Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33332d3333203d3e20323634323839.roa
File:                     323830343a323539343a3a2f33332d3333203d3e20323634323839.roa (raw, json)
Hash identifier:          /FJMrGJTpp9O/4Y+zviWMO69xgDtV9ezS8tI5tnQewU=
Subject key identifier:   7E:73:EA:2F:8E:E9:24:D1:5A:E7:25:D9:5D:BF:22:58:D2:60:7F:57
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       7F1CDFABF58918677FBCE3D39129FC7B6D2CAC96
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33332d3333203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 13:24:10 +0000
ROA not before:           Wed 12 Jul 2023 13:19:10 +0000
ROA not after:            Wed 10 Jul 2024 13:24:10 +0000
asID:                     264289
IP address blocks:        2804:2594::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1c:df:ab:f5:89:18:67:7f:bc:e3:d3:91:29:fc:7b:6d:2c:ac:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 13:19:10 2023 GMT
            Not After : Jul 10 13:24:10 2024 GMT
        Subject: CN=7E73EA2F8EE924D15AE725D95DBF2258D2607F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:2e:ea:cf:f4:22:43:96:95:d0:ed:92:e5:
                    14:63:fb:37:b9:34:2a:a3:c2:dc:e8:35:43:93:ca:
                    bb:1d:95:7f:6e:5c:93:89:0d:52:6f:cd:95:cc:12:
                    b4:26:e6:34:1c:49:ba:73:39:6c:30:30:39:f2:5e:
                    01:1b:9f:94:74:27:62:28:0f:9b:c7:75:b9:da:82:
                    ab:3d:bb:b8:61:55:92:cb:5f:81:18:10:cb:3c:2b:
                    30:6e:b7:c5:bd:a5:85:75:9a:f4:fc:25:aa:55:4f:
                    08:96:e5:8e:67:b1:46:56:93:c3:4b:fe:d3:c1:b1:
                    25:33:a0:c9:04:18:c2:7b:c0:0a:01:ba:b0:84:0c:
                    9b:c9:ab:9e:7b:00:b8:1e:21:20:65:62:cb:d7:71:
                    87:cd:82:01:9d:3d:c8:5f:f7:48:61:af:d0:bc:c4:
                    0a:1c:1b:c1:07:5d:46:09:f2:3f:bb:7f:ea:54:4e:
                    66:ad:27:df:9d:f0:c5:17:5c:55:a5:09:8f:00:9c:
                    23:cb:95:88:5c:22:b3:a0:27:3d:e4:99:0f:57:40:
                    75:7d:21:9d:07:15:f5:f1:47:51:42:a3:e7:83:76:
                    5d:2b:27:80:fd:8e:d6:9a:4a:82:92:8e:2d:89:d7:
                    25:5e:b9:fb:ad:86:99:a6:cb:2c:3a:db:f3:53:18:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:73:EA:2F:8E:E9:24:D1:5A:E7:25:D9:5D:BF:22:58:D2:60:7F:57
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33332d3333203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2594::/33

    Signature Algorithm: sha256WithRSAEncryption
         8b:67:89:f3:94:44:18:09:10:05:81:82:3c:49:f6:b5:a4:93:
         a2:d5:c9:81:73:4e:64:77:c6:1b:78:d3:26:53:1e:bd:4f:6d:
         78:c5:4c:2e:77:de:38:56:e2:7f:62:0e:ed:69:b8:18:55:61:
         d3:d0:a5:19:e1:26:36:f1:58:9d:b3:17:77:05:2b:42:54:cc:
         07:dc:50:33:b8:5b:3c:70:5b:d2:e5:4e:e3:36:79:f8:1b:1a:
         9f:6b:be:ee:e2:d8:62:30:47:b4:9f:f7:a6:da:8c:ef:8a:8b:
         06:6e:93:83:6c:18:55:1f:6b:af:14:0a:25:5d:14:69:28:58:
         08:43:b2:30:ee:c7:01:85:e7:95:93:fe:8d:df:e5:fc:47:2e:
         e7:d0:6c:5e:49:f4:86:73:12:97:17:97:6c:6a:7f:df:1c:66:
         05:66:3a:2a:5e:bb:58:a6:9e:65:96:4d:a8:b7:1b:93:c0:95:
         67:82:09:89:dc:60:15:61:68:61:ed:bf:85:4f:a6:31:6a:04:
         12:f2:bf:3c:05:11:e8:3f:a2:66:81:51:3f:ae:26:96:1c:84:
         a9:1f:2a:55:86:e1:ca:7a:0f:91:1a:fb:6b:86:c4:8b:8a:c0:
         c1:74:73:c3:56:03:fe:c1:d0:17:da:98:26:24:95:29:10:e1:
         50:36:ca:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfxzfq/WJGGd/vOPTkSn8e20srJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwOTk1MUFGRDcxNUI4NkQ2Qzc2MjlEODNCNkNFRkYw
NzJCQ0Y4MjAeFw0yMzA3MTIxMzE5MTBaFw0yNDA3MTAxMzI0MTBaMDMxMTAvBgNV
BAMTKDdFNzNFQTJGOEVFOTI0RDE1QUU3MjVEOTVEQkYyMjU4RDI2MDdGNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//y7qz/QiQ5aV0O2S5RRj+ze5
NCqjwtzoNUOTyrsdlX9uXJOJDVJvzZXMErQm5jQcSbpzOWwwMDnyXgEbn5R0J2Io
D5vHdbnagqs9u7hhVZLLX4EYEMs8KzBut8W9pYV1mvT8JapVTwiW5Y5nsUZWk8NL
/tPBsSUzoMkEGMJ7wAoBurCEDJvJq557ALgeISBlYsvXcYfNggGdPchf90hhr9C8
xAocG8EHXUYJ8j+7f+pUTmatJ9+d8MUXXFWlCY8AnCPLlYhcIrOgJz3kmQ9XQHV9
IZ0HFfXxR1FCo+eDdl0rJ4D9jtaaSoKSji2J1yVeufuthpmmyyw62/NTGIC5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfnPqL47pJNFa5yXZXb8iWNJgf1cwHwYDVR0j
BBgwFoAUYQmVGv1xW4bWx2Kdg7bO/wcrz4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEg2UjJLMkFwQmJieEMzbjdHemZCVnVGOGNiejlFelJhREpjSkM4NlhT
RGsvMC82MTA5OTUxQUZENzE1Qjg2RDZDNzYyOUQ4M0I2Q0VGRjA3MkJDRjgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxMDk5NTFBRkQ3MTVCODZE
NkM3NjI5RDgzQjZDRUZGMDcyQkNGODIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhINlIySzJBcEJiYnhDM243R3pmQlZ1RjhjYno5RXpSYURKY0pDODZYU0RrLzAv
MzIzODMwMzQzYTMyMzUzOTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzIzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQllAAwDQYJKoZIhvcNAQELBQADggEBAItnifOU
RBgJEAWBgjxJ9rWkk6LVyYFzTmR3xht40yZTHr1PbXjFTC533jhW4n9iDu1puBhV
YdPQpRnhJjbxWJ2zF3cFK0JUzAfcUDO4WzxwW9LlTuM2efgbGp9rvu7i2GIwR7Sf
96bajO+KiwZuk4NsGFUfa68UCiVdFGkoWAhDsjDuxwGF55WT/o3f5fxHLufQbF5J
9IZzEpcXl2xqf98cZgVmOipeu1imnmWWTai3G5PAlWeCCYncYBVhaGHtv4VPpjFq
BBLyvzwFEeg/omaBUT+uJpYchKkfKlWG4cp6D5Ea+2uGxIuKwMF0c8NWA/7B0Bfa
mCYklSkQ4VA2yv4=
-----END CERTIFICATE-----