Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37663a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37663a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          7115tj32UcNmFbq7oAxx4pggGuz1hXvNkHb5gV2hnlE=
Subject key identifier:   85:E0:D7:96:A8:69:F2:B9:61:69:75:24:9E:95:E3:70:65:B9:9C:19
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       617C33FFF4C6003621476BAC0A0BDFE99E96E7EB
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37663a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     262713
IP address blocks:        2804:640:7f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7c:33:ff:f4:c6:00:36:21:47:6b:ac:0a:0b:df:e9:9e:96:e7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:bd:c9:55:f2:b1:29:a4:5a:13:50:91:03:
                    33:99:fc:ff:48:52:82:f8:2c:b8:33:0e:12:d5:4b:
                    b3:28:5a:79:33:a1:62:b8:52:ee:58:d0:dc:ff:b6:
                    60:11:cd:41:ec:b5:3a:88:43:ec:8e:78:0d:c8:93:
                    30:ad:fb:93:df:68:c3:0b:a3:d1:b3:5e:6b:80:7b:
                    46:32:20:04:8e:16:40:21:c7:a0:e1:be:6e:78:7c:
                    7d:77:ef:e9:a8:ed:7e:9d:5a:9d:6d:69:ed:85:77:
                    3e:6c:77:57:aa:fe:ac:cb:a3:8d:6b:1e:44:b8:98:
                    4f:85:be:00:2d:19:0b:e7:2c:b5:73:f9:0e:f9:3b:
                    5d:8f:61:32:c8:a2:80:4e:c7:6f:07:a5:82:69:bf:
                    c2:b6:a2:3f:40:06:2b:8f:fb:59:ea:c6:69:e9:ff:
                    a3:10:b7:88:7c:6e:66:ff:68:41:06:b7:a4:ce:99:
                    c6:46:2e:65:59:cb:54:6c:70:97:39:eb:cd:24:c9:
                    07:ea:41:d6:36:8a:62:52:d8:88:13:bd:ee:04:e0:
                    c9:8e:51:d7:5d:ce:df:65:12:45:a4:94:08:87:50:
                    98:30:e8:52:78:ba:36:26:2a:95:c2:fd:6b:43:67:
                    2b:0f:8c:f0:63:70:86:ee:52:e3:b3:8c:0c:24:5c:
                    8c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E0:D7:96:A8:69:F2:B9:61:69:75:24:9E:95:E3:70:65:B9:9C:19
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37663a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:06:a9:2e:1e:a5:72:13:87:18:ca:0e:a1:ca:20:ea:fc:
         4d:60:27:dd:5b:ea:34:e6:5e:d4:83:bc:48:85:de:89:d1:12:
         c1:3b:bc:15:25:7c:39:d6:f9:9c:13:55:00:c4:c1:3a:96:71:
         33:18:be:ab:44:78:56:c6:af:53:47:f2:91:a7:fb:70:4b:71:
         75:1a:c8:00:6c:63:11:2a:ee:4f:77:25:19:c5:eb:5c:9d:d7:
         da:51:2a:ad:79:bd:13:c0:f0:05:27:9b:56:ce:39:11:fb:3b:
         b6:be:90:bf:c1:d8:7a:65:8a:8e:29:b9:9f:94:5b:52:ca:e1:
         65:ca:f0:2d:c7:b0:1c:a8:ab:b9:80:02:89:7d:82:03:af:87:
         86:2a:49:1c:ad:d1:25:9f:c3:23:85:7b:c3:5e:ea:9d:a5:f7:
         3e:e4:40:c9:90:2b:a0:95:32:d7:94:57:31:31:71:e7:53:a5:
         31:50:e3:8b:17:0b:36:6f:60:37:b6:94:ad:76:8a:69:ce:0b:
         7e:76:c5:96:b7:16:e0:39:03:b8:1f:57:c2:09:31:cc:a3:58:
         e6:eb:e5:b7:c8:f9:0b:82:bd:37:66:b2:c6:b9:d5:bd:21:9a:
         58:ff:f2:c3:4a:fa:49:0e:b6:77:d6:e6:ff:65:d2:91:a2:9f:
         d0:31:a5:15
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUYXwz//TGADYhR2usCgvf6Z6W5+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMENBOTgwOTFEQTg2QjNFNkQxOEZEMjA3RjFGQjY1
ODg1MjQ2MzAeFw0yNDA0MDMxODI1NDhaFw0yNTA0MDIxODMwNDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA1RkJEQzk1NUYyQjEyOUE0
NUExMzUwOTEwMzMzOTlGQ0ZGNDg1MjgyRjgyQ0I4MzMwRTEyRDU0QkIzMjg1QTc5
MzNBMTYyQjg1MkVFNThEMERDRkZCNjYwMTFDRDQxRUNCNTNBODg0M0VDOEU3ODBE
Qzg5MzMwQURGQjkzREY2OEMzMEJBM0QxQjM1RTZCODA3QjQ2MzIyMDA0OEUxNjQw
MjFDN0EwRTFCRTZFNzg3QzdENzdFRkU5QThFRDdFOUQ1QTlENkQ2OUVEODU3NzNF
NkM3NzU3QUFGRUFDQ0JBMzhENkIxRTQ0Qjg5ODRGODVCRTAwMkQxOTBCRTcyQ0I1
NzNGOTBFRjkzQjVEOEY2MTMyQzhBMjgwNEVDNzZGMDdBNTgyNjlCRkMyQjZBMjNG
NDAwNjJCOEZGQjU5RUFDNjY5RTlGRkEzMTBCNzg4N0M2RTY2RkY2ODQxMDZCN0E0
Q0U5OUM2NDYyRTY1NTlDQjU0NkM3MDk3MzlFQkNEMjRDOTA3RUE0MUQ2MzY4QTYy
NTJEODg4MTNCREVFMDRFMEM5OEU1MUQ3NURDRURGNjUxMjQ1QTQ5NDA4ODc1MDk4
MzBFODUyNzhCQTM2MjYyQTk1QzJGRDZCNDM2NzJCMEY4Q0YwNjM3MDg2RUU1MkUz
QjM4QzBDMjQ1QzhDRTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsF+9yVXysSmkWhNQkQMzmfz/SFKC+Cy4Mw4S1UuzKFp5M6FiuFLu
WNDc/7ZgEc1B7LU6iEPsjngNyJMwrfuT32jDC6PRs15rgHtGMiAEjhZAIceg4b5u
eHx9d+/pqO1+nVqdbWnthXc+bHdXqv6sy6ONax5EuJhPhb4ALRkL5yy1c/kO+Ttd
j2EyyKKATsdvB6WCab/CtqI/QAYrj/tZ6sZp6f+jELeIfG5m/2hBBrekzpnGRi5l
WctUbHCXOevNJMkH6kHWNopiUtiIE73uBODJjlHXXc7fZRJFpJQIh1CYMOhSeLo2
JiqVwv1rQ2crD4zwY3CG7lLjs4wMJFyM4QIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FIXg15aoafK5YWl1JJ6V43BluZwZMB8GA1UdIwQYMBaAFD8wypgJHahrPm0Y/SB/
H7ZYhSRjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzEvM0YzMENBOTgwOTFEQTg2
QjNFNkQxOEZEMjA3RjFGQjY1ODg1MjQ2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRjMwQ0E5ODA5MURBODZCM0U2RDE4RkQyMDdGMUZCNjU4ODUy
NDYzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8xLzMyMzgzMDM0M2EzNjM0MzAzYTM3
NjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzNzMxMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBAZAAH8wDQYJKoZIhvcNAQELBQADggEBAF7pBqkuHqVyE4cYyg6hyiDq/E1g
J91b6jTmXtSDvEiF3onREsE7vBUlfDnW+ZwTVQDEwTqWcTMYvqtEeFbGr1NH8pGn
+3BLcXUayABsYxEq7k93JRnF61yd19pRKq15vRPA8AUnm1bOORH7O7a+kL/B2Hpl
io4puZ+UW1LK4WXK8C3HsByoq7mAAol9ggOvh4YqSRyt0SWfwyOFe8Ne6p2l9z7k
QMmQK6CVMteUVzExcedTpTFQ44sXCzZvYDe2lK12imnOC352xZa3FuA5A7gfV8IJ
McyjWObr5bfI+QuCvTdmssa51b0hmlj/8sNK+kkOtnfW5v9l0pGin9AxpRU=
-----END CERTIFICATE-----