Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a3a2f33322d3332203d3e20323638353736.roa
File:                     323830343a353335303a3a2f33322d3332203d3e20323638353736.roa (raw, json)
Hash identifier:          tl3s0PIQksSOOpw5/YgOPIAZR2V0lWkJY7x8vwNxfLw=
Subject key identifier:   02:4D:EF:1D:95:9E:05:D0:F5:D7:D3:F5:33:C7:69:AF:E0:52:D6:6A
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       45B4A91D329F1DFDE2AA8A1F1F5A3AF70704A15A
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a3a2f33322d3332203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 15:00:00 +0000
ROA not before:           Fri 28 Apr 2023 14:55:00 +0000
ROA not after:            Fri 26 Apr 2024 15:00:00 +0000
asID:                     268576
IP address blocks:        2804:5350::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b4:a9:1d:32:9f:1d:fd:e2:aa:8a:1f:1f:5a:3a:f7:07:04:a1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 14:55:00 2023 GMT
            Not After : Apr 26 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:a6:6a:59:b2:32:f7:4a:34:66:09:fd:13:
                    96:4e:1b:1a:a8:a0:fe:6f:54:15:e7:60:96:6e:2e:
                    7a:f1:47:20:0b:2e:de:b6:ae:69:4f:5a:f4:01:88:
                    97:61:08:ab:8a:33:52:67:a3:77:bd:45:40:84:38:
                    f3:d2:63:11:62:b1:7e:64:67:fb:d6:20:b5:ee:6e:
                    71:71:12:48:4c:a5:8d:63:09:4a:f6:18:6e:ba:ae:
                    6c:e5:bc:15:e6:cf:d4:68:ea:9a:d2:15:63:51:4e:
                    56:d9:b4:66:87:8a:63:af:89:4e:5a:f0:3b:46:7c:
                    d5:e1:93:83:d7:11:4f:9f:d1:c8:dd:b5:ff:c8:a9:
                    60:ea:19:5d:2c:7c:ff:be:44:57:f1:f6:69:a2:be:
                    4b:e9:28:de:2b:ef:fe:52:9c:af:1a:21:6a:a8:c4:
                    6e:44:7f:d0:14:8d:98:b9:2c:0a:67:a7:70:7c:58:
                    ce:64:19:35:1f:d2:54:d9:65:bc:63:9d:ad:02:5b:
                    fd:19:9a:ac:10:13:d7:54:df:a2:97:4e:51:af:bd:
                    27:06:d3:bd:f7:55:5e:d1:e9:b9:80:26:c9:67:26:
                    93:d9:60:d6:25:76:c5:82:20:ec:76:ef:d3:3f:a5:
                    69:e1:64:55:90:45:b3:43:a2:62:9f:f1:63:e5:ef:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4D:EF:1D:95:9E:05:D0:F5:D7:D3:F5:33:C7:69:AF:E0:52:D6:6A
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a3a2f33322d3332203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:76:e3:06:d8:9d:7f:31:9d:dd:f5:ec:c6:5b:58:8d:b7:fa:
         e2:e1:40:2e:9b:91:a3:9a:48:d6:65:14:75:e5:43:fc:93:f0:
         13:8e:33:dd:e0:01:5d:23:06:a9:a7:4b:88:73:60:1c:b0:68:
         0d:35:93:d2:41:fb:98:ff:98:df:96:c7:71:ad:34:f8:44:ce:
         b8:35:71:b0:d1:58:2f:8c:f7:13:d6:77:eb:83:88:a2:e4:58:
         10:8b:f5:ea:a9:b7:c4:3e:95:7b:d8:23:4b:f4:a1:8a:d7:6d:
         d7:3a:19:4e:40:4b:42:16:6b:51:49:7c:f8:7a:10:70:c9:36:
         d0:a2:4e:38:af:f5:bb:e8:17:03:fc:e3:ed:3f:ed:16:da:4a:
         37:17:f1:2e:1c:43:b9:18:f4:bf:26:b8:2a:82:e5:01:09:6f:
         c8:a1:ee:a3:33:f4:85:51:f8:93:cc:5c:49:ad:09:f4:ab:61:
         be:e2:da:f1:0c:07:7f:c2:5c:71:79:49:84:a0:bf:b6:da:c1:
         47:cd:f8:a6:78:38:96:bc:d0:31:4f:eb:d3:79:c0:24:09:60:
         d7:7f:11:0a:8d:85:64:55:61:c6:d1:0f:d0:62:e7:1b:76:0f:
         c9:16:b2:53:7d:d7:78:54:f3:5b:6e:05:af:92:47:ed:73:0d:
         3c:09:06:4c
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIURbSpHTKfHf3iqoofH1o69wcEoVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJENTI1NkUwNjM3M0NGRTAzRDg5RUI3ODY1RkZDRDcw
ODZGNkVCNjAeFw0yMzA0MjgxNDU1MDBaFw0yNDA0MjYxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUVBOUE2NkE1OUIyMzJGNzRB
MzQ2NjA5RkQxMzk2NEUxQjFBQThBMEZFNkY1NDE1RTc2MDk2NkUyRTdBRjE0NzIw
MEIyRURFQjZBRTY5NEY1QUY0MDE4ODk3NjEwOEFCOEEzMzUyNjdBMzc3QkQ0NTQw
ODQzOEYzRDI2MzExNjJCMTdFNjQ2N0ZCRDYyMEI1RUU2RTcxNzExMjQ4NENBNThE
NjMwOTRBRjYxODZFQkFBRTZDRTVCQzE1RTZDRkQ0NjhFQTlBRDIxNTYzNTE0RTU2
RDlCNDY2ODc4QTYzQUY4OTRFNUFGMDNCNDY3Q0Q1RTE5MzgzRDcxMTRGOUZEMUM4
RERCNUZGQzhBOTYwRUExOTVEMkM3Q0ZGQkU0NDU3RjFGNjY5QTJCRTRCRTkyOERF
MkJFRkZFNTI5Q0FGMUEyMTZBQThDNDZFNDQ3RkQwMTQ4RDk4QjkyQzBBNjdBNzcw
N0M1OENFNjQxOTM1MUZEMjU0RDk2NUJDNjM5REFEMDI1QkZEMTk5QUFDMTAxM0Q3
NTRERkEyOTc0RTUxQUZCRDI3MDZEM0JERjc1NTVFRDFFOUI5ODAyNkM5NjcyNjkz
RDk2MEQ2MjU3NkM1ODIyMEVDNzZFRkQzM0ZBNTY5RTE2NDU1OTA0NUIzNDNBMjYy
OUZGMTYzRTVFRkUzNEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7qmmalmyMvdKNGYJ/ROWThsaqKD+b1QV52CWbi568UcgCy7etq5p
T1r0AYiXYQirijNSZ6N3vUVAhDjz0mMRYrF+ZGf71iC17m5xcRJITKWNYwlK9hhu
uq5s5bwV5s/UaOqa0hVjUU5W2bRmh4pjr4lOWvA7RnzV4ZOD1xFPn9HI3bX/yKlg
6hldLHz/vkRX8fZpor5L6SjeK+/+UpyvGiFqqMRuRH/QFI2YuSwKZ6dwfFjOZBk1
H9JU2WW8Y52tAlv9GZqsEBPXVN+il05Rr70nBtO991Ve0em5gCbJZyaT2WDWJXbF
giDsdu/TP6Vp4WRVkEWzQ6Jin/Fj5e/jTQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FAJN7x2VngXQ9dfT9TPHaa/gUtZqMB8GA1UdIwQYMBaAFGvVJW4GNzz+A9iet4Zf
/NcIb262MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlHSDdMb2duWHd5ZzZn
dkg1QnlHVmNEQjRkRDd4N1h6UlJQaDJQblhFdkVkLzAvNkJENTI1NkUwNjM3M0NG
RTAzRDg5RUI3ODY1RkZDRDcwODZGNkVCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82QkQ1MjU2RTA2MzczQ0ZFMDNEODlFQjc4NjVGRkNENzA4NkY2
RUI2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85R0g3TG9nblh3eWc2Z3ZINUJ5
R1ZjREI0ZEQ3eDdYelJSUGgyUG5YRXZFZC8wLzMyMzgzMDM0M2EzNTMzMzUzMDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzODM1MzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
U1AwDQYJKoZIhvcNAQELBQADggEBAGN24wbYnX8xnd317MZbWI23+uLhQC6bkaOa
SNZlFHXlQ/yT8BOOM93gAV0jBqmnS4hzYBywaA01k9JB+5j/mN+Wx3GtNPhEzrg1
cbDRWC+M9xPWd+uDiKLkWBCL9eqpt8Q+lXvYI0v0oYrXbdc6GU5AS0IWa1FJfPh6
EHDJNtCiTjiv9bvoFwP84+0/7RbaSjcX8S4cQ7kY9L8muCqC5QEJb8ih7qMz9IVR
+JPMXEmtCfSrYb7i2vEMB3/CXHF5SYSgv7bawUfN+KZ4OJa80DFP69N5wCQJYNd/
EQqNhWRVYcbRD9Bi5xt2D8kWslN913hU81tuBa+SR+1zDTwJBkw=
-----END CERTIFICATE-----