Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33332d3333203d3e20323733343132.roa
File:                     323830343a386533633a3a2f33332d3333203d3e20323733343132.roa (raw, json)
Hash identifier:          rR0idLdWL7cSozyPCMukuK12VkZiNaW3CYU+3hIzq8c=
Subject key identifier:   3E:49:0F:B7:19:1F:0E:E0:B7:D1:69:BD:F9:4B:83:C2:C6:E8:50:F4
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       6E203FE8693F8C34711B9648C30D41B0AB9B3AD6
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33332d3333203d3e20323733343132.roa
Signing time:             Mon 22 Jan 2024 14:54:19 +0000
ROA not before:           Mon 22 Jan 2024 14:49:19 +0000
ROA not after:            Mon 20 Jan 2025 14:54:19 +0000
asID:                     273412
IP address blocks:        2804:8e3c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:20:3f:e8:69:3f:8c:34:71:1b:96:48:c3:0d:41:b0:ab:9b:3a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 22 14:49:19 2024 GMT
            Not After : Jan 20 14:54:19 2025 GMT
        Subject: CN=3E490FB7191F0EE0B7D169BDF94B83C2C6E850F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b8:c4:7c:17:ce:e9:5a:30:67:90:5c:3f:ab:
                    e8:9b:2d:1b:72:d5:35:21:7d:db:b2:da:eb:78:9d:
                    c5:77:96:54:ff:95:ea:c5:79:c2:95:bc:39:e2:0e:
                    b9:a3:c0:77:05:45:65:a8:c0:60:5d:2a:7c:80:a6:
                    02:a2:b1:03:7b:a8:73:9b:ff:fc:4a:51:f5:cf:4c:
                    9e:1e:56:12:39:51:a3:82:3d:ac:6f:3e:a2:1c:cf:
                    77:c1:a6:85:c3:22:e6:2a:0a:01:bf:6e:8d:82:0d:
                    20:27:45:e5:94:d5:c6:36:e5:00:1c:59:9b:ca:25:
                    68:7f:19:4b:0d:99:1d:97:d6:9b:88:aa:c6:b2:57:
                    3d:f5:9d:09:46:2d:ae:c4:fa:57:ea:13:fc:66:51:
                    54:1a:99:be:c1:20:24:c3:3e:f6:7f:f9:38:9a:a4:
                    bb:c2:01:0d:39:0d:67:3b:e1:2f:96:a2:b9:b3:04:
                    1d:c0:94:04:f7:cc:62:ce:b0:df:fc:bb:6d:67:69:
                    b8:f3:75:99:b7:da:20:63:f8:65:30:fc:a2:32:05:
                    f7:76:aa:eb:a7:62:1a:72:94:1b:d8:cd:5c:d6:c9:
                    8d:c5:dd:ff:bf:b0:c1:81:86:73:82:2b:e3:33:8a:
                    e1:22:1c:5f:f9:18:40:0a:f2:94:95:3e:37:e1:fa:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:49:0F:B7:19:1F:0E:E0:B7:D1:69:BD:F9:4B:83:C2:C6:E8:50:F4
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33332d3333203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c::/33

    Signature Algorithm: sha256WithRSAEncryption
         ae:ee:81:9b:9b:69:73:fa:4d:3e:2a:f3:70:0f:92:49:66:73:
         d3:06:90:17:3a:5f:91:d0:41:74:c4:95:7e:e8:56:8c:fb:cd:
         81:58:85:1a:a5:ce:6e:12:88:14:b1:18:a9:b6:ef:69:e9:b1:
         92:8b:e2:16:9b:80:ad:57:36:a4:08:a3:f7:e4:b9:aa:ad:3d:
         e5:40:e0:0f:fc:f0:da:5a:5d:bc:1f:a4:10:3f:9f:e3:3b:28:
         89:5c:33:c4:bd:71:94:24:ba:f3:75:fb:9c:bb:35:6f:03:78:
         9d:36:a3:0a:ea:48:dc:21:3a:c6:99:80:94:7b:cc:3c:dc:ff:
         c4:73:d3:85:77:31:a7:94:a5:7b:a7:e2:52:08:62:e5:d2:0f:
         72:6a:08:9a:d0:2c:5e:2d:0b:18:6d:9f:71:7c:b8:39:0b:95:
         bd:09:24:fb:77:26:79:86:3c:14:94:8d:56:47:e0:d7:8f:63:
         7d:6b:cf:8e:02:e9:84:fa:70:4a:63:cc:9d:1b:72:d0:cd:ab:
         8d:be:cd:87:ed:11:e4:f1:f3:a3:42:7e:c2:63:71:b9:6c:3b:
         0b:d4:f8:98:b0:dc:85:78:12:a2:b2:06:8e:68:d8:e2:65:3c:
         9d:4a:95:a4:3b:c5:99:e2:3c:68:23:52:37:50:b6:37:52:4c:
         ce:1b:2e:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbiA/6Gk/jDRxG5ZIww1BsKubOtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGNzg0NTVERUI3QzVDQjY3QUMxQTFBNEYzRTVFRkRE
NzYwOUE1RTAeFw0yNDAxMjIxNDQ5MTlaFw0yNTAxMjAxNDU0MTlaMDMxMTAvBgNV
BAMTKDNFNDkwRkI3MTkxRjBFRTBCN0QxNjlCREY5NEI4M0MyQzZFODUwRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjuMR8F87pWjBnkFw/q+ibLRty
1TUhfduy2ut4ncV3llT/lerFecKVvDniDrmjwHcFRWWowGBdKnyApgKisQN7qHOb
//xKUfXPTJ4eVhI5UaOCPaxvPqIcz3fBpoXDIuYqCgG/bo2CDSAnReWU1cY25QAc
WZvKJWh/GUsNmR2X1puIqsayVz31nQlGLa7E+lfqE/xmUVQamb7BICTDPvZ/+Tia
pLvCAQ05DWc74S+WormzBB3AlAT3zGLOsN/8u21nabjzdZm32iBj+GUw/KIyBfd2
quunYhpylBvYzVzWyY3F3f+/sMGBhnOCK+MziuEiHF/5GEAK8pSVPjfh+lVbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPkkPtxkfDuC30Wm9+UuDwsboUPQwHwYDVR0j
BBgwFoAUzveEVd63xctnrBoaTz5e/ddgml4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkI4Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BW
djEvMC9DRUY3ODQ1NURFQjdDNUNCNjdBQzFBMUE0RjNFNUVGREQ3NjA5QTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFRjc4NDU1REVCN0M1Q0I2
N0FDMUExQTRGM0U1RUZERDc2MDlBNUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCOGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzAv
MzIzODMwMzQzYTM4NjUzMzYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASOPAAwDQYJKoZIhvcNAQELBQADggEBAK7ugZub
aXP6TT4q83APkklmc9MGkBc6X5HQQXTElX7oVoz7zYFYhRqlzm4SiBSxGKm272np
sZKL4habgK1XNqQIo/fkuaqtPeVA4A/88NpaXbwfpBA/n+M7KIlcM8S9cZQkuvN1
+5y7NW8DeJ02owrqSNwhOsaZgJR7zDzc/8Rz04V3MaeUpXun4lIIYuXSD3JqCJrQ
LF4tCxhtn3F8uDkLlb0JJPt3JnmGPBSUjVZH4NePY31rz44C6YT6cEpjzJ0bctDN
q42+zYftEeTx86NCfsJjcblsOwvU+Jiw3IV4EqKyBo5o2OJlPJ1KlaQ7xZniPGgj
UjdQtjdSTM4bLls=
-----END CERTIFICATE-----