22:
         01:21:b7:06:99:e4:13:39:5f:35:f5:f7:79:a6:d4:19:1e:bc:
         24:90:71:fa:dd:bc:ab:f6:a8:c6:0a:6d:cb:d8:11:54:b5:e9:
         91:57:da:10:ed:00:dc:0b:a4:f6:5f:39:40:87:b3:52:c3:18:
         c6:8a:cc:1d:19:50:6d:ba:86:60:ea:c9:1f:7a:d3:a3:c0:04:
         a8:d6:13:5e:a3:2d:38:18:d2:b7:a2:8f:2d:98:60:c7:d2:ea:
         42:02:a8:09:67:30:a2:81:c3:b5:ac:4b:80:24:4a:27:44:ad:
         11:68:6d:ab:57:fd:55:eb:85:12:2d:f5:8b:5c:96:c0:3d:0d:
         00:a7:e6:5e:e0:1c:4d:ad:5d:49:3d:9b:3c:c1:8a:41:94:12:
         39:02:82:e3:87:13:76:27:09:69:76:9b:28:16:10:fa:12:83:
         01:a8:74:7c:51:bc:b5:58:bd:f4:72:28:75:b9:e5:50:3c:3b:
         14:ae:d2:67:ac:f6:ef:f8:09:f7:d2:83:5b:9f:6f:4b:90:4a:
         3d:9b:63:d8:e8:30:4e:58:ab:54:67:60:da:6e:d8:29:c2:49:
         6c:23:43:a7:34:40:d3:18:3d:b1:0c:67:17:47:45:5b:6f:63:
         d6:13:52:68
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUGHBXnNnG/q5o5pNeEzm3f6cmbAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ1MUM2OTNBQUJBODNCNzFCNzk0MTZDRTZCM0FFN0U1
N0RCRUJDNDAeFw0yNDAyMDIxNTMzNTdaFw0yNTAxMzExNTM4NTdaMDMxMTAvBgNV
BAMTKDVDRTU4MkY0NEY5RkY1Q0Y5RTc4N0Q3OTlFRUQ3NkEyOUE0OUY3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbMEjABBFNxjhHCjv+eRN+slGA
OpB9z+izqorFGYyR40fS5aJE9Yjih41I46WChoi0wbkCzxQxJXAy8h7BmONCVOID
1BcVl/zzRr7AyyzkwKRdYd2c92g2J77ujRYu4PNc96bGOEnRqWnbwuzqz//fXoaE
Q1fZMRaBeXr6RtpnwsxkwJEMa94NqfF7WCork91p/GTB5mi9q0ZHsV/aiQZLNsuq
oEEqpNDgVSKXamfQeN5N9TqbEC53MRoeDGShNQ3qPtUl1eifZbsl7lnnLbri7FuN
2zH617ekPiTvEuUQT6orzJfSeML/9sLMgeIuvENS9oxAFH9JWOeEUqsQYOstAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUXOWC9E+f9c+eeH15nu12oppJ9+AwHwYDVR0j
BBgwFoAUZFHGk6q6g7cbeUFs5rOuflfb68QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1VhQjJYcjduWFBSckhZRUZ1NXd3QlZuWDJ0d0M4a2RYVDg2aHVVZmRV
Z3gvMC82NDUxQzY5M0FBQkE4M0I3MUI3OTQxNkNFNkIzQUU3RTU3REJFQkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY0NTFDNjkzQUFCQTgzQjcx
Qjc5NDE2Q0U2QjNBRTdFNTdEQkVCQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dVYUIyWHI3blhQUnJIWUVGdTV3d0JWblgydHdDOGtkWFQ4Nmh1VWZkVWd4LzAv
MzIzODMwMzQzYTM2MzQzNzM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzUzMzMx
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEZHgwDQYJKoZIhvcNAQELBQADggEBAAe7Bh9ZRWcN
pZ0OfD0NpU3lIgEhtwaZ5BM5XzX193mm1BkevCSQcfrdvKv2qMYKbcvYEVS16ZFX
2hDtANwLpPZfOUCHs1LDGMaKzB0ZUG26hmDqyR9606PABKjWE16jLTgY0reijy2Y
YMfS6kICqAlnMKKBw7WsS4AkSidErRFobatX/VXrhRIt9YtclsA9DQCn5l7gHE2t
XUk9mzzBikGUEjkCguOHE3YnCWl2mygWEPoSgwGodHxRvLVYvfRyKHW55VA8OxSu
0mes9u/4CffSg1ufb0uQSj2bY9joME5Yq1RnYNpu2CnCSWwjQ6c0QNMYPbEMZxdH
RVtvY9YTUmg=
-----END CERTIFICATE-----