Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa
File:                     323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (raw, json)
Hash identifier:          mIxiw9KKnCL+bW3wLaX/cAYKsEHBu7rxNB9iVWRPWFc=
Subject key identifier:   4D:1F:B3:3E:E1:AB:77:09:1C:87:2E:B8:7D:04:1A:CD:A7:D6:19:6E
Certificate issuer:       /CN=460A6F1BB25ED03CFA5414E7BCC18EA27A67886F
Certificate serial:       75452DBDCF851D1BDE5606D0A10C1DEADAA071D2
Authority key identifier: 46:0A:6F:1B:B2:5E:D0:3C:FA:54:14:E7:BC:C1:8E:A2:7A:67:88:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa
Signing time:             Tue 06 Feb 2024 13:09:33 +0000
ROA not before:           Tue 06 Feb 2024 13:04:33 +0000
ROA not after:            Tue 04 Feb 2025 13:09:33 +0000
asID:                     263142
IP address blocks:        2804:1760::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:45:2d:bd:cf:85:1d:1b:de:56:06:d0:a1:0c:1d:ea:da:a0:71:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460A6F1BB25ED03CFA5414E7BCC18EA27A67886F
        Validity
            Not Before: Feb  6 13:04:33 2024 GMT
            Not After : Feb  4 13:09:33 2025 GMT
        Subject: CN=4D1FB33EE1AB77091C872EB87D041ACDA7D6196E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:4b:e9:da:d1:b2:10:9a:50:7c:f4:2a:6e:
                    af:5e:fb:bc:33:9e:37:78:5f:27:c9:a4:11:6b:12:
                    b5:7b:73:6e:0b:d2:60:9d:2c:2e:a6:c7:ab:8c:ff:
                    c3:e3:1a:63:fe:73:64:f9:2c:13:29:64:ca:4f:25:
                    44:b0:61:75:cc:27:8d:51:cd:ad:c9:b9:e7:61:3c:
                    73:1b:fc:2d:ea:9a:14:16:23:08:ad:8d:eb:80:2c:
                    bc:87:35:44:04:cf:9a:4e:90:28:b1:5c:a2:07:ef:
                    0c:ee:10:99:3d:2f:4b:6e:9f:a6:48:cc:c3:e7:46:
                    17:05:f3:73:a6:4b:2c:27:46:38:cc:31:6a:25:51:
                    47:ea:ba:74:1b:54:4e:2d:0a:74:b9:58:ae:dd:10:
                    85:b8:c5:c3:da:7e:33:ea:86:4b:98:0f:d0:a9:45:
                    fe:f6:a9:70:42:15:c4:f0:2d:bf:46:9e:1f:4d:32:
                    bb:2e:77:f4:0a:ab:75:d8:2b:1c:f6:b7:a5:d8:58:
                    0e:19:49:48:18:a2:0f:e0:a4:57:c6:42:8c:5f:62:
                    0b:23:69:7b:a1:28:d5:cd:67:c7:8d:e1:40:c7:97:
                    f1:23:c1:9b:51:25:f0:9a:c7:fc:a2:88:22:9b:4f:
                    4e:ba:2d:e7:18:b9:79:4c:ee:4d:c5:a8:fd:14:da:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1F:B3:3E:E1:AB:77:09:1C:87:2E:B8:7D:04:1A:CD:A7:D6:19:6E
            X509v3 Authority Key Identifier:
                keyid:46:0A:6F:1B:B2:5E:D0:3C:FA:54:14:E7:BC:C1:8E:A2:7A:67:88:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1760::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:07:8c:28:56:38:43:db:1b:ea:64:67:79:f9:c8:2c:a8:
         d9:35:45:ff:0c:8c:63:8d:31:85:83:03:87:8b:52:57:f2:8e:
         f2:4a:33:48:9d:a0:3c:ed:e2:0e:3c:a0:eb:a0:03:ce:ba:fb:
         76:71:48:fc:42:73:f6:5f:33:a3:1c:4f:bf:15:39:27:e8:a9:
         c7:00:25:28:f3:2f:2e:3c:26:57:cf:ff:73:1d:59:d4:b5:eb:
         40:a9:5f:6f:9a:1c:a7:2c:bb:eb:98:3d:b6:a2:7a:f2:58:f4:
         19:a4:f3:31:74:0f:ae:8b:bf:27:33:b2:c1:d8:44:5b:c3:ff:
         49:84:dd:0e:a5:b5:36:f6:8b:d5:90:41:88:bb:f9:65:b1:a8:
         14:61:ec:15:88:d9:92:8e:65:65:01:37:45:fe:ba:d0:ab:bc:
         1e:09:0b:e1:3e:0e:f2:6c:64:66:c5:97:b1:25:55:17:d4:e9:
         81:03:42:df:64:23:0e:4b:e6:93:12:7a:e0:01:71:9f:09:b9:
         25:79:a1:2f:ce:77:49:74:81:7a:f5:50:a2:1a:3c:28:18:3f:
         79:d0:05:b1:ea:e9:e7:f9:8b:c0:ff:54:e3:65:d3:f2:4f:ed:
         3c:d5:1c:11:49:1e:79:a1:0c:24:d0:12:27:c4:6d:37:2c:5a:
         d4:e0:3c:b3
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdUUtvc+FHRveVgbQoQwd6tqgcdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwQTZGMUJCMjVFRDAzQ0ZBNTQxNEU3QkNDMThFQTI3
QTY3ODg2RjAeFw0yNDAyMDYxMzA0MzNaFw0yNTAyMDQxMzA5MzNaMDMxMTAvBgNV
BAMTKDREMUZCMzNFRTFBQjc3MDkxQzg3MkVCODdEMDQxQUNEQTdENjE5NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZgUvp2tGyEJpQfPQqbq9e+7wz
njd4XyfJpBFrErV7c24L0mCdLC6mx6uM/8PjGmP+c2T5LBMpZMpPJUSwYXXMJ41R
za3JuedhPHMb/C3qmhQWIwitjeuALLyHNUQEz5pOkCixXKIH7wzuEJk9L0tun6ZI
zMPnRhcF83OmSywnRjjMMWolUUfqunQbVE4tCnS5WK7dEIW4xcPafjPqhkuYD9Cp
Rf72qXBCFcTwLb9Gnh9NMrsud/QKq3XYKxz2t6XYWA4ZSUgYog/gpFfGQoxfYgsj
aXuhKNXNZ8eN4UDHl/EjwZtRJfCax/yiiCKbT066LecYuXlM7k3FqP0U2i7BAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUTR+zPuGrdwkchy64fQQazafWGW4wHwYDVR0j
BBgwFoAURgpvG7Je0Dz6VBTnvMGOonpniG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4
c1kvMC80NjBBNkYxQkIyNUVEMDNDRkE1NDE0RTdCQ0MxOEVBMjdBNjc4ODZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2MEE2RjFCQjI1RUQwM0NG
QTU0MTRFN0JDQzE4RUEyN0E2Nzg4NkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZU1FKQ1lKdmtLUXFQckJmZnhEd3FCR2VaOGlaTEh2eTdtOGlUNlFKeHNZLzAv
MzIzODMwMzQzYTMxMzczNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBdgMA0GCSqGSIb3DQEBCwUAA4IBAQBJjweM
KFY4Q9sb6mRnefnILKjZNUX/DIxjjTGFgwOHi1JX8o7ySjNInaA87eIOPKDroAPO
uvt2cUj8QnP2XzOjHE+/FTkn6KnHACUo8y8uPCZXz/9zHVnUtetAqV9vmhynLLvr
mD22onryWPQZpPMxdA+ui78nM7LB2ERbw/9JhN0OpbU29ovVkEGIu/llsagUYewV
iNmSjmVlATdF/rrQq7weCQvhPg7ybGRmxZexJVUX1OmBA0LfZCMOS+aTEnrgAXGf
CbkleaEvzndJdIF69VCiGjwoGD950AWx6unn+YvA/1TjZdPyT+081RwRSR55oQwk
0BInxG03LFrU4Dyz
-----END CERTIFICATE-----