Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/0/323830343a343730633a3a2f33322d3334203d3e20323637303238.roa
File:                     323830343a343730633a3a2f33322d3334203d3e20323637303238.roa (raw, json)
Hash identifier:          ZBjBDVzmZyuDCYoCNZ7ox3AKG2H2gjDq4Ak25NL6dcU=
Subject key identifier:   3D:76:64:4B:3E:D9:51:E9:06:51:93:CA:B3:7B:E5:FC:C4:0B:A4:3B
Certificate issuer:       /CN=076DE3752F867826FA96D5381E6802BEA45667B8
Certificate serial:       5C2372FCB93665411962114774164769CAA449CE
Authority key identifier: 07:6D:E3:75:2F:86:78:26:FA:96:D5:38:1E:68:02:BE:A4:56:67:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/076DE3752F867826FA96D5381E6802BEA45667B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/0/323830343a343730633a3a2f33322d3334203d3e20323637303238.roa
Signing time:             Tue 02 Jan 2024 16:53:37 +0000
ROA not before:           Tue 02 Jan 2024 16:48:37 +0000
ROA not after:            Tue 31 Dec 2024 16:53:37 +0000
asID:                     267028
IP address blocks:        2804:470c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:72:fc:b9:36:65:41:19:62:11:47:74:16:47:69:ca:a4:49:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076DE3752F867826FA96D5381E6802BEA45667B8
        Validity
            Not Before: Jan  2 16:48:37 2024 GMT
            Not After : Dec 31 16:53:37 2024 GMT
        Subject: CN=3D76644B3ED951E9065193CAB37BE5FCC40BA43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:23:f9:23:3e:71:70:f9:10:b0:7d:a8:b5:
                    a4:dc:b2:11:73:be:70:cb:14:b9:3d:ab:b8:c9:0b:
                    68:0f:ed:7a:ad:f6:1b:fd:ce:55:e5:7f:9e:96:9f:
                    c7:bd:6f:b3:6a:00:17:05:f6:75:61:53:bf:a2:b6:
                    e2:c8:1c:49:9f:5a:71:63:e2:1d:15:b3:9b:89:fd:
                    b7:a3:2a:3d:01:ec:ca:24:9b:42:92:94:21:f0:46:
                    1d:90:14:eb:d1:e0:da:0f:16:36:46:25:24:4b:1f:
                    d5:58:94:44:66:81:e2:bc:9d:a3:5c:49:9d:f9:6b:
                    82:34:1d:ed:fc:0a:8f:a5:ce:4f:21:90:9f:59:30:
                    92:fe:cd:6c:75:a5:cc:80:58:1f:09:81:79:8b:a0:
                    39:2e:9b:c3:b7:5d:b7:31:7f:2a:5e:a3:06:91:61:
                    81:84:63:6f:76:44:3d:55:1a:45:64:67:1c:cb:4d:
                    86:ae:0b:9d:72:76:87:06:68:1b:c5:80:9b:e1:fb:
                    22:ca:83:65:cc:91:2d:0a:f8:52:20:ce:62:78:4b:
                    31:ca:c0:5a:21:a6:53:37:9e:fd:96:46:7b:61:59:
                    63:78:a2:e8:ea:c0:90:42:c2:05:a0:cb:bd:98:04:
                    e7:81:94:52:c8:43:1d:a5:8f:33:f0:3a:ac:69:5e:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:76:64:4B:3E:D9:51:E9:06:51:93:CA:B3:7B:E5:FC:C4:0B:A4:3B
            X509v3 Authority Key Identifier:
                keyid:07:6D:E3:75:2F:86:78:26:FA:96:D5:38:1E:68:02:BE:A4:56:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/0/076DE3752F867826FA96D5381E6802BEA45667B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/076DE3752F867826FA96D5381E6802BEA45667B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVdjdmapt2GRVuaTo1dgXqKFBN6hsRqpwWR5mwETasaB/0/323830343a343730633a3a2f33322d3334203d3e20323637303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:470c::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:41:4d:71:e0:ee:81:5d:0f:3d:34:95:42:25:0b:dd:b7:34:
         2a:f6:6b:12:3b:a6:65:e3:da:d2:da:69:cd:d2:e0:f2:f6:ce:
         df:1f:fa:91:4a:e6:21:ba:e6:a9:04:31:c5:cf:2c:9d:3b:71:
         6d:55:cb:10:f2:a4:9b:a3:e0:8d:54:08:ac:2b:75:4f:24:73:
         41:2e:88:2d:17:31:b2:67:8d:f7:95:35:f4:20:77:e3:09:bf:
         43:57:48:36:15:e0:47:00:03:07:21:d3:4e:d8:59:92:6a:3b:
         5d:18:eb:7f:67:4d:df:6d:96:a2:a1:e5:66:3e:d2:02:49:87:
         0a:3c:dd:6e:24:24:b0:8a:62:f9:fe:af:ec:83:4c:7b:0a:80:
         9d:d0:cc:f6:48:05:ab:22:cb:75:2f:63:f1:6e:85:9d:7b:6a:
         55:8f:0f:9f:19:a4:2f:53:f9:e6:5a:e6:42:ec:61:f1:75:83:
         10:71:4e:a6:0e:c3:44:c7:a8:8f:2a:00:82:27:9b:f8:d6:aa:
         bc:e8:ea:1c:bd:b2:a5:ef:68:dc:c8:b0:4c:18:ee:a0:49:f3:
         70:cd:fa:19:97:2d:6f:cb:60:ab:bd:a2:23:88:94:15:cb:16:
         3c:10:46:4d:2c:15:b0:76:c2:46:c2:ef:39:d9:fb:e2:c6:7d:
         0f:47:43:b3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXCNy/Lk2ZUEZYhFHdBZHacqkSc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc2REUzNzUyRjg2NzgyNkZBOTZENTM4MUU2ODAyQkVB
NDU2NjdCODAeFw0yNDAxMDIxNjQ4MzdaFw0yNDEyMzExNjUzMzdaMDMxMTAvBgNV
BAMTKDNENzY2NDRCM0VEOTUxRTkwNjUxOTNDQUIzN0JFNUZDQzQwQkE0M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmriP5Iz5xcPkQsH2otaTcshFz
vnDLFLk9q7jJC2gP7Xqt9hv9zlXlf56Wn8e9b7NqABcF9nVhU7+ituLIHEmfWnFj
4h0Vs5uJ/bejKj0B7Mokm0KSlCHwRh2QFOvR4NoPFjZGJSRLH9VYlERmgeK8naNc
SZ35a4I0He38Co+lzk8hkJ9ZMJL+zWx1pcyAWB8JgXmLoDkum8O3XbcxfypeowaR
YYGEY292RD1VGkVkZxzLTYauC51ydocGaBvFgJvh+yLKg2XMkS0K+FIgzmJ4SzHK
wFohplM3nv2WRnthWWN4oujqwJBCwgWgy72YBOeBlFLIQx2ljzPwOqxpXm3/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPXZkSz7ZUekGUZPKs3vl/MQLpDswHwYDVR0j
BBgwFoAUB23jdS+GeCb6ltU4HmgCvqRWZ7gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1ZkamRtYXB0MkdSVnVhVG8xZGdYcUtGQk42aHNScXB3V1I1bXdFVGFz
YUIvMC8wNzZERTM3NTJGODY3ODI2RkE5NkQ1MzgxRTY4MDJCRUE0NTY2N0I4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3NkRFMzc1MkY4Njc4MjZG
QTk2RDUzODFFNjgwMkJFQTQ1NjY3QjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWZGpkbWFwdDJHUlZ1YVRvMWRnWHFLRkJONmhzUnFwd1dSNW13RVRhc2FCLzAv
MzIzODMwMzQzYTM0MzczMDYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM3
MzAzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHDDANBgkqhkiG9w0BAQsFAAOCAQEAdkFNceDu
gV0PPTSVQiUL3bc0KvZrEjumZePa0tppzdLg8vbO3x/6kUrmIbrmqQQxxc8snTtx
bVXLEPKkm6PgjVQIrCt1TyRzQS6ILRcxsmeN95U19CB34wm/Q1dINhXgRwADByHT
TthZkmo7XRjrf2dN322WoqHlZj7SAkmHCjzdbiQksIpi+f6v7INMewqAndDM9kgF
qyLLdS9j8W6FnXtqVY8PnxmkL1P55lrmQuxh8XWDEHFOpg7DRMeojyoAgieb+Naq
vOjqHL2ype9o3MiwTBjuoEnzcM36GZctb8tgq72iI4iUFcsWPBBGTSwVsHbCRsLv
Odn74sZ9D0dDsw==
-----END CERTIFICATE-----