Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa
File:                     323830343a353938343a3a2f33332d3333203d3e20323638373037.roa (raw, json)
Hash identifier:          5plpZW4jGYynNJ1seT/xeaql49MnhG8rwd+Z2zlho6I=
Subject key identifier:   60:E3:0B:F5:70:A2:41:CE:34:9F:52:83:15:F6:0F:EF:2B:2C:7E:3C
Certificate issuer:       /CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
Certificate serial:       16D5507821C80714C612CC9568937B08EDAAF5B2
Authority key identifier: 5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa
Signing time:             Tue 26 Mar 2024 13:32:01 +0000
ROA not before:           Tue 26 Mar 2024 13:27:01 +0000
ROA not after:            Tue 25 Mar 2025 13:32:01 +0000
asID:                     268707
IP address blocks:        2804:5984::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d5:50:78:21:c8:07:14:c6:12:cc:95:68:93:7b:08:ed:aa:f5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
        Validity
            Not Before: Mar 26 13:27:01 2024 GMT
            Not After : Mar 25 13:32:01 2025 GMT
        Subject: CN=60E30BF570A241CE349F528315F60FEF2B2C7E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:d0:c6:31:dd:5a:79:77:a6:c5:86:d4:53:
                    cb:59:c3:e5:8c:d2:52:79:22:c1:fd:ff:39:38:a2:
                    15:a8:82:3b:fc:ee:17:51:1c:05:3d:a6:b4:35:83:
                    90:fc:77:92:87:4a:81:98:69:ff:d8:8a:59:c8:94:
                    74:2f:ff:2c:bb:19:68:65:38:f7:02:6f:4a:e7:67:
                    ba:4c:b2:03:21:00:c1:47:fb:10:37:76:9a:2b:47:
                    1b:e1:60:b7:ca:eb:df:59:50:74:b4:a6:fa:5b:34:
                    63:d4:f3:77:75:4c:c0:d7:8e:dd:ee:dc:17:de:6a:
                    3a:fe:95:d9:c7:a1:ed:5b:07:8f:da:7f:c2:5d:da:
                    f1:1f:24:fe:f0:68:e7:41:b4:3e:7c:b0:6c:b4:ba:
                    b0:f9:c4:4c:14:67:59:66:70:0b:2d:d9:84:b6:65:
                    15:b0:41:3d:8b:97:e0:cb:69:f4:ab:48:24:f1:8a:
                    19:fb:89:ef:39:7c:e0:58:5e:6d:6f:0f:76:7b:6d:
                    0d:db:cc:f7:17:31:47:41:fb:9b:27:9e:a4:cd:1c:
                    de:31:59:95:2a:1b:3f:4f:96:1b:de:7f:8d:20:e5:
                    c1:24:11:dc:12:6c:8e:81:7d:dd:8d:17:60:10:c0:
                    99:f3:54:86:b9:b8:85:70:d1:b0:aa:ec:89:de:86:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E3:0B:F5:70:A2:41:CE:34:9F:52:83:15:F6:0F:EF:2B:2C:7E:3C
            X509v3 Authority Key Identifier:
                keyid:5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:25:8c:15:2f:6b:9f:e0:a6:a7:b0:af:46:ab:46:8f:d7:
         9d:d9:89:32:91:4b:39:ee:ae:7d:68:2d:f6:20:47:a8:d4:33:
         fa:4a:f9:bd:83:7b:2e:4d:a9:15:b8:c6:51:8c:16:80:e3:2a:
         5f:fc:67:64:01:ec:02:27:aa:55:03:49:c8:01:c5:f6:f8:b6:
         89:06:a3:1d:38:b1:f3:a0:e0:f9:e4:e6:1f:c5:e2:55:8b:93:
         b0:9b:20:8e:26:62:44:77:22:ce:94:75:a7:4a:4d:a0:30:d6:
         56:82:7d:7f:97:ea:89:0a:e5:8b:ee:af:ba:14:24:ea:8b:b3:
         69:e3:d3:82:c2:b2:e3:05:ca:2e:78:78:9d:43:1a:db:71:d2:
         dc:e8:16:08:17:6f:3d:89:6c:cd:2f:24:ad:b5:d8:b8:90:25:
         4b:61:db:c1:cb:f4:aa:c7:86:d4:c4:2d:b8:bd:97:a1:45:4e:
         f5:15:59:50:18:5f:8a:6b:7b:96:ad:49:8e:05:16:af:c0:9c:
         bc:de:ab:3c:89:ef:df:ef:48:bc:a6:81:2d:02:a1:2f:ac:9e:
         75:20:d6:d8:11:af:6d:5d:53:61:67:9c:9a:d2:8f:1a:a9:8e:
         2b:7a:65:1d:13:d1:bc:31:a9:56:cd:5b:f5:44:94:b4:9f:71:
         b1:b2:b0:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFtVQeCHIBxTGEsyVaJN7CO2q9bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE3MzBGQzRCQzVDMUFBN0NCNTJBMjE5Rjg3QkQxRTND
NkVENzY0MzAeFw0yNDAzMjYxMzI3MDFaFw0yNTAzMjUxMzMyMDFaMDMxMTAvBgNV
BAMTKDYwRTMwQkY1NzBBMjQxQ0UzNDlGNTI4MzE1RjYwRkVGMkIyQzdFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQtDGMd1aeXemxYbUU8tZw+WM
0lJ5IsH9/zk4ohWogjv87hdRHAU9prQ1g5D8d5KHSoGYaf/YilnIlHQv/yy7GWhl
OPcCb0rnZ7pMsgMhAMFH+xA3dporRxvhYLfK699ZUHS0pvpbNGPU83d1TMDXjt3u
3Bfeajr+ldnHoe1bB4/af8Jd2vEfJP7waOdBtD58sGy0urD5xEwUZ1lmcAst2YS2
ZRWwQT2Ll+DLafSrSCTxihn7ie85fOBYXm1vD3Z7bQ3bzPcXMUdB+5snnqTNHN4x
WZUqGz9Plhvef40g5cEkEdwSbI6Bfd2NF2AQwJnzVIa5uIVw0bCq7Inehvx9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYOML9XCiQc40n1KDFfYP7yssfjwwHwYDVR0j
BBgwFoAUWnMPxLxcGqfLUqIZ+HvR48btdkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC81QTczMEZDNEJDNUMxQUE3Q0I1MkEyMTlGODdCRDFFM0M2RUQ3NjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBNzMwRkM0QkM1QzFBQTdD
QjUyQTIxOUY4N0JEMUUzQzZFRDc2NDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzIzODMwMzQzYTM1MzkzODM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzczMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARZhAAwDQYJKoZIhvcNAQELBQADggEBAI5vJYwV
L2uf4KansK9Gq0aP153ZiTKRSznurn1oLfYgR6jUM/pK+b2Dey5NqRW4xlGMFoDj
Kl/8Z2QB7AInqlUDScgBxfb4tokGox04sfOg4Pnk5h/F4lWLk7CbII4mYkR3Is6U
dadKTaAw1laCfX+X6okK5Yvur7oUJOqLs2nj04LCsuMFyi54eJ1DGttx0tzoFggX
bz2JbM0vJK212LiQJUth28HL9KrHhtTELbi9l6FFTvUVWVAYX4pre5atSY4FFq/A
nLzeqzyJ79/vSLymgS0CoS+snnUg1tgRr21dU2FnnJrSjxqpjit6ZR0T0bwxqVbN
W/VElLSfcbGysFg=
-----END CERTIFICATE-----