Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a323a3a2f34382d3438203d3e20323639353332.roa
File:                     323830343a363631343a323a3a2f34382d3438203d3e20323639353332.roa (raw, json)
Hash identifier:          TF4sQXfW0Qt8c+KR9T5RwA7zBeRhB8E/JHCn6FRbhXc=
Subject key identifier:   05:D3:79:0C:2B:42:B6:FB:5D:80:4A:0F:DE:87:3E:C4:89:06:92:50
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       13487573D65CFAF072433378DE1DB93EF15C1558
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a323a3a2f34382d3438203d3e20323639353332.roa
Signing time:             Sat 16 Sep 2023 19:32:21 +0000
ROA not before:           Sat 16 Sep 2023 19:27:21 +0000
ROA not after:            Sat 14 Sep 2024 19:32:21 +0000
asID:                     269532
IP address blocks:        2804:6614:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:48:75:73:d6:5c:fa:f0:72:43:33:78:de:1d:b9:3e:f1:5c:15:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Sep 16 19:27:21 2023 GMT
            Not After : Sep 14 19:32:21 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:db:c2:dd:02:94:de:ba:d5:3e:0f:a9:22:
                    4c:fe:c5:c7:92:3c:61:78:8e:83:d1:7f:c9:a2:1a:
                    16:3c:e9:0b:aa:07:59:6b:23:06:0f:f2:69:bd:d9:
                    e3:76:19:d0:e4:c6:ec:39:b1:14:25:8a:d7:c3:34:
                    29:2e:9d:84:67:8a:ed:b5:2f:9c:57:1b:8a:52:85:
                    f5:48:23:06:72:2c:c7:f7:3d:bf:8b:13:bd:84:e6:
                    e5:9d:31:da:8e:86:13:fb:ef:74:11:d5:a1:49:65:
                    6e:ea:b5:9d:43:eb:af:a9:51:89:d9:3a:9e:0e:d3:
                    29:5b:6d:6d:fe:b3:3c:2b:9e:91:3b:de:f5:a0:3f:
                    13:7a:fe:b8:e6:77:de:c6:fb:a1:76:9d:ce:71:f6:
                    11:7e:8d:1b:c0:aa:dc:1b:14:d6:9d:92:58:21:a6:
                    cd:67:95:a0:e9:09:b0:a5:c6:27:5b:8e:5e:1d:77:
                    d8:10:42:11:c4:c2:84:d6:01:56:56:c7:d2:12:d9:
                    43:61:9e:c5:98:0a:90:69:6c:3f:c1:6b:35:96:7d:
                    4a:9c:dd:7d:17:ba:79:57:f5:f1:bb:47:7d:3c:cf:
                    68:47:8c:4c:a9:65:dc:07:de:80:78:b8:74:5b:3e:
                    54:36:c5:44:5b:b9:76:23:71:64:d5:e9:19:5d:0b:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D3:79:0C:2B:42:B6:FB:5D:80:4A:0F:DE:87:3E:C4:89:06:92:50
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a323a3a2f34382d3438203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:16:3a:c8:bb:e7:11:9b:c1:16:bd:96:a1:93:cd:e3:87:d1:
         cd:9c:00:8c:50:8a:b0:0c:0b:1c:ff:44:8a:03:4b:19:66:9e:
         7e:ef:92:7b:65:8d:c1:73:36:12:17:13:41:8d:30:83:15:4a:
         e8:3e:99:18:0c:6c:9a:41:31:13:2e:40:b6:6e:18:d1:e0:a3:
         36:84:63:ee:c0:d5:19:df:b8:67:6d:9a:2e:ad:4d:08:95:0c:
         db:a7:9a:ae:9c:c8:e0:e8:33:13:ca:00:1c:a0:0f:9e:a8:47:
         a9:d4:27:d5:92:94:1b:97:f8:75:85:bf:51:c5:88:86:9f:1d:
         67:0e:12:4b:61:c0:84:fd:de:c5:67:76:51:7c:63:31:2f:74:
         82:c8:9e:9c:8f:89:58:bc:66:7b:b3:7a:b6:b6:16:8c:5d:5b:
         e2:42:b8:2f:c2:8e:76:ec:fc:61:f6:1b:a5:c5:cf:e8:89:4d:
         14:35:04:d4:2c:e2:dd:f6:60:a4:12:e7:cc:9c:94:64:f3:b1:
         12:c0:6f:2f:78:89:1a:20:b2:a2:56:bf:36:00:48:96:ad:3a:
         c3:27:09:a4:00:2d:be:c2:22:88:e5:cb:ad:b9:39:87:6a:30:
         a8:d8:b1:be:9f:92:b6:30:77:3e:78:34:50:36:02:06:cc:c2:
         ee:8c:6a:61
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUE0h1c9Zc+vByQzN43h25PvFcFVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxQzdBQkFBQzc2MkU4ODk0ODMyQTNDRDMyNkUxMEZF
QUIzQzZCNjAeFw0yMzA5MTYxOTI3MjFaFw0yNDA5MTQxOTMyMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI4MURCQzJERDAyOTRERUJB
RDUzRTBGQTkyMjRDRkVDNUM3OTIzQzYxNzg4RTgzRDE3RkM5QTIxQTE2M0NFOTBC
QUEwNzU5NkIyMzA2MEZGMjY5QkREOUUzNzYxOUQwRTRDNkVDMzlCMTE0MjU4QUQ3
QzMzNDI5MkU5RDg0Njc4QUVEQjUyRjlDNTcxQjhBNTI4NUY1NDgyMzA2NzIyQ0M3
RjczREJGOEIxM0JEODRFNkU1OUQzMURBOEU4NjEzRkJFRjc0MTFENUExNDk2NTZF
RUFCNTlENDNFQkFGQTk1MTg5RDkzQTlFMEVEMzI5NUI2RDZERkVCMzNDMkI5RTkx
M0JERUY1QTAzRjEzN0FGRUI4RTY3N0RFQzZGQkExNzY5RENFNzFGNjExN0U4RDFC
QzBBQURDMUIxNEQ2OUQ5MjU4MjFBNkNENjc5NUEwRTkwOUIwQTVDNjI3NUI4RTVF
MUQ3N0Q4MTA0MjExQzRDMjg0RDYwMTU2NTZDN0QyMTJEOTQzNjE5RUM1OTgwQTkw
Njk2QzNGQzE2QjM1OTY3RDRBOUNERDdEMTdCQTc5NTdGNUYxQkI0NzdEM0NDRjY4
NDc4QzRDQTk2NURDMDdERTgwNzhCODc0NUIzRTU0MzZDNTQ0NUJCOTc2MjM3MTY0
RDVFOTE5NUQwQjg0OEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq4Hbwt0ClN661T4PqSJM/sXHkjxheI6D0X/JohoWPOkLqgdZayMG
D/JpvdnjdhnQ5MbsObEUJYrXwzQpLp2EZ4rttS+cVxuKUoX1SCMGcizH9z2/ixO9
hOblnTHajoYT++90EdWhSWVu6rWdQ+uvqVGJ2TqeDtMpW21t/rM8K56RO971oD8T
ev645nfexvuhdp3OcfYRfo0bwKrcGxTWnZJYIabNZ5Wg6QmwpcYnW45eHXfYEEIR
xMKE1gFWVsfSEtlDYZ7FmAqQaWw/wWs1ln1KnN19F7p5V/Xxu0d9PM9oR4xMqWXc
B96AeLh0Wz5UNsVEW7l2I3Fk1ekZXQuEjQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FAXTeQwrQrb7XYBKD96HPsSJBpJQMB8GA1UdIwQYMBaAFI4cerqsdi6IlIMqPNMm
4Q/qs8a2MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FLVmJiMU1OU0w4UkFy
ZWdBYzNNa1dzZ01rdzdmSzJGYkV6a0RmU3drOE4yLzAvOEUxQzdBQkFBQzc2MkU4
ODk0ODMyQTNDRDMyNkUxMEZFQUIzQzZCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84RTFDN0FCQUFDNzYyRTg4OTQ4MzJBM0NEMzI2RTEwRkVBQjND
NkI2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BS1ZiYjFNTlNMOFJBcmVnQWMz
TWtXc2dNa3c3ZksyRmJFemtEZlN3azhOMi8wLzMyMzgzMDM0M2EzNjM2MzEzNDNh
MzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzkzNTMzMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBGYUAAIwDQYJKoZIhvcNAQELBQADggEBACUWOsi75xGbwRa9lqGTzeOH0c2c
AIxQirAMCxz/RIoDSxlmnn7vkntljcFzNhIXE0GNMIMVSug+mRgMbJpBMRMuQLZu
GNHgozaEY+7A1RnfuGdtmi6tTQiVDNunmq6cyODoMxPKABygD56oR6nUJ9WSlBuX
+HWFv1HFiIafHWcOEkthwIT93sVndlF8YzEvdILInpyPiVi8Znuzera2FoxdW+JC
uC/Cjnbs/GH2G6XFz+iJTRQ1BNQs4t32YKQS58yclGTzsRLAby94iRogsqJWvzYA
SJatOsMnCaQALb7CIojly625OYdqMKjYsb6fkrYwdz54NFA2AgbMwu6MamE=
-----END CERTIFICATE-----