Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/323830343a363935343a3a2f33322d313238203d3e20323730323633.roa
File:                     323830343a363935343a3a2f33322d313238203d3e20323730323633.roa (raw, json)
Hash identifier:          MVe6aLIRrCZ1c/UkNQkhjiLy3zonxe0bpy112z7rpMg=
Subject key identifier:   BB:18:D7:5D:ED:CB:E3:33:67:C8:72:E3:CF:35:7F:4F:34:DB:70:72
Certificate issuer:       /CN=7B688C41F3A6BB806F255EA1032B8DA1525EAA71
Certificate serial:       4FCFE9F82CBBFBE3044AFA3982019D6FE96C96B2
Authority key identifier: 7B:68:8C:41:F3:A6:BB:80:6F:25:5E:A1:03:2B:8D:A1:52:5E:AA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/323830343a363935343a3a2f33322d313238203d3e20323730323633.roa
Signing time:             Fri 16 Feb 2024 18:15:28 +0000
ROA not before:           Fri 16 Feb 2024 18:10:28 +0000
ROA not after:            Fri 14 Feb 2025 18:15:28 +0000
asID:                     270263
IP address blocks:        2804:6954::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cf:e9:f8:2c:bb:fb:e3:04:4a:fa:39:82:01:9d:6f:e9:6c:96:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B688C41F3A6BB806F255EA1032B8DA1525EAA71
        Validity
            Not Before: Feb 16 18:10:28 2024 GMT
            Not After : Feb 14 18:15:28 2025 GMT
        Subject: CN=BB18D75DEDCBE33367C872E3CF357F4F34DB7072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:0d:ba:5a:35:e5:d7:69:14:78:5b:4a:b3:
                    cb:7f:88:74:1c:d4:a3:d5:9e:f9:24:84:40:bf:4f:
                    58:62:f4:4c:fe:44:b4:c9:7b:a7:fb:0d:2a:17:a7:
                    81:59:d4:e1:47:e7:29:1a:eb:d7:95:61:f4:1e:31:
                    6d:9b:8b:20:27:92:85:e6:19:21:56:68:1f:15:a4:
                    ce:e9:a3:21:91:e2:a2:51:56:95:a6:d7:08:85:48:
                    b6:38:6d:75:c1:c2:5c:7e:9d:4f:3b:a1:05:8e:d0:
                    ef:e4:15:c8:e2:85:14:e9:fe:47:f0:8a:a4:31:3a:
                    b5:88:44:29:e7:ca:a5:f3:ec:9b:7a:57:b5:74:6c:
                    aa:d8:d5:42:fc:93:c4:0f:7f:84:c1:bd:2e:cd:20:
                    02:3d:04:04:05:24:41:81:5e:3e:b3:7c:4b:86:7b:
                    d6:6e:f7:48:ff:8a:b9:ea:1a:36:4f:e0:9c:c5:21:
                    56:f1:d7:f2:e6:7f:75:31:6c:de:db:a7:7f:0c:1a:
                    7a:92:d8:77:06:1d:88:84:a3:88:0b:2b:06:79:80:
                    bd:75:57:2b:83:f1:71:60:cd:80:53:63:59:5a:95:
                    81:43:78:51:96:cc:4c:8b:74:0b:c4:d5:70:52:e2:
                    19:70:96:f0:a9:4b:57:d8:d8:cf:b1:22:d5:94:87:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:18:D7:5D:ED:CB:E3:33:67:C8:72:E3:CF:35:7F:4F:34:DB:70:72
            X509v3 Authority Key Identifier:
                keyid:7B:68:8C:41:F3:A6:BB:80:6F:25:5E:A1:03:2B:8D:A1:52:5E:AA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/323830343a363935343a3a2f33322d313238203d3e20323730323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6954::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:50:1b:60:99:e4:fd:d2:20:76:4b:e7:24:4e:10:ef:65:68:
         4f:17:d3:1d:60:11:4f:4a:1a:65:a5:9f:84:21:f2:d0:93:c8:
         71:91:ae:40:af:8d:a8:fb:23:0c:bd:4f:3a:79:7b:5a:0e:59:
         33:07:e7:07:ed:b5:f0:43:cf:dd:1e:2c:09:6e:9d:95:b8:11:
         bb:8b:af:1b:87:05:23:ec:fb:69:92:88:15:be:42:df:5c:7e:
         2d:b8:ce:01:45:58:95:f1:f7:2f:08:1e:9b:dd:65:19:d9:ad:
         e8:fc:d4:02:08:a6:15:48:aa:76:dc:94:d8:b7:23:1c:85:87:
         7f:4f:a2:d6:91:9c:af:7d:1c:b7:a5:26:0d:4f:cf:45:18:c7:
         41:9b:b6:69:d7:6d:13:67:3c:38:61:0f:a9:9b:d9:24:a5:22:
         2b:94:f5:31:1d:17:f8:32:0e:88:c0:c0:ed:ca:30:cf:4b:61:
         31:63:5d:5d:28:0e:51:9c:63:99:a6:e1:71:53:71:52:0d:7b:
         b1:c6:a1:ab:a0:87:26:74:3f:9d:ee:41:12:3c:01:35:b0:b6:
         22:c0:28:b0:ae:16:28:34:f8:7e:31:45:5d:72:03:b2:e8:9f:
         06:c8:6b:30:89:a5:f9:34:30:f1:b3:16:6f:d6:1d:de:a1:12:
         24:6c:b6:3b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUT8/p+Cy7++MESvo5ggGdb+lslrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I2ODhDNDFGM0E2QkI4MDZGMjU1RUExMDMyQjhEQTE1
MjVFQUE3MTAeFw0yNDAyMTYxODEwMjhaFw0yNTAyMTQxODE1MjhaMDMxMTAvBgNV
BAMTKEJCMThENzVERURDQkUzMzM2N0M4NzJFM0NGMzU3RjRGMzREQjcwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZA26WjXl12kUeFtKs8t/iHQc
1KPVnvkkhEC/T1hi9Ez+RLTJe6f7DSoXp4FZ1OFH5yka69eVYfQeMW2biyAnkoXm
GSFWaB8VpM7poyGR4qJRVpWm1wiFSLY4bXXBwlx+nU87oQWO0O/kFcjihRTp/kfw
iqQxOrWIRCnnyqXz7Jt6V7V0bKrY1UL8k8QPf4TBvS7NIAI9BAQFJEGBXj6zfEuG
e9Zu90j/irnqGjZP4JzFIVbx1/Lmf3UxbN7bp38MGnqS2HcGHYiEo4gLKwZ5gL11
VyuD8XFgzYBTY1lalYFDeFGWzEyLdAvE1XBS4hlwlvCpS1fY2M+xItWUh3HbAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUuxjXXe3L4zNnyHLjzzV/TzTbcHIwHwYDVR0j
BBgwFoAUe2iMQfOmu4BvJV6hAyuNoVJeqnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODM4Y0RQd1lKRVpLYkdqTFNvQTg4eHdSQzdZOU51dFJ0bkx2VjFaVUpt
engvMC83QjY4OEM0MUYzQTZCQjgwNkYyNTVFQTEwMzJCOERBMTUyNUVBQTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdCNjg4QzQxRjNBNkJCODA2
RjI1NUVBMTAzMkI4REExNTI1RUFBNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgzOGNEUHdZSkVaS2JHakxTb0E4OHh3UkM3WTlOdXRSdG5MdlYxWlVKbXp4LzAv
MzIzODMwMzQzYTM2MzkzNTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGlUMA0GCSqGSIb3DQEBCwUAA4IBAQCCUBtg
meT90iB2S+ckThDvZWhPF9MdYBFPShplpZ+EIfLQk8hxka5Ar42o+yMMvU86eXta
DlkzB+cH7bXwQ8/dHiwJbp2VuBG7i68bhwUj7PtpkogVvkLfXH4tuM4BRViV8fcv
CB6b3WUZ2a3o/NQCCKYVSKp23JTYtyMchYd/T6LWkZyvfRy3pSYNT89FGMdBm7Zp
120TZzw4YQ+pm9kkpSIrlPUxHRf4Mg6IwMDtyjDPS2ExY11dKA5RnGOZpuFxU3FS
DXuxxqGroIcmdD+d7kESPAE1sLYiwCiwrhYoNPh+MUVdcgOy6J8GyGswiaX5NDDx
sxZv1h3eoRIkbLY7
-----END CERTIFICATE-----