Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a666163653a3a2f34382d3438203d3e20323633323736.roa
File:                     323830343a313633383a666163653a3a2f34382d3438203d3e20323633323736.roa (raw, json)
Hash identifier:          oox4KMzIXbjOZZmGoIO1JtmEPXH9Ws4q4tUk1HWKwOQ=
Subject key identifier:   4F:12:F6:A7:E9:FD:AB:22:ED:3D:AD:01:FD:EB:D8:E4:E7:3C:3A:D6
Certificate issuer:       /CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
Certificate serial:       4CD0E293B5D01AAF54293476CF72F5997E82FB37
Authority key identifier: 18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a666163653a3a2f34382d3438203d3e20323633323736.roa
Signing time:             Thu 24 Aug 2023 17:56:48 +0000
ROA not before:           Thu 24 Aug 2023 17:51:48 +0000
ROA not after:            Thu 22 Aug 2024 17:56:48 +0000
asID:                     263276
IP address blocks:        2804:1638:face::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d0:e2:93:b5:d0:1a:af:54:29:34:76:cf:72:f5:99:7e:82:fb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
        Validity
            Not Before: Aug 24 17:51:48 2023 GMT
            Not After : Aug 22 17:56:48 2024 GMT
        Subject: CN=4F12F6A7E9FDAB22ED3DAD01FDEBD8E4E73C3AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:32:78:a1:09:4b:3c:1a:7a:1b:79:62:2f:
                    92:27:a4:db:59:77:49:0d:9f:70:5c:f8:de:7b:de:
                    24:55:4f:ec:cf:df:0c:4a:f1:cd:f8:f9:b7:bd:5a:
                    91:7f:d6:69:0f:55:c8:c5:00:9b:a3:25:55:69:21:
                    fe:a3:5d:7e:2b:57:e3:8e:a2:fc:c1:2b:db:2a:20:
                    8e:e6:74:16:3c:ad:fd:4b:4f:d9:82:58:76:21:4e:
                    be:11:e4:aa:3d:4a:46:ac:cb:32:4c:75:a6:ef:a7:
                    f0:66:94:e6:3c:ce:6e:53:ab:95:55:6c:40:7f:38:
                    0d:19:32:30:70:f2:8b:7b:b5:19:c5:a2:fa:0b:7d:
                    41:d5:8e:d6:6e:63:df:18:56:e2:05:43:99:f8:5b:
                    90:90:05:af:69:0e:33:e0:71:40:a3:de:5c:74:c5:
                    42:54:0a:21:6b:0c:4e:33:09:d9:54:8d:b7:90:62:
                    61:24:29:60:e2:d8:2c:5f:51:d2:e2:da:c9:46:58:
                    fa:27:b9:ae:b0:d6:a6:62:18:62:13:de:26:8f:00:
                    32:1d:39:61:1f:e3:de:8f:dc:8b:4a:84:c3:e5:8f:
                    d7:54:87:c2:9e:84:39:71:e9:f6:bc:4f:a6:ec:51:
                    39:ee:69:69:cd:ba:35:26:c6:05:b8:5f:42:0f:cc:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:12:F6:A7:E9:FD:AB:22:ED:3D:AD:01:FD:EB:D8:E4:E7:3C:3A:D6
            X509v3 Authority Key Identifier:
                keyid:18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a666163653a3a2f34382d3438203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:face::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:01:91:e5:d5:9f:12:4f:34:32:0f:b9:78:be:58:d3:5b:c2:
         05:a1:26:51:83:58:7f:40:5f:4c:e7:7a:36:08:47:06:fe:62:
         c8:d5:48:fa:f9:aa:68:3c:fb:23:ab:55:d8:21:90:b1:ca:f1:
         d1:0e:e9:1e:32:07:a8:fd:2e:9c:b4:c6:15:03:74:6e:10:25:
         19:1d:de:fd:3a:b3:24:5d:68:2b:47:f5:3a:1f:82:97:c5:08:
         4b:ec:34:8d:be:94:d6:d6:0c:af:d8:a4:87:63:b6:9e:50:b6:
         9f:72:9b:4e:fc:d8:6f:f5:65:c4:ce:2e:b5:3f:fa:9d:07:2c:
         5a:5d:75:e9:80:de:6f:40:5a:42:45:6a:8e:c8:fb:91:94:ca:
         16:d3:01:ea:c0:56:6a:97:ed:e1:f2:e9:a9:5d:01:33:fd:70:
         20:03:3f:57:80:e5:b4:b1:b6:d4:f7:4d:22:9c:02:d9:25:9b:
         bc:aa:17:b8:d5:c0:83:6a:7e:22:3a:b1:ba:69:b6:33:5a:c1:
         e3:e8:0a:40:11:ef:7d:9b:6e:e0:29:a7:0f:c2:51:fc:bf:bf:
         50:36:ac:2d:1d:d5:7a:94:0b:25:d4:ce:a2:15:c0:a6:25:de:
         ef:c7:04:44:56:d0:e0:49:51:fd:4c:52:ab:1e:bc:79:f8:b6:
         69:3f:6d:93
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUTNDik7XQGq9UKTR2z3L1mX6C+zcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3QjNCMTc2RjA4MDg5ODREMUI1MDc1Q0FGM0NBOUQ2
MzZFQkJENjAeFw0yMzA4MjQxNzUxNDhaFw0yNDA4MjIxNzU2NDhaMDMxMTAvBgNV
BAMTKDRGMTJGNkE3RTlGREFCMjJFRDNEQUQwMUZERUJEOEU0RTczQzNBRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILDJ4oQlLPBp6G3liL5InpNtZ
d0kNn3Bc+N573iRVT+zP3wxK8c34+be9WpF/1mkPVcjFAJujJVVpIf6jXX4rV+OO
ovzBK9sqII7mdBY8rf1LT9mCWHYhTr4R5Ko9SkasyzJMdabvp/BmlOY8zm5Tq5VV
bEB/OA0ZMjBw8ot7tRnFovoLfUHVjtZuY98YVuIFQ5n4W5CQBa9pDjPgcUCj3lx0
xUJUCiFrDE4zCdlUjbeQYmEkKWDi2CxfUdLi2slGWPonua6w1qZiGGIT3iaPADId
OWEf496P3ItKhMPlj9dUh8KehDlx6fa8T6bsUTnuaWnNujUmxgW4X0IPzLG5AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUTxL2p+n9qyLtPa0B/evY5Oc8OtYwHwYDVR0j
BBgwFoAUGHs7F28ICJhNG1B1yvPKnWNuu9YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjZBcFdyY2pHV1k0Q215YThydXlNQnFvTm1FYWl1VjYxZmpLbjFjanVz
ZWkvMC8xODdCM0IxNzZGMDgwODk4NEQxQjUwNzVDQUYzQ0E5RDYzNkVCQkQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE4N0IzQjE3NkYwODA4OTg0
RDFCNTA3NUNBRjNDQTlENjM2RUJCRDYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2QXBXcmNqR1dZNENteWE4cnV5TUJxb05tRWFpdVY2MWZqS24xY2p1c2VpLzAv
MzIzODMwMzQzYTMxMzYzMzM4M2E2NjYxNjM2NTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMzMyMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEFjj6zjANBgkqhkiG9w0BAQsF
AAOCAQEAeAGR5dWfEk80Mg+5eL5Y01vCBaEmUYNYf0BfTOd6NghHBv5iyNVI+vmq
aDz7I6tV2CGQscrx0Q7pHjIHqP0unLTGFQN0bhAlGR3e/TqzJF1oK0f1Oh+Cl8UI
S+w0jb6U1tYMr9ikh2O2nlC2n3KbTvzYb/VlxM4utT/6nQcsWl116YDeb0BaQkVq
jsj7kZTKFtMB6sBWapft4fLpqV0BM/1wIAM/V4DltLG21PdNIpwC2SWbvKoXuNXA
g2p+Ijqxumm2M1rB4+gKQBHvfZtu4CmnD8JR/L+/UDasLR3VepQLJdTOohXApiXe
78cERFbQ4ElR/UxSqx68efi2aT9tkw==
-----END CERTIFICATE-----