Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa
File:                     323830343a323635303a3a2f33322d3438203d3e20323634333430.roa (raw, json)
Hash identifier:          btwnwRvNBLfWQF3rRi93gxrULOsgNkgFu/UMCRYf2DA=
Subject key identifier:   D1:01:A8:E4:FF:A1:9D:0F:88:C9:7E:98:FB:5F:D5:FB:75:10:97:AC
Certificate issuer:       /CN=A257B01974D35AFB5E96E170F25E9F0AE4726A04
Certificate serial:       5D7FC830EEE2BB6C8786F975466E8D00DDD8A27D
Authority key identifier: A2:57:B0:19:74:D3:5A:FB:5E:96:E1:70:F2:5E:9F:0A:E4:72:6A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa
Signing time:             Tue 12 Mar 2024 12:49:54 +0000
ROA not before:           Tue 12 Mar 2024 12:44:54 +0000
ROA not after:            Tue 11 Mar 2025 12:49:54 +0000
asID:                     264340
IP address blocks:        2804:2650::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7f:c8:30:ee:e2:bb:6c:87:86:f9:75:46:6e:8d:00:dd:d8:a2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A257B01974D35AFB5E96E170F25E9F0AE4726A04
        Validity
            Not Before: Mar 12 12:44:54 2024 GMT
            Not After : Mar 11 12:49:54 2025 GMT
        Subject: CN=D101A8E4FFA19D0F88C97E98FB5FD5FB751097AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:70:60:2e:40:e8:5f:26:6b:75:e2:23:cd:
                    d1:b5:b8:3e:35:5c:ae:2a:cb:32:4d:91:81:3f:75:
                    d6:1b:09:53:03:54:c2:63:f3:01:81:fa:b6:d6:c7:
                    39:8a:02:49:b0:88:84:f8:00:30:28:45:12:1b:d6:
                    4d:f5:d4:cb:db:ff:d9:5d:44:94:98:73:de:3b:76:
                    b3:5b:6a:34:96:3b:e9:6a:1d:f6:e6:9c:53:12:4a:
                    79:da:f7:58:ea:01:45:e3:70:e4:7c:b7:40:84:fd:
                    27:43:71:d7:86:d5:84:4c:fe:e0:aa:af:a1:38:4a:
                    92:e1:26:5e:c2:b9:f0:22:2a:33:7f:85:d4:4d:e0:
                    5a:28:cf:ed:4c:48:7d:f7:3e:fd:73:fb:cd:26:4a:
                    23:a1:d7:98:f4:5c:e6:43:e2:42:24:18:59:8e:27:
                    c3:30:f6:89:8d:81:5e:c9:ac:60:3d:5b:53:cf:2a:
                    47:94:ec:00:76:83:46:a0:75:61:7b:4a:89:7b:d9:
                    48:c0:b2:36:7d:d4:17:d8:b6:57:c0:57:a3:3c:a7:
                    ea:93:f0:78:40:b7:9b:22:fd:05:82:05:01:45:64:
                    02:bd:88:e6:8b:d2:64:b8:87:b4:dd:a2:be:97:32:
                    37:2f:75:d0:db:35:a5:fa:dc:f1:a2:1a:7a:3a:ef:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:A8:E4:FF:A1:9D:0F:88:C9:7E:98:FB:5F:D5:FB:75:10:97:AC
            X509v3 Authority Key Identifier:
                keyid:A2:57:B0:19:74:D3:5A:FB:5E:96:E1:70:F2:5E:9F:0A:E4:72:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2650::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:e7:eb:b8:1e:e2:3a:36:39:a6:18:11:16:73:21:a3:5d:09:
         76:33:ef:a0:b7:c5:d0:9c:fe:71:59:38:12:bd:37:38:01:14:
         a8:53:63:b2:b2:08:4f:de:d7:d2:0a:c4:db:f3:57:a9:d5:e8:
         56:58:77:28:a6:18:f0:b4:d5:b6:d8:bf:3a:ca:ff:00:72:89:
         06:f8:48:29:ab:76:c3:ef:01:c4:38:0f:57:d5:57:1c:e4:90:
         79:f6:f6:34:7f:66:03:5e:c7:72:3c:94:af:ec:2d:a4:39:06:
         e4:0f:7c:11:dc:a0:94:57:ed:63:55:5c:59:91:27:23:d5:01:
         5b:ea:c4:5d:55:7b:78:4d:54:63:f7:f1:93:46:f6:6c:ba:54:
         06:a3:6c:3a:8d:c9:ae:fc:99:62:67:e0:85:52:22:ef:37:ef:
         fd:c8:19:25:84:90:00:6e:18:65:91:57:58:60:ff:4d:bc:a1:
         68:0e:cc:c1:61:04:00:80:ff:e0:b7:c4:60:d6:39:17:1d:30:
         f3:a3:68:66:c9:fa:ee:9e:3f:9b:55:c9:35:2d:d1:36:0d:ab:
         97:d4:6c:8a:15:2e:aa:40:58:78:46:00:a3:60:46:22:cd:7a:
         15:60:74:77:0e:01:08:1e:e9:a3:68:57:37:58:0c:93:f6:9f:
         8a:0f:90:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXX/IMO7iu2yHhvl1Rm6NAN3Yon0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI1N0IwMTk3NEQzNUFGQjVFOTZFMTcwRjI1RTlGMEFF
NDcyNkEwNDAeFw0yNDAzMTIxMjQ0NTRaFw0yNTAzMTExMjQ5NTRaMDMxMTAvBgNV
BAMTKEQxMDFBOEU0RkZBMTlEMEY4OEM5N0U5OEZCNUZENUZCNzUxMDk3QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9HBgLkDoXyZrdeIjzdG1uD41
XK4qyzJNkYE/ddYbCVMDVMJj8wGB+rbWxzmKAkmwiIT4ADAoRRIb1k311Mvb/9ld
RJSYc947drNbajSWO+lqHfbmnFMSSnna91jqAUXjcOR8t0CE/SdDcdeG1YRM/uCq
r6E4SpLhJl7CufAiKjN/hdRN4Fooz+1MSH33Pv1z+80mSiOh15j0XOZD4kIkGFmO
J8Mw9omNgV7JrGA9W1PPKkeU7AB2g0agdWF7Sol72UjAsjZ91BfYtlfAV6M8p+qT
8HhAt5si/QWCBQFFZAK9iOaL0mS4h7Tdor6XMjcvddDbNaX63PGiGno678+rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0QGo5P+hnQ+IyX6Y+1/V+3UQl6wwHwYDVR0j
BBgwFoAUolewGXTTWvteluFw8l6fCuRyagQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkpaUThuckM4UkhTQURnWkNnZDNyZnJDUHp1bXh5ZnlWUlRFSmgxV1d3
V2YvMC9BMjU3QjAxOTc0RDM1QUZCNUU5NkUxNzBGMjVFOUYwQUU0NzI2QTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyNTdCMDE5NzREMzVBRkI1
RTk2RTE3MEYyNUU5RjBBRTQ3MjZBMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJKWlE4bnJDOFJIU0FEZ1pDZ2QzcmZyQ1B6dW14eWZ5VlJURUpoMVdXd1dmLzAv
MzIzODMwMzQzYTMyMzYzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzMzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQmUDANBgkqhkiG9w0BAQsFAAOCAQEAOOfruB7i
OjY5phgRFnMho10JdjPvoLfF0Jz+cVk4Er03OAEUqFNjsrIIT97X0grE2/NXqdXo
Vlh3KKYY8LTVtti/Osr/AHKJBvhIKat2w+8BxDgPV9VXHOSQefb2NH9mA17HcjyU
r+wtpDkG5A98EdyglFftY1VcWZEnI9UBW+rEXVV7eE1UY/fxk0b2bLpUBqNsOo3J
rvyZYmfghVIi7zfv/cgZJYSQAG4YZZFXWGD/TbyhaA7MwWEEAID/4LfEYNY5Fx0w
86NoZsn67p4/m1XJNS3RNg2rl9RsihUuqkBYeEYAo2BGIs16FWB0dw4BCB7po2hX
N1gMk/afig+QuQ==
-----END CERTIFICATE-----