Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e2033333536.roa
File:                     323830343a333831303a3a2f33322d313238203d3e2033333536.roa (raw, json)
Hash identifier:          QiXDapd2C5KTxJDvliuyv9sQd2fyFDA9I7XI2Aflh2E=
Subject key identifier:   4D:3E:69:36:58:4C:4E:09:90:7D:5E:DF:F6:F6:D7:22:7C:EC:86:11
Certificate issuer:       /CN=548D6970267EF22027E90B3D68AB2E122A2BA170
Certificate serial:       43FC9D3865028B313871D176C54A647711DDF64A
Authority key identifier: 54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e2033333536.roa
Signing time:             Thu 22 Feb 2024 13:16:39 +0000
ROA not before:           Thu 22 Feb 2024 13:11:39 +0000
ROA not after:            Thu 20 Feb 2025 13:16:39 +0000
asID:                     3356
IP address blocks:        2804:3810::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fc:9d:38:65:02:8b:31:38:71:d1:76:c5:4a:64:77:11:dd:f6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548D6970267EF22027E90B3D68AB2E122A2BA170
        Validity
            Not Before: Feb 22 13:11:39 2024 GMT
            Not After : Feb 20 13:16:39 2025 GMT
        Subject: CN=4D3E6936584C4E09907D5EDFF6F6D7227CEC8611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:d6:0a:a2:87:dd:19:a4:d9:8b:5e:0f:d7:
                    e6:20:08:0c:1c:af:6c:fb:91:e0:b6:72:64:8a:4c:
                    57:35:65:cb:2e:ac:3a:5a:e6:fd:21:e8:d5:08:59:
                    86:e6:e1:b6:d2:1f:0e:5d:9e:35:45:ce:f4:45:de:
                    f1:83:68:9b:14:7f:9b:32:4a:28:72:e0:f2:99:1d:
                    43:d2:21:69:49:02:ab:0e:7b:60:c4:3e:87:87:03:
                    e7:70:7c:ab:02:da:e4:94:61:46:9f:3b:81:54:c2:
                    b4:80:86:53:92:1f:1e:5e:92:00:d2:e6:b9:b0:c4:
                    36:7f:65:ee:67:f7:73:be:46:55:2d:c2:b7:ad:5e:
                    c4:4c:af:f7:29:5a:b2:06:5f:65:98:fa:48:cd:c5:
                    41:ee:26:27:61:39:a2:61:e3:43:d9:91:ce:d0:bd:
                    55:3d:28:a2:ba:e9:2b:01:cf:1e:d3:3a:92:a4:e1:
                    b0:72:e0:66:14:28:42:23:b7:2d:7d:c2:3b:3a:ad:
                    7b:00:a9:69:d7:d7:16:9b:08:71:45:fb:60:02:a3:
                    b8:7a:cd:18:9f:c7:4f:05:db:3c:f6:2e:04:7c:54:
                    cf:ce:a1:d7:e1:cc:b5:8e:24:1c:0d:f1:bb:b0:a8:
                    06:b3:9a:fa:35:15:37:bd:75:3e:37:b7:65:f3:14:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3E:69:36:58:4C:4E:09:90:7D:5E:DF:F6:F6:D7:22:7C:EC:86:11
            X509v3 Authority Key Identifier:
                keyid:54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/548D6970267EF22027E90B3D68AB2E122A2BA170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3a2f33322d313238203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3810::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:9a:01:bd:77:19:71:f5:8e:1e:ca:60:e2:83:c7:00:29:
         e5:07:cd:a1:fc:d0:69:1e:19:23:0b:f0:81:f0:fc:18:97:56:
         ac:5f:5d:69:aa:70:99:58:84:17:47:b7:e5:30:80:ec:a1:5b:
         05:d1:a3:4c:cb:b4:03:6a:03:4d:5e:b3:97:c9:ed:e2:63:e9:
         c9:71:75:7b:fe:57:34:21:96:e1:1c:3e:58:ab:42:a2:8a:fd:
         ba:b7:16:fa:e1:4d:2e:18:6f:0c:c1:9b:e4:0e:45:16:7e:d8:
         bb:0f:9e:a1:44:1f:05:c1:3c:bd:06:57:13:4a:50:ff:4a:68:
         9a:dc:b9:47:ed:bd:18:e9:7d:56:8f:1d:bf:d6:b0:dd:ae:5e:
         5e:f8:25:ee:92:ea:b4:e9:89:78:43:69:ce:09:75:bf:3e:84:
         15:9b:d4:00:f1:65:2c:3d:f8:99:48:c0:6a:76:22:5a:bc:ad:
         bd:5d:42:25:07:35:0f:20:b9:4c:10:cb:ec:02:a8:5a:7a:31:
         eb:32:15:a5:91:51:62:89:73:f6:80:17:d1:20:5c:d6:11:c5:
         47:a6:8b:14:90:fc:52:84:9c:65:07:09:79:4a:72:0e:20:35:
         d4:4e:ee:b6:7a:4a:ce:01:c8:b8:0b:b5:6f:d9:0b:21:01:15:
         41:d7:10:d0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQ/ydOGUCizE4cdF2xUpkdxHd9kowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ4RDY5NzAyNjdFRjIyMDI3RTkwQjNENjhBQjJFMTIy
QTJCQTE3MDAeFw0yNDAyMjIxMzExMzlaFw0yNTAyMjAxMzE2MzlaMDMxMTAvBgNV
BAMTKDREM0U2OTM2NTg0QzRFMDk5MDdENUVERkY2RjZENzIyN0NFQzg2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uNYKoofdGaTZi14P1+YgCAwc
r2z7keC2cmSKTFc1ZcsurDpa5v0h6NUIWYbm4bbSHw5dnjVFzvRF3vGDaJsUf5sy
Sihy4PKZHUPSIWlJAqsOe2DEPoeHA+dwfKsC2uSUYUafO4FUwrSAhlOSHx5ekgDS
5rmwxDZ/Ze5n93O+RlUtwretXsRMr/cpWrIGX2WY+kjNxUHuJidhOaJh40PZkc7Q
vVU9KKK66SsBzx7TOpKk4bBy4GYUKEIjty19wjs6rXsAqWnX1xabCHFF+2ACo7h6
zRifx08F2zz2LgR8VM/OodfhzLWOJBwN8buwqAazmvo1FTe9dT43t2XzFHO7AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUTT5pNlhMTgmQfV7f9vbXInzshhEwHwYDVR0j
BBgwFoAUVI1pcCZ+8iAn6Qs9aKsuEioroXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05GN2FIdlZlYVpvM0M1THRmWVFweEFzWFhDTkUyeThZSEx1WnU3SkxZ
cWIvMC81NDhENjk3MDI2N0VGMjIwMjdFOTBCM0Q2OEFCMkUxMjJBMkJBMTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0OEQ2OTcwMjY3RUYyMjAy
N0U5MEIzRDY4QUIyRTEyMkEyQkExNzAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNORjdhSHZWZWFabzNDNUx0ZllRcHhBc1hYQ05FMnk4WUhMdVp1N0pMWXFiLzAv
MzIzODMwMzQzYTMzMzgzMTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMzMz
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEOBAwDQYJKoZIhvcNAQELBQADggEBACELmgG9dxlx
9Y4eymDig8cAKeUHzaH80GkeGSML8IHw/BiXVqxfXWmqcJlYhBdHt+UwgOyhWwXR
o0zLtANqA01es5fJ7eJj6clxdXv+VzQhluEcPlirQqKK/bq3FvrhTS4YbwzBm+QO
RRZ+2LsPnqFEHwXBPL0GVxNKUP9KaJrcuUftvRjpfVaPHb/WsN2uXl74Je6S6rTp
iXhDac4Jdb8+hBWb1ADxZSw9+JlIwGp2Ilq8rb1dQiUHNQ8guUwQy+wCqFp6Mesy
FaWRUWKJc/aAF9EgXNYRxUemixSQ/FKEnGUHCXlKcg4gNdRO7rZ6Ss4ByLgLtW/Z
CyEBFUHXENA=
-----END CERTIFICATE-----