Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f3332203d3e20323636303230.roa
File:                     323830343a333933633a3a2f3332203d3e20323636303230.roa (raw, json)
Hash identifier:          062FgeiA6FPsOc6N7wLF2+BKtx/8T1PD1v0W1m3QQw4=
Subject key identifier:   2B:67:14:04:BA:13:4D:29:E6:94:44:D6:E0:D3:89:79:7F:AA:FD:CB
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       4979F748E6C7D312AEE2A7E34FB61F99115E371A
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f3332203d3e20323636303230.roa
Signing time:             Wed 17 Jan 2024 15:00:00 +0000
ROA not before:           Wed 17 Jan 2024 14:55:00 +0000
ROA not after:            Fri 17 Jan 2025 15:00:00 +0000
asID:                     266020
IP address blocks:        2804:393c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:79:f7:48:e6:c7:d3:12:ae:e2:a7:e3:4f:b6:1f:99:11:5e:37:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: Jan 17 14:55:00 2024 GMT
            Not After : Jan 17 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:8f:8d:23:5d:4a:00:c4:1c:06:af:b7:f0:
                    81:d5:87:89:59:d1:ad:6b:4c:a8:ab:4a:ab:03:01:
                    f2:de:c4:de:63:03:a7:f7:bd:98:15:4a:58:e5:b5:
                    70:1c:17:cb:59:4c:65:56:6d:ee:77:df:dd:4f:95:
                    45:53:7b:a6:f9:4e:8a:e0:da:77:b0:59:22:ad:eb:
                    c3:1e:c6:e8:92:42:7e:5e:32:ce:66:ed:ff:94:c7:
                    ba:0d:dc:e5:8e:78:b4:25:81:0e:08:2a:4b:b7:24:
                    52:88:2b:9a:87:60:a9:2c:4e:2d:d9:a4:bc:dd:a6:
                    51:d9:99:44:66:6a:a3:76:4d:8d:a6:f9:72:79:2a:
                    4f:22:9c:91:d0:c3:69:61:da:bb:05:49:df:30:d3:
                    ff:c6:f7:3e:a5:12:38:67:e9:83:e3:0f:84:d3:96:
                    64:4d:5f:1d:97:d1:1a:08:3a:95:82:83:af:f6:f0:
                    57:45:9e:2d:f8:c9:66:17:31:b4:4f:09:1e:bc:c2:
                    f0:71:7a:50:90:73:42:4e:5d:82:d4:3c:ec:fe:7e:
                    bf:e6:ba:e1:91:bf:76:e0:38:62:63:20:85:f9:6c:
                    49:2e:4b:f3:b0:27:4c:e2:93:1c:02:b9:b2:e3:17:
                    c7:7a:2d:52:ac:93:be:23:b1:1c:18:ca:1c:54:83:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:67:14:04:BA:13:4D:29:E6:94:44:D6:E0:D3:89:79:7F:AA:FD:CB
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a3a2f3332203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:91:72:55:c6:ee:07:23:b1:4d:5a:d2:9c:16:4a:da:19:e5:
         81:c9:4b:7c:90:a0:79:09:53:c1:1a:4d:31:7d:f8:9b:41:a8:
         c7:d8:10:1e:21:c0:5e:52:92:a1:a9:0c:20:12:8b:6a:bd:ae:
         1a:23:4b:b2:94:87:4f:fa:c5:68:62:bf:a2:da:2d:e2:27:63:
         bd:55:8c:ba:c0:e9:dc:9b:bf:86:77:5d:7f:ea:14:e7:75:82:
         9f:b9:d4:6b:67:03:fc:b4:9f:e2:aa:ae:2a:86:2f:af:3c:a0:
         0b:9e:4b:8a:7f:0b:12:79:4a:81:dd:1c:c4:9d:48:d2:53:a5:
         69:a2:c9:11:4a:2c:54:88:32:e5:3c:21:75:f0:2d:40:8e:a1:
         60:f3:8a:b8:43:01:2c:d6:87:38:9d:92:50:8a:d2:4b:0c:47:
         04:1a:46:37:76:34:09:21:41:eb:0b:dc:84:80:c2:a2:24:4b:
         22:0f:40:eb:21:74:25:95:a0:15:ca:d1:5b:e8:e1:6c:59:ae:
         97:28:3d:02:2f:bd:fc:2f:fd:bf:78:b3:7a:63:10:fc:52:a3:
         b9:4e:83:86:ba:7b:6a:6e:ba:30:59:ee:03:7f:89:c1:b5:28:
         7c:56:59:8c:77:5f:73:8d:a0:b8:e8:d8:ee:5f:89:3f:62:ae:
         63:ba:e7:4d
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUSXn3SObH0xKu4qfjT7YfmRFeNxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4MjM2NzAyNkFGMTlFNTJCQzgwQzk0MkRFRjhEQTA5
RDc2QUVGMzAeFw0yNDAxMTcxNDU1MDBaFw0yNTAxMTcxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY1RjhGOEQyMzVENEEwMEM0
MUMwNkFGQjdGMDgxRDU4Nzg5NTlEMUFENkI0Q0E4QUI0QUFCMDMwMUYyREVDNERF
NjMwM0E3RjdCRDk4MTU0QTU4RTVCNTcwMUMxN0NCNTk0QzY1NTY2REVFNzdERkRE
NEY5NTQ1NTM3QkE2Rjk0RThBRTBEQTc3QjA1OTIyQURFQkMzMUVDNkU4OTI0MjdF
NUUzMkNFNjZFREZGOTRDN0JBMEREQ0U1OEU3OEI0MjU4MTBFMDgyQTRCQjcyNDUy
ODgyQjlBODc2MEE5MkM0RTJERDlBNEJDRERBNjUxRDk5OTQ0NjY2QUEzNzY0RDhE
QTZGOTcyNzkyQTRGMjI5QzkxRDBDMzY5NjFEQUJCMDU0OURGMzBEM0ZGQzZGNzNF
QTUxMjM4NjdFOTgzRTMwRjg0RDM5NjY0NEQ1RjFEOTdEMTFBMDgzQTk1ODI4M0FG
RjZGMDU3NDU5RTJERjhDOTY2MTczMUI0NEYwOTFFQkNDMkYwNzE3QTUwOTA3MzQy
NEU1RDgyRDQzQ0VDRkU3RUJGRTZCQUUxOTFCRjc2RTAzODYyNjMyMDg1Rjk2QzQ5
MkU0QkYzQjAyNzRDRTI5MzFDMDJCOUIyRTMxN0M3N0EyRDUyQUM5M0JFMjNCMTFD
MThDQTFDNTQ4MzI5OEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv1+PjSNdSgDEHAavt/CB1YeJWdGta0yoq0qrAwHy3sTeYwOn972Y
FUpY5bVwHBfLWUxlVm3ud9/dT5VFU3um+U6K4Np3sFkirevDHsbokkJ+XjLOZu3/
lMe6Ddzljni0JYEOCCpLtyRSiCuah2CpLE4t2aS83aZR2ZlEZmqjdk2NpvlyeSpP
IpyR0MNpYdq7BUnfMNP/xvc+pRI4Z+mD4w+E05ZkTV8dl9EaCDqVgoOv9vBXRZ4t
+MlmFzG0TwkevMLwcXpQkHNCTl2C1Dzs/n6/5rrhkb924DhiYyCF+WxJLkvzsCdM
4pMcArmy4xfHei1SrJO+I7EcGMocVIMpjwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FCtnFAS6E00p5pRE1uDTiXl/qv3LMB8GA1UdIwQYMBaAFJuCNnAmrxnlK8gMlC3v
jaCddq7zMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNBVHlxRHVwZHFwNlc3
d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAvOUI4MjM2NzAyNkFGMTlF
NTJCQzgwQzk0MkRFRjhEQTA5RDc2QUVGMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85QjgyMzY3MDI2QUYxOUU1MkJDODBDOTQyREVGOERBMDlENzZB
RUYzLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zQVR5cUR1cGRxcDZXN3dVSGQz
ejRIUEhRZ3I2VlNIZWhaWWR0VFZyRUFFTi8wLzMyMzgzMDM0M2EzMzM5MzM2MzNh
M2EyZjMzMzIyMDNkM2UyMDMyMzYzNjMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEOTwwDQYJ
KoZIhvcNAQELBQADggEBAH+RclXG7gcjsU1a0pwWStoZ5YHJS3yQoHkJU8EaTTF9
+JtBqMfYEB4hwF5SkqGpDCASi2q9rhojS7KUh0/6xWhiv6LaLeInY71VjLrA6dyb
v4Z3XX/qFOd1gp+51GtnA/y0n+KqriqGL688oAueS4p/CxJ5SoHdHMSdSNJTpWmi
yRFKLFSIMuU8IXXwLUCOoWDzirhDASzWhzidklCK0ksMRwQaRjd2NAkhQesL3ISA
wqIkSyIPQOshdCWVoBXK0Vvo4WxZrpcoPQIvvfwv/b94s3pjEPxSo7lOg4a6e2pu
ujBZ7gN/icG1KHxWWYx3X3ONoLjo2O5fiT9irmO6500=
-----END CERTIFICATE-----