Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a323030303a3a2f33352d3335203d3e203631373137.roa
File:                     323830343a316234343a323030303a3a2f33352d3335203d3e203631373137.roa (raw, json)
Hash identifier:          4JOBB3V50K17i7G9N3PHZAmCoQwhtrdEILi/rR31Roo=
Subject key identifier:   B4:24:31:98:82:82:87:40:70:D0:19:10:03:5D:99:61:FC:23:B2:3E
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       5C2F537C98DAF731F40803C3DC740B519558D6CF
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a323030303a3a2f33352d3335203d3e203631373137.roa
Signing time:             Sat 09 Dec 2023 13:03:43 +0000
ROA not before:           Sat 09 Dec 2023 12:58:43 +0000
ROA not after:            Sat 07 Dec 2024 13:03:43 +0000
asID:                     61717
IP address blocks:        2804:1b44:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2f:53:7c:98:da:f7:31:f4:08:03:c3:dc:74:0b:51:95:58:d6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Dec  9 12:58:43 2023 GMT
            Not After : Dec  7 13:03:43 2024 GMT
        Subject: CN=B42431988282874070D01910035D9961FC23B23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:19:e4:36:d5:c5:e8:4f:df:e8:68:af:b2:
                    af:90:fb:56:5a:92:29:d4:9f:39:d4:8b:47:79:b4:
                    45:15:c9:bc:36:a3:d5:fb:0b:56:22:be:c7:f2:00:
                    b8:e8:e3:46:67:4c:5a:3d:4c:61:c1:24:b5:b3:15:
                    d4:ca:8b:2b:36:ad:54:29:fd:1e:e8:72:46:c0:97:
                    90:72:49:e3:36:60:8e:16:98:e1:a8:f9:50:d7:89:
                    5a:7a:ee:ed:77:97:91:b9:2c:fc:d4:75:bf:ea:8a:
                    a8:c4:8d:0c:27:3f:61:15:d9:72:49:ea:08:2e:72:
                    ec:46:7a:36:e1:f2:ce:37:fa:52:96:fa:1a:52:5d:
                    d9:20:8e:37:95:8f:70:b1:9e:3a:8f:db:9b:8e:d6:
                    bf:55:41:ca:97:e3:d6:49:1c:45:fd:4a:3e:9b:52:
                    95:9a:81:fc:33:35:f8:c4:b9:7d:a4:50:3d:2f:56:
                    31:85:4c:cf:d0:f6:fb:97:d0:28:43:bb:d5:f4:a6:
                    b8:2a:81:68:26:fb:7a:fc:55:df:73:22:88:d4:79:
                    71:2b:8d:a5:e2:36:4b:21:2c:8d:78:07:9d:c7:23:
                    b1:1e:0b:8b:95:3f:14:ab:22:50:5e:a6:24:57:06:
                    27:04:6a:44:6e:9a:a8:08:11:4c:11:a3:01:ab:28:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:24:31:98:82:82:87:40:70:D0:19:10:03:5D:99:61:FC:23:B2:3E
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/323830343a316234343a323030303a3a2f33352d3335203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b44:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:80:a5:ac:3a:4d:a8:01:bc:94:14:54:58:34:fb:83:bf:
         61:a1:d1:79:b4:c1:0a:8c:3c:63:ad:f7:ee:c3:7f:65:61:48:
         b8:71:37:61:5d:6a:f2:00:1f:8c:3a:fd:e8:f2:79:1f:5a:0c:
         13:2c:22:98:a8:b5:5f:86:f4:f0:e3:56:e1:c0:f4:fa:75:2e:
         01:ba:01:f4:f2:d4:2e:85:6b:76:68:54:0f:a4:95:63:8e:96:
         08:53:89:96:66:6f:06:5a:1c:a0:e9:16:d1:67:bc:a4:b9:ac:
         65:7a:d9:88:67:4b:e5:2d:6e:1a:82:82:3c:47:86:82:d9:a9:
         48:b4:79:6e:25:59:83:14:18:d4:ab:f5:29:5c:9c:18:96:82:
         09:07:58:9d:ce:a6:76:98:2b:89:95:56:94:e3:f9:8e:b4:cb:
         08:d5:ac:0e:7c:5a:cc:2a:71:6b:81:40:a8:fa:0f:7c:6c:80:
         6b:83:34:18:e4:0c:3c:20:ef:fc:78:3b:cf:7f:9c:f9:32:c1:
         9e:33:d1:03:cd:5c:d4:1f:74:dc:13:ca:51:74:c2:09:e3:41:
         a3:6e:01:11:6c:86:36:57:ab:e3:d3:23:54:37:74:3b:1e:27:
         70:af:8a:4a:33:55:78:93:f9:0a:0b:08:cd:cf:e1:ef:c9:a0:
         ed:53:bb:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXC9TfJja9zH0CAPD3HQLUZVY1s8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5OTE0QTM1QUNCQUJBQzZBNkU1RkFBNTk5NDk3REQ5
N0M0MTJBNTAeFw0yMzEyMDkxMjU4NDNaFw0yNDEyMDcxMzAzNDNaMDMxMTAvBgNV
BAMTKEI0MjQzMTk4ODI4Mjg3NDA3MEQwMTkxMDAzNUQ5OTYxRkMyM0IyM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GxnkNtXF6E/f6Givsq+Q+1Za
kinUnznUi0d5tEUVybw2o9X7C1YivsfyALjo40ZnTFo9TGHBJLWzFdTKiys2rVQp
/R7ockbAl5BySeM2YI4WmOGo+VDXiVp67u13l5G5LPzUdb/qiqjEjQwnP2EV2XJJ
6ggucuxGejbh8s43+lKW+hpSXdkgjjeVj3CxnjqP25uO1r9VQcqX49ZJHEX9Sj6b
UpWagfwzNfjEuX2kUD0vVjGFTM/Q9vuX0ChDu9X0prgqgWgm+3r8Vd9zIojUeXEr
jaXiNkshLI14B53HI7EeC4uVPxSrIlBepiRXBicEakRumqgIEUwRowGrKPGjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtCQxmIKCh0Bw0BkQA12ZYfwjsj4wHwYDVR0j
BBgwFoAUXJkUo1rLq6xqbl+qWZSX3ZfEEqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTd2UE56bmdFOGZFRFZnaWNGWEpBWnl0Zk04MThqWG85UEZrNlQxTEtH
SlgvMC81Qzk5MTRBMzVBQ0JBQkFDNkE2RTVGQUE1OTk0OTdERDk3QzQxMkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDOTkxNEEzNUFDQkFCQUM2
QTZFNUZBQTU5OTQ5N0REOTdDNDEyQTUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3dlBOem5nRThmRURWZ2ljRlhKQVp5dGZNODE4alhvOVBGazZUMUxLR0pYLzAv
MzIzODMwMzQzYTMxNjIzNDM0M2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM2MzEzNzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBtEIDANBgkqhkiG9w0BAQsFAAOC
AQEAF5uApaw6TagBvJQUVFg0+4O/YaHRebTBCow8Y6337sN/ZWFIuHE3YV1q8gAf
jDr96PJ5H1oMEywimKi1X4b08ONW4cD0+nUuAboB9PLULoVrdmhUD6SVY46WCFOJ
lmZvBlocoOkW0We8pLmsZXrZiGdL5S1uGoKCPEeGgtmpSLR5biVZgxQY1Kv1KVyc
GJaCCQdYnc6mdpgriZVWlOP5jrTLCNWsDnxazCpxa4FAqPoPfGyAa4M0GOQMPCDv
/Hg7z3+c+TLBnjPRA81c1B903BPKUXTCCeNBo24BEWyGNler49MjVDd0Ox4ncK+K
SjNVeJP5CgsIzc/h78mg7VO7bQ==
-----END CERTIFICATE-----