Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/0/323830343a363937383a3a2f33322d3438203d3e20323730323732.roa
File:                     323830343a363937383a3a2f33322d3438203d3e20323730323732.roa (raw, json)
Hash identifier:          Ceqne78ybTie4M1beNZJ+Z2S0/C3xlZ7aD7mU3XmAN0=
Subject key identifier:   7B:2A:9B:C5:62:95:51:AC:C9:1B:01:45:34:51:7B:96:4A:8E:73:EE
Certificate issuer:       /CN=7BF26399F7FF802812D84363FE100D751018C082
Certificate serial:       12867AC7AAD9A9867EC7B50BDE1F472A622C4E9F
Authority key identifier: 7B:F2:63:99:F7:FF:80:28:12:D8:43:63:FE:10:0D:75:10:18:C0:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BF26399F7FF802812D84363FE100D751018C082.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/0/323830343a363937383a3a2f33322d3438203d3e20323730323732.roa
Signing time:             Thu 17 Aug 2023 13:00:00 +0000
ROA not before:           Thu 17 Aug 2023 12:55:00 +0000
ROA not after:            Thu 15 Aug 2024 13:00:00 +0000
asID:                     270272
IP address blocks:        2804:6978::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:86:7a:c7:aa:d9:a9:86:7e:c7:b5:0b:de:1f:47:2a:62:2c:4e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BF26399F7FF802812D84363FE100D751018C082
        Validity
            Not Before: Aug 17 12:55:00 2023 GMT
            Not After : Aug 15 13:00:00 2024 GMT
        Subject: CN=7B2A9BC5629551ACC91B014534517B964A8E73EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:b3:6b:bb:6e:9d:97:55:78:56:70:0e:80:
                    41:db:2c:7b:ed:c6:54:27:39:6d:5c:1a:4e:91:28:
                    c3:fa:cf:40:69:e2:d3:95:db:52:f1:9b:46:6e:63:
                    4f:7c:aa:93:de:55:0b:46:d3:13:f4:84:92:58:43:
                    34:c7:0a:70:95:3d:45:d0:82:1f:8a:12:7b:d9:be:
                    48:47:1a:47:74:93:aa:ad:22:20:68:65:9a:c5:bd:
                    66:2f:04:f0:e3:d4:48:56:f1:a3:eb:68:9c:fe:0c:
                    97:76:6c:e3:9f:9a:60:76:ff:38:e2:b1:2a:97:4d:
                    9b:cd:b3:93:29:82:40:99:18:55:42:d8:70:bd:d8:
                    12:81:4a:90:27:0f:bd:b8:a6:7c:e2:12:7d:4d:b2:
                    f3:4c:5d:b6:1d:f2:66:2a:d5:b1:b7:6b:fa:99:bc:
                    ac:49:2d:0b:d6:fd:da:29:a0:77:a3:c1:b4:e2:d7:
                    f7:83:b8:e4:ec:4a:d4:9d:48:c4:5a:d5:01:47:c1:
                    ae:0e:e5:68:00:e1:d2:14:da:c3:0f:56:47:fd:b6:
                    1a:7e:54:5d:d2:08:f5:58:26:d8:48:43:8a:ea:ed:
                    52:4f:01:80:76:9a:74:4c:d8:be:dc:61:44:ef:3a:
                    40:53:4e:b0:24:a3:a5:21:05:12:ce:fd:dd:f2:41:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2A:9B:C5:62:95:51:AC:C9:1B:01:45:34:51:7B:96:4A:8E:73:EE
            X509v3 Authority Key Identifier:
                keyid:7B:F2:63:99:F7:FF:80:28:12:D8:43:63:FE:10:0D:75:10:18:C0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/0/7BF26399F7FF802812D84363FE100D751018C082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BF26399F7FF802812D84363FE100D751018C082.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/0/323830343a363937383a3a2f33322d3438203d3e20323730323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6978::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:8a:4b:3e:48:28:b9:47:9f:0a:5b:15:e6:52:97:64:9b:bf:
         e5:b6:ac:26:8b:f1:2a:0a:7a:f9:23:9c:aa:f3:b1:2a:2c:9f:
         7a:94:69:1c:89:29:52:49:33:e1:94:d4:53:1c:a3:72:57:b4:
         bd:98:e2:2d:ec:61:62:b9:6b:f9:e8:ed:7f:9b:95:1a:b8:50:
         ea:fd:b1:a9:b4:86:0e:a9:9b:a3:ec:12:48:ce:fa:3d:46:50:
         7a:9a:d7:60:71:d1:d2:e4:ae:15:6e:c0:6e:f2:39:9b:2c:d1:
         15:76:f3:94:32:4c:9b:00:ad:42:44:4c:fa:d1:6e:a2:a5:03:
         9c:c7:21:7e:95:9d:43:78:fd:ca:50:32:dd:bc:50:5d:3b:fa:
         d6:96:10:01:b1:0e:18:68:01:1d:b8:a6:db:3c:e2:0d:55:aa:
         80:c2:c0:5c:f6:39:84:e1:52:a0:fa:d4:e3:84:2f:0f:25:7d:
         4a:e8:5e:4d:5d:6e:48:02:74:bb:33:78:8b:b2:5e:f5:90:e3:
         84:74:b3:36:dd:8d:a4:2d:57:c8:b3:d9:2c:b0:85:30:1d:cb:
         5d:d0:c6:0c:0c:9d:27:f4:a8:a9:ba:73:14:eb:97:fb:b0:fc:
         d3:67:b0:69:b4:c6:d9:8f:2c:d0:b1:65:4e:6a:c7:f2:df:74:
         18:02:3e:b6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEoZ6x6rZqYZ+x7UL3h9HKmIsTp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JGMjYzOTlGN0ZGODAyODEyRDg0MzYzRkUxMDBENzUx
MDE4QzA4MjAeFw0yMzA4MTcxMjU1MDBaFw0yNDA4MTUxMzAwMDBaMDMxMTAvBgNV
BAMTKDdCMkE5QkM1NjI5NTUxQUNDOTFCMDE0NTM0NTE3Qjk2NEE4RTczRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDuLNru26dl1V4VnAOgEHbLHvt
xlQnOW1cGk6RKMP6z0Bp4tOV21Lxm0ZuY098qpPeVQtG0xP0hJJYQzTHCnCVPUXQ
gh+KEnvZvkhHGkd0k6qtIiBoZZrFvWYvBPDj1EhW8aPraJz+DJd2bOOfmmB2/zji
sSqXTZvNs5MpgkCZGFVC2HC92BKBSpAnD724pnziEn1NsvNMXbYd8mYq1bG3a/qZ
vKxJLQvW/dopoHejwbTi1/eDuOTsStSdSMRa1QFHwa4O5WgA4dIU2sMPVkf9thp+
VF3SCPVYJthIQ4rq7VJPAYB2mnRM2L7cYUTvOkBTTrAko6UhBRLO/d3yQfS5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUeyqbxWKVUazJGwFFNFF7lkqOc+4wHwYDVR0j
BBgwFoAUe/Jjmff/gCgS2ENj/hANdRAYwIIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWR1THBnNE5YVWdBeFZvcXdCcG1KbktrNDM4QXhib2VVTTFLUFJ5WlY3
cWYvMC83QkYyNjM5OUY3RkY4MDI4MTJEODQzNjNGRTEwMEQ3NTEwMThDMDgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdCRjI2Mzk5RjdGRjgwMjgx
MkQ4NDM2M0ZFMTAwRDc1MTAxOEMwODIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkdUxwZzROWFVnQXhWb3F3QnBtSm5LazQzOEF4Ym9lVU0xS1BSeVpWN3FmLzAv
MzIzODMwMzQzYTM2MzkzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpeDANBgkqhkiG9w0BAQsFAAOCAQEAnYpLPkgo
uUefClsV5lKXZJu/5basJovxKgp6+SOcqvOxKiyfepRpHIkpUkkz4ZTUUxyjcle0
vZjiLexhYrlr+ejtf5uVGrhQ6v2xqbSGDqmbo+wSSM76PUZQeprXYHHR0uSuFW7A
bvI5myzRFXbzlDJMmwCtQkRM+tFuoqUDnMchfpWdQ3j9ylAy3bxQXTv61pYQAbEO
GGgBHbim2zziDVWqgMLAXPY5hOFSoPrU44QvDyV9SuheTV1uSAJ0uzN4i7Je9ZDj
hHSzNt2NpC1XyLPZLLCFMB3LXdDGDAydJ/SoqbpzFOuX+7D802ewabTG2Y8s0LFl
TmrH8t90GAI+tg==
-----END CERTIFICATE-----