Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
File:                     323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa (raw, json)
Hash identifier:          UWUYUiF2JWtJTLsgnuLFJeCKdyzO6m4+224HlZUpfgo=
Subject key identifier:   21:73:F4:C7:30:C5:5F:48:EB:D0:E5:34:64:80:33:E9:04:F7:97:18
Certificate issuer:       /CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
Certificate serial:       781F3055B4C82672918D80ADEF4E47ECC8D54A17
Authority key identifier: 5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
Signing time:             Tue 26 Mar 2024 13:32:03 +0000
ROA not before:           Tue 26 Mar 2024 13:27:03 +0000
ROA not after:            Tue 25 Mar 2025 13:32:03 +0000
asID:                     268707
IP address blocks:        2804:5984:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1f:30:55:b4:c8:26:72:91:8d:80:ad:ef:4e:47:ec:c8:d5:4a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
        Validity
            Not Before: Mar 26 13:27:03 2024 GMT
            Not After : Mar 25 13:32:03 2025 GMT
        Subject: CN=2173F4C730C55F48EBD0E534648033E904F79718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:24:8c:1b:3c:30:45:52:92:b0:23:69:6d:
                    fb:4f:5b:e2:58:37:a7:ae:da:10:99:c4:f0:2d:3a:
                    ee:9f:f7:2c:1c:8f:9e:96:59:b5:e4:6a:1d:8a:58:
                    55:84:21:1f:c9:e1:ee:a7:bb:4c:56:a1:da:62:19:
                    75:fc:36:bc:26:62:5a:da:a8:7f:28:33:0b:10:a9:
                    50:a2:8a:89:79:9b:2c:17:41:ef:88:01:70:3d:bc:
                    a6:57:c8:ad:b2:49:76:2a:73:77:0f:95:9b:cb:7a:
                    09:cd:ba:a2:5f:8c:b5:3f:27:e6:e5:50:8c:19:7a:
                    bd:b8:1b:32:df:84:cc:60:d2:c5:46:26:05:db:65:
                    d2:d8:24:41:aa:b2:05:33:12:db:4a:d6:49:ee:95:
                    1c:47:ed:6f:79:b6:59:1f:ff:85:4a:ac:4d:6e:1e:
                    29:22:c0:62:17:08:9f:33:90:99:20:51:5a:b2:4e:
                    fd:b7:16:db:a0:6d:03:28:a3:25:44:c5:44:a6:cb:
                    c0:6f:c1:83:4b:0e:83:fa:6b:e7:99:42:00:5c:76:
                    ae:8b:87:3c:b8:d1:6c:5d:82:c9:96:8b:ff:ee:53:
                    d9:1e:82:81:b2:ca:ac:bd:ac:cc:60:c0:c8:86:c9:
                    20:63:0e:8a:b7:0a:3e:79:dc:f2:14:75:ba:91:e3:
                    0c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:73:F4:C7:30:C5:5F:48:EB:D0:E5:34:64:80:33:E9:04:F7:97:18
            X509v3 Authority Key Identifier:
                keyid:5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:75:9a:27:ef:3b:f9:12:d8:0f:fe:24:99:d9:27:55:e8:
         d4:cd:28:65:21:a6:ce:bb:05:db:3b:08:4b:a3:31:f4:7d:70:
         52:fe:9a:79:fe:f9:5b:ab:60:9b:84:59:a7:3d:68:e7:b1:d9:
         a4:0f:1e:27:db:13:4c:4c:57:4d:20:33:c7:a5:97:5d:1f:d8:
         0b:8d:61:82:1d:19:4d:c8:39:f0:cf:30:7d:35:f7:f2:86:f6:
         57:c0:a8:6b:84:06:8b:91:eb:be:97:ea:12:b2:39:1f:4f:8c:
         17:03:34:5e:a1:b7:0a:d5:b6:c0:51:a6:b4:14:cb:8e:bb:7c:
         11:5c:06:9a:a6:b3:54:79:a4:fa:f2:6f:d3:40:ba:da:f0:92:
         f0:d5:ea:6c:74:54:8e:a2:9d:98:3e:e0:38:28:69:c8:6b:b5:
         fa:0d:34:a4:34:f9:f6:ad:75:92:f0:29:6b:ae:4b:97:9b:85:
         67:9a:2b:fa:bb:a8:7d:b9:33:89:92:c3:6a:3c:84:f2:d6:4c:
         90:e3:50:26:91:3a:ba:b5:05:b6:f4:bc:27:d0:c5:95:dc:5a:
         de:cf:17:63:e4:05:f1:1d:b2:37:16:b6:8d:25:46:aa:9c:1f:
         90:d5:be:8a:82:7d:5b:1b:52:af:59:22:35:1c:2e:5b:27:26:
         99:b3:1c:f9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeB8wVbTIJnKRjYCt705H7MjVShcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE3MzBGQzRCQzVDMUFBN0NCNTJBMjE5Rjg3QkQxRTND
NkVENzY0MzAeFw0yNDAzMjYxMzI3MDNaFw0yNTAzMjUxMzMyMDNaMDMxMTAvBgNV
BAMTKDIxNzNGNEM3MzBDNTVGNDhFQkQwRTUzNDY0ODAzM0U5MDRGNzk3MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDawiSMGzwwRVKSsCNpbftPW+JY
N6eu2hCZxPAtOu6f9ywcj56WWbXkah2KWFWEIR/J4e6nu0xWodpiGXX8NrwmYlra
qH8oMwsQqVCiiol5mywXQe+IAXA9vKZXyK2ySXYqc3cPlZvLegnNuqJfjLU/J+bl
UIwZer24GzLfhMxg0sVGJgXbZdLYJEGqsgUzEttK1knulRxH7W95tlkf/4VKrE1u
HikiwGIXCJ8zkJkgUVqyTv23FtugbQMooyVExUSmy8BvwYNLDoP6a+eZQgBcdq6L
hzy40WxdgsmWi//uU9kegoGyyqy9rMxgwMiGySBjDoq3Cj553PIUdbqR4wwJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUIXP0xzDFX0jr0OU0ZIAz6QT3lxgwHwYDVR0j
BBgwFoAUWnMPxLxcGqfLUqIZ+HvR48btdkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC81QTczMEZDNEJDNUMxQUE3Q0I1MkEyMTlGODdCRDFFM0M2RUQ3NjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBNzMwRkM0QkM1QzFBQTdD
QjUyQTIxOUY4N0JEMUUzQzZFRDc2NDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzIzODMwMzQzYTM1MzkzODM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEWYSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBtSnWaJ+87+RLYD/4kmdknVejUzShlIabOuwXbOwhLozH0fXBS/pp5/vlb
q2CbhFmnPWjnsdmkDx4n2xNMTFdNIDPHpZddH9gLjWGCHRlNyDnwzzB9NffyhvZX
wKhrhAaLkeu+l+oSsjkfT4wXAzReobcK1bbAUaa0FMuOu3wRXAaaprNUeaT68m/T
QLra8JLw1epsdFSOop2YPuA4KGnIa7X6DTSkNPn2rXWS8ClrrkuXm4Vnmiv6u6h9
uTOJksNqPITy1kyQ41AmkTq6tQW29Lwn0MWV3Frezxdj5AXxHbI3FraNJUaqnB+Q
1b6Kgn1bG1KvWSI1HC5bJyaZsxz5
-----END CERTIFICATE-----