Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/323830343a343534303a3a2f33322d3438203d3e20323636393134.roa
File:                     323830343a343534303a3a2f33322d3438203d3e20323636393134.roa (raw, json)
Hash identifier:          215L5TmDzvPwBeR77KQNoULeMLbUn0xOsjqARYj6Ouc=
Subject key identifier:   5C:89:BB:46:97:64:4F:33:9A:71:42:C2:BE:65:45:84:99:9F:FE:C9
Certificate issuer:       /CN=65A3F1ADE0815E99C26F89B705AA086F097B1F79
Certificate serial:       0ECB66B145ADEA4F0F36D01C29A0366AC56CF638
Authority key identifier: 65:A3:F1:AD:E0:81:5E:99:C2:6F:89:B7:05:AA:08:6F:09:7B:1F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/323830343a343534303a3a2f33322d3438203d3e20323636393134.roa
Signing time:             Fri 23 Feb 2024 16:32:35 +0000
ROA not before:           Fri 23 Feb 2024 16:27:35 +0000
ROA not after:            Fri 21 Feb 2025 16:32:35 +0000
asID:                     266914
IP address blocks:        2804:4540::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cb:66:b1:45:ad:ea:4f:0f:36:d0:1c:29:a0:36:6a:c5:6c:f6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A3F1ADE0815E99C26F89B705AA086F097B1F79
        Validity
            Not Before: Feb 23 16:27:35 2024 GMT
            Not After : Feb 21 16:32:35 2025 GMT
        Subject: CN=5C89BB4697644F339A7142C2BE654584999FFEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9f:b8:cb:fe:52:a3:31:8f:79:5c:8a:f9:5f:
                    ba:90:78:76:05:49:fd:0c:9d:15:b4:55:a4:36:29:
                    8c:8e:5d:73:f2:c7:ec:81:75:41:4d:56:b1:68:fe:
                    85:62:44:9e:5c:5e:a9:8f:8b:1b:aa:39:df:a4:58:
                    56:10:e9:fa:6b:93:bb:02:8c:de:4a:fa:88:f5:c1:
                    16:79:26:97:55:d0:bf:ba:93:33:75:33:26:0f:0d:
                    f6:e5:15:9f:87:31:f7:84:a6:42:53:1e:e6:bc:a6:
                    d3:da:2b:6d:17:6d:22:cf:41:b8:7d:bd:81:67:99:
                    9a:ad:4d:27:79:12:da:5d:08:42:dc:b9:44:33:4a:
                    d7:86:2a:57:89:91:0b:d8:81:73:48:f7:70:9c:ae:
                    7f:db:61:61:b7:2a:91:b8:0f:ec:c9:c4:3e:3e:5a:
                    a6:0d:3f:8f:df:a5:72:19:40:16:0e:97:ce:91:f8:
                    ef:35:d1:fd:da:a2:95:2d:63:82:bc:ee:50:ef:8b:
                    db:7d:46:75:2e:a1:24:87:18:bf:e7:e7:08:dd:8f:
                    27:75:ef:ba:5b:24:89:86:10:d6:2f:bb:3c:57:50:
                    02:7c:8b:5f:73:bb:67:73:55:9b:4e:75:49:32:cf:
                    59:76:46:c5:05:f8:63:e0:5a:8e:f2:28:ef:50:01:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:BB:46:97:64:4F:33:9A:71:42:C2:BE:65:45:84:99:9F:FE:C9
            X509v3 Authority Key Identifier:
                keyid:65:A3:F1:AD:E0:81:5E:99:C2:6F:89:B7:05:AA:08:6F:09:7B:1F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/323830343a343534303a3a2f33322d3438203d3e20323636393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4540::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:27:26:68:98:1b:36:7c:02:ba:b6:01:da:88:3a:60:5a:0f:
         55:9d:f9:06:79:1b:12:a5:6a:cd:b5:16:a8:6d:36:80:a9:b6:
         69:7f:e7:93:cc:b8:cc:c9:6a:31:6e:5e:49:4f:40:4e:98:a3:
         19:cc:c3:24:98:32:4f:f4:ae:84:0f:67:b3:b3:d8:15:4b:a6:
         d6:fc:fb:39:c1:df:bb:e1:23:45:b6:47:75:05:8e:e8:8f:a5:
         18:4e:c1:07:09:86:e0:5e:fc:bb:9e:83:a6:09:b8:97:c0:6a:
         54:57:f6:59:d5:a9:f3:d9:8b:52:fb:e9:d8:0e:ce:00:a0:aa:
         2a:57:e5:16:bc:79:df:0a:be:d9:f2:4c:a2:2f:d6:21:bb:90:
         dc:7e:85:97:46:8e:c2:b7:84:d8:5c:09:d9:5d:28:51:f0:e0:
         32:44:ed:32:8e:65:be:d7:15:06:84:50:45:21:92:cf:bc:24:
         62:9a:f1:b8:58:62:3f:4d:dc:69:cf:2c:df:87:54:8e:a4:4c:
         eb:1c:f2:68:5d:cd:ca:dd:88:b9:c0:e5:71:0a:e5:a8:34:58:
         f2:19:3a:20:6a:cd:13:bb:1f:b9:35:15:f2:cf:ae:78:6b:af:
         c0:36:76:cb:23:6b:21:27:be:f2:ff:cb:61:87:9c:9b:01:dc:
         98:5d:df:eb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDstmsUWt6k8PNtAcKaA2asVs9jgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVBM0YxQURFMDgxNUU5OUMyNkY4OUI3MDVBQTA4NkYw
OTdCMUY3OTAeFw0yNDAyMjMxNjI3MzVaFw0yNTAyMjExNjMyMzVaMDMxMTAvBgNV
BAMTKDVDODlCQjQ2OTc2NDRGMzM5QTcxNDJDMkJFNjU0NTg0OTk5RkZFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcn7jL/lKjMY95XIr5X7qQeHYF
Sf0MnRW0VaQ2KYyOXXPyx+yBdUFNVrFo/oViRJ5cXqmPixuqOd+kWFYQ6fprk7sC
jN5K+oj1wRZ5JpdV0L+6kzN1MyYPDfblFZ+HMfeEpkJTHua8ptPaK20XbSLPQbh9
vYFnmZqtTSd5EtpdCELcuUQzSteGKleJkQvYgXNI93Ccrn/bYWG3KpG4D+zJxD4+
WqYNP4/fpXIZQBYOl86R+O810f3aopUtY4K87lDvi9t9RnUuoSSHGL/n5wjdjyd1
77pbJImGENYvuzxXUAJ8i19zu2dzVZtOdUkyz1l2RsUF+GPgWo7yKO9QAZsnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXIm7RpdkTzOacULCvmVFhJmf/skwHwYDVR0j
BBgwFoAUZaPxreCBXpnCb4m3BaoIbwl7H3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm1wSEtVM2F1ZnJxS1BpMzRIZXc1VE1zdjNuNjkzUDRLR0wyc1VqQUg4
WVQvMC82NUEzRjFBREUwODE1RTk5QzI2Rjg5QjcwNUFBMDg2RjA5N0IxRjc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1QTNGMUFERTA4MTVFOTlD
MjZGODlCNzA1QUEwODZGMDk3QjFGNzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZtcEhLVTNhdWZycUtQaTM0SGV3NVRNc3YzbjY5M1A0S0dMMnNVakFIOFlULzAv
MzIzODMwMzQzYTM0MzUzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzkzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARFQDANBgkqhkiG9w0BAQsFAAOCAQEAYCcmaJgb
NnwCurYB2og6YFoPVZ35BnkbEqVqzbUWqG02gKm2aX/nk8y4zMlqMW5eSU9ATpij
GczDJJgyT/SuhA9ns7PYFUum1vz7OcHfu+EjRbZHdQWO6I+lGE7BBwmG4F78u56D
pgm4l8BqVFf2WdWp89mLUvvp2A7OAKCqKlflFrx53wq+2fJMoi/WIbuQ3H6Fl0aO
wreE2FwJ2V0oUfDgMkTtMo5lvtcVBoRQRSGSz7wkYprxuFhiP03cac8s34dUjqRM
6xzyaF3Nyt2IucDlcQrlqDRY8hk6IGrNE7sfuTUV8s+ueGuvwDZ2yyNrISe+8v/L
YYecmwHcmF3f6w==
-----END CERTIFICATE-----