Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a383030303a3a2f33332d3333203d3e20323638393235.roa
File:                     323830343a356362343a383030303a3a2f33332d3333203d3e20323638393235.roa (raw, json)
Hash identifier:          cOl20TKn+XO+t71AHaCmUiXG1bYuCOushrsG9jGkmQ8=
Subject key identifier:   83:35:C3:5A:25:24:38:F4:2D:7D:86:FA:AF:9D:86:50:52:62:FE:D0
Certificate issuer:       /CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
Certificate serial:       544E4075A37D95F98C1536D1B28095F524911654
Authority key identifier: E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a383030303a3a2f33332d3333203d3e20323638393235.roa
Signing time:             Thu 01 Feb 2024 14:27:01 +0000
ROA not before:           Thu 01 Feb 2024 14:22:01 +0000
ROA not after:            Thu 30 Jan 2025 14:27:01 +0000
asID:                     268925
IP address blocks:        2804:5cb4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4e:40:75:a3:7d:95:f9:8c:15:36:d1:b2:80:95:f5:24:91:16:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
        Validity
            Not Before: Feb  1 14:22:01 2024 GMT
            Not After : Jan 30 14:27:01 2025 GMT
        Subject: CN=8335C35A252438F42D7D86FAAF9D86505262FED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:33:d0:da:b0:5d:a7:61:1f:9e:89:4c:47:
                    ad:7e:09:ae:99:7c:da:f6:f4:b4:fc:b3:f4:29:43:
                    81:d5:ff:88:66:7e:31:03:ef:a6:ce:ce:2a:5c:f9:
                    51:a3:de:36:eb:7f:72:21:b9:43:a6:46:a5:3a:b2:
                    0d:45:41:e7:70:cd:f6:98:d8:3d:5a:7f:eb:75:7e:
                    7f:d6:47:a8:dc:e2:ea:3c:90:08:e4:01:a7:97:b7:
                    57:51:4b:a4:ec:66:bf:f0:e9:fc:31:6a:f9:24:48:
                    fc:a2:ec:51:58:96:e6:29:1b:d2:f9:12:e9:2d:87:
                    dc:de:10:42:51:69:cb:88:5a:ab:b3:26:3c:82:3f:
                    8f:56:25:35:a9:82:fa:19:33:d5:cf:35:47:d9:49:
                    9a:a0:95:67:87:7e:d7:8d:8a:f1:01:30:23:03:24:
                    7a:de:27:38:df:d5:73:42:62:f5:01:ec:31:f4:ae:
                    e0:c2:d4:49:40:aa:88:5b:fd:92:94:83:27:5f:fe:
                    8c:30:1c:d5:f2:7b:b8:81:87:80:8f:18:9b:6a:fc:
                    ea:53:ad:2e:8b:83:25:75:d8:a0:c7:24:0e:b6:de:
                    13:4c:c7:25:82:c8:f0:b3:bd:8c:c1:b6:7d:02:66:
                    a4:64:35:e4:0f:19:fb:38:61:aa:36:6f:15:5a:38:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:35:C3:5A:25:24:38:F4:2D:7D:86:FA:AF:9D:86:50:52:62:FE:D0
            X509v3 Authority Key Identifier:
                keyid:E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a383030303a3a2f33332d3333203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cb4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:d4:83:4a:30:16:4b:17:ec:57:18:3c:46:e2:56:14:a0:
         e7:f5:50:31:3e:31:3d:f4:e7:92:bf:ea:59:81:ec:09:ce:4b:
         08:ab:8e:1b:a0:d9:b5:d6:36:5d:b5:ad:05:bc:b2:c6:62:e2:
         41:ef:f4:00:97:a4:fb:30:6a:20:ad:92:3a:c6:4e:63:0d:ca:
         da:8f:a1:10:79:6c:d7:c2:79:0f:a7:30:19:0d:8e:c4:3e:1b:
         bf:15:6f:33:88:71:45:09:e3:bd:d4:d7:7d:30:5c:55:7e:de:
         76:55:4f:4d:c2:a8:1d:e0:ea:fc:0e:43:e2:1b:4e:4c:a0:5d:
         61:76:7f:c8:eb:e4:90:34:f3:33:e0:c0:e5:02:c5:11:e7:5b:
         df:ab:01:98:d6:cb:a3:92:94:16:d4:69:f5:94:f6:22:e6:dd:
         2a:1a:96:04:ee:38:d1:fa:44:2b:e3:1b:7a:fb:d7:3b:6e:06:
         3f:d0:2b:ff:cf:63:b7:49:1c:11:eb:68:41:24:22:60:52:6f:
         a8:db:5d:09:d0:57:f1:7e:f7:35:a7:d5:c2:da:f5:61:ab:38:
         8a:4d:9f:54:de:29:da:5d:16:69:6c:b4:59:34:b7:ac:17:ba:
         cd:57:ed:af:40:49:e5:7e:77:7f:ed:7a:5a:1d:b7:fd:7f:b7:
         1b:c2:27:33
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVE5AdaN9lfmMFTbRsoCV9SSRFlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJGRjQ5QTYyNkM4QjMzMDU4NjM3N0QyQjQzOThDQkMy
NEZBNTg2RTAeFw0yNDAyMDExNDIyMDFaFw0yNTAxMzAxNDI3MDFaMDMxMTAvBgNV
BAMTKDgzMzVDMzVBMjUyNDM4RjQyRDdEODZGQUFGOUQ4NjUwNTI2MkZFRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KjPQ2rBdp2EfnolMR61+Ca6Z
fNr29LT8s/QpQ4HV/4hmfjED76bOzipc+VGj3jbrf3IhuUOmRqU6sg1FQedwzfaY
2D1af+t1fn/WR6jc4uo8kAjkAaeXt1dRS6TsZr/w6fwxavkkSPyi7FFYluYpG9L5
Eukth9zeEEJRacuIWquzJjyCP49WJTWpgvoZM9XPNUfZSZqglWeHfteNivEBMCMD
JHreJzjf1XNCYvUB7DH0ruDC1ElAqohb/ZKUgydf/owwHNXye7iBh4CPGJtq/OpT
rS6LgyV12KDHJA623hNMxyWCyPCzvYzBtn0CZqRkNeQPGfs4Yao2bxVaOI5TAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUgzXDWiUkOPQtfYb6r52GUFJi/tAwHwYDVR0j
BBgwFoAU4v9JpibIszBYY3fStDmMvCT6WG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1l
S3QvMC9FMkZGNDlBNjI2QzhCMzMwNTg2Mzc3RDJCNDM5OENCQzI0RkE1ODZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyRkY0OUE2MjZDOEIzMzA1
ODYzNzdEMkI0Mzk4Q0JDMjRGQTU4NkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZdXBMQXB5RThwMWphQmFNUlZzVFdxcG9UZ1FKdGM0VVNUV2g2VmVtZUt0LzAv
MzIzODMwMzQzYTM1NjM2MjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM5MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEXLSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAP5NSDSjAWSxfsVxg8RuJWFKDn9VAxPjE99OeSv+pZgewJzksIq44boNm1
1jZdta0FvLLGYuJB7/QAl6T7MGogrZI6xk5jDcraj6EQeWzXwnkPpzAZDY7EPhu/
FW8ziHFFCeO91Nd9MFxVft52VU9Nwqgd4Or8DkPiG05MoF1hdn/I6+SQNPMz4MDl
AsUR51vfqwGY1sujkpQW1Gn1lPYi5t0qGpYE7jjR+kQr4xt6+9c7bgY/0Cv/z2O3
SRwR62hBJCJgUm+o210J0Ffxfvc1p9XC2vVhqziKTZ9U3inaXRZpbLRZNLesF7rN
V+2vQEnlfnd/7XpaHbf9f7cbwicz
-----END CERTIFICATE-----