Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/323830343a333962303a3a2f33322d3438203d3e20323636303434.roa
File:                     323830343a333962303a3a2f33322d3438203d3e20323636303434.roa (raw, json)
Hash identifier:          9smnDly9wtnARFrYdR0W433T+NJo6ipHL6ojdxuo7Ic=
Subject key identifier:   B4:87:8F:76:63:67:DD:C8:06:FB:84:A9:4F:BD:B2:09:B1:B0:98:0D
Certificate issuer:       /CN=D824C23121EFD846C683EDEED166C5C40784AE04
Certificate serial:       3EA1C4EF9FDFB2EDFC63319A8F1B15697F776F57
Authority key identifier: D8:24:C2:31:21:EF:D8:46:C6:83:ED:EE:D1:66:C5:C4:07:84:AE:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D824C23121EFD846C683EDEED166C5C40784AE04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/323830343a333962303a3a2f33322d3438203d3e20323636303434.roa
Signing time:             Thu 06 Jul 2023 15:20:00 +0000
ROA not before:           Thu 06 Jul 2023 15:15:00 +0000
ROA not after:            Thu 04 Jul 2024 15:20:00 +0000
asID:                     266044
IP address blocks:        2804:39b0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a1:c4:ef:9f:df:b2:ed:fc:63:31:9a:8f:1b:15:69:7f:77:6f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D824C23121EFD846C683EDEED166C5C40784AE04
        Validity
            Not Before: Jul  6 15:15:00 2023 GMT
            Not After : Jul  4 15:20:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:70:bf:4a:ac:15:67:90:75:ab:d3:2a:08:
                    c4:e0:8e:0d:86:8f:97:9d:c1:f2:29:93:39:47:25:
                    71:eb:90:26:c9:0a:2c:33:b7:6a:e3:0d:34:2d:ed:
                    b7:25:c4:77:67:53:3e:c9:0e:5d:af:2c:c2:f0:a2:
                    14:fb:ef:5d:5f:3b:57:bc:80:d0:59:81:fe:15:80:
                    c7:00:ca:bf:bd:cd:70:74:af:d2:1c:42:b8:c1:a5:
                    af:72:34:3c:89:34:1f:97:09:4e:92:d8:00:dd:ce:
                    46:7e:61:9f:43:32:63:5a:38:a8:04:ff:4b:8d:10:
                    e9:82:04:7c:9c:f5:b0:3c:08:2a:ae:99:9c:f7:bb:
                    b2:96:ca:10:df:2b:ed:ff:9d:e2:c6:cb:5c:c0:18:
                    94:b6:8d:15:c8:7e:fc:28:df:0f:41:e0:42:d5:5b:
                    cc:a6:86:bf:1d:e4:39:f2:ea:79:a6:f5:78:8c:fd:
                    c4:e5:6f:7e:35:db:dd:cf:39:81:66:97:d8:d1:36:
                    59:72:6d:a1:22:c0:a0:2e:62:d4:aa:a6:f2:e8:9f:
                    c1:ca:2e:ee:75:34:ba:2a:8d:1a:82:5f:29:ab:c1:
                    1b:fc:e0:2a:d7:b0:c9:48:b7:8d:40:af:65:5a:25:
                    c5:4e:7f:11:19:0b:71:d1:b5:83:5b:c7:58:a5:86:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:8F:76:63:67:DD:C8:06:FB:84:A9:4F:BD:B2:09:B1:B0:98:0D
            X509v3 Authority Key Identifier:
                keyid:D8:24:C2:31:21:EF:D8:46:C6:83:ED:EE:D1:66:C5:C4:07:84:AE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/D824C23121EFD846C683EDEED166C5C40784AE04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D824C23121EFD846C683EDEED166C5C40784AE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/323830343a333962303a3a2f33322d3438203d3e20323636303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:0a:2d:59:1c:87:9b:99:12:22:60:d4:1a:16:39:ab:0f:7f:
         d2:69:8b:ba:45:17:ef:a7:63:4d:a4:39:c2:45:d6:58:b1:f1:
         91:69:ac:72:44:56:83:9f:bb:ff:b8:ce:bd:de:7d:e8:5e:d5:
         48:4a:92:e0:a5:3a:a7:8c:f2:48:e7:58:99:52:41:8d:50:3d:
         13:60:da:95:80:b4:77:93:6a:17:17:65:81:9f:44:37:60:41:
         56:4c:83:b8:5d:15:5c:a3:1f:5e:a7:11:37:7b:6b:15:25:ef:
         34:1f:82:15:54:e0:7a:a1:f4:c7:3a:51:45:9a:b9:4b:2d:94:
         15:9b:92:27:46:7f:00:30:35:fd:08:dd:ae:50:a0:5f:8e:5b:
         f8:fb:fc:0c:0c:58:9b:46:7f:ca:d8:ce:68:13:01:4e:ac:24:
         4f:81:ce:e5:f4:8f:0b:c0:34:30:02:49:35:62:a4:2a:25:d6:
         60:38:5b:69:74:d8:65:21:46:58:35:85:31:6c:38:fc:ef:37:
         21:6b:07:6f:4c:d6:2e:89:2d:ff:51:54:eb:c1:52:a6:af:a9:
         80:80:66:b6:18:36:39:83:cc:13:68:a1:61:8d:e2:b6:5e:68:
         ce:6c:5a:7f:2b:9a:5d:3d:73:94:eb:43:56:ae:ab:99:ad:a9:
         99:6e:d1:a3
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUPqHE75/fsu38YzGajxsVaX93b1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgyNEMyMzEyMUVGRDg0NkM2ODNFREVFRDE2NkM1QzQw
Nzg0QUUwNDAeFw0yMzA3MDYxNTE1MDBaFw0yNDA3MDQxNTIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjUwNTcwQkY0QUFDMTU2Nzkw
NzVBQkQzMkEwOEM0RTA4RTBEODY4Rjk3OURDMUYyMjk5MzM5NDcyNTcxRUI5MDI2
QzkwQTJDMzNCNzZBRTMwRDM0MkRFREI3MjVDNDc3Njc1MzNFQzkwRTVEQUYyQ0My
RjBBMjE0RkJFRjVENUYzQjU3QkM4MEQwNTk4MUZFMTU4MEM3MDBDQUJGQkRDRDcw
NzRBRkQyMUM0MkI4QzFBNUFGNzIzNDNDODkzNDFGOTcwOTRFOTJEODAwRERDRTQ2
N0U2MTlGNDMzMjYzNUEzOEE4MDRGRjRCOEQxMEU5ODIwNDdDOUNGNUIwM0MwODJB
QUU5OTlDRjdCQkIyOTZDQTEwREYyQkVERkY5REUyQzZDQjVDQzAxODk0QjY4RDE1
Qzg3RUZDMjhERjBGNDFFMDQyRDU1QkNDQTY4NkJGMURFNDM5RjJFQTc5QTZGNTc4
OENGREM0RTU2RjdFMzVEQkREQ0YzOTgxNjY5N0Q4RDEzNjU5NzI2REExMjJDMEEw
MkU2MkQ0QUFBNkYyRTg5RkMxQ0EyRUVFNzUzNEJBMkE4RDFBODI1RjI5QUJDMTFC
RkNFMDJBRDdCMEM5NDhCNzhENDBBRjY1NUEyNUM1NEU3RjExMTkwQjcxRDFCNTgz
NUJDNzU4QTU4NjY0RjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtQVwv0qsFWeQdavTKgjE4I4Nho+XncHyKZM5RyVx65AmyQosM7dq
4w00Le23JcR3Z1M+yQ5dryzC8KIU++9dXztXvIDQWYH+FYDHAMq/vc1wdK/SHEK4
waWvcjQ8iTQflwlOktgA3c5GfmGfQzJjWjioBP9LjRDpggR8nPWwPAgqrpmc97uy
lsoQ3yvt/53ixstcwBiUto0VyH78KN8PQeBC1VvMpoa/HeQ58up5pvV4jP3E5W9+
NdvdzzmBZpfY0TZZcm2hIsCgLmLUqqby6J/Byi7udTS6Ko0agl8pq8Eb/OAq17DJ
SLeNQK9lWiXFTn8RGQtx0bWDW8dYpYZk9wIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FLSHj3ZjZ93IBvuEqU+9sgmxsJgNMB8GA1UdIwQYMBaAFNgkwjEh79hGxoPt7tFm
xcQHhK4EMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdXRGFYbTM2RGVBTmt3
MjJacjRXVHY1NnFOcndtTWlvNmVVa0JNaWZVbTdiLzAvRDgyNEMyMzEyMUVGRDg0
NkM2ODNFREVFRDE2NkM1QzQwNzg0QUUwNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EODI0QzIzMTIxRUZEODQ2QzY4M0VERUVEMTY2QzVDNDA3ODRB
RTA0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83V0RhWG0zNkRlQU5rdzIyWnI0
V1R2NTZxTnJ3bU1pbzZlVWtCTWlmVW03Yi8wLzMyMzgzMDM0M2EzMzM5NjIzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNjMwMzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
ObAwDQYJKoZIhvcNAQELBQADggEBAAoKLVkch5uZEiJg1BoWOasPf9Jpi7pFF++n
Y02kOcJF1lix8ZFprHJEVoOfu/+4zr3efehe1UhKkuClOqeM8kjnWJlSQY1QPRNg
2pWAtHeTahcXZYGfRDdgQVZMg7hdFVyjH16nETd7axUl7zQfghVU4Hqh9Mc6UUWa
uUstlBWbkidGfwAwNf0I3a5QoF+OW/j7/AwMWJtGf8rYzmgTAU6sJE+BzuX0jwvA
NDACSTVipCol1mA4W2l02GUhRlg1hTFsOPzvNyFrB29M1i6JLf9RVOvBUqavqYCA
ZrYYNjmDzBNooWGN4rZeaM5sWn8rml09c5TrQ1auq5mtqZlu0aM=
-----END CERTIFICATE-----