Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3230623a3a2f34382d3438203d3e20323635313831.roa
File:                     323830343a326264633a3230623a3a2f34382d3438203d3e20323635313831.roa (raw, json)
Hash identifier:          IugQjBHtSuO85tRTTasrfS96JD1N1qvDFejzOXw6Qxw=
Subject key identifier:   E2:30:1A:61:CD:3D:25:23:3B:20:BF:89:4E:EB:C9:EF:09:48:FA:10
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       2BD9BA663931B101A34B2B005F753226D11F30D1
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3230623a3a2f34382d3438203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:15:38 +0000
ROA not before:           Fri 02 Feb 2024 00:10:38 +0000
ROA not after:            Fri 31 Jan 2025 00:15:38 +0000
asID:                     265181
IP address blocks:        2804:2bdc:20b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d9:ba:66:39:31:b1:01:a3:4b:2b:00:5f:75:32:26:d1:1f:30:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:10:38 2024 GMT
            Not After : Jan 31 00:15:38 2025 GMT
        Subject: CN=E2301A61CD3D25233B20BF894EEBC9EF0948FA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:45:35:24:7a:8e:09:e6:f1:7c:86:a6:c2:
                    4f:86:9b:da:11:b4:6d:03:33:c3:52:f4:c8:9c:d0:
                    63:3d:da:10:f0:a4:bd:2d:fe:e4:64:ea:e0:ac:67:
                    07:33:ea:0c:77:aa:dc:90:94:92:c6:68:84:e4:94:
                    09:37:37:d5:1d:00:a2:04:6b:19:83:f3:0b:84:b2:
                    55:f1:cc:c0:77:45:83:75:0f:28:88:96:de:02:69:
                    4b:e1:1e:f3:52:bd:12:79:c3:14:fe:8d:3c:b4:f9:
                    2b:b1:be:72:cd:e3:43:75:42:2c:57:66:19:8a:07:
                    6c:80:30:95:d6:a4:d1:c9:1b:55:92:3e:32:f0:e0:
                    87:3e:2a:6c:21:b6:87:e5:3c:bf:4c:86:1c:50:46:
                    f4:b9:73:e2:fc:2c:4a:e2:ca:88:86:7b:e6:33:48:
                    d8:61:1a:e8:b8:24:cf:85:38:31:a9:02:13:d5:90:
                    26:47:08:e0:98:73:cf:f4:04:01:f8:aa:18:bb:73:
                    bb:9b:b2:0e:4d:46:34:57:e4:f2:1f:87:7d:7e:da:
                    3a:d8:b6:d9:91:a1:c0:b4:b4:26:dd:0c:fc:42:e1:
                    82:14:98:ae:3e:6b:76:66:0d:b6:33:78:66:09:c1:
                    bf:68:89:9a:6c:e5:47:09:47:e6:60:67:39:d2:dd:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:30:1A:61:CD:3D:25:23:3B:20:BF:89:4E:EB:C9:EF:09:48:FA:10
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3230623a3a2f34382d3438203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:20b::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:c1:d2:06:55:97:5e:c3:b3:0a:28:97:eb:92:b0:d6:dd:6d:
         0b:a9:71:44:9b:c1:bf:f0:5d:05:7d:9d:5b:c2:f0:89:54:42:
         33:d5:05:e6:ac:1c:31:4b:56:ed:74:4b:77:15:07:f5:7e:0b:
         02:cd:8e:38:43:18:73:c9:bf:ee:58:56:29:77:26:0e:58:60:
         59:e2:4d:06:f5:d9:21:a2:fc:02:99:08:30:47:2f:ae:bb:a6:
         9e:f3:09:a3:13:cb:ef:6b:2c:6d:b6:67:f9:fd:df:f8:4f:5f:
         f7:16:2e:3a:e5:97:ac:af:e0:28:93:d3:59:3f:d6:8a:0d:cf:
         04:21:fd:67:47:96:25:22:0f:ca:fc:15:5b:08:8b:c4:e0:b2:
         79:f2:ff:92:41:ea:7d:5a:24:d6:04:54:f4:11:b0:55:94:37:
         9c:e5:ab:f7:6b:44:58:ab:60:f2:5a:70:19:d7:a6:2f:4b:8d:
         d6:c2:d6:c7:a5:b5:df:e2:9b:88:49:5d:4c:be:c2:02:e5:31:
         21:c4:db:c6:8d:55:e3:e4:8b:e5:49:e8:26:ad:01:03:84:43:
         d1:b3:eb:69:69:c1:bd:85:e6:2a:2d:46:b4:9b:b4:84:b4:b6:
         4b:4c:48:5d:f0:76:0b:b8:f0:12:bb:f2:53:d5:19:11:f5:a3:
         0f:1b:4a:6f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUK9m6ZjkxsQGjSysAX3UyJtEfMNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYyMjIzQkNBNDRENEU2QUJDRjg2QjBGQUExNzM0QzAz
N0IxMTQ0NTAeFw0yNDAyMDIwMDEwMzhaFw0yNTAxMzEwMDE1MzhaMDMxMTAvBgNV
BAMTKEUyMzAxQTYxQ0QzRDI1MjMzQjIwQkY4OTRFRUJDOUVGMDk0OEZBMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/UU1JHqOCebxfIamwk+Gm9oR
tG0DM8NS9Mic0GM92hDwpL0t/uRk6uCsZwcz6gx3qtyQlJLGaITklAk3N9UdAKIE
axmD8wuEslXxzMB3RYN1DyiIlt4CaUvhHvNSvRJ5wxT+jTy0+SuxvnLN40N1QixX
ZhmKB2yAMJXWpNHJG1WSPjLw4Ic+KmwhtoflPL9MhhxQRvS5c+L8LEriyoiGe+Yz
SNhhGui4JM+FODGpAhPVkCZHCOCYc8/0BAH4qhi7c7ubsg5NRjRX5PIfh31+2jrY
ttmRocC0tCbdDPxC4YIUmK4+a3ZmDbYzeGYJwb9oiZps5UcJR+ZgZznS3VWlAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU4jAaYc09JSM7IL+JTuvJ7wlI+hAwHwYDVR0j
BBgwFoAU1iIjvKRNTmq8+GsPqhc0wDexFEUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtoNG9Ma2RDS2JLYXE1Z3VrTWhLZFR3c21pb1JHdjVKTWNUWnN0U0x5
d3cvMC9ENjIyMjNCQ0E0NEQ0RTZBQkNGODZCMEZBQTE3MzRDMDM3QjExNDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2MjIyM0JDQTQ0RDRFNkFC
Q0Y4NkIwRkFBMTczNEMwMzdCMTE0NDUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhraDRvTGtkQ0tiS2FxNWd1a01oS2RUd3NtaW9SR3Y1Sk1jVFpzdFNMeXd3LzAv
MzIzODMwMzQzYTMyNjI2NDYzM2EzMjMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzUzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCvcAgswDQYJKoZIhvcNAQELBQAD
ggEBAGDB0gZVl17Dswool+uSsNbdbQupcUSbwb/wXQV9nVvC8IlUQjPVBeasHDFL
Vu10S3cVB/V+CwLNjjhDGHPJv+5YVil3Jg5YYFniTQb12SGi/AKZCDBHL667pp7z
CaMTy+9rLG22Z/n93/hPX/cWLjrll6yv4CiT01k/1ooNzwQh/WdHliUiD8r8FVsI
i8Tgsnny/5JB6n1aJNYEVPQRsFWUN5zlq/drRFirYPJacBnXpi9LjdbC1seltd/i
m4hJXUy+wgLlMSHE28aNVePki+VJ6CatAQOEQ9Gz62lpwb2F5iotRrSbtIS0tktM
SF3wdgu48BK78lPVGRH1ow8bSm8=
-----END CERTIFICATE-----