Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/1/323830343a343630303a3a2f33322d3438203d3e20323636393631.roa
File:                     323830343a343630303a3a2f33322d3438203d3e20323636393631.roa (raw, json)
Hash identifier:          u1R7f41mJlkj0dFHKCjkldfQPlkh+x11DXzYpcxiKoo=
Subject key identifier:   F9:56:28:87:AD:29:2E:AD:6B:54:25:88:F8:80:6C:AE:BE:19:0A:CB
Certificate issuer:       /CN=B63FF8EA97AE2F9343F525F4249509948A371BC6
Certificate serial:       1F1E6C0FB57861677F45B53B45B2EE1278E0E6A1
Authority key identifier: B6:3F:F8:EA:97:AE:2F:93:43:F5:25:F4:24:95:09:94:8A:37:1B:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B63FF8EA97AE2F9343F525F4249509948A371BC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/1/323830343a343630303a3a2f33322d3438203d3e20323636393631.roa
Signing time:             Mon 08 Apr 2024 19:14:56 +0000
ROA not before:           Mon 08 Apr 2024 19:09:56 +0000
ROA not after:            Mon 07 Apr 2025 19:14:56 +0000
asID:                     266961
IP address blocks:        2804:4600::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1e:6c:0f:b5:78:61:67:7f:45:b5:3b:45:b2:ee:12:78:e0:e6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B63FF8EA97AE2F9343F525F4249509948A371BC6
        Validity
            Not Before: Apr  8 19:09:56 2024 GMT
            Not After : Apr  7 19:14:56 2025 GMT
        Subject: CN=F9562887AD292EAD6B542588F8806CAEBE190ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:02:9e:63:01:7b:51:78:b9:15:cc:b4:7d:a0:
                    5a:e6:6e:14:f9:27:c7:d3:22:1d:3e:1a:30:b4:b6:
                    7e:c9:11:1f:3f:28:45:1c:ed:55:d0:d1:9b:97:47:
                    c8:19:93:d8:13:c9:8a:6e:0b:8b:16:0d:90:99:0d:
                    ec:74:59:43:e6:f5:45:5a:4d:ee:53:fd:79:62:3f:
                    05:04:55:eb:9e:ef:b5:1d:4b:45:74:b6:66:36:91:
                    3d:48:86:00:3d:a3:77:e9:2f:2b:d2:68:b5:8f:7f:
                    24:dc:dd:41:f1:4a:56:ba:86:ed:0e:9a:90:a4:fd:
                    aa:41:ab:7e:5f:d6:53:d4:6d:af:13:24:dd:49:2a:
                    ab:cc:4d:09:44:ab:41:1e:48:f6:52:ea:a2:fe:65:
                    9a:00:b1:a1:f7:81:f1:e5:51:34:da:18:64:b7:75:
                    f8:06:58:3f:09:3c:c2:39:b7:11:31:b4:ef:52:fc:
                    15:79:94:ac:05:35:c2:0d:c3:bb:77:9d:9d:52:64:
                    43:e4:63:ff:63:c6:cb:2a:cc:59:d0:af:6c:77:2a:
                    1f:f8:db:5a:fa:65:02:ca:ba:17:4f:84:9e:4c:56:
                    ef:58:1b:a6:ec:97:1e:94:bc:14:49:b6:17:74:f8:
                    ae:21:e5:f5:a2:77:d9:0a:cb:cc:21:5f:f3:59:6c:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:56:28:87:AD:29:2E:AD:6B:54:25:88:F8:80:6C:AE:BE:19:0A:CB
            X509v3 Authority Key Identifier:
                keyid:B6:3F:F8:EA:97:AE:2F:93:43:F5:25:F4:24:95:09:94:8A:37:1B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/1/B63FF8EA97AE2F9343F525F4249509948A371BC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B63FF8EA97AE2F9343F525F4249509948A371BC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/1/323830343a343630303a3a2f33322d3438203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:67:e8:e3:27:e3:cb:c4:ff:cd:c8:85:bb:24:f5:d5:cc:47:
         a4:aa:46:d1:c8:ba:b4:57:f3:fa:03:6c:4e:e3:70:be:74:d1:
         c8:f2:3e:7f:31:b6:08:eb:7b:41:1b:e7:53:12:59:88:19:3c:
         90:aa:78:f7:26:a1:b7:a2:9c:2a:da:84:ab:63:91:76:ca:8c:
         e6:95:b7:80:bf:7c:79:db:e9:df:be:be:62:0d:98:91:5c:c0:
         fd:ef:e2:a6:0f:ce:a7:d2:b9:0f:05:42:96:6f:a8:af:c2:55:
         26:5f:c9:65:cd:76:48:ca:bc:b5:9a:f0:78:30:d6:86:6e:79:
         51:c0:c9:38:60:99:9c:20:67:6e:0c:8d:69:c0:ce:50:da:61:
         a9:86:91:b1:e1:96:0d:3c:8a:c4:2d:f8:3d:58:a5:ac:b2:dc:
         9c:74:cc:46:82:cb:19:5f:a1:cc:50:8d:eb:48:27:7d:6d:bd:
         7e:a5:71:61:2d:6e:a4:1b:31:a2:c8:4b:ac:05:7b:09:50:81:
         67:31:48:23:de:e4:0d:72:96:67:20:dc:51:e2:55:70:e0:73:
         fb:83:a4:5a:75:f9:6b:b3:ac:0a:15:0e:86:fc:ee:db:85:ef:
         d1:5d:31:51:0c:39:39:ef:04:6d:7d:7d:25:fc:ba:ae:9e:97:
         0f:c3:52:76
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHx5sD7V4YWd/RbU7RbLuEnjg5qEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYzRkY4RUE5N0FFMkY5MzQzRjUyNUY0MjQ5NTA5OTQ4
QTM3MUJDNjAeFw0yNDA0MDgxOTA5NTZaFw0yNTA0MDcxOTE0NTZaMDMxMTAvBgNV
BAMTKEY5NTYyODg3QUQyOTJFQUQ2QjU0MjU4OEY4ODA2Q0FFQkUxOTBBQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAp5jAXtReLkVzLR9oFrmbhT5
J8fTIh0+GjC0tn7JER8/KEUc7VXQ0ZuXR8gZk9gTyYpuC4sWDZCZDex0WUPm9UVa
Te5T/XliPwUEVeue77UdS0V0tmY2kT1IhgA9o3fpLyvSaLWPfyTc3UHxSla6hu0O
mpCk/apBq35f1lPUba8TJN1JKqvMTQlEq0EeSPZS6qL+ZZoAsaH3gfHlUTTaGGS3
dfgGWD8JPMI5txExtO9S/BV5lKwFNcINw7t3nZ1SZEPkY/9jxssqzFnQr2x3Kh/4
21r6ZQLKuhdPhJ5MVu9YG6bslx6UvBRJthd0+K4h5fWid9kKy8whX/NZbHYPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+VYoh60pLq1rVCWI+IBsrr4ZCsswHwYDVR0j
BBgwFoAUtj/46peuL5ND9SX0JJUJlIo3G8YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVM3cU1VOW5FM01nbnNIcGd2d210dWgzUkhHUHFMVGc4UGNCYTRUUWZH
YnkvMS9CNjNGRjhFQTk3QUUyRjkzNDNGNTI1RjQyNDk1MDk5NDhBMzcxQkM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2M0ZGOEVBOTdBRTJGOTM0
M0Y1MjVGNDI0OTUwOTk0OEEzNzFCQzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTN3FNVTluRTNNZ25zSHBndndtdHVoM1JIR1BxTFRnOFBjQmE0VFFmR2J5LzEv
MzIzODMwMzQzYTM0MzYzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzkzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARGADANBgkqhkiG9w0BAQsFAAOCAQEAZGfo4yfj
y8T/zciFuyT11cxHpKpG0ci6tFfz+gNsTuNwvnTRyPI+fzG2COt7QRvnUxJZiBk8
kKp49yaht6KcKtqEq2ORdsqM5pW3gL98edvp376+Yg2YkVzA/e/ipg/Op9K5DwVC
lm+or8JVJl/JZc12SMq8tZrweDDWhm55UcDJOGCZnCBnbgyNacDOUNphqYaRseGW
DTyKxC34PVilrLLcnHTMRoLLGV+hzFCN60gnfW29fqVxYS1upBsxoshLrAV7CVCB
ZzFII97kDXKWZyDcUeJVcOBz+4OkWnX5a7OsChUOhvzu24Xv0V0xUQw5Oe8EbX19
Jfy6rp6XD8NSdg==
-----END CERTIFICATE-----