Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/323830343a333931383a3a2f33322d3438203d3e20323636353234.roa
File:                     323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (raw, json)
Hash identifier:          dtIAj8b9U8puNDroDHRFDa4SlaQWxqGd07PLWd6HUc8=
Subject key identifier:   7B:D3:D5:82:DE:54:EA:98:77:AC:CD:F2:81:C5:98:92:48:10:5D:1A
Certificate issuer:       /CN=B4E2CEBFE3B84B40B7E2069624E8751BE40B580F
Certificate serial:       2B5A3920BBE13CFADE0F2933687380E6C542FB2D
Authority key identifier: B4:E2:CE:BF:E3:B8:4B:40:B7:E2:06:96:24:E8:75:1B:E4:0B:58:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/323830343a333931383a3a2f33322d3438203d3e20323636353234.roa
Signing time:             Fri 22 Sep 2023 02:52:41 +0000
ROA not before:           Fri 22 Sep 2023 02:47:41 +0000
ROA not after:            Fri 20 Sep 2024 02:52:41 +0000
asID:                     266524
IP address blocks:        2804:3918::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5a:39:20:bb:e1:3c:fa:de:0f:29:33:68:73:80:e6:c5:42:fb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E2CEBFE3B84B40B7E2069624E8751BE40B580F
        Validity
            Not Before: Sep 22 02:47:41 2023 GMT
            Not After : Sep 20 02:52:41 2024 GMT
        Subject: CN=7BD3D582DE54EA9877ACCDF281C5989248105D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:a1:d3:96:b5:67:cb:dc:cf:86:e8:f3:92:
                    8f:47:37:72:32:d8:ab:66:82:d6:7a:61:f9:d1:a1:
                    c2:9f:36:a0:88:64:bb:61:2c:8d:99:65:c0:3d:b3:
                    60:59:5d:80:51:be:31:1e:c1:65:ae:0a:f4:c5:06:
                    f6:0d:ae:67:74:d2:bc:9e:0a:88:87:f1:99:f9:6c:
                    e6:c8:1a:de:34:58:7e:35:12:8e:23:e2:7b:54:7f:
                    b8:0b:eb:e3:88:07:b5:95:28:a6:55:17:be:38:16:
                    bb:58:36:e3:b9:11:46:13:29:43:c0:94:33:0e:c6:
                    0d:af:f5:92:1d:7c:44:40:b2:9e:72:91:f5:31:e8:
                    81:36:4a:b2:ad:fc:fa:11:21:42:e9:e4:e6:50:2a:
                    a7:de:6d:93:87:b7:31:03:18:4e:65:37:b6:c7:0d:
                    02:d3:f5:87:ab:31:92:a9:ea:c3:5d:91:a3:5c:45:
                    25:80:18:33:72:85:58:ca:1d:fc:48:4e:25:45:cf:
                    99:ca:b5:6e:f3:78:0f:4f:15:7e:57:ce:70:3b:d7:
                    55:a1:7a:cf:af:14:3f:6b:09:d6:48:5e:68:a2:fb:
                    a6:8f:c6:23:d5:bf:37:8e:ca:da:73:ec:c2:65:1e:
                    4b:68:30:ce:07:ed:4d:2b:44:ca:17:8b:ec:3d:31:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D3:D5:82:DE:54:EA:98:77:AC:CD:F2:81:C5:98:92:48:10:5D:1A
            X509v3 Authority Key Identifier:
                keyid:B4:E2:CE:BF:E3:B8:4B:40:B7:E2:06:96:24:E8:75:1B:E4:0B:58:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/323830343a333931383a3a2f33322d3438203d3e20323636353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3918::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:b3:c7:f6:5c:d9:b4:63:e7:80:7f:eb:76:d5:84:2c:f1:0b:
         d6:c7:93:3e:b3:e4:2b:95:da:6e:f3:4c:d9:f7:43:f2:fe:de:
         8f:b9:68:7a:f2:cb:24:54:7a:63:f2:45:1b:1b:46:6f:45:21:
         ac:e3:1f:bb:4a:dd:c9:ee:c2:08:3c:59:49:c8:86:0d:78:c6:
         ce:22:95:d1:32:ab:6f:db:2a:a1:6e:31:72:97:59:be:fe:db:
         3e:7a:c3:26:01:3d:fa:7e:a1:fc:c7:17:c6:c7:4d:a7:a3:cd:
         0b:c8:ec:2f:92:53:22:30:6c:f5:49:13:e9:cb:ab:52:6a:74:
         bf:26:fe:30:44:90:f2:4d:a1:ba:a4:23:d1:98:49:d1:9c:07:
         11:40:27:d1:f2:94:c2:2a:6b:15:45:70:bb:92:28:b7:9c:d2:
         00:75:f1:3e:01:18:bf:09:7b:d1:91:02:91:21:b3:1f:10:a9:
         d7:13:05:6b:f0:e0:76:6d:dc:56:45:58:68:f4:66:fb:97:1e:
         57:1b:5a:dd:67:5b:3b:45:72:37:85:bf:97:cd:30:31:75:e5:
         46:d4:e7:bf:3b:93:ae:98:39:c2:3d:08:5b:06:f4:5e:a6:c4:
         8c:51:ae:65:c8:57:8b:ca:96:d4:5f:28:62:ed:0b:f2:ce:eb:
         bb:0e:2c:37
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUK1o5ILvhPPreDykzaHOA5sVC+y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRFMkNFQkZFM0I4NEI0MEI3RTIwNjk2MjRFODc1MUJF
NDBCNTgwRjAeFw0yMzA5MjIwMjQ3NDFaFw0yNDA5MjAwMjUyNDFaMDMxMTAvBgNV
BAMTKDdCRDNENTgyREU1NEVBOTg3N0FDQ0RGMjgxQzU5ODkyNDgxMDVEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCml6HTlrVny9zPhujzko9HN3Iy
2KtmgtZ6YfnRocKfNqCIZLthLI2ZZcA9s2BZXYBRvjEewWWuCvTFBvYNrmd00rye
CoiH8Zn5bObIGt40WH41Eo4j4ntUf7gL6+OIB7WVKKZVF744FrtYNuO5EUYTKUPA
lDMOxg2v9ZIdfERAsp5ykfUx6IE2SrKt/PoRIULp5OZQKqfebZOHtzEDGE5lN7bH
DQLT9YerMZKp6sNdkaNcRSWAGDNyhVjKHfxITiVFz5nKtW7zeA9PFX5XznA711Wh
es+vFD9rCdZIXmii+6aPxiPVvzeOytpz7MJlHktoMM4H7U0rRMoXi+w9MRYJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUe9PVgt5U6ph3rM3ygcWYkkgQXRowHwYDVR0j
BBgwFoAUtOLOv+O4S0C34gaWJOh1G+QLWA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE
Y04vMC9CNEUyQ0VCRkUzQjg0QjQwQjdFMjA2OTYyNEU4NzUxQkU0MEI1ODBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I0RTJDRUJGRTNCODRCNDBC
N0UyMDY5NjI0RTg3NTFCRTQwQjU4MEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6SmE0Y2FzdmhjakQyaG5IbTVqQWF3Y3RSa05hZ0duTEI2NTN1cThIRGNOLzAv
MzIzODMwMzQzYTMzMzkzMTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ5GDANBgkqhkiG9w0BAQsFAAOCAQEAF7PH9lzZ
tGPngH/rdtWELPEL1seTPrPkK5XabvNM2fdD8v7ej7loevLLJFR6Y/JFGxtGb0Uh
rOMfu0rdye7CCDxZSciGDXjGziKV0TKrb9sqoW4xcpdZvv7bPnrDJgE9+n6h/McX
xsdNp6PNC8jsL5JTIjBs9UkT6curUmp0vyb+MESQ8k2huqQj0ZhJ0ZwHEUAn0fKU
wiprFUVwu5Iot5zSAHXxPgEYvwl70ZECkSGzHxCp1xMFa/Dgdm3cVkVYaPRm+5ce
Vxta3WdbO0VyN4W/l80wMXXlRtTnvzuTrpg5wj0IWwb0XqbEjFGuZchXi8qW1F8o
Yu0L8s7ruw4sNw==
-----END CERTIFICATE-----