Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa
File:                     323830343a333336343a3a2f33322d3332203d3e20323635333933.roa (raw, json)
Hash identifier:          PesLSWlplv7kIXD5u8pTy66xHMtIoGkKwV4HqH1ZF7Q=
Subject key identifier:   46:7F:E3:1C:B6:7F:37:2F:C5:F1:4F:92:60:CF:33:B9:34:F5:AA:78
Certificate issuer:       /CN=EC682C741A777F706745E6705BE4FAC8CE53C496
Certificate serial:       562CBB6FE1575CABC9F0FC58389B04618120F648
Authority key identifier: EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa
Signing time:             Mon 29 Jan 2024 22:13:13 +0000
ROA not before:           Mon 29 Jan 2024 22:08:13 +0000
ROA not after:            Mon 27 Jan 2025 22:13:13 +0000
asID:                     265393
IP address blocks:        2804:3364::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2c:bb:6f:e1:57:5c:ab:c9:f0:fc:58:38:9b:04:61:81:20:f6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC682C741A777F706745E6705BE4FAC8CE53C496
        Validity
            Not Before: Jan 29 22:08:13 2024 GMT
            Not After : Jan 27 22:13:13 2025 GMT
        Subject: CN=467FE31CB67F372FC5F14F9260CF33B934F5AA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:f3:d6:1a:f7:cd:21:e1:d8:7d:ba:14:87:
                    e5:68:ce:dc:67:0e:0e:1d:7c:5a:46:56:16:92:85:
                    b1:74:8d:ba:5b:95:1e:af:92:9c:13:a4:f5:ed:b8:
                    1c:61:6e:9a:c8:1c:ba:dc:68:d5:19:fb:13:62:6e:
                    8f:d4:64:a0:71:2b:ad:c0:d2:e4:25:d5:5b:b5:fd:
                    a9:62:76:3f:78:a1:a6:37:45:58:04:c2:58:59:cb:
                    30:ee:60:79:6b:01:ef:3f:fb:ea:1e:79:bd:73:0c:
                    0e:2c:24:08:28:23:d0:f1:4d:38:f6:bc:26:33:a0:
                    15:a3:3e:eb:83:6e:d5:26:5e:47:32:33:09:50:19:
                    23:5f:8a:27:d1:df:29:44:65:ff:88:57:08:11:07:
                    83:9e:be:7a:c2:27:e4:11:57:49:eb:01:5d:f5:02:
                    a1:57:e6:11:a3:d4:85:ae:67:3d:5e:9a:e3:26:be:
                    75:56:61:05:38:0a:b2:d2:fc:e5:39:00:4a:5f:88:
                    49:9f:36:52:ff:37:be:9e:7b:d1:a6:3a:f2:5d:31:
                    fb:5f:53:e3:0b:5e:8f:84:12:db:b4:e9:e9:29:45:
                    e0:bf:0d:6a:21:8c:94:8d:f3:f7:ad:a7:6d:41:9e:
                    7f:e5:3b:8d:ed:23:72:05:4d:86:3f:c0:5c:5b:b2:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7F:E3:1C:B6:7F:37:2F:C5:F1:4F:92:60:CF:33:B9:34:F5:AA:78
            X509v3 Authority Key Identifier:
                keyid:EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/EC682C741A777F706745E6705BE4FAC8CE53C496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/323830343a333336343a3a2f33322d3332203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:52:0d:a1:d7:09:e2:f9:61:9e:24:71:aa:3d:b0:b4:b9:9f:
         ee:ee:37:c1:4c:bd:a2:0b:50:65:7c:59:79:7e:c7:f9:96:19:
         6d:35:2d:95:38:d6:0d:64:2f:1d:b1:51:4d:79:2a:3f:b4:6f:
         04:b1:b5:31:db:6c:74:8e:f5:8b:2a:75:93:08:d9:2a:b3:c2:
         a3:d6:26:91:43:50:be:df:d1:18:fa:23:38:9c:25:7e:11:85:
         41:25:fe:ae:fe:29:28:85:1c:df:a4:f9:d9:e6:9e:7e:b1:46:
         67:13:75:cf:c9:82:fe:eb:da:e3:a3:61:b6:0d:db:97:9c:9f:
         60:57:25:7e:45:5b:ce:df:c8:e4:3a:f3:eb:83:af:a8:aa:92:
         9b:5c:5a:d5:ed:48:bc:7e:7a:d6:1c:18:8f:86:86:47:2b:fd:
         73:4d:14:40:e5:7f:d5:ec:76:c4:a9:75:cb:26:46:fb:d8:c9:
         d9:ca:76:c7:68:70:b5:97:c2:be:6e:08:a5:3d:c3:2b:32:49:
         55:e8:e7:44:1b:b5:c1:a2:32:86:44:a9:9f:de:a4:e8:55:88:
         90:8b:ab:62:5f:4d:6c:0f:72:00:37:ad:a7:3f:8f:3d:99:a2:
         95:d5:54:ff:44:de:f1:5b:2e:89:69:0d:cc:e6:93:6b:ca:61:
         d6:2c:d1:b6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUViy7b+FXXKvJ8PxYOJsEYYEg9kgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM2ODJDNzQxQTc3N0Y3MDY3NDVFNjcwNUJFNEZBQzhD
RTUzQzQ5NjAeFw0yNDAxMjkyMjA4MTNaFw0yNTAxMjcyMjEzMTNaMDMxMTAvBgNV
BAMTKDQ2N0ZFMzFDQjY3RjM3MkZDNUYxNEY5MjYwQ0YzM0I5MzRGNUFBNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypfPWGvfNIeHYfboUh+Voztxn
Dg4dfFpGVhaShbF0jbpblR6vkpwTpPXtuBxhbprIHLrcaNUZ+xNibo/UZKBxK63A
0uQl1Vu1/alidj94oaY3RVgEwlhZyzDuYHlrAe8/++oeeb1zDA4sJAgoI9DxTTj2
vCYzoBWjPuuDbtUmXkcyMwlQGSNfiifR3ylEZf+IVwgRB4OevnrCJ+QRV0nrAV31
AqFX5hGj1IWuZz1emuMmvnVWYQU4CrLS/OU5AEpfiEmfNlL/N76ee9GmOvJdMftf
U+MLXo+EEtu06ekpReC/DWohjJSN8/etp21Bnn/lO43tI3IFTYY/wFxbstzRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURn/jHLZ/Ny/F8U+SYM8zuTT1qngwHwYDVR0j
BBgwFoAU7GgsdBp3f3BnReZwW+T6yM5TxJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMy9FQzY4MkM3NDFBNzc3RjcwNjc0NUU2NzA1QkU0RkFDOENFNTNDNDk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VDNjgyQzc0MUE3NzdGNzA2
NzQ1RTY3MDVCRTRGQUM4Q0U1M0M0OTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWaHY1YzRaRWhhZjhBTFpBTnVSdHBHanJqWTVuM2RFNFQyeHZrNmd2cXJMLzMv
MzIzODMwMzQzYTMzMzMzNjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzZDANBgkqhkiG9w0BAQsFAAOCAQEAolINodcJ
4vlhniRxqj2wtLmf7u43wUy9ogtQZXxZeX7H+ZYZbTUtlTjWDWQvHbFRTXkqP7Rv
BLG1MdtsdI71iyp1kwjZKrPCo9YmkUNQvt/RGPojOJwlfhGFQSX+rv4pKIUc36T5
2eaefrFGZxN1z8mC/uva46Nhtg3bl5yfYFclfkVbzt/I5Drz64OvqKqSm1xa1e1I
vH561hwYj4aGRyv9c00UQOV/1ex2xKl1yyZG+9jJ2cp2x2hwtZfCvm4IpT3DKzJJ
VejnRBu1waIyhkSpn96k6FWIkIurYl9NbA9yADetpz+PPZmildVU/0Te8VsuiWkN
zOaTa8ph1izRtg==
-----END CERTIFICATE-----