Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/323830343a336231633a3a2f33322d3334203d3e20323636313330.roa
File:                     323830343a336231633a3a2f33322d3334203d3e20323636313330.roa (raw, json)
Hash identifier:          GkdPRCZ2tnbFJyrDsvwrFMpLfk4tl/9KAj9DVAMwhAI=
Subject key identifier:   E0:40:24:66:59:3E:72:F0:80:93:71:4D:32:92:47:0B:C7:71:3B:99
Certificate issuer:       /CN=CE61F9B772EF991D3A04A20C031279EE376E3199
Certificate serial:       2D4DC4AB61C083D7E884B5D386CEA28A7D79372E
Authority key identifier: CE:61:F9:B7:72:EF:99:1D:3A:04:A2:0C:03:12:79:EE:37:6E:31:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE61F9B772EF991D3A04A20C031279EE376E3199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/323830343a336231633a3a2f33322d3334203d3e20323636313330.roa
Signing time:             Tue 30 May 2023 01:00:00 +0000
ROA not before:           Tue 30 May 2023 00:55:00 +0000
ROA not after:            Thu 30 May 2024 01:00:00 +0000
asID:                     266130
IP address blocks:        2804:3b1c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4d:c4:ab:61:c0:83:d7:e8:84:b5:d3:86:ce:a2:8a:7d:79:37:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE61F9B772EF991D3A04A20C031279EE376E3199
        Validity
            Not Before: May 30 00:55:00 2023 GMT
            Not After : May 30 01:00:00 2024 GMT
        Subject: CN=3082010A0282010100E90A195C9E0E40621071A69D2AB62CACE3D185EF5B5F8CAA1B5F21F1471FCAB7EC88632C12532D8DAFE6754CDE08098EAAC7D29FD53448BF9D1A41C8A74D2820D1444D8D07B09B64143E19FE87E2F06E9F6E0ACD94873100396792358728E870F8AB13DAC29EE0EBCF5A6D5119CECEE8D286B398AD22B1E533462256A2D0015E1336D94A849795CD54004B320992FB7B1E43819FC8BA3D4AF4BF012EE79B604207D47CBF5D20DB3A5ADD4481E24B639F8724C95615E6B7F2F7014E869DFF4B5D2EAA4B8DDB6DBBFA1984DEBBB2FF9702FBCF61CB2ED6FA2ED5A3F4BC778551A404C1CE7E510E64E9AF351F4BB7F950637A31C702CB80D86FC6BC98CC136FF3870203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:19:5c:9e:0e:40:62:10:71:a6:9d:2a:b6:
                    2c:ac:e3:d1:85:ef:5b:5f:8c:aa:1b:5f:21:f1:47:
                    1f:ca:b7:ec:88:63:2c:12:53:2d:8d:af:e6:75:4c:
                    de:08:09:8e:aa:c7:d2:9f:d5:34:48:bf:9d:1a:41:
                    c8:a7:4d:28:20:d1:44:4d:8d:07:b0:9b:64:14:3e:
                    19:fe:87:e2:f0:6e:9f:6e:0a:cd:94:87:31:00:39:
                    67:92:35:87:28:e8:70:f8:ab:13:da:c2:9e:e0:eb:
                    cf:5a:6d:51:19:ce:ce:e8:d2:86:b3:98:ad:22:b1:
                    e5:33:46:22:56:a2:d0:01:5e:13:36:d9:4a:84:97:
                    95:cd:54:00:4b:32:09:92:fb:7b:1e:43:81:9f:c8:
                    ba:3d:4a:f4:bf:01:2e:e7:9b:60:42:07:d4:7c:bf:
                    5d:20:db:3a:5a:dd:44:81:e2:4b:63:9f:87:24:c9:
                    56:15:e6:b7:f2:f7:01:4e:86:9d:ff:4b:5d:2e:aa:
                    4b:8d:db:6d:bb:fa:19:84:de:bb:b2:ff:97:02:fb:
                    cf:61:cb:2e:d6:fa:2e:d5:a3:f4:bc:77:85:51:a4:
                    04:c1:ce:7e:51:0e:64:e9:af:35:1f:4b:b7:f9:50:
                    63:7a:31:c7:02:cb:80:d8:6f:c6:bc:98:cc:13:6f:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:40:24:66:59:3E:72:F0:80:93:71:4D:32:92:47:0B:C7:71:3B:99
            X509v3 Authority Key Identifier:
                keyid:CE:61:F9:B7:72:EF:99:1D:3A:04:A2:0C:03:12:79:EE:37:6E:31:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/CE61F9B772EF991D3A04A20C031279EE376E3199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE61F9B772EF991D3A04A20C031279EE376E3199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/0/323830343a336231633a3a2f33322d3334203d3e20323636313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:72:61:ab:1f:f6:e7:14:db:e6:f5:c1:f7:5b:b8:91:dc:fb:
         e0:1f:77:68:ae:a2:cb:5f:84:1a:61:eb:f5:15:e4:ef:bd:f0:
         0c:b0:83:a7:eb:5b:a0:39:ef:7c:60:71:63:12:49:49:d3:32:
         7c:5a:d4:f5:45:5b:62:9e:e9:65:50:58:2d:7e:43:80:c5:3c:
         4a:db:44:a4:99:8b:07:6d:d7:5c:0c:18:bb:2c:6d:d7:26:90:
         30:23:b7:3d:67:ba:08:30:dd:3e:b5:6e:f3:2c:fe:e1:c3:52:
         d0:31:b9:01:a1:6f:87:e5:e5:a1:7b:7d:5a:35:e3:62:79:2f:
         33:34:62:e2:10:f7:5f:d6:4a:64:8a:1c:7e:12:58:d1:b8:ba:
         b7:15:1e:11:af:0e:eb:6a:df:14:4f:3c:ef:8f:ce:2b:9c:e2:
         9b:c9:44:12:b1:84:c6:74:de:c3:b4:12:f2:7a:b5:b7:40:74:
         0f:e3:2b:24:4a:31:4b:48:e9:f3:2f:9a:95:d4:17:6a:53:be:
         c7:37:fa:11:49:ad:ef:d3:4a:1a:f2:a5:8e:21:0d:ee:02:94:
         89:a5:b5:cf:a5:63:34:d8:72:19:fa:ff:f5:db:33:e5:22:ab:
         c8:81:3e:59:0c:fe:59:d2:35:c5:71:52:09:2b:8b:7b:92:88:
         7d:31:42:86
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIULU3Eq2HAg9fohLXThs6iin15Ny4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2MUY5Qjc3MkVGOTkxRDNBMDRBMjBDMDMxMjc5RUUz
NzZFMzE5OTAeFw0yMzA1MzAwMDU1MDBaFw0yNDA1MzAwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTkwQTE5NUM5RTBFNDA2MjEw
NzFBNjlEMkFCNjJDQUNFM0QxODVFRjVCNUY4Q0FBMUI1RjIxRjE0NzFGQ0FCN0VD
ODg2MzJDMTI1MzJEOERBRkU2NzU0Q0RFMDgwOThFQUFDN0QyOUZENTM0NDhCRjlE
MUE0MUM4QTc0RDI4MjBEMTQ0NEQ4RDA3QjA5QjY0MTQzRTE5RkU4N0UyRjA2RTlG
NkUwQUNEOTQ4NzMxMDAzOTY3OTIzNTg3MjhFODcwRjhBQjEzREFDMjlFRTBFQkNG
NUE2RDUxMTlDRUNFRThEMjg2QjM5OEFEMjJCMUU1MzM0NjIyNTZBMkQwMDE1RTEz
MzZEOTRBODQ5Nzk1Q0Q1NDAwNEIzMjA5OTJGQjdCMUU0MzgxOUZDOEJBM0Q0QUY0
QkYwMTJFRTc5QjYwNDIwN0Q0N0NCRjVEMjBEQjNBNUFERDQ0ODFFMjRCNjM5Rjg3
MjRDOTU2MTVFNkI3RjJGNzAxNEU4NjlERkY0QjVEMkVBQTRCOEREQjZEQkJGQTE5
ODRERUJCQjJGRjk3MDJGQkNGNjFDQjJFRDZGQTJFRDVBM0Y0QkM3Nzg1NTFBNDA0
QzFDRTdFNTEwRTY0RTlBRjM1MUY0QkI3Rjk1MDYzN0EzMUM3MDJDQjgwRDg2RkM2
QkM5OENDMTM2RkYzODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6QoZXJ4OQGIQcaadKrYsrOPRhe9bX4yqG18h8UcfyrfsiGMsElMt
ja/mdUzeCAmOqsfSn9U0SL+dGkHIp00oINFETY0HsJtkFD4Z/ofi8G6fbgrNlIcx
ADlnkjWHKOhw+KsT2sKe4OvPWm1RGc7O6NKGs5itIrHlM0YiVqLQAV4TNtlKhJeV
zVQASzIJkvt7HkOBn8i6PUr0vwEu55tgQgfUfL9dINs6Wt1EgeJLY5+HJMlWFea3
8vcBToad/0tdLqpLjdttu/oZhN67sv+XAvvPYcsu1vou1aP0vHeFUaQEwc5+UQ5k
6a81H0u3+VBjejHHAsuA2G/GvJjME2/zhwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FOBAJGZZPnLwgJNxTTKSRwvHcTuZMB8GA1UdIwQYMBaAFM5h+bdy75kdOgSiDAMS
ee43bjGZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZrUUYyWnc0QmFuZURS
TE5MQldaUkN0RDJaMjNINTZ6akVmOHR3NjlBWUpELzAvQ0U2MUY5Qjc3MkVGOTkx
RDNBMDRBMjBDMDMxMjc5RUUzNzZFMzE5OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DRTYxRjlCNzcyRUY5OTFEM0EwNEEyMEMwMzEyNzlFRTM3NkUz
MTk5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82a1FGMlp3NEJhbmVEUkxOTEJX
WlJDdEQyWjIzSDU2empFZjh0dzY5QVlKRC8wLzMyMzgzMDM0M2EzMzYyMzE2MzNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNjMxMzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
OxwwDQYJKoZIhvcNAQELBQADggEBAIJyYasf9ucU2+b1wfdbuJHc++Afd2iuostf
hBph6/UV5O+98Aywg6frW6A573xgcWMSSUnTMnxa1PVFW2Ke6WVQWC1+Q4DFPErb
RKSZiwdt11wMGLssbdcmkDAjtz1nuggw3T61bvMs/uHDUtAxuQGhb4fl5aF7fVo1
42J5LzM0YuIQ91/WSmSKHH4SWNG4urcVHhGvDutq3xRPPO+Pziuc4pvJRBKxhMZ0
3sO0EvJ6tbdAdA/jKyRKMUtI6fMvmpXUF2pTvsc3+hFJre/TShrypY4hDe4ClIml
tc+lYzTYchn6//XbM+Uiq8iBPlkM/lnSNcVxUgkri3uSiH0xQoY=
-----END CERTIFICATE-----