Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/323830343a333030343a3a2f33322d3334203d3e20323634393236.roa
File:                     323830343a333030343a3a2f33322d3334203d3e20323634393236.roa (raw, json)
Hash identifier:          Xb7ul2NAPgJ+Awbn6mBmOn2XgLnZ4PPTQhjIyPHV5so=
Subject key identifier:   C0:7B:27:B9:35:B7:98:69:B0:A6:A5:BA:6F:5F:07:CC:D5:75:44:7A
Certificate issuer:       /CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
Certificate serial:       0F9AF50258980F76A23CD3C00E903ED98D430B8B
Authority key identifier: 1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/323830343a333030343a3a2f33322d3334203d3e20323634393236.roa
Signing time:             Mon 29 Jan 2024 08:57:38 +0000
ROA not before:           Mon 29 Jan 2024 08:52:38 +0000
ROA not after:            Mon 27 Jan 2025 08:57:38 +0000
asID:                     264926
IP address blocks:        2804:3004::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9a:f5:02:58:98:0f:76:a2:3c:d3:c0:0e:90:3e:d9:8d:43:0b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
        Validity
            Not Before: Jan 29 08:52:38 2024 GMT
            Not After : Jan 27 08:57:38 2025 GMT
        Subject: CN=C07B27B935B79869B0A6A5BA6F5F07CCD575447A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:56:be:73:4d:db:89:95:44:24:0e:b6:55:c6:
                    ae:83:da:5b:b3:89:74:56:93:9f:20:36:75:d7:97:
                    7b:23:40:fa:7b:99:42:22:8d:e2:da:d0:a3:34:ac:
                    ae:84:31:f0:53:a3:b0:5e:22:a9:18:88:9d:32:a9:
                    91:c6:e3:66:c7:47:67:53:43:66:4e:40:5b:4f:6b:
                    41:f7:8e:77:f6:f0:d0:a4:49:f8:73:40:4c:22:51:
                    16:a8:b8:0d:89:31:90:f6:7c:9f:4b:0b:9d:5c:80:
                    ec:bb:ba:6a:4d:41:ff:37:6c:b8:2b:7e:4e:fa:cb:
                    9e:c5:dc:75:75:a2:38:4e:8c:1f:90:56:ac:96:ce:
                    e7:c8:d0:c3:c6:9d:c2:09:d8:fb:16:45:d7:7e:96:
                    e4:5e:97:70:74:81:31:99:a4:e2:bf:14:61:ea:71:
                    31:7f:e6:f8:5c:57:05:93:fa:3d:c8:fc:de:0a:a9:
                    06:1b:34:6f:b1:2b:e8:59:8d:07:74:d7:a9:de:0d:
                    1b:fb:c8:9f:ac:d6:9c:51:34:13:83:20:06:26:48:
                    ee:3b:de:d4:93:da:90:30:1a:8f:5f:ec:44:ca:bb:
                    cc:22:2f:95:9c:a7:37:da:9c:39:d1:9a:ad:68:55:
                    4b:bc:3b:5c:f5:de:74:59:a8:2d:a0:85:48:dc:b4:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7B:27:B9:35:B7:98:69:B0:A6:A5:BA:6F:5F:07:CC:D5:75:44:7A
            X509v3 Authority Key Identifier:
                keyid:1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/323830343a333030343a3a2f33322d3334203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3004::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:fb:0f:70:32:d9:6c:47:b6:62:32:2c:0e:98:9f:19:89:2b:
         27:95:4b:30:6c:11:b6:b6:02:de:7a:85:15:c7:68:d2:9a:f7:
         e7:8e:fe:42:f4:84:2e:b9:11:0d:fb:f5:55:bc:2e:67:9f:6b:
         da:5a:1c:dc:0a:fd:b2:a9:ec:63:c5:46:53:3a:8b:8e:42:b9:
         26:c4:b2:24:dd:2f:94:e0:c4:18:12:c1:2c:7c:d1:3e:fc:24:
         2f:62:a2:2f:db:b4:d7:5c:74:cc:6c:71:f4:06:a7:1e:31:b7:
         61:ae:1f:9f:6f:fc:9a:23:0d:5e:61:74:c3:6c:1c:78:ef:98:
         4b:59:e1:27:30:0e:d2:5e:12:62:39:aa:d2:2c:6a:37:d9:d6:
         80:b4:a2:d7:97:18:ef:2c:21:79:d8:f9:7a:8d:e0:42:27:69:
         9f:42:79:4d:68:43:9d:30:78:53:21:dd:14:35:d5:f5:82:94:
         db:2d:bd:e6:ce:5f:97:ed:45:f6:69:6e:55:1b:e6:03:b4:28:
         f5:0c:37:e9:65:60:09:4a:59:21:3c:4a:84:55:d0:bf:e7:b3:
         9f:35:5a:6c:2a:d2:86:72:4b:60:e8:c2:59:d0:a4:f9:a6:e2:
         e8:2f:00:58:bf:81:9b:a9:85:44:af:ff:e0:43:60:8d:a7:e5:
         1a:4f:e8:8a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD5r1AliYD3aiPNPADpA+2Y1DC4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ0QjFFMEY4MzkzN0RCNTAxMzZBODZCQzYyMTNDMzMx
OENERjU4QTAeFw0yNDAxMjkwODUyMzhaFw0yNTAxMjcwODU3MzhaMDMxMTAvBgNV
BAMTKEMwN0IyN0I5MzVCNzk4NjlCMEE2QTVCQTZGNUYwN0NDRDU3NTQ0N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVVr5zTduJlUQkDrZVxq6D2luz
iXRWk58gNnXXl3sjQPp7mUIijeLa0KM0rK6EMfBTo7BeIqkYiJ0yqZHG42bHR2dT
Q2ZOQFtPa0H3jnf28NCkSfhzQEwiURaouA2JMZD2fJ9LC51cgOy7umpNQf83bLgr
fk76y57F3HV1ojhOjB+QVqyWzufI0MPGncIJ2PsWRdd+luRel3B0gTGZpOK/FGHq
cTF/5vhcVwWT+j3I/N4KqQYbNG+xK+hZjQd016neDRv7yJ+s1pxRNBODIAYmSO47
3tST2pAwGo9f7ETKu8wiL5WcpzfanDnRmq1oVUu8O1z13nRZqC2ghUjctOZNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwHsnuTW3mGmwpqW6b18HzNV1RHowHwYDVR0j
BBgwFoAUHUseD4OTfbUBNqhrxiE8MxjN9YowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzVjWmRHbnhaSG0ydGV0akFCVmZ3dFFaN2ZOVDVoajJ3V1Y0OHRDbUVl
dFMvMC8xRDRCMUUwRjgzOTM3REI1MDEzNkE4NkJDNjIxM0MzMzE4Q0RGNThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFENEIxRTBGODM5MzdEQjUw
MTM2QTg2QkM2MjEzQzMzMThDREY1OEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc1Y1pkR254WkhtMnRldGpBQlZmd3RRWjdmTlQ1aGoyd1dWNDh0Q21FZXRTLzAv
MzIzODMwMzQzYTMzMzAzMDM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM0
MzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwBDANBgkqhkiG9w0BAQsFAAOCAQEAi/sPcDLZ
bEe2YjIsDpifGYkrJ5VLMGwRtrYC3nqFFcdo0pr3547+QvSELrkRDfv1VbwuZ59r
2loc3Ar9sqnsY8VGUzqLjkK5JsSyJN0vlODEGBLBLHzRPvwkL2KiL9u011x0zGxx
9AanHjG3Ya4fn2/8miMNXmF0w2wceO+YS1nhJzAO0l4SYjmq0ixqN9nWgLSi15cY
7ywhedj5eo3gQidpn0J5TWhDnTB4UyHdFDXV9YKU2y295s5fl+1F9mluVRvmA7Qo
9Qw36WVgCUpZITxKhFXQv+eznzVabCrShnJLYOjCWdCk+abi6C8AWL+Bm6mFRK//
4ENgjaflGk/oig==
-----END CERTIFICATE-----