Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030303a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030303a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          b5I7etDmDIb0asWE1Cyf/YT+AzLSPeejGRzFmypotSs=
Subject key identifier:   B5:D0:7C:25:32:3B:3D:1E:E8:1E:7B:4D:C9:0D:89:13:B1:83:6D:3B
Certificate issuer:       /CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
Certificate serial:       7016DECAFC7E93532A939E636A17DE3EE9DEFF1A
Authority key identifier: 2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030303a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 04 Apr 2024 14:49:36 +0000
ROA not before:           Thu 04 Apr 2024 14:44:36 +0000
ROA not after:            Thu 03 Apr 2025 14:49:36 +0000
asID:                     271723
IP address blocks:        2804:8000:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:16:de:ca:fc:7e:93:53:2a:93:9e:63:6a:17:de:3e:e9:de:ff:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99
        Validity
            Not Before: Apr  4 14:44:36 2024 GMT
            Not After : Apr  3 14:49:36 2025 GMT
        Subject: CN=B5D07C25323B3D1EE81E7B4DC90D8913B1836D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:8e:91:a7:c6:6a:db:8a:b5:fc:b2:a3:38:
                    4f:02:64:24:65:03:16:5b:23:54:8d:95:79:d6:93:
                    9c:72:09:92:c1:1f:20:a0:36:9d:60:48:df:22:8b:
                    4c:2a:c5:55:a0:bf:2c:92:70:35:76:11:31:30:e5:
                    73:69:c0:5f:7d:ff:c6:61:d3:69:5c:1b:65:76:7f:
                    fc:47:a6:e3:84:fd:f9:b7:91:61:af:55:60:db:0d:
                    13:92:67:a0:3a:1e:ce:b0:d7:bf:d0:8f:ab:bb:a4:
                    b9:b6:22:00:f4:df:ab:83:1d:13:03:c7:8d:10:51:
                    a2:54:5e:ac:64:0e:9d:68:0c:6d:12:de:4c:e4:c0:
                    50:55:6b:5b:df:bf:c7:05:2c:10:07:5c:e6:48:7d:
                    a9:52:92:e4:ad:d0:0c:96:d4:a8:ff:9e:f2:8b:95:
                    ab:5a:dc:96:44:26:13:de:25:35:89:18:78:21:e2:
                    f0:85:3e:ad:a4:d4:8d:20:c3:49:e0:ef:82:e6:44:
                    52:48:24:82:35:ce:12:48:21:46:d5:32:38:10:2e:
                    72:09:38:32:1c:56:f1:2d:91:64:6f:0e:e0:6d:4d:
                    0d:08:bd:9e:e5:6c:7c:6d:04:f3:60:5b:29:02:39:
                    f6:d2:11:d3:6c:9b:b0:56:8d:ce:2f:ad:06:85:b9:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D0:7C:25:32:3B:3D:1E:E8:1E:7B:4D:C9:0D:89:13:B1:83:6D:3B
            X509v3 Authority Key Identifier:
                keyid:2A:EE:20:7C:0C:6F:AB:5D:F4:C8:FF:1A:41:BD:93:27:92:79:2C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AEE207C0C6FAB5DF4C8FF1A41BD932792792C99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/1/323830343a383030303a363030303a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:5c:b0:7a:d6:6c:71:72:3b:7c:b3:e6:1f:ee:68:13:ea:d4:
         19:8b:34:46:81:5a:f0:94:49:a1:43:9a:43:0a:89:fb:20:1b:
         07:c7:30:91:4b:11:cc:f7:a4:63:70:ea:78:4d:67:64:2a:2d:
         67:75:04:55:8a:77:9f:9a:f6:6c:c4:f3:37:cc:5e:fb:b0:78:
         f2:15:41:d5:84:ff:3a:89:a5:37:b5:e6:0d:63:92:35:68:85:
         eb:4f:90:fb:d6:10:92:a8:9e:1d:87:28:20:46:a2:eb:02:85:
         9d:47:b2:73:67:62:53:6b:34:d8:d9:40:8d:30:20:98:0c:97:
         46:1c:f4:c4:50:c8:1e:9f:c7:59:3f:ed:7c:74:8e:87:c8:1a:
         88:b7:33:2f:48:aa:05:c7:2c:3a:c4:9d:9f:17:1d:d5:a1:7c:
         74:8d:05:88:5a:83:48:e1:c7:b3:d8:94:2d:4f:c0:77:bf:3b:
         bd:1d:74:5f:c0:f1:e6:41:41:72:f4:c3:09:b5:54:b9:f3:5c:
         79:b8:bd:81:a8:be:af:37:a8:a5:a0:c3:64:3d:61:bb:84:ee:
         e5:b2:fa:86:31:cd:fd:f1:0d:1e:d7:7d:1a:7c:cf:dc:f9:6e:
         b8:80:e1:5f:72:cc:01:20:ac:f7:1f:64:65:31:7f:3a:9f:fd:
         87:51:e9:8f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUcBbeyvx+k1Mqk55jahfePune/xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFFRTIwN0MwQzZGQUI1REY0QzhGRjFBNDFCRDkzMjc5
Mjc5MkM5OTAeFw0yNDA0MDQxNDQ0MzZaFw0yNTA0MDMxNDQ5MzZaMDMxMTAvBgNV
BAMTKEI1RDA3QzI1MzIzQjNEMUVFODFFN0I0REM5MEQ4OTEzQjE4MzZEM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOI6Rp8Zq24q1/LKjOE8CZCRl
AxZbI1SNlXnWk5xyCZLBHyCgNp1gSN8ii0wqxVWgvyyScDV2ETEw5XNpwF99/8Zh
02lcG2V2f/xHpuOE/fm3kWGvVWDbDROSZ6A6Hs6w17/Qj6u7pLm2IgD036uDHRMD
x40QUaJUXqxkDp1oDG0S3kzkwFBVa1vfv8cFLBAHXOZIfalSkuSt0AyW1Kj/nvKL
lata3JZEJhPeJTWJGHgh4vCFPq2k1I0gw0ng74LmRFJIJII1zhJIIUbVMjgQLnIJ
ODIcVvEtkWRvDuBtTQ0IvZ7lbHxtBPNgWykCOfbSEdNsm7BWjc4vrQaFudG9AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUtdB8JTI7PR7oHntNyQ2JE7GDbTswHwYDVR0j
BBgwFoAUKu4gfAxvq130yP8aQb2TJ5J5LJkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0hzUk5lOWdoVEZDZ0xiY3p5aEx0RENtcTF5NzZQakxzQTVoTDVGM0U3
U2svMS8yQUVFMjA3QzBDNkZBQjVERjRDOEZGMUE0MUJEOTMyNzkyNzkyQzk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBRUUyMDdDMEM2RkFCNURG
NEM4RkYxQTQxQkQ5MzI3OTI3OTJDOTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdIc1JOZTlnaFRGQ2dMYmN6eWhMdERDbXExeTc2UGpMc0E1aEw1RjNFN1NrLzEv
MzIzODMwMzQzYTM4MzAzMDMwM2EzNjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMTM3MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEgABgADANBgkqhkiG9w0BAQsF
AAOCAQEAiFywetZscXI7fLPmH+5oE+rUGYs0RoFa8JRJoUOaQwqJ+yAbB8cwkUsR
zPekY3DqeE1nZCotZ3UEVYp3n5r2bMTzN8xe+7B48hVB1YT/OomlN7XmDWOSNWiF
60+Q+9YQkqieHYcoIEai6wKFnUeyc2diU2s02NlAjTAgmAyXRhz0xFDIHp/HWT/t
fHSOh8gaiLczL0iqBccsOsSdnxcd1aF8dI0FiFqDSOHHs9iULU/Ad787vR10X8Dx
5kFBcvTDCbVUufNcebi9gai+rzeopaDDZD1hu4Tu5bL6hjHN/fENHtd9GnzP3Plu
uIDhX3LMASCs9x9kZTF/Op/9h1Hpjw==
-----END CERTIFICATE-----