Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/323830343a353430343a3a2f33322d3437203d3e20323638363233.roa
File:                     323830343a353430343a3a2f33322d3437203d3e20323638363233.roa (raw, json)
Hash identifier:          dLvjFZj9I158Ee369TBG1DL6DuCPVQJxerzpEbsXYkY=
Subject key identifier:   4F:AE:22:48:68:84:E5:53:DE:90:96:AF:18:6F:2E:1F:41:10:27:B3
Certificate issuer:       /CN=6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD
Certificate serial:       04D23983736028AD4C820675385DC613F7885E
Authority key identifier: 6E:2F:9A:88:29:C8:EA:ED:36:9C:A9:36:BE:10:A0:36:D3:EC:EF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/323830343a353430343a3a2f33322d3437203d3e20323638363233.roa
Signing time:             Thu 11 Apr 2024 13:21:51 +0000
ROA not before:           Thu 11 Apr 2024 13:16:51 +0000
ROA not after:            Thu 10 Apr 2025 13:21:51 +0000
asID:                     268623
IP address blocks:        2804:5404::/32 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d2:39:83:73:60:28:ad:4c:82:06:75:38:5d:c6:13:f7:88:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD
        Validity
            Not Before: Apr 11 13:16:51 2024 GMT
            Not After : Apr 10 13:21:51 2025 GMT
        Subject: CN=4FAE22486884E553DE9096AF186F2E1F411027B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:72:62:4c:cb:a0:31:80:6a:34:6c:b2:fe:
                    39:4e:3d:7a:64:74:e0:f2:ee:d8:05:63:d3:50:60:
                    6e:62:4a:ff:eb:53:c3:b1:a0:5a:e9:26:09:1d:b5:
                    88:2c:e1:e2:fc:c0:80:42:ef:19:1c:1f:d2:3f:a7:
                    12:09:fe:6a:bd:0b:fb:0d:15:0e:30:77:26:d2:65:
                    23:f7:29:13:73:11:83:43:70:b2:9b:f0:76:cd:05:
                    8d:71:a8:61:3d:f9:4b:04:30:3c:a7:3e:31:fc:d0:
                    06:4d:35:7b:70:e3:45:ff:1b:94:50:6a:92:6c:6a:
                    52:db:a4:90:0d:ff:e5:02:fb:69:99:86:54:50:c1:
                    85:51:1d:8d:ec:3f:31:90:c7:d3:a7:60:8e:e9:5a:
                    99:eb:3c:01:3d:5b:cf:e1:cd:ad:fb:e3:2d:b9:b0:
                    af:a3:35:1a:f8:06:33:76:db:a6:27:0e:65:47:4c:
                    9e:e5:6a:58:bf:7e:6c:e7:ba:fd:bc:b5:11:1e:a6:
                    c3:55:16:36:42:b8:76:b4:da:74:26:4d:90:15:31:
                    1e:1b:4d:ab:d8:c1:68:80:5b:1a:34:5f:1f:b9:23:
                    18:60:79:b5:b6:e6:68:2b:47:d5:d2:12:d3:b0:d6:
                    66:4d:f4:9b:5b:f9:05:c1:bc:fb:26:d1:a4:0e:b4:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AE:22:48:68:84:E5:53:DE:90:96:AF:18:6F:2E:1F:41:10:27:B3
            X509v3 Authority Key Identifier:
                keyid:6E:2F:9A:88:29:C8:EA:ED:36:9C:A9:36:BE:10:A0:36:D3:EC:EF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/323830343a353430343a3a2f33322d3437203d3e20323638363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5404::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:9f:29:f6:c8:d7:25:b6:bf:10:4d:03:1e:51:53:bd:e9:
         35:56:95:00:7c:e9:01:e1:4b:f6:b2:fc:13:85:e0:04:0c:70:
         ce:fc:7d:4a:56:3a:f5:f6:18:9a:68:84:bf:99:52:65:ba:96:
         e4:44:b7:ce:b7:c5:42:65:cc:03:69:52:46:1a:9a:ae:a5:9b:
         27:06:53:30:ed:48:63:6c:c7:23:39:fe:c8:7d:e7:38:3b:3a:
         bf:89:77:9e:f8:0e:71:1c:80:91:79:0b:1a:4a:51:48:fb:ea:
         47:4b:e9:30:31:71:4a:3e:b9:a8:0a:14:12:80:99:00:4f:85:
         3b:68:cc:6c:27:68:9f:a0:c3:52:78:9d:d2:88:59:7c:3f:80:
         eb:45:5d:1b:67:ea:88:04:02:fb:a4:49:1d:7d:5f:89:0f:a5:
         6e:91:50:4c:48:96:df:00:ae:0e:d9:1c:60:68:44:8c:df:cc:
         fe:d9:dd:81:d0:91:db:80:2e:3e:71:41:26:30:c5:38:bb:3a:
         7d:58:f9:67:c1:08:64:5c:1d:f2:5a:54:9a:d2:c9:93:b0:2a:
         f9:4f:26:18:50:7f:cb:6c:3d:dc:37:29:2a:ed:5b:ab:e4:b0:
         dc:79:fd:81:bf:84:c3:03:6e:5b:63:80:f1:ae:58:70:b9:b2:
         52:39:51:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgITBNI5g3NgKK1MggZ1OF3GE/eIXjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2RTJGOUE4ODI5QzhFQUVEMzY5Q0E5MzZCRTEwQTAzNkQz
RUNFRkJEMB4XDTI0MDQxMTEzMTY1MVoXDTI1MDQxMDEzMjE1MVowMzExMC8GA1UE
AxMoNEZBRTIyNDg2ODg0RTU1M0RFOTA5NkFGMTg2RjJFMUY0MTEwMjdCMzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2XcmJMy6AxgGo0bLL+OU49emR0
4PLu2AVj01BgbmJK/+tTw7GgWukmCR21iCzh4vzAgELvGRwf0j+nEgn+ar0L+w0V
DjB3JtJlI/cpE3MRg0Nwspvwds0FjXGoYT35SwQwPKc+MfzQBk01e3DjRf8blFBq
kmxqUtukkA3/5QL7aZmGVFDBhVEdjew/MZDH06dgjulames8AT1bz+HNrfvjLbmw
r6M1GvgGM3bbpicOZUdMnuVqWL9+bOe6/by1ER6mw1UWNkK4drTadCZNkBUxHhtN
q9jBaIBbGjRfH7kjGGB5tbbmaCtH1dIS07DWZk30m1v5BcG8+ybRpA60kLsCAwEA
AaOCAlAwggJMMB0GA1UdDgQWBBRPriJIaITlU96Qlq8Yby4fQRAnszAfBgNVHSME
GDAWgBRuL5qIKcjq7TacqTa+EKA20+zvvTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84alA0ekthd0g0Z2ttb3c0NGt1aW9GcGhxVkFKMzYxTFFwNmp5eWN2TEZj
by8xLzZFMkY5QTg4MjlDOEVBRUQzNjlDQTkzNkJFMTBBMDM2RDNFQ0VGQkQuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNkUyRjlBODgyOUM4RUFFRDM2
OUNBOTM2QkUxMEEwMzZEM0VDRUZCRC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGpQNHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxGY28vMS8z
MjM4MzAzNDNhMzUzNDMwMzQzYTNhMmYzMzMyMmQzNDM3MjAzZDNlMjAzMjM2Mzgz
NjMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBFQEMA0GCSqGSIb3DQEBCwUAA4IBAQCOzZ8p9sjX
Jba/EE0DHlFTvek1VpUAfOkB4Uv2svwTheAEDHDO/H1KVjr19hiaaIS/mVJlupbk
RLfOt8VCZcwDaVJGGpqupZsnBlMw7UhjbMcjOf7Ifec4Ozq/iXee+A5xHICReQsa
SlFI++pHS+kwMXFKPrmoChQSgJkAT4U7aMxsJ2ifoMNSeJ3SiFl8P4DrRV0bZ+qI
BAL7pEkdfV+JD6VukVBMSJbfAK4O2RxgaESM38z+2d2B0JHbgC4+cUEmMMU4uzp9
WPlnwQhkXB3yWlSa0smTsCr5TyYYUH/LbD3cNykq7Vur5LDcef2Bv4TDA25bY4Dx
rlhwubJSOVFH
-----END CERTIFICATE-----