Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/323830343a363832303a3a2f33322d3332203d3e20323639363730.roa
File:                     323830343a363832303a3a2f33322d3332203d3e20323639363730.roa (raw, json)
Hash identifier:          07bwZsGFLpPrA1ZYwl/cPOQfu/Vnw5+LHenHfQaPteY=
Subject key identifier:   63:CF:B8:C5:F5:24:27:37:40:E6:BF:5B:6A:A2:17:37:97:13:FE:6F
Certificate issuer:       /CN=AE505B420F5CE0415E541045292B0ED46551A4C7
Certificate serial:       1A81A4D7DA12B84720071544F22E10B6D6F9E1AC
Authority key identifier: AE:50:5B:42:0F:5C:E0:41:5E:54:10:45:29:2B:0E:D4:65:51:A4:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE505B420F5CE0415E541045292B0ED46551A4C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/323830343a363832303a3a2f33322d3332203d3e20323639363730.roa
Signing time:             Wed 23 Aug 2023 19:03:56 +0000
ROA not before:           Wed 23 Aug 2023 18:58:56 +0000
ROA not after:            Wed 21 Aug 2024 19:03:56 +0000
asID:                     269670
IP address blocks:        2804:6820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:81:a4:d7:da:12:b8:47:20:07:15:44:f2:2e:10:b6:d6:f9:e1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE505B420F5CE0415E541045292B0ED46551A4C7
        Validity
            Not Before: Aug 23 18:58:56 2023 GMT
            Not After : Aug 21 19:03:56 2024 GMT
        Subject: CN=63CFB8C5F524273740E6BF5B6AA217379713FE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:a3:23:89:13:a1:b5:ee:81:b8:3b:94:bd:
                    a1:86:33:39:fa:a2:4d:24:d1:c7:83:58:96:ff:97:
                    98:8a:48:ca:36:0b:58:45:16:d0:c4:48:2f:c4:3f:
                    b9:7f:09:ee:a6:de:9e:56:97:23:a0:08:f6:d6:43:
                    1a:2d:6d:01:23:da:87:ef:6f:36:79:a0:f4:32:c6:
                    cb:64:31:54:0e:d2:a5:bf:72:28:3c:c3:2e:f4:d8:
                    55:35:b6:e9:06:65:0b:a8:1a:a9:ac:35:de:ab:4e:
                    81:42:6c:3f:70:c5:6d:5f:31:07:0a:50:f8:2d:dd:
                    d9:2a:3b:1b:0c:7d:c3:68:f5:7e:fa:d9:2f:75:a7:
                    af:8f:7f:64:cc:7f:77:4a:f3:05:b2:15:61:ca:70:
                    71:5e:fd:85:35:86:2f:51:76:2f:4f:52:36:bb:c9:
                    9f:32:6d:7b:de:35:f3:27:6f:b9:d1:59:1b:d9:93:
                    b8:34:1b:51:90:4a:22:d2:68:d3:7a:ca:f2:18:22:
                    b2:a0:21:9e:97:47:a2:cb:e3:ce:9d:70:1e:6b:33:
                    0e:fd:03:20:b2:65:16:28:4d:18:91:2d:8b:19:b9:
                    84:ae:4c:ce:81:76:8d:e1:ab:2a:27:2c:d2:37:cb:
                    5f:80:a8:a8:0a:e9:da:96:2c:29:c9:5c:7f:f9:a0:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CF:B8:C5:F5:24:27:37:40:E6:BF:5B:6A:A2:17:37:97:13:FE:6F
            X509v3 Authority Key Identifier:
                keyid:AE:50:5B:42:0F:5C:E0:41:5E:54:10:45:29:2B:0E:D4:65:51:A4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/AE505B420F5CE0415E541045292B0ED46551A4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE505B420F5CE0415E541045292B0ED46551A4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/0/323830343a363832303a3a2f33322d3332203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6820::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:50:79:47:b8:95:c3:03:84:3e:3e:65:8c:7f:96:b6:cf:07:
         f3:6f:d9:1e:62:21:08:a9:0b:78:a5:45:11:ef:6c:61:2b:4d:
         b7:7f:c3:08:86:e2:f7:c1:f2:b6:0d:1c:58:52:2f:9c:12:2c:
         37:9d:2a:bb:e9:95:4f:95:28:ff:ef:45:8c:35:46:ca:51:b6:
         71:72:c5:91:48:03:3a:5c:b2:74:1e:fd:26:bd:b6:f2:ee:df:
         81:be:47:c4:ce:0a:a6:3c:01:f6:31:c6:e2:9d:ea:0d:e7:15:
         d9:d1:75:7f:9d:77:4a:36:6d:f9:69:b5:17:49:19:9b:0a:cb:
         f9:60:28:be:18:4f:65:68:e7:9d:30:b9:ad:f4:88:65:38:06:
         b3:da:80:b4:77:4f:43:a0:ed:68:f1:c0:e1:f7:39:e5:8d:53:
         70:12:0b:08:05:0b:93:96:32:b8:02:34:83:fa:18:65:f7:14:
         e6:68:86:97:7a:f9:9d:f0:e3:ea:fb:a4:cb:95:f6:f0:65:1f:
         00:9d:0c:25:f9:f9:f0:be:ce:4c:d6:ac:e5:96:93:17:c0:8a:
         85:8f:5f:2c:1f:a6:b3:cf:8b:5f:3f:fe:0b:05:d2:32:95:3f:
         5a:bb:d2:e8:3e:b1:4e:ce:52:10:08:a0:f8:27:dd:54:7f:e0:
         87:ff:9b:b0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGoGk19oSuEcgBxVE8i4Qttb54awwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU1MDVCNDIwRjVDRTA0MTVFNTQxMDQ1MjkyQjBFRDQ2
NTUxQTRDNzAeFw0yMzA4MjMxODU4NTZaFw0yNDA4MjExOTAzNTZaMDMxMTAvBgNV
BAMTKDYzQ0ZCOEM1RjUyNDI3Mzc0MEU2QkY1QjZBQTIxNzM3OTcxM0ZFNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UqMjiROhte6BuDuUvaGGMzn6
ok0k0ceDWJb/l5iKSMo2C1hFFtDESC/EP7l/Ce6m3p5WlyOgCPbWQxotbQEj2ofv
bzZ5oPQyxstkMVQO0qW/cig8wy702FU1tukGZQuoGqmsNd6rToFCbD9wxW1fMQcK
UPgt3dkqOxsMfcNo9X762S91p6+Pf2TMf3dK8wWyFWHKcHFe/YU1hi9Rdi9PUja7
yZ8ybXveNfMnb7nRWRvZk7g0G1GQSiLSaNN6yvIYIrKgIZ6XR6LL486dcB5rMw79
AyCyZRYoTRiRLYsZuYSuTM6Bdo3hqyonLNI3y1+AqKgK6dqWLCnJXH/5oLlPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUY8+4xfUkJzdA5r9baqIXN5cT/m8wHwYDVR0j
BBgwFoAUrlBbQg9c4EFeVBBFKSsO1GVRpMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNktQOVJuRGMxVHJVWkJXaUVMQnNkNXJlVWN6bXFQeEdBRjRBTnhXY3o0
emYvMC9BRTUwNUI0MjBGNUNFMDQxNUU1NDEwNDUyOTJCMEVENDY1NTFBNEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFNTA1QjQyMEY1Q0UwNDE1
RTU0MTA0NTI5MkIwRUQ0NjU1MUE0QzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZLUDlSbkRjMVRyVVpCV2lFTEJzZDVyZVVjem1xUHhHQUY0QU54V2N6NHpmLzAv
MzIzODMwMzQzYTM2MzgzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARoIDANBgkqhkiG9w0BAQsFAAOCAQEAM1B5R7iV
wwOEPj5ljH+Wts8H82/ZHmIhCKkLeKVFEe9sYStNt3/DCIbi98Hytg0cWFIvnBIs
N50qu+mVT5Uo/+9FjDVGylG2cXLFkUgDOlyydB79Jr228u7fgb5HxM4KpjwB9jHG
4p3qDecV2dF1f513SjZt+Wm1F0kZmwrL+WAovhhPZWjnnTC5rfSIZTgGs9qAtHdP
Q6DtaPHA4fc55Y1TcBILCAULk5YyuAI0g/oYZfcU5miGl3r5nfDj6vuky5X28GUf
AJ0MJfn58L7OTNas5ZaTF8CKhY9fLB+ms8+LXz/+CwXSMpU/WrvS6D6xTs5SEAig
+CfdVH/gh/+bsA==
-----END CERTIFICATE-----