Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33342d3334203d3e203631363337.roa
File:                     323830343a316331383a3a2f33342d3334203d3e203631363337.roa (raw, json)
Hash identifier:          vT3372hWmBNXzAfGDjoLrNH/7iC4O4dbp8taTHAdfdI=
Subject key identifier:   08:7E:56:68:8B:1C:89:F8:DA:87:3D:CB:10:98:B3:2B:41:14:44:E0
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       2F709669553330138A38385C267C8FC6D27ED397
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33342d3334203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:55 +0000
ROA not before:           Fri 23 Feb 2024 20:31:55 +0000
ROA not after:            Fri 21 Feb 2025 20:36:55 +0000
asID:                     61637
IP address blocks:        2804:1c18::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:70:96:69:55:33:30:13:8a:38:38:5c:26:7c:8f:c6:d2:7e:d3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:55 2024 GMT
            Not After : Feb 21 20:36:55 2025 GMT
        Subject: CN=087E56688B1C89F8DA873DCB1098B32B411444E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:5e:1a:7f:28:5b:6f:71:a6:94:4d:fc:b8:
                    c7:80:7b:ec:91:f0:2a:e7:49:ff:d8:2a:3a:8a:5a:
                    cb:df:c7:21:47:96:19:36:d7:5d:fc:c0:62:63:11:
                    ca:26:b8:5f:ab:31:bb:6e:a6:56:69:6a:db:a7:dd:
                    94:bf:86:ac:42:98:0a:c6:55:09:79:69:43:9e:fb:
                    02:eb:0f:85:f1:17:b1:e2:45:94:9e:2f:10:7b:40:
                    20:a8:28:d5:54:92:0e:87:43:33:55:aa:07:9c:82:
                    16:de:8a:40:bc:63:8a:ec:9b:4d:7c:5e:6a:06:32:
                    92:cd:08:b5:78:96:fb:ca:8c:f8:ee:b6:ca:43:1b:
                    92:c3:96:6c:8b:b7:d5:5d:a6:cc:f9:0f:ac:2c:fa:
                    b3:ca:a1:55:80:55:5a:0c:11:25:10:18:35:68:79:
                    89:7b:86:da:b7:f8:8c:fe:44:4f:af:c7:b7:5f:e8:
                    8b:b0:3b:7c:9b:a5:c6:17:34:f9:5c:f5:c8:d2:14:
                    65:a4:25:9d:7e:6d:cb:f6:bb:b2:17:ee:09:0a:99:
                    ca:a3:3a:49:e4:5d:e2:3e:6d:47:ea:d0:e5:08:da:
                    f3:5a:a7:3a:1f:3c:13:9f:93:6f:fb:0a:9c:1c:5a:
                    69:d6:0f:05:b9:a2:c8:d4:4e:00:83:6e:33:8a:ce:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7E:56:68:8B:1C:89:F8:DA:87:3D:CB:10:98:B3:2B:41:14:44:E0
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33342d3334203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:b8:c1:1e:b3:6d:71:07:a2:e1:39:cc:c5:48:6c:7d:61:
         4c:c6:de:21:cc:de:e9:6c:a8:7b:e6:b7:7e:01:78:43:a7:eb:
         f0:2e:29:cc:10:5d:12:25:87:6f:2d:82:e4:93:38:01:04:35:
         27:82:56:97:9b:46:9c:dd:20:9e:c7:ef:3d:cc:16:77:91:56:
         f0:7c:aa:05:c8:0f:c7:40:c0:58:b0:d4:44:f7:dd:bd:70:97:
         ee:78:da:a6:f9:ca:8d:8c:de:9a:41:28:2f:1c:ad:6a:3f:8c:
         52:f4:01:23:18:b2:4e:45:4d:dd:a7:4f:07:16:68:b1:52:c6:
         57:4c:18:99:fe:cb:44:72:a2:aa:06:64:4c:32:13:ec:0c:e8:
         c6:e9:6d:15:66:ef:98:d7:59:9b:7e:a5:65:d0:8f:ca:a1:8a:
         9c:e3:0a:b5:71:87:50:d7:d2:dc:70:8a:96:8f:f3:42:3e:2e:
         1a:b0:a9:59:8a:94:b4:45:1e:17:a9:22:e1:4a:5c:9e:9e:1b:
         d7:de:cc:d0:73:3a:0b:77:97:97:e5:70:c6:76:46:4e:6b:c7:
         5b:4c:c1:b2:cb:77:0d:c9:0d:0d:57:26:74:af:8b:b9:6c:6b:
         8f:89:d8:a9:75:84:93:f5:be:cc:3a:88:15:0f:10:b1:60:bf:
         23:5e:12:52
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL3CWaVUzMBOKODhcJnyPxtJ+05cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1NzBBNEQ0RTI1MjYyODZFMkE3QkQ3NERCMDVBOUM4
OTJFNjk5NDAeFw0yNDAyMjMyMDMxNTVaFw0yNTAyMjEyMDM2NTVaMDMxMTAvBgNV
BAMTKDA4N0U1NjY4OEIxQzg5RjhEQTg3M0RDQjEwOThCMzJCNDExNDQ0RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcV4afyhbb3GmlE38uMeAe+yR
8CrnSf/YKjqKWsvfxyFHlhk21138wGJjEcomuF+rMbtuplZpatun3ZS/hqxCmArG
VQl5aUOe+wLrD4XxF7HiRZSeLxB7QCCoKNVUkg6HQzNVqgecghbeikC8Y4rsm018
XmoGMpLNCLV4lvvKjPjutspDG5LDlmyLt9Vdpsz5D6ws+rPKoVWAVVoMESUQGDVo
eYl7htq3+Iz+RE+vx7df6IuwO3ybpcYXNPlc9cjSFGWkJZ1+bcv2u7IX7gkKmcqj
OknkXeI+bUfq0OUI2vNapzofPBOfk2/7CpwcWmnWDwW5osjUTgCDbjOKzpVhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCH5WaIscifjahz3LEJizK0EUROAwHwYDVR0j
BBgwFoAUWVcKTU4lJihuKnvXTbBanIkuaZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMC81OTU3MEE0RDRFMjUyNjI4NkUyQTdCRDc0REIwNUE5Qzg5MkU2OTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5NTcwQTRENEUyNTI2Mjg2
RTJBN0JENzREQjA1QTlDODkyRTY5OTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzAv
MzIzODMwMzQzYTMxNjMzMTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzYzMTM2
MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigEHBgAMA0GCSqGSIb3DQEBCwUAA4IBAQCH67jBHrNt
cQei4TnMxUhsfWFMxt4hzN7pbKh75rd+AXhDp+vwLinMEF0SJYdvLYLkkzgBBDUn
glaXm0ac3SCex+89zBZ3kVbwfKoFyA/HQMBYsNRE9929cJfueNqm+cqNjN6aQSgv
HK1qP4xS9AEjGLJORU3dp08HFmixUsZXTBiZ/stEcqKqBmRMMhPsDOjG6W0VZu+Y
11mbfqVl0I/KoYqc4wq1cYdQ19LccIqWj/NCPi4asKlZipS0RR4XqSLhSlyenhvX
3szQczoLd5eX5XDGdkZOa8dbTMGyy3cNyQ0NVyZ0r4u5bGuPidipdYST9b7MOogV
DxCxYL8jXhJS
-----END CERTIFICATE-----