Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a343030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a343637383a343030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          w8R6lSJkrN8ukuSW4UJ4JFKlrNLkq+P0QFexxtib5I4=
Subject key identifier:   B2:AC:57:82:5D:DC:10:79:1D:E1:EA:0C:FC:06:9D:0F:09:3B:39:78
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       70FF43352B466C5D4F9032C63596389F7DB4416A
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a343030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 09:41:16 +0000
ROA not before:           Sat 24 Feb 2024 09:36:16 +0000
ROA not after:            Mon 24 Feb 2025 09:41:16 +0000
asID:                     262494
IP address blocks:        2804:4678:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ff:43:35:2b:46:6c:5d:4f:90:32:c6:35:96:38:9f:7d:b4:41:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 09:36:16 2024 GMT
            Not After : Feb 24 09:41:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:be:2c:77:cb:bf:88:ee:c7:37:21:fd:39:36:
                    47:a6:a0:f4:f2:a3:20:91:42:31:d7:39:b5:2f:74:
                    05:b6:8d:b1:eb:a3:72:eb:83:0f:54:8e:4d:a6:e6:
                    e1:03:89:90:0f:4e:f2:bc:1c:5a:0e:1d:b2:3f:2e:
                    5c:74:56:dc:11:14:99:35:3d:0a:cb:1b:a8:69:d9:
                    04:54:3c:98:2e:d1:e2:62:8d:78:c8:f7:52:88:f0:
                    1f:fb:19:52:37:0b:f0:99:c9:4b:ec:1d:80:ef:a3:
                    da:14:5b:5e:7e:11:93:76:a8:df:30:a8:17:1b:ee:
                    4f:1e:ba:7f:94:3e:29:0d:01:4e:33:bc:76:ff:0c:
                    7a:1d:d7:3c:74:d1:26:e8:66:54:56:ce:1d:be:50:
                    ae:a7:54:8e:a5:24:dd:7b:86:ca:fc:ef:7b:45:21:
                    df:a3:5e:9e:ce:9c:80:70:c1:2e:80:9d:ee:eb:c4:
                    0c:94:f6:e3:74:74:78:f8:5f:3f:d3:d7:67:58:59:
                    5f:e5:db:99:bb:47:74:24:68:17:52:91:6b:b1:34:
                    d3:7d:e8:ad:81:17:c6:e7:9a:7c:91:8e:d4:62:f3:
                    76:22:c7:2c:1c:b0:85:59:f2:80:25:f6:03:99:70:
                    0a:95:07:ca:b5:5c:d3:7c:a1:81:12:9a:9b:a7:2d:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AC:57:82:5D:DC:10:79:1D:E1:EA:0C:FC:06:9D:0F:09:3B:39:78
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a343030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         af:24:50:e6:b5:ba:4c:20:ef:37:77:9a:b1:18:af:13:69:2d:
         b4:e6:2d:be:a8:22:d1:b2:a4:f6:c5:bd:3b:ab:22:4c:1f:24:
         47:a8:e3:b7:26:2e:a3:4a:69:b3:47:5a:e2:4e:24:5d:fa:3a:
         e2:b2:1e:84:23:d6:b1:3f:29:a8:3e:5d:7d:a4:e8:22:10:fc:
         da:0c:6f:d0:a2:7b:ae:8c:c8:7a:90:ef:62:cc:7e:c6:8e:fb:
         17:4d:79:e6:98:71:4b:a2:0d:42:2e:b8:33:73:01:26:f3:41:
         e9:68:19:d5:a9:8c:bf:c1:9a:00:ac:35:a2:5b:55:ab:a9:1a:
         35:ab:f1:02:6e:b0:3f:33:a9:7a:cf:f7:95:53:4f:37:aa:83:
         39:03:12:31:0a:73:8e:ab:af:2b:5d:c2:8f:47:52:bf:bf:c1:
         df:c2:44:76:30:56:3d:ed:72:af:2d:66:dd:5b:0f:7e:43:36:
         17:3b:41:ac:69:e4:d0:d8:4e:f7:fd:e7:ef:01:86:37:42:8d:
         f3:a2:66:77:2f:f2:5d:19:94:0f:88:53:ff:0d:07:ed:8a:24:
         e2:8c:2c:c2:26:23:63:66:44:c2:06:73:1c:e4:66:5f:ae:a9:
         b4:2c:e7:1a:b1:95:59:f3:d8:68:10:9b:74:fe:d3:e0:9a:09:
         28:30:23:8c
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUcP9DNStGbF1PkDLGNZY4n320QWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyMDEwMjFENDk2QzkxMzEwQjA0RDFCOUI5Q0Y0MzAx
M0Q1MkRFMzAeFw0yNDAyMjQwOTM2MTZaFw0yNTAyMjQwOTQxMTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjJCRTJDNzdDQkJGODhFRUM3
MzcyMUZEMzkzNjQ3QTZBMEY0RjJBMzIwOTE0MjMxRDczOUI1MkY3NDA1QjY4REIx
RUJBMzcyRUI4MzBGNTQ4RTREQTZFNkUxMDM4OTkwMEY0RUYyQkMxQzVBMEUxREIy
M0YyRTVDNzQ1NkRDMTExNDk5MzUzRDBBQ0IxQkE4NjlEOTA0NTQzQzk4MkVEMUUy
NjI4RDc4QzhGNzUyODhGMDFGRkIxOTUyMzcwQkYwOTlDOTRCRUMxRDgwRUZBM0RB
MTQ1QjVFN0UxMTkzNzZBOERGMzBBODE3MUJFRTRGMUVCQTdGOTQzRTI5MEQwMTRF
MzNCQzc2RkYwQzdBMURENzNDNzREMTI2RTg2NjU0NTZDRTFEQkU1MEFFQTc1NDhF
QTUyNEREN0I4NkNBRkNFRjdCNDUyMURGQTM1RTlFQ0U5QzgwNzBDMTJFODA5REVF
RUJDNDBDOTRGNkUzNzQ3NDc4Rjg1RjNGRDNENzY3NTg1OTVGRTVEQjk5QkI0Nzc0
MjQ2ODE3NTI5MTZCQjEzNEQzN0RFOEFEODExN0M2RTc5QTdDOTE4RUQ0NjJGMzc2
MjJDNzJDMUNCMDg1NTlGMjgwMjVGNjAzOTk3MDBBOTUwN0NBQjU1Q0QzN0NBMTgx
MTI5QTlCQTcyRDMzMDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8r4sd8u/iO7HNyH9OTZHpqD08qMgkUIx1zm1L3QFto2x66Ny64MP
VI5NpubhA4mQD07yvBxaDh2yPy5cdFbcERSZNT0KyxuoadkEVDyYLtHiYo14yPdS
iPAf+xlSNwvwmclL7B2A76PaFFtefhGTdqjfMKgXG+5PHrp/lD4pDQFOM7x2/wx6
Hdc8dNEm6GZUVs4dvlCup1SOpSTde4bK/O97RSHfo16ezpyAcMEugJ3u68QMlPbj
dHR4+F8/09dnWFlf5duZu0d0JGgXUpFrsTTTfeitgRfG55p8kY7UYvN2IscsHLCF
WfKAJfYDmXAKlQfKtVzTfKGBEpqbpy0zBQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FLKsV4Jd3BB5HeHqDPwGnQ8JOzl4MB8GA1UdIwQYMBaAFJAgECHUlskTELBNG5uc
9DAT1S3jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvOTAyMDEwMjFENDk2Qzkx
MzEwQjA0RDFCOUI5Q0Y0MzAxM0Q1MkRFMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MDIwMTAyMUQ0OTZDOTEzMTBCMDREMUI5QjlDRjQzMDEzRDUy
REUzLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8wLzMyMzgzMDM0M2EzNDM2MzczODNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBEZ4QDANBgkqhkiG9w0BAQsFAAOCAQEAryRQ5rW6TCDvN3easRiv
E2kttOYtvqgi0bKk9sW9O6siTB8kR6jjtyYuo0pps0da4k4kXfo64rIehCPWsT8p
qD5dfaToIhD82gxv0KJ7rozIepDvYsx+xo77F0155phxS6INQi64M3MBJvNB6WgZ
1amMv8GaAKw1oltVq6kaNavxAm6wPzOpes/3lVNPN6qDOQMSMQpzjquvK13Cj0dS
v7/B38JEdjBWPe1yry1m3VsPfkM2FztBrGnk0NhO9/3n7wGGN0KN86Jmdy/yXRmU
D4hT/w0H7Yok4owswiYjY2ZEwgZzHORmX66ptCznGrGVWfPYaBCbdP7T4JoJKDAj
jA==
-----END CERTIFICATE-----