Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539313a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a336539313a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          bLg+32vLb51a6t7SROzsSnc5bQWSGDEV9PGWpwyuZ+o=
Subject key identifier:   78:28:4E:E7:2A:8B:55:67:91:90:7F:02:9A:5D:60:D1:D8:3E:C1:B4
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       2B665074712BEDE8BBD35E813303A880F27A11D4
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539313a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:03 +0000
ROA not before:           Tue 12 Sep 2023 04:55:03 +0000
ROA not after:            Tue 10 Sep 2024 05:00:03 +0000
asID:                     262713
IP address blocks:        2804:640:3e91::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:66:50:74:71:2b:ed:e8:bb:d3:5e:81:33:03:a8:80:f2:7a:11:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:03 2023 GMT
            Not After : Sep 10 05:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:6b:e8:ac:80:4a:a2:46:33:ed:bb:92:32:
                    a0:3d:f5:60:fd:4d:be:27:c4:bd:c9:e3:ab:07:62:
                    ea:70:78:e4:51:cd:3e:6d:09:fa:4e:44:82:47:4d:
                    17:4c:f7:a9:ac:92:49:44:1d:0a:3c:5d:35:53:e4:
                    0b:eb:15:2c:9e:99:38:ed:97:36:7b:c2:cf:8f:1c:
                    ac:ce:61:18:77:8a:f0:0d:0e:5e:03:98:7c:95:72:
                    8a:4d:62:86:e6:3b:47:69:c3:db:57:9f:15:6c:0e:
                    99:9d:d4:27:a6:6c:e8:a6:23:0f:ea:37:e5:29:ce:
                    4e:8a:30:44:79:4d:d9:7a:eb:5c:f3:b4:62:7b:d1:
                    7c:35:b0:07:ad:09:f9:f2:76:0c:76:20:94:e4:36:
                    3a:4c:3c:fb:9d:bb:a1:5e:e2:8c:12:a8:33:81:b6:
                    b8:e1:21:e7:59:db:f4:14:a0:1d:f5:ef:6d:a9:c5:
                    6d:7a:34:7a:f9:f8:45:04:46:e1:e6:a2:90:4b:a8:
                    ca:66:3b:19:6e:84:a4:db:f8:5b:6c:94:a6:21:e7:
                    e0:71:18:96:4e:15:83:82:ef:86:3c:f6:4b:72:eb:
                    ed:47:0e:72:a7:9f:a0:1d:10:70:b0:15:7d:c1:75:
                    0a:c4:3a:e8:85:8e:88:9a:e6:ac:05:63:ca:7b:31:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:28:4E:E7:2A:8B:55:67:91:90:7F:02:9A:5D:60:D1:D8:3E:C1:B4
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a336539313a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:3e91::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:30:5d:90:43:dd:34:cb:33:11:32:83:54:df:16:09:c3:db:
         68:d8:8e:31:3d:bf:5a:d5:f3:23:79:62:26:a3:1d:0e:3c:45:
         d8:fe:09:68:47:90:ce:da:b6:bf:4c:84:90:fd:0b:6a:78:81:
         eb:8d:15:32:2f:31:f8:9c:e6:46:87:3a:cc:8b:76:3c:9a:bd:
         9b:c6:63:b2:cf:af:ec:6a:a8:22:d5:d2:2f:95:db:e1:b7:33:
         38:77:cf:36:fa:c6:90:c9:57:fe:24:da:13:22:fb:33:84:6b:
         6e:61:26:5f:9e:80:da:69:b1:de:d3:5e:d8:dd:ed:50:84:86:
         30:69:5e:a6:51:8b:0d:e4:fd:52:79:40:d3:33:29:e1:e4:54:
         9b:3f:87:5b:62:da:37:c5:46:5a:35:2e:5a:44:63:20:81:a8:
         ec:3c:cc:f0:5b:8f:6b:57:01:77:15:8d:52:61:79:31:fe:65:
         ec:6b:18:ce:cf:ea:98:96:ef:61:5e:46:32:0c:9c:40:bb:b3:
         a9:38:c6:00:29:eb:45:90:8f:2e:46:53:ba:6f:f2:a2:cc:95:
         b9:ba:68:45:00:ea:46:88:c7:ae:ba:21:c3:e6:83:e7:a0:c5:
         36:50:0d:ab:c2:81:dc:a3:9f:0f:1a:e1:72:ac:89:b6:b0:de:
         96:19:1c:cf
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUK2ZQdHEr7ei7016BMwOogPJ6EdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNkI4QzUzN0FDMDYzQ0U1MTA3NUM2QjgxNkUzMzUz
RTU3NDc1QzAeFw0yMzA5MTIwNDU1MDNaFw0yNDA5MTAwNTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDgwQjZCRThBQzgwNEFBMjQ2
MzNFREJCOTIzMkEwM0RGNTYwRkQ0REJFMjdDNEJEQzlFM0FCMDc2MkVBNzA3OEU0
NTFDRDNFNkQwOUZBNEU0NDgyNDc0RDE3NENGN0E5QUM5MjQ5NDQxRDBBM0M1RDM1
NTNFNDBCRUIxNTJDOUU5OTM4RUQ5NzM2N0JDMkNGOEYxQ0FDQ0U2MTE4Nzc4QUYw
MEQwRTVFMDM5ODdDOTU3MjhBNEQ2Mjg2RTYzQjQ3NjlDM0RCNTc5RjE1NkMwRTk5
OURENDI3QTY2Q0U4QTYyMzBGRUEzN0U1MjlDRTRFOEEzMDQ0Nzk0REQ5N0FFQjVD
RjNCNDYyN0JEMTdDMzVCMDA3QUQwOUY5RjI3NjBDNzYyMDk0RTQzNjNBNEMzQ0ZC
OURCQkExNUVFMjhDMTJBODMzODFCNkI4RTEyMUU3NTlEQkY0MTRBMDFERjVFRjZE
QTlDNTZEN0EzNDdBRjlGODQ1MDQ0NkUxRTZBMjkwNEJBOENBNjYzQjE5NkU4NEE0
REJGODVCNkM5NEE2MjFFN0UwNzExODk2NEUxNTgzODJFRjg2M0NGNjRCNzJFQkVE
NDcwRTcyQTc5RkEwMUQxMDcwQjAxNTdEQzE3NTBBQzQzQUU4ODU4RTg4OUFFNkFD
MDU2M0NBN0IzMTlDMTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2Atr6KyASqJGM+27kjKgPfVg/U2+J8S9yeOrB2LqcHjkUc0+bQn6
TkSCR00XTPeprJJJRB0KPF01U+QL6xUsnpk47Zc2e8LPjxyszmEYd4rwDQ5eA5h8
lXKKTWKG5jtHacPbV58VbA6ZndQnpmzopiMP6jflKc5OijBEeU3Zeutc87Rie9F8
NbAHrQn58nYMdiCU5DY6TDz7nbuhXuKMEqgzgba44SHnWdv0FKAd9e9tqcVtejR6
+fhFBEbh5qKQS6jKZjsZboSk2/hbbJSmIefgcRiWThWDgu+GPPZLcuvtRw5yp5+g
HRBwsBV9wXUKxDrohY6ImuasBWPKezGcFwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FHgoTucqi1VnkZB/AppdYNHYPsG0MB8GA1UdIwQYMBaAFPTGuMU3rAY85RB1xrgW
4zU+V0dcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAvRjRDNkI4QzUzN0FDMDYz
Q0U1MTA3NUM2QjgxNkUzMzUzRTU3NDc1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNEM2QjhDNTM3QUMwNjNDRTUxMDc1QzZCODE2RTMzNTNFNTc0
NzVDLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8wLzMyMzgzMDM0M2EzNjM0MzAzYTMz
NjUzOTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzczMTMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQGQD6RMA0GCSqGSIb3DQEBCwUAA4IBAQAHMF2QQ900yzMRMoNU3xYJ
w9to2I4xPb9a1fMjeWImox0OPEXY/gloR5DO2ra/TISQ/QtqeIHrjRUyLzH4nOZG
hzrMi3Y8mr2bxmOyz6/saqgi1dIvldvhtzM4d882+saQyVf+JNoTIvszhGtuYSZf
noDaabHe017Y3e1QhIYwaV6mUYsN5P1SeUDTMynh5FSbP4dbYto3xUZaNS5aRGMg
gajsPMzwW49rVwF3FY1SYXkx/mXsaxjOz+qYlu9hXkYyDJxAu7OpOMYAKetFkI8u
RlO6b/KizJW5umhFAOpGiMeuuiHD5oPnoMU2UA2rwoHco58PGuFyrIm2sN6WGRzP
-----END CERTIFICATE-----