Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/0/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa
File:                     323830343a323730303a3a2f33322d3335203d3e20323633383639.roa (raw, json)
Hash identifier:          eUO9BCszQ7KybPQv/qQf1lARjBF5l7BxV+xbk62Ty7A=
Subject key identifier:   0D:E7:CB:C2:D8:F7:BF:F4:F2:77:9B:D5:0E:4D:C1:A0:DC:FA:3D:CD
Certificate issuer:       /CN=70060F52A42F07BEE6FBE76F1922D47B9DABA070
Certificate serial:       27C2B9B622F77B906ABC52EE76A6420A95BFF1A1
Authority key identifier: 70:06:0F:52:A4:2F:07:BE:E6:FB:E7:6F:19:22:D4:7B:9D:AB:A0:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70060F52A42F07BEE6FBE76F1922D47B9DABA070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/0/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa
Signing time:             Wed 18 Oct 2023 18:00:00 +0000
ROA not before:           Wed 18 Oct 2023 17:55:00 +0000
ROA not after:            Wed 16 Oct 2024 18:00:00 +0000
asID:                     263869
IP address blocks:        2804:2700::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c2:b9:b6:22:f7:7b:90:6a:bc:52:ee:76:a6:42:0a:95:bf:f1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70060F52A42F07BEE6FBE76F1922D47B9DABA070
        Validity
            Not Before: Oct 18 17:55:00 2023 GMT
            Not After : Oct 16 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:55:95:aa:25:7f:fe:f6:60:87:36:3e:75:
                    4b:79:88:40:2e:5b:4f:1a:78:cf:66:35:b1:20:c8:
                    62:0d:ef:c3:11:95:8d:40:0d:25:48:a6:0e:50:15:
                    d1:5c:8a:9e:bb:ef:01:20:3d:77:93:06:af:69:ed:
                    14:88:9e:07:66:18:a3:85:c3:ab:93:ba:09:c1:05:
                    d7:53:42:f9:c3:77:3d:2a:8e:a6:a2:c4:af:e7:1d:
                    d7:a3:38:e4:31:eb:2e:32:ea:45:30:d7:a9:42:99:
                    f7:97:a6:00:bd:2c:5f:d6:da:1b:84:5e:a0:53:15:
                    b3:e1:93:13:82:d6:2e:4b:17:36:9f:57:80:0e:eb:
                    3b:f2:de:f0:a3:9c:d1:db:91:c4:e1:37:9f:91:20:
                    ce:97:24:d1:88:02:19:f7:ee:44:ca:f1:c4:bb:2d:
                    aa:e1:5c:e8:d5:18:c7:dc:76:7d:a0:ae:7f:1b:10:
                    bc:fb:c6:20:33:8f:54:f4:a7:0f:b9:5f:ba:98:5c:
                    ec:3c:59:76:43:e5:dc:09:50:99:d9:31:c6:dc:71:
                    19:de:dd:4f:5d:52:6a:85:6f:56:39:7e:21:ea:12:
                    ce:21:7f:74:6d:6d:5d:8a:84:78:42:a1:9a:9f:df:
                    e4:31:fd:96:b3:f9:53:fb:ea:33:f4:19:22:9f:74:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E7:CB:C2:D8:F7:BF:F4:F2:77:9B:D5:0E:4D:C1:A0:DC:FA:3D:CD
            X509v3 Authority Key Identifier:
                keyid:70:06:0F:52:A4:2F:07:BE:E6:FB:E7:6F:19:22:D4:7B:9D:AB:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/0/70060F52A42F07BEE6FBE76F1922D47B9DABA070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70060F52A42F07BEE6FBE76F1922D47B9DABA070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/0/323830343a323730303a3a2f33322d3335203d3e20323633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2700::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:e0:4e:12:28:4a:d4:55:da:ef:00:f3:fe:23:79:86:ef:98:
         c9:9c:de:bd:5d:6f:77:d4:be:17:8e:a4:3b:46:ef:d1:61:df:
         2d:0a:d7:de:85:e2:eb:ba:9a:0a:0a:5c:06:35:9c:f5:fb:8b:
         c5:00:50:49:26:d8:68:10:4b:64:f7:07:0f:c9:fd:f6:d3:d3:
         39:39:6e:1f:6b:12:bd:0f:f8:b2:e3:5d:f4:14:d9:82:98:b4:
         61:13:21:74:76:e7:d4:f7:41:32:94:16:f5:70:87:3d:7d:8f:
         4c:d0:8f:65:9a:76:50:e8:35:64:77:54:1d:fe:6e:99:15:7b:
         28:9a:03:89:05:40:09:38:6d:99:1a:56:6d:be:e7:34:75:f1:
         ac:af:ce:9a:61:c7:33:a2:8a:91:04:f9:8f:01:66:f2:88:fd:
         2a:0d:30:1a:1c:5b:f5:6e:22:3c:8f:37:cd:dc:a5:a7:52:38:
         99:30:24:92:87:00:d6:1d:92:b9:1c:7a:42:4a:d9:9c:17:0a:
         c1:7a:22:b0:f3:95:97:eb:69:ec:9f:3c:4a:ab:64:f0:c1:47:
         e7:18:b5:40:aa:13:7a:b8:0b:e4:5b:de:60:dc:a7:7b:27:aa:
         79:01:d4:18:9e:9e:77:77:46:13:59:a2:b6:d8:b6:94:05:bb:
         56:da:59:0d
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUJ8K5tiL3e5BqvFLudqZCCpW/8aEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAwNjBGNTJBNDJGMDdCRUU2RkJFNzZGMTkyMkQ0N0I5
REFCQTA3MDAeFw0yMzEwMTgxNzU1MDBaFw0yNDEwMTYxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQURCMzU1OTVBQTI1N0ZGRUY2
NjA4NzM2M0U3NTRCNzk4ODQwMkU1QjRGMUE3OENGNjYzNUIxMjBDODYyMERFRkMz
MTE5NThENDAwRDI1NDhBNjBFNTAxNUQxNUM4QTlFQkJFRjAxMjAzRDc3OTMwNkFG
NjlFRDE0ODg5RTA3NjYxOEEzODVDM0FCOTNCQTA5QzEwNUQ3NTM0MkY5QzM3NzNE
MkE4RUE2QTJDNEFGRTcxREQ3QTMzOEU0MzFFQjJFMzJFQTQ1MzBEN0E5NDI5OUY3
OTdBNjAwQkQyQzVGRDZEQTFCODQ1RUEwNTMxNUIzRTE5MzEzODJENjJFNEIxNzM2
OUY1NzgwMEVFQjNCRjJERUYwQTM5Q0QxREI5MUM0RTEzNzlGOTEyMENFOTcyNEQx
ODgwMjE5RjdFRTQ0Q0FGMUM0QkIyREFBRTE1Q0U4RDUxOEM3REM3NjdEQTBBRTdG
MUIxMEJDRkJDNjIwMzM4RjU0RjRBNzBGQjk1RkJBOTg1Q0VDM0M1OTc2NDNFNURD
MDk1MDk5RDkzMUM2REM3MTE5REVERDRGNUQ1MjZBODU2RjU2Mzk3RTIxRUExMkNF
MjE3Rjc0NkQ2RDVEOEE4NDc4NDJBMTlBOUZERkU0MzFGRDk2QjNGOTUzRkJFQTMz
RjQxOTIyOUY3NDNCMjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArbNVlaolf/72YIc2PnVLeYhALltPGnjPZjWxIMhiDe/DEZWNQA0l
SKYOUBXRXIqeu+8BID13kwavae0UiJ4HZhijhcOrk7oJwQXXU0L5w3c9Ko6mosSv
5x3XozjkMesuMupFMNepQpn3l6YAvSxf1tobhF6gUxWz4ZMTgtYuSxc2n1eADus7
8t7wo5zR25HE4TefkSDOlyTRiAIZ9+5EyvHEuy2q4Vzo1RjH3HZ9oK5/GxC8+8Yg
M49U9KcPuV+6mFzsPFl2Q+XcCVCZ2THG3HEZ3t1PXVJqhW9WOX4h6hLOIX90bW1d
ioR4QqGan9/kMf2Ws/lT++oz9Bkin3Q7JQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FA3ny8LY97/08neb1Q5NwaDc+j3NMB8GA1UdIwQYMBaAFHAGD1KkLwe+5vvnbxki
1Hudq6BwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdoeVRyTENZYjFFRDdz
NllxOFpRNml2SlNXM1BoaENaeVJGWEZSWW5ZcENlLzAvNzAwNjBGNTJBNDJGMDdC
RUU2RkJFNzZGMTkyMkQ0N0I5REFCQTA3MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83MDA2MEY1MkE0MkYwN0JFRTZGQkU3NkYxOTIyRDQ3QjlEQUJB
MDcwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83aHlUckxDWWIxRUQ3czZZcTha
UTZpdkpTVzNQaGhDWnlSRlhGUlluWXBDZS8wLzMyMzgzMDM0M2EzMjM3MzAzMDNh
M2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzMzM4MzYzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
JwAwDQYJKoZIhvcNAQELBQADggEBAGPgThIoStRV2u8A8/4jeYbvmMmc3r1db3fU
vheOpDtG79Fh3y0K196F4uu6mgoKXAY1nPX7i8UAUEkm2GgQS2T3Bw/J/fbT0zk5
bh9rEr0P+LLjXfQU2YKYtGETIXR259T3QTKUFvVwhz19j0zQj2WadlDoNWR3VB3+
bpkVeyiaA4kFQAk4bZkaVm2+5zR18ayvzpphxzOiipEE+Y8BZvKI/SoNMBocW/Vu
IjyPN83cpadSOJkwJJKHANYdkrkcekJK2ZwXCsF6IrDzlZfraeyfPEqrZPDBR+cY
tUCqE3q4C+Rb3mDcp3snqnkB1Biennd3RhNZorbYtpQFu1baWQ0=
-----END CERTIFICATE-----