Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a383030303a3a2f33332d3333203d3e20323637393337.roa
File:                     323830343a353537633a383030303a3a2f33332d3333203d3e20323637393337.roa (raw, json)
Hash identifier:          zj8i1t8DTo+kJU/zulqXQTCpirk+wn/u4r4ANmtWMxs=
Subject key identifier:   DB:0E:53:61:33:35:56:E6:79:E9:99:F4:30:3C:06:D8:94:16:88:B9
Certificate issuer:       /CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
Certificate serial:       40F16944E5DD3C7B3F312F4FDFCD94DB9B6D0143
Authority key identifier: 0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a383030303a3a2f33332d3333203d3e20323637393337.roa
Signing time:             Thu 04 Apr 2024 08:24:02 +0000
ROA not before:           Thu 04 Apr 2024 08:19:02 +0000
ROA not after:            Thu 03 Apr 2025 08:24:02 +0000
asID:                     267937
IP address blocks:        2804:557c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f1:69:44:e5:dd:3c:7b:3f:31:2f:4f:df:cd:94:db:9b:6d:01:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08
        Validity
            Not Before: Apr  4 08:19:02 2024 GMT
            Not After : Apr  3 08:24:02 2025 GMT
        Subject: CN=DB0E5361333556E679E999F4303C06D8941688B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:8b:b4:90:2f:48:7d:b3:b6:1f:56:a0:39:
                    f8:92:f9:b0:da:58:dc:51:53:67:22:20:52:b7:5f:
                    7f:4b:c6:be:8b:60:e1:a0:bf:3e:8a:a2:55:21:9e:
                    ea:4c:ee:8d:8a:96:ee:62:f3:0a:f5:59:72:87:4e:
                    5a:2d:bd:c9:6c:bf:fd:72:da:6f:19:66:70:33:47:
                    c5:7e:85:c2:7d:df:59:a9:e2:1b:3e:e7:57:27:fe:
                    0f:7e:86:07:ca:33:4c:a4:98:3d:a2:17:f8:01:eb:
                    a6:da:de:3a:bc:ba:b9:09:90:fa:04:32:3b:8c:f7:
                    7c:e9:e5:55:66:91:e6:f6:07:70:9f:22:54:69:15:
                    11:f9:26:99:cf:c6:ed:f5:2e:1d:63:b5:9c:e9:62:
                    a2:e1:87:d7:79:10:d9:cd:ff:a6:38:28:9e:fd:20:
                    f0:e1:c0:a2:55:8b:f1:1f:c2:65:74:0d:20:1e:68:
                    8f:3e:5e:d1:19:73:98:75:c2:b9:88:20:25:b3:b9:
                    71:e0:95:f0:d4:06:fa:53:3e:54:7e:b0:78:5c:aa:
                    64:be:a7:ce:8d:97:8b:0f:89:7f:88:35:8d:3c:0a:
                    3a:d6:03:1d:3d:13:50:72:e9:6b:7c:81:55:c8:8d:
                    8f:62:ba:aa:38:36:23:ec:11:01:a0:c9:72:6e:23:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0E:53:61:33:35:56:E6:79:E9:99:F4:30:3C:06:D8:94:16:88:B9
            X509v3 Authority Key Identifier:
                keyid:0E:03:DE:5B:21:FA:28:BB:4B:3A:9B:DC:02:F3:27:73:D3:43:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E03DE5B21FA28BB4B3A9BDC02F32773D343AB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/1/323830343a353537633a383030303a3a2f33332d3333203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:557c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:de:8e:77:03:23:25:7d:1e:cc:86:76:b1:86:34:a4:01:f5:
         63:de:31:50:3e:0d:40:44:de:b5:11:c9:6c:7d:0a:aa:92:ea:
         ee:27:8f:7b:44:4d:32:a4:4b:92:39:c5:37:4d:28:94:24:92:
         b5:2a:0e:51:3e:14:eb:0f:27:e8:e4:7e:a8:3e:40:0f:4c:a6:
         67:92:58:88:27:0e:0d:21:7a:96:84:85:a1:14:d2:bc:d7:15:
         af:28:59:7c:ee:e6:a7:79:cf:9f:de:95:77:d4:63:cb:cd:53:
         20:b7:35:bf:20:88:e1:5b:09:1e:30:d7:15:1c:85:8d:58:03:
         7d:4f:65:50:f4:16:0f:b4:3e:10:c2:26:26:c1:5d:51:54:fc:
         e7:b1:bc:32:86:f5:3b:f0:fd:ea:ef:4f:8d:0b:b2:39:2d:84:
         58:c6:45:48:ef:0d:0b:ae:c2:b9:7c:1f:cb:7b:a9:af:07:7c:
         6e:3a:70:b6:56:26:93:6f:7a:2d:e0:b5:74:30:f4:33:00:f3:
         6b:9c:b6:d3:97:75:bb:fb:b9:0f:e4:a6:4a:d5:0f:82:98:1f:
         a3:5f:4b:42:3c:0f:60:c9:77:49:1b:81:35:be:32:07:36:f7:
         cc:de:7e:d0:6e:45:2b:67:0d:0f:02:dd:49:31:0f:86:2a:ff:
         6d:dc:06:f6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQPFpROXdPHs/MS9P382U25ttAUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUwM0RFNUIyMUZBMjhCQjRCM0E5QkRDMDJGMzI3NzNE
MzQzQUIwODAeFw0yNDA0MDQwODE5MDJaFw0yNTA0MDMwODI0MDJaMDMxMTAvBgNV
BAMTKERCMEU1MzYxMzMzNTU2RTY3OUU5OTlGNDMwM0MwNkQ4OTQxNjg4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nou0kC9IfbO2H1agOfiS+bDa
WNxRU2ciIFK3X39Lxr6LYOGgvz6KolUhnupM7o2Klu5i8wr1WXKHTlotvclsv/1y
2m8ZZnAzR8V+hcJ931mp4hs+51cn/g9+hgfKM0ykmD2iF/gB66ba3jq8urkJkPoE
MjuM93zp5VVmkeb2B3CfIlRpFRH5JpnPxu31Lh1jtZzpYqLhh9d5ENnN/6Y4KJ79
IPDhwKJVi/EfwmV0DSAeaI8+XtEZc5h1wrmIICWzuXHglfDUBvpTPlR+sHhcqmS+
p86Nl4sPiX+INY08CjrWAx09E1By6Wt8gVXIjY9iuqo4NiPsEQGgyXJuI9rFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU2w5TYTM1VuZ56Zn0MDwG2JQWiLkwHwYDVR0j
BBgwFoAUDgPeWyH6KLtLOpvcAvMnc9NDqwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkU5RWRkbWRxY1djR3VFaUw3dndEUUJtWkREZTMyTXZEOWQxUGU5Tm9l
VEMvMS8wRTAzREU1QjIxRkEyOEJCNEIzQTlCREMwMkYzMjc3M0QzNDNBQjA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFMDNERTVCMjFGQTI4QkI0
QjNBOUJEQzAyRjMyNzczRDM0M0FCMDguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFOUVkZG1kcWNXY0d1RWlMN3Z3RFFCbVpERGUzMk12RDlkMVBlOU5vZVRDLzEv
MzIzODMwMzQzYTM1MzUzNzYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzM5MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEVXyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCO3o53AyMlfR7MhnaxhjSkAfVj3jFQPg1ARN61EclsfQqqkuruJ497RE0y
pEuSOcU3TSiUJJK1Kg5RPhTrDyfo5H6oPkAPTKZnkliIJw4NIXqWhIWhFNK81xWv
KFl87uanec+f3pV31GPLzVMgtzW/IIjhWwkeMNcVHIWNWAN9T2VQ9BYPtD4QwiYm
wV1RVPznsbwyhvU78P3q70+NC7I5LYRYxkVI7w0LrsK5fB/Le6mvB3xuOnC2ViaT
b3ot4LV0MPQzAPNrnLbTl3W7+7kP5KZK1Q+CmB+jX0tCPA9gyXdJG4E1vjIHNvfM
3n7QbkUrZw0PAt1JMQ+GKv9t3Ab2
-----END CERTIFICATE-----