Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a663030313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          P6NLGlnTO4ck4/AeMuXUapMMdY+8JHNebaRmt9KXSEk=
Subject key identifier:   A2:E8:FF:6B:42:E0:5A:F2:22:FF:B5:4C:9E:9F:30:B6:E2:A6:C2:23
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       57BB603F4A755227342D9FE35D3CB79A449C70AC
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:01 +0000
ROA not before:           Thu 04 Apr 2024 11:29:01 +0000
ROA not after:            Thu 03 Apr 2025 11:34:01 +0000
asID:                     264422
IP address blocks:        2804:1e58:f001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bb:60:3f:4a:75:52:27:34:2d:9f:e3:5d:3c:b7:9a:44:9c:70:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:01 2024 GMT
            Not After : Apr  3 11:34:01 2025 GMT
        Subject: CN=A2E8FF6B42E05AF222FFB54C9E9F30B6E2A6C223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:98:a4:ba:32:5d:eb:f8:87:3a:8b:79:71:
                    f3:13:ae:18:1e:88:8a:f3:eb:4f:7c:bd:37:03:95:
                    6d:04:ab:69:b6:95:6d:b8:6a:f4:6f:80:53:2b:b6:
                    f6:f0:ed:b5:f0:83:73:47:d9:da:a5:1b:18:23:88:
                    34:74:d0:6e:d0:94:f0:bc:03:06:c6:75:59:48:86:
                    37:b7:1d:ee:04:d2:3a:55:c7:4c:75:31:23:1e:fa:
                    49:47:fb:c9:c1:39:37:6b:24:a5:a8:75:27:20:6b:
                    de:7c:5b:46:f4:eb:cf:94:9e:c5:88:e6:7b:bb:3d:
                    83:f9:8c:ca:76:92:14:0f:88:87:49:ba:02:31:8c:
                    07:1f:ba:05:d2:1b:d5:f5:68:e8:8a:93:b2:7f:06:
                    49:8e:48:87:96:01:cb:8a:c0:3b:4d:ba:58:c2:87:
                    7b:40:b5:81:1a:ff:4e:a8:94:c2:cc:36:0a:93:f9:
                    e1:54:5a:16:30:81:55:09:fe:96:9a:ba:5f:8f:11:
                    b3:21:2a:5e:fb:9c:08:de:d3:7d:be:e5:a8:20:df:
                    2e:14:e3:ac:3a:46:f0:2c:a4:b9:ab:57:15:5c:23:
                    c1:07:11:9f:01:67:11:20:7a:4e:7c:7d:13:f4:d2:
                    49:de:51:26:a7:06:18:4f:06:c9:ad:49:35:c4:b4:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E8:FF:6B:42:E0:5A:F2:22:FF:B5:4C:9E:9F:30:B6:E2:A6:C2:23
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:a1:ba:81:56:43:9f:41:96:c5:87:db:84:31:98:6e:aa:42:
         2b:7c:86:24:7a:e5:48:9c:ff:ea:8b:6d:06:8b:47:e2:b0:60:
         37:0d:de:0d:ce:50:3b:66:81:0e:db:e6:1b:87:cb:69:81:db:
         ac:32:4d:74:a2:c7:a7:bb:02:e1:c0:f6:28:b7:e5:cb:94:de:
         1b:a1:13:db:45:81:7c:5f:49:18:35:d9:95:79:f9:fa:a0:97:
         a6:2a:55:95:96:4f:c2:86:66:6b:b6:c6:82:e3:b9:53:38:f9:
         d0:c7:38:44:43:a5:28:12:56:2c:94:4f:23:bb:ce:2e:b2:65:
         2b:89:6e:da:43:a1:88:a9:ab:c2:f1:c6:be:59:92:ef:8c:c5:
         ab:e8:35:25:f9:e1:f0:bf:9b:ac:7c:5f:9e:fa:3c:7b:9c:27:
         c6:de:fc:ad:6f:ef:c5:2e:70:ee:d7:b2:4b:f3:9b:4f:88:22:
         56:98:67:49:2e:cf:f6:08:2d:4b:25:54:22:c6:8d:69:d3:22:
         22:26:28:52:6e:53:73:8c:06:72:f6:80:10:ad:fa:b1:81:80:
         63:33:19:8f:55:08:73:cc:73:ea:c5:7e:e1:54:be:c4:ef:44:
         84:76:c4:dc:73:24:70:f9:60:9d:6f:8a:6d:fc:70:7a:18:9d:
         e3:5b:33:eb
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUV7tgP0p1Uic0LZ/jXTy3mkSccKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlBNzNDOTcwMTRBMEYxQzAyQzIyQkJGMDExNTFCOUM4
RjA2RkQ1MzAeFw0yNDA0MDQxMTI5MDFaFw0yNTA0MDMxMTM0MDFaMDMxMTAvBgNV
BAMTKEEyRThGRjZCNDJFMDVBRjIyMkZGQjU0QzlFOUYzMEI2RTJBNkMyMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWbJikujJd6/iHOot5cfMTrhge
iIrz6098vTcDlW0Eq2m2lW24avRvgFMrtvbw7bXwg3NH2dqlGxgjiDR00G7QlPC8
AwbGdVlIhje3He4E0jpVx0x1MSMe+klH+8nBOTdrJKWodScga958W0b068+UnsWI
5nu7PYP5jMp2khQPiIdJugIxjAcfugXSG9X1aOiKk7J/BkmOSIeWAcuKwDtNuljC
h3tAtYEa/06olMLMNgqT+eFUWhYwgVUJ/paaul+PEbMhKl77nAje032+5agg3y4U
46w6RvAspLmrVxVcI8EHEZ8BZxEgek58fRP00kneUSanBhhPBsmtSTXEtI0vAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUouj/a0LgWvIi/7VMnp8wtuKmwiMwHwYDVR0j
BBgwFoAU+ac8lwFKDxwCwiu/ARUbnI8G/VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMS9GOUE3M0M5NzAxNEEwRjFDMDJDMjJCQkYwMTE1MUI5QzhGMDZGRDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5QTczQzk3MDE0QTBGMUMw
MkMyMkJCRjAxMTUxQjlDOEYwNkZENTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzEv
MzIzODMwMzQzYTMxNjUzNTM4M2E2NjMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHljwATANBgkqhkiG9w0BAQsF
AAOCAQEAmKG6gVZDn0GWxYfbhDGYbqpCK3yGJHrlSJz/6ottBotH4rBgNw3eDc5Q
O2aBDtvmG4fLaYHbrDJNdKLHp7sC4cD2KLfly5TeG6ET20WBfF9JGDXZlXn5+qCX
pipVlZZPwoZma7bGguO5Uzj50Mc4REOlKBJWLJRPI7vOLrJlK4lu2kOhiKmrwvHG
vlmS74zFq+g1Jfnh8L+brHxfnvo8e5wnxt78rW/vxS5w7teyS/ObT4giVphnSS7P
9ggtSyVUIsaNadMiIiYoUm5Tc4wGcvaAEK36sYGAYzMZj1UIc8xz6sV+4VS+xO9E
hHbE3HMkcPlgnW+Kbfxwehid41sz6w==
-----END CERTIFICATE-----