Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3332203d3e20323639363331.roa
File:                     323830343a363737633a3a2f33322d3332203d3e20323639363331.roa (raw, json)
Hash identifier:          B/aUKyxvNyw/7/Bo6lV16yAyxDzp0lXVMHZ3p0FwJRk=
Subject key identifier:   19:7B:2E:58:08:AC:E0:61:C3:FD:6D:99:8D:0A:53:09:90:D8:8C:9D
Certificate issuer:       /CN=1F9593F8C85E2086E1FEDB97A97E7B2C36F6232C
Certificate serial:       4293F23B30F2FE001616E212395D34ED70473925
Authority key identifier: 1F:95:93:F8:C8:5E:20:86:E1:FE:DB:97:A9:7E:7B:2C:36:F6:23:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9593F8C85E2086E1FEDB97A97E7B2C36F6232C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3332203d3e20323639363331.roa
Signing time:             Tue 11 Apr 2023 20:00:00 +0000
ROA not before:           Tue 11 Apr 2023 19:55:00 +0000
ROA not after:            Tue 09 Apr 2024 20:00:00 +0000
asID:                     269631
IP address blocks:        2804:677c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:93:f2:3b:30:f2:fe:00:16:16:e2:12:39:5d:34:ed:70:47:39:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9593F8C85E2086E1FEDB97A97E7B2C36F6232C
        Validity
            Not Before: Apr 11 19:55:00 2023 GMT
            Not After : Apr  9 20:00:00 2024 GMT
        Subject: CN=197B2E5808ACE061C3FD6D998D0A530990D88C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:f5:dc:e3:20:c9:4c:17:06:ce:03:86:3c:
                    b6:e1:29:bf:33:5c:5d:86:32:0b:c4:f1:dc:c6:68:
                    a1:72:a9:9b:7a:30:c1:6e:ba:79:59:99:ba:4d:3c:
                    a6:68:f7:c4:5f:92:ec:c7:ae:e3:19:69:e3:02:e9:
                    f9:54:4f:6a:99:3c:89:b7:75:c4:e4:74:2e:6d:f0:
                    7d:99:b6:ce:64:0f:3f:3d:28:f6:de:a3:79:da:15:
                    ca:71:f0:1e:ef:4e:97:f2:38:0d:c3:44:68:b5:8b:
                    58:9c:5b:20:77:27:21:68:6d:4f:07:36:e6:22:81:
                    21:2d:c2:d7:d7:3a:9b:bc:6d:39:96:24:92:5e:93:
                    1b:ca:9c:30:52:8c:a2:23:d6:92:d7:74:c1:55:0c:
                    dd:ee:78:2f:f1:39:67:5a:b5:e1:ae:d4:ff:9f:b1:
                    ea:65:48:99:ec:6c:98:7d:1f:af:c0:c5:09:6b:ea:
                    cb:79:0a:34:9b:e2:c4:99:8d:d2:44:9a:10:32:14:
                    44:c1:8f:9b:d5:34:e3:cc:70:f5:84:5e:3c:56:a1:
                    7a:fc:0d:12:3b:6f:ba:41:05:a4:01:52:96:5b:7d:
                    77:dc:df:9c:36:b9:70:46:f7:60:21:19:4c:80:fe:
                    ea:94:b5:da:3b:ae:5f:a7:82:9a:60:33:67:63:86:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7B:2E:58:08:AC:E0:61:C3:FD:6D:99:8D:0A:53:09:90:D8:8C:9D
            X509v3 Authority Key Identifier:
                keyid:1F:95:93:F8:C8:5E:20:86:E1:FE:DB:97:A9:7E:7B:2C:36:F6:23:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/1F9593F8C85E2086E1FEDB97A97E7B2C36F6232C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9593F8C85E2086E1FEDB97A97E7B2C36F6232C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xCoqL6ZK3Mhdb1SXrThYFnw2pyDrMGDmJpBDgdgooFt/0/323830343a363737633a3a2f33322d3332203d3e20323639363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:677c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:cc:4b:30:d6:fb:da:d7:94:eb:43:8f:a3:08:e4:ea:b7:25:
         95:c4:bc:f0:75:12:14:05:d8:d1:9e:1b:bc:6c:85:4c:b9:30:
         9c:ea:c5:3e:8e:bc:11:6f:da:d9:ef:fc:27:89:41:70:f4:8d:
         57:25:bb:95:3e:3d:fc:82:34:94:cc:a0:96:83:5b:bb:2d:84:
         ec:94:d3:2d:17:f7:12:f9:31:20:4f:18:99:40:b9:8a:79:30:
         e7:4e:b4:69:2d:5f:a9:67:ed:3b:77:6c:5c:5a:de:e3:f9:2d:
         f6:e6:0d:1b:16:64:62:ac:38:7c:0a:55:c6:0d:4f:fa:64:c5:
         73:33:fe:05:97:8d:85:de:7c:4e:3e:10:75:4f:ac:f5:cc:53:
         48:b1:86:17:e6:fe:e1:3c:e3:c8:03:24:03:17:09:52:04:18:
         c6:9f:06:71:55:3e:2c:5b:90:e9:eb:73:c5:87:c3:eb:79:44:
         9f:1e:3c:00:fd:a6:e1:65:4f:08:1e:f8:98:b6:0d:34:95:e1:
         cc:af:6e:3f:f7:51:b8:5b:cc:ff:73:1b:df:b5:bf:86:87:52:
         34:71:61:72:50:1e:33:5f:bd:f3:6e:91:13:e7:19:e9:9e:4d:
         8c:12:7a:26:c4:ca:8d:3b:a5:aa:c4:e5:a7:a6:7a:ee:c1:c7:
         3d:1f:ea:c9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQpPyOzDy/gAWFuISOV007XBHOSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY5NTkzRjhDODVFMjA4NkUxRkVEQjk3QTk3RTdCMkMz
NkY2MjMyQzAeFw0yMzA0MTExOTU1MDBaFw0yNDA0MDkyMDAwMDBaMDMxMTAvBgNV
BAMTKDE5N0IyRTU4MDhBQ0UwNjFDM0ZENkQ5OThEMEE1MzA5OTBEODhDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WPXc4yDJTBcGzgOGPLbhKb8z
XF2GMgvE8dzGaKFyqZt6MMFuunlZmbpNPKZo98RfkuzHruMZaeMC6flUT2qZPIm3
dcTkdC5t8H2Zts5kDz89KPbeo3naFcpx8B7vTpfyOA3DRGi1i1icWyB3JyFobU8H
NuYigSEtwtfXOpu8bTmWJJJekxvKnDBSjKIj1pLXdMFVDN3ueC/xOWdateGu1P+f
seplSJnsbJh9H6/AxQlr6st5CjSb4sSZjdJEmhAyFETBj5vVNOPMcPWEXjxWoXr8
DRI7b7pBBaQBUpZbfXfc35w2uXBG92AhGUyA/uqUtdo7rl+ngppgM2djhjavAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGXsuWAis4GHD/W2ZjQpTCZDYjJ0wHwYDVR0j
BBgwFoAUH5WT+MheIIbh/tuXqX57LDb2IywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhDb3FMNlpLM01oZGIxU1hyVGhZRm53MnB5RHJNR0RtSnBCRGdkZ29v
RnQvMC8xRjk1OTNGOEM4NUUyMDg2RTFGRURCOTdBOTdFN0IyQzM2RjYyMzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGOTU5M0Y4Qzg1RTIwODZF
MUZFREI5N0E5N0U3QjJDMzZGNjIzMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4Q29xTDZaSzNNaGRiMVNYclRoWUZudzJweURyTUdEbUpwQkRnZGdvb0Z0LzAv
MzIzODMwMzQzYTM2MzczNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARnfDANBgkqhkiG9w0BAQsFAAOCAQEAsMxLMNb7
2teU60OPowjk6rcllcS88HUSFAXY0Z4bvGyFTLkwnOrFPo68EW/a2e/8J4lBcPSN
VyW7lT49/II0lMygloNbuy2E7JTTLRf3EvkxIE8YmUC5inkw5060aS1fqWftO3ds
XFre4/kt9uYNGxZkYqw4fApVxg1P+mTFczP+BZeNhd58Tj4QdU+s9cxTSLGGF+b+
4TzjyAMkAxcJUgQYxp8GcVU+LFuQ6etzxYfD63lEnx48AP2m4WVPCB74mLYNNJXh
zK9uP/dRuFvM/3Mb37W/hodSNHFhclAeM1+9826RE+cZ6Z5NjBJ6JsTKjTulqsTl
p6Z67sHHPR/qyQ==
-----END CERTIFICATE-----