Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/323830343a373339633a3a2f33322d3332203d3e20323730393236.roa
File:                     323830343a373339633a3a2f33322d3332203d3e20323730393236.roa (raw, json)
Hash identifier:          QsxM7nixcMYq320TnNfEQdaiAF4bE/koAdTCrCwhiic=
Subject key identifier:   69:99:06:29:D4:C6:BC:76:ED:A4:B0:FD:FE:80:2C:CB:98:D5:B1:E3
Certificate issuer:       /CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
Certificate serial:       76691C52DCC6C967D66A6295E43639241106E9FD
Authority key identifier: 4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/323830343a373339633a3a2f33322d3332203d3e20323730393236.roa
Signing time:             Sat 09 Mar 2024 21:53:17 +0000
ROA not before:           Sat 09 Mar 2024 21:48:17 +0000
ROA not after:            Sat 08 Mar 2025 21:53:17 +0000
asID:                     270926
IP address blocks:        2804:739c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:69:1c:52:dc:c6:c9:67:d6:6a:62:95:e4:36:39:24:11:06:e9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
        Validity
            Not Before: Mar  9 21:48:17 2024 GMT
            Not After : Mar  8 21:53:17 2025 GMT
        Subject: CN=69990629D4C6BC76EDA4B0FDFE802CCB98D5B1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:64:a9:f5:07:b7:91:b3:37:fb:15:b8:28:
                    c8:36:cb:ba:6c:ab:8e:ab:6a:ff:77:dc:35:72:7f:
                    f7:ea:78:df:ab:b7:e8:06:a6:e9:e6:c7:6d:43:b8:
                    ed:4f:db:37:b1:77:16:9e:93:e8:c1:39:09:a0:78:
                    d9:63:f5:0e:f4:85:50:63:fe:03:de:1c:55:de:ff:
                    51:54:a7:04:a7:56:d1:ae:db:6e:e8:e4:99:42:25:
                    70:99:3e:36:ce:cc:2a:05:75:00:b1:7b:9c:3c:03:
                    9d:5b:96:34:30:c9:45:0b:a7:58:27:77:81:f2:9d:
                    0f:a0:13:dc:b9:6e:c9:3f:c3:14:be:3c:91:51:1e:
                    d8:81:5b:31:eb:df:ff:7e:1a:af:8c:1f:55:fb:f2:
                    aa:22:85:40:2d:99:12:d4:15:88:d1:88:5c:55:9b:
                    cb:5e:22:ef:b8:8f:fc:aa:3c:bd:5b:d4:dd:b8:44:
                    bf:8b:b7:17:3e:ad:9e:35:0c:81:7f:d2:d8:72:61:
                    91:28:99:d4:6c:37:95:3c:8b:87:33:24:e8:ec:31:
                    79:23:46:e4:0e:1d:7d:3b:88:b3:95:f9:7c:b2:e8:
                    5a:8e:73:21:6d:8a:6d:f7:48:c8:64:5a:90:75:e3:
                    22:8e:60:c0:25:fc:f2:4c:75:9a:26:e1:79:6b:a9:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:99:06:29:D4:C6:BC:76:ED:A4:B0:FD:FE:80:2C:CB:98:D5:B1:E3
            X509v3 Authority Key Identifier:
                keyid:4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/323830343a373339633a3a2f33322d3332203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:739c::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:b8:7b:48:e9:99:42:48:75:94:87:81:29:a2:d4:5a:91:3d:
         e4:63:5e:60:e0:b4:cb:cb:36:66:2e:c4:6c:05:cc:dc:ea:3e:
         24:00:2b:4b:c6:da:47:0d:dc:9d:d4:8e:0c:fe:cd:69:7f:ee:
         64:83:36:b5:09:4c:a9:2f:85:d0:81:77:39:27:dd:a7:ac:a6:
         fe:69:b9:22:a5:b6:4c:99:36:ef:38:29:6e:e1:0f:85:2a:3f:
         d8:bd:d1:0c:b4:4b:b5:6f:24:5d:77:e8:0a:0a:4d:c5:d0:b0:
         02:dc:b1:75:74:8b:7d:05:69:a1:5d:11:e4:13:ac:83:11:01:
         bf:d1:62:39:29:7a:41:c1:e6:e4:a4:cb:49:4f:44:a3:74:9c:
         6a:c4:8e:b6:2e:5a:14:7d:a6:e6:88:78:d6:52:bf:8b:c5:12:
         45:12:7d:54:d3:fc:55:7c:6c:35:9e:22:d9:30:9e:35:0b:77:
         6a:29:b3:1c:2d:b7:cd:27:bf:27:f4:39:69:1e:53:5e:88:fb:
         99:4b:ce:66:35:bb:ee:d7:3d:d0:28:f9:88:30:c1:af:6f:57:
         1e:9d:8d:bc:e9:e1:bc:c8:5b:ba:de:77:13:4c:ac:c9:04:56:
         db:b4:45:1c:63:8b:42:37:cc:20:e3:b0:06:d6:a6:ab:08:bc:
         2d:5a:8e:89
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdmkcUtzGyWfWamKV5DY5JBEG6f0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMkE1MTEyOUE1NTQ3OTlGMzVBRUY2Njg4OUUwQ0Ez
QkY0QjFDMDAeFw0yNDAzMDkyMTQ4MTdaFw0yNTAzMDgyMTUzMTdaMDMxMTAvBgNV
BAMTKDY5OTkwNjI5RDRDNkJDNzZFREE0QjBGREZFODAyQ0NCOThENUIxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahmSp9Qe3kbM3+xW4KMg2y7ps
q46rav933DVyf/fqeN+rt+gGpunmx21DuO1P2zexdxaek+jBOQmgeNlj9Q70hVBj
/gPeHFXe/1FUpwSnVtGu227o5JlCJXCZPjbOzCoFdQCxe5w8A51bljQwyUULp1gn
d4HynQ+gE9y5bsk/wxS+PJFRHtiBWzHr3/9+Gq+MH1X78qoihUAtmRLUFYjRiFxV
m8teIu+4j/yqPL1b1N24RL+Ltxc+rZ41DIF/0thyYZEomdRsN5U8i4czJOjsMXkj
RuQOHX07iLOV+Xyy6FqOcyFtim33SMhkWpB14yKOYMAl/PJMdZom4XlrqWD7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUaZkGKdTGvHbtpLD9/oAsy5jVseMwHwYDVR0j
BBgwFoAUTMKlESmlVHmfNa72aIngyjv0scAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFpZUm5kQWFOUDZrNjVWUm9vdWpjU3BkaVk5cWJpdHlFZjNhTVd0VDY1
Y1MvMC80Q0MyQTUxMTI5QTU1NDc5OUYzNUFFRjY2ODg5RTBDQTNCRjRCMUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDQzJBNTExMjlBNTU0Nzk5
RjM1QUVGNjY4ODlFMENBM0JGNEIxQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhaWVJuZEFhTlA2azY1VlJvb3VqY1NwZGlZOXFiaXR5RWYzYU1XdFQ2NWNTLzAv
MzIzODMwMzQzYTM3MzMzOTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARznDANBgkqhkiG9w0BAQsFAAOCAQEAlbh7SOmZ
Qkh1lIeBKaLUWpE95GNeYOC0y8s2Zi7EbAXM3Oo+JAArS8baRw3cndSODP7NaX/u
ZIM2tQlMqS+F0IF3OSfdp6ym/mm5IqW2TJk27zgpbuEPhSo/2L3RDLRLtW8kXXfo
CgpNxdCwAtyxdXSLfQVpoV0R5BOsgxEBv9FiOSl6QcHm5KTLSU9Eo3ScasSOti5a
FH2m5oh41lK/i8USRRJ9VNP8VXxsNZ4i2TCeNQt3aimzHC23zSe/J/Q5aR5TXoj7
mUvOZjW77tc90Cj5iDDBr29XHp2NvOnhvMhbut53E0ysyQRW27RFHGOLQjfMIOOw
Btamqwi8LVqOiQ==
-----END CERTIFICATE-----