Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/323830343a353762633a3a2f33322d3438203d3e20323638303833.roa
File:                     323830343a353762633a3a2f33322d3438203d3e20323638303833.roa (raw, json)
Hash identifier:          ufS5Y5RfJwOf16NQmFA3gfHHM3WJUkiaIEcwabrqD/k=
Subject key identifier:   52:F2:08:A6:D6:7F:6A:27:16:0C:EA:4B:6D:01:DA:61:8C:D6:1E:A9
Certificate issuer:       /CN=D6D2DD53B1A57673D8C8445253AA7E2BB5DB0D90
Certificate serial:       1394FF2AEC52BD6AFACA343B70B55016EAB94F9E
Authority key identifier: D6:D2:DD:53:B1:A5:76:73:D8:C8:44:52:53:AA:7E:2B:B5:DB:0D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6D2DD53B1A57673D8C8445253AA7E2BB5DB0D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/323830343a353762633a3a2f33322d3438203d3e20323638303833.roa
Signing time:             Fri 03 Mar 2023 12:56:00 +0000
ROA not before:           Fri 03 Mar 2023 12:51:00 +0000
ROA not after:            Fri 01 Mar 2024 12:56:00 +0000
asID:                     268083
IP address blocks:        2804:57bc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:94:ff:2a:ec:52:bd:6a:fa:ca:34:3b:70:b5:50:16:ea:b9:4f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D2DD53B1A57673D8C8445253AA7E2BB5DB0D90
        Validity
            Not Before: Mar  3 12:51:00 2023 GMT
            Not After : Mar  1 12:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d9:bc:29:d3:98:e4:51:ad:f9:d9:f9:5b:63:
                    41:f3:9f:4b:c4:0f:88:da:26:ab:e9:4f:aa:b4:27:
                    38:86:55:cc:c4:43:b6:6f:0a:a8:c4:fd:16:23:4c:
                    3d:f8:a9:40:c7:54:08:4e:70:3b:55:24:9d:b1:3d:
                    cf:97:9f:a7:79:62:37:f5:b5:00:dd:96:11:14:74:
                    b5:16:fb:0e:94:31:72:05:37:30:fa:4f:b5:10:5f:
                    cc:9f:65:fd:51:ce:c9:ad:66:23:9e:c9:2f:dc:7c:
                    74:fa:19:92:fa:10:96:09:34:e3:6f:7d:60:bf:9b:
                    d9:4b:76:4f:0c:23:c3:7a:04:5c:bb:53:0a:d5:2c:
                    d3:ae:ea:5c:aa:4c:3c:33:1e:b1:4b:95:9d:23:de:
                    da:c1:70:73:6a:31:0c:23:45:c7:28:8f:ba:1e:d0:
                    f3:fc:6a:db:ae:99:5e:7c:f2:82:f6:e1:61:3f:36:
                    fe:77:f7:e6:52:37:47:25:32:cb:76:f6:cc:ce:74:
                    bf:01:f7:da:65:be:2f:f9:ad:90:6c:8e:13:91:82:
                    7e:9b:dd:6b:d9:e3:5e:a5:67:d4:b4:5e:63:3a:96:
                    ef:64:de:d0:70:5e:fd:ae:c4:04:50:4b:b0:e6:81:
                    e3:20:e7:bd:38:12:e1:26:90:47:56:24:a5:b8:fe:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F2:08:A6:D6:7F:6A:27:16:0C:EA:4B:6D:01:DA:61:8C:D6:1E:A9
            X509v3 Authority Key Identifier:
                keyid:D6:D2:DD:53:B1:A5:76:73:D8:C8:44:52:53:AA:7E:2B:B5:DB:0D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/D6D2DD53B1A57673D8C8445253AA7E2BB5DB0D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6D2DD53B1A57673D8C8445253AA7E2BB5DB0D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/323830343a353762633a3a2f33322d3438203d3e20323638303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:bd:79:b8:0b:1f:61:19:63:40:69:4b:39:fb:13:6f:fb:da:
         d5:d7:1e:66:c0:29:48:c9:ce:39:b4:94:a8:c8:d4:21:37:a4:
         71:ef:ac:9c:7d:72:7f:3f:86:f7:69:fb:8e:02:0d:e4:04:5a:
         b5:65:91:8c:d6:ac:65:db:71:c9:0e:0f:43:0e:82:be:03:1c:
         b4:e8:8d:fc:ba:ec:bc:fb:23:1b:7a:41:96:2e:21:07:99:37:
         67:79:d9:e3:55:e3:db:5b:b4:3f:69:d5:58:34:77:0d:cf:c1:
         34:2a:b3:e9:d8:93:38:4b:c6:a5:a8:25:bd:39:2a:bb:6e:5e:
         c6:fb:0d:2b:14:cb:07:03:5d:cb:bc:f7:ef:c3:6d:7f:60:fe:
         94:a8:13:ff:92:e2:ad:17:5d:a8:e2:4f:86:7c:40:6a:c8:99:
         25:bb:fa:50:82:3e:b3:58:27:51:71:17:60:f4:42:98:11:7a:
         cc:5e:ef:80:53:8a:a2:3f:cf:8e:bf:92:4b:ff:50:fd:eb:41:
         aa:f7:99:5d:8c:16:fa:a8:86:f2:c1:af:06:7d:51:8c:0a:38:
         01:1b:cd:b9:06:27:ca:ed:d9:0c:f8:41:dd:26:64:d4:7a:5a:
         85:ff:0f:14:f2:80:8d:45:ab:71:0e:15:58:aa:80:db:30:e1:
         aa:e2:8c:56
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUE5T/KuxSvWr6yjQ7cLVQFuq5T54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZEMkRENTNCMUE1NzY3M0Q4Qzg0NDUyNTNBQTdFMkJC
NURCMEQ5MDAeFw0yMzAzMDMxMjUxMDBaFw0yNDAzMDExMjU2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTZEOUJDMjlEMzk4RTQ1MUFE
RjlEOUY5NUI2MzQxRjM5RjRCQzQwRjg4REEyNkFCRTk0RkFBQjQyNzM4ODY1NUND
QzQ0M0I2NkYwQUE4QzRGRDE2MjM0QzNERjhBOTQwQzc1NDA4NEU3MDNCNTUyNDlE
QjEzRENGOTc5RkE3Nzk2MjM3RjVCNTAwREQ5NjExMTQ3NEI1MTZGQjBFOTQzMTcy
MDUzNzMwRkE0RkI1MTA1RkNDOUY2NUZENTFDRUM5QUQ2NjIzOUVDOTJGREM3Qzc0
RkExOTkyRkExMDk2MDkzNEUzNkY3RDYwQkY5QkQ5NEI3NjRGMEMyM0MzN0EwNDVD
QkI1MzBBRDUyQ0QzQUVFQTVDQUE0QzNDMzMxRUIxNEI5NTlEMjNERURBQzE3MDcz
NkEzMTBDMjM0NUM3Mjg4RkJBMUVEMEYzRkM2QURCQUU5OTVFN0NGMjgyRjZFMTYx
M0YzNkZFNzdGN0U2NTIzNzQ3MjUzMkNCNzZGNkNDQ0U3NEJGMDFGN0RBNjVCRTJG
RjlBRDkwNkM4RTEzOTE4MjdFOUJERDZCRDlFMzVFQTU2N0Q0QjQ1RTYzM0E5NkVG
NjRERUQwNzA1RUZEQUVDNDA0NTA0QkIwRTY4MUUzMjBFN0JEMzgxMkUxMjY5MDQ3
NTYyNEE1QjhGRTJEMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5tm8KdOY5FGt+dn5W2NB859LxA+I2iar6U+qtCc4hlXMxEO2bwqo
xP0WI0w9+KlAx1QITnA7VSSdsT3Pl5+neWI39bUA3ZYRFHS1FvsOlDFyBTcw+k+1
EF/Mn2X9Uc7JrWYjnskv3Hx0+hmS+hCWCTTjb31gv5vZS3ZPDCPDegRcu1MK1SzT
rupcqkw8Mx6xS5WdI97awXBzajEMI0XHKI+6HtDz/GrbrplefPKC9uFhPzb+d/fm
UjdHJTLLdvbMznS/AffaZb4v+a2QbI4TkYJ+m91r2eNepWfUtF5jOpbvZN7QcF79
rsQEUEuw5oHjIOe9OBLhJpBHViSluP4tAQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FFLyCKbWf2onFgzqS20B2mGM1h6pMB8GA1UdIwQYMBaAFNbS3VOxpXZz2MhEUlOq
fiu12w2QMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZOUkFacVRVaTlDMmdZ
ZG04TWhFaXI2TnN2ZUNVWHh5d3dqWllKOEVTOU1ULzAvRDZEMkRENTNCMUE1NzY3
M0Q4Qzg0NDUyNTNBQTdFMkJCNURCMEQ5MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENkQyREQ1M0IxQTU3NjczRDhDODQ0NTI1M0FBN0UyQkI1REIw
RDkwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82TlJBWnFUVWk5QzJnWWRtOE1o
RWlyNk5zdmVDVVh4eXd3alpZSjhFUzlNVC8wLzMyMzgzMDM0M2EzNTM3NjI2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzODMwMzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
V7wwDQYJKoZIhvcNAQELBQADggEBAH29ebgLH2EZY0BpSzn7E2/72tXXHmbAKUjJ
zjm0lKjI1CE3pHHvrJx9cn8/hvdp+44CDeQEWrVlkYzWrGXbcckOD0MOgr4DHLTo
jfy67Lz7Ixt6QZYuIQeZN2d52eNV49tbtD9p1Vg0dw3PwTQqs+nYkzhLxqWoJb05
KrtuXsb7DSsUywcDXcu89+/DbX9g/pSoE/+S4q0XXajiT4Z8QGrImSW7+lCCPrNY
J1FxF2D0QpgResxe74BTiqI/z46/kkv/UP3rQar3mV2MFvqohvLBrwZ9UYwKOAEb
zbkGJ8rt2Qz4Qd0mZNR6WoX/DxTygI1Fq3EOFViqgNsw4arijFY=
-----END CERTIFICATE-----