Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          Qr3ItE91JWsVrl+qAeM1hY4PGmp7oQYB7bx6iAA2eC0=
Subject key identifier:   79:A8:93:80:43:D3:75:88:E5:3A:49:35:81:F8:11:CC:E2:A6:05:B2
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       78B3B72AF4D95DE110F4EDF4FE915229D3CDED1E
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:05 +0000
ROA not before:           Thu 04 Apr 2024 11:29:05 +0000
ROA not after:            Thu 03 Apr 2025 11:34:05 +0000
asID:                     264422
IP address blocks:        2804:1e58:9001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b3:b7:2a:f4:d9:5d:e1:10:f4:ed:f4:fe:91:52:29:d3:cd:ed:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:05 2024 GMT
            Not After : Apr  3 11:34:05 2025 GMT
        Subject: CN=79A8938043D37588E53A493581F811CCE2A605B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:2c:32:bf:2f:91:a0:3a:75:71:62:26:a1:
                    6d:d9:96:c7:74:9a:47:d4:b3:b0:3e:48:a8:03:32:
                    2f:1a:a7:ca:02:0c:77:a9:82:0c:f6:0f:83:34:00:
                    49:2f:ad:0a:b9:ba:e2:aa:1f:c3:55:bb:13:e5:a4:
                    8c:58:22:7e:17:8d:41:a5:4f:20:8f:84:d3:ae:c0:
                    6c:93:b4:84:00:fe:11:3f:a1:4e:57:e8:b2:39:67:
                    c9:49:98:b9:20:33:48:f5:0d:e8:c2:0e:73:6e:b8:
                    c9:4c:2f:63:19:45:e9:90:0b:f6:aa:c3:d6:b4:cc:
                    37:6e:fb:5b:13:6c:bd:18:5d:ae:d6:58:ad:22:03:
                    0b:24:0d:46:f1:3c:f0:f1:6c:b6:7e:c5:e8:c3:70:
                    74:2b:44:ad:e7:26:5c:ef:3d:32:54:7c:85:44:9e:
                    3c:57:74:b9:3a:7b:e0:ef:d9:84:96:9e:bd:f2:d5:
                    4f:5a:d6:84:fc:1a:d1:db:72:4a:af:90:57:c1:2a:
                    ba:ba:bc:18:b4:97:91:b1:42:1a:0e:fd:55:34:9f:
                    e9:5e:27:89:8c:85:d3:73:1a:7f:59:75:3d:76:e0:
                    9c:b6:f2:96:c5:15:7e:94:17:64:9f:d7:4d:27:25:
                    2b:8b:6b:34:ed:f1:79:bc:33:a2:0c:eb:80:11:c3:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A8:93:80:43:D3:75:88:E5:3A:49:35:81:F8:11:CC:E2:A6:05:B2
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9001::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:bc:9e:ad:ab:4e:94:75:b7:c4:26:9c:ab:a2:82:70:06:
         75:c6:d7:18:de:17:8e:4a:d3:e4:3e:cd:ce:08:31:44:97:ef:
         dc:2e:ba:a7:09:e8:80:d1:83:b3:93:e1:6a:b1:f6:bd:16:0a:
         ef:66:80:ae:dd:a5:26:16:e7:39:4f:16:1b:a4:a6:13:c4:20:
         8f:c2:28:3f:8f:47:40:11:74:7b:48:65:ee:ca:7f:86:2d:79:
         ae:6e:5a:36:46:06:6f:f8:d8:72:84:34:24:9a:70:cf:64:ac:
         a6:85:0d:df:81:e4:c7:12:e4:fb:29:0a:25:66:7a:88:72:63:
         c2:6e:28:2c:ea:80:90:ff:ec:bb:d6:d1:31:ce:e5:8e:02:e9:
         5c:e8:56:13:fd:83:34:98:ad:c9:4b:03:8a:b3:f8:78:d9:8b:
         64:b5:a8:40:1d:44:2d:e1:65:46:62:1f:f3:d8:55:2e:48:ac:
         f9:b7:9a:49:71:d7:5d:d5:95:e5:d7:6f:9a:9b:32:80:e6:1d:
         0f:81:a5:6a:94:96:6b:de:85:9d:51:5b:5a:39:a4:85:54:12:
         26:a1:cf:2f:64:dc:96:0d:33:f7:bb:c9:d9:49:bc:2f:c3:92:
         1c:b3:87:18:12:85:77:f5:32:50:99:61:b4:95:e6:d1:a7:a8:
         09:6b:37:5e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUeLO3KvTZXeEQ9O30/pFSKdPN7R4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlBNzNDOTcwMTRBMEYxQzAyQzIyQkJGMDExNTFCOUM4
RjA2RkQ1MzAeFw0yNDA0MDQxMTI5MDVaFw0yNTA0MDMxMTM0MDVaMDMxMTAvBgNV
BAMTKDc5QTg5MzgwNDNEMzc1ODhFNTNBNDkzNTgxRjgxMUNDRTJBNjA1QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGtSwyvy+RoDp1cWImoW3Zlsd0
mkfUs7A+SKgDMi8ap8oCDHepggz2D4M0AEkvrQq5uuKqH8NVuxPlpIxYIn4XjUGl
TyCPhNOuwGyTtIQA/hE/oU5X6LI5Z8lJmLkgM0j1DejCDnNuuMlML2MZRemQC/aq
w9a0zDdu+1sTbL0YXa7WWK0iAwskDUbxPPDxbLZ+xejDcHQrRK3nJlzvPTJUfIVE
njxXdLk6e+Dv2YSWnr3y1U9a1oT8GtHbckqvkFfBKrq6vBi0l5GxQhoO/VU0n+le
J4mMhdNzGn9ZdT124Jy28pbFFX6UF2Sf100nJSuLazTt8Xm8M6IM64ARwwRFAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUeaiTgEPTdYjlOkk1gfgRzOKmBbIwHwYDVR0j
BBgwFoAU+ac8lwFKDxwCwiu/ARUbnI8G/VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMS9GOUE3M0M5NzAxNEEwRjFDMDJDMjJCQkYwMTE1MUI5QzhGMDZGRDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5QTczQzk3MDE0QTBGMUMw
MkMyMkJCRjAxMTUxQjlDOEYwNkZENTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzEv
MzIzODMwMzQzYTMxNjUzNTM4M2EzOTMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHliQATANBgkqhkiG9w0BAQsF
AAOCAQEAh6m8nq2rTpR1t8QmnKuignAGdcbXGN4XjkrT5D7NzggxRJfv3C66pwno
gNGDs5PharH2vRYK72aArt2lJhbnOU8WG6SmE8Qgj8IoP49HQBF0e0hl7sp/hi15
rm5aNkYGb/jYcoQ0JJpwz2SspoUN34HkxxLk+ykKJWZ6iHJjwm4oLOqAkP/su9bR
Mc7ljgLpXOhWE/2DNJityUsDirP4eNmLZLWoQB1ELeFlRmIf89hVLkis+beaSXHX
XdWV5ddvmpsygOYdD4GlapSWa96FnVFbWjmkhVQSJqHPL2Tclg0z97vJ2Um8L8OS
HLOHGBKFd/UyUJlhtJXm0aeoCWs3Xg==
-----END CERTIFICATE-----