Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3530303a3a2f34302d3430203d3e20323632363131.roa
File:                     323830343a326663383a3530303a3a2f34302d3430203d3e20323632363131.roa (raw, json)
Hash identifier:          oY/ZVUD2tZZ6UVLr64Lh1mBneyjgS13PwnOOG0ggY38=
Subject key identifier:   68:C7:29:9D:41:DD:D8:7E:95:FA:94:4C:2F:5F:53:E0:58:E9:83:F7
Certificate issuer:       /CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
Certificate serial:       55A689EB9D9B432BB0083EFFCC17D40206DAC51A
Authority key identifier: AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3530303a3a2f34302d3430203d3e20323632363131.roa
Signing time:             Mon 14 Aug 2023 11:56:50 +0000
ROA not before:           Mon 14 Aug 2023 11:51:50 +0000
ROA not after:            Mon 12 Aug 2024 11:56:50 +0000
asID:                     262611
IP address blocks:        2804:2fc8:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a6:89:eb:9d:9b:43:2b:b0:08:3e:ff:cc:17:d4:02:06:da:c5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Validity
            Not Before: Aug 14 11:51:50 2023 GMT
            Not After : Aug 12 11:56:50 2024 GMT
        Subject: CN=3082010A0282010100D78620A5739536D56F5183DB379C163D25A19E05548F7FDE539B6B9D6EFA0029766FC9E548C22837F149CA740FE7F0F87565FDE8D02B13956181913B8EF90D63F2995F1F0D751CD7170D3F12FC4B3E50268493F7B8899987D99FFCC67007C04FA94C9DBA56F9244BB0B50788EF807E44B19FC082346F0775013D7B1C11810288100704DC1093DAC3C52170F4CD0C96E5A406A458129B07C9591D7F23FCF2C5952EB12620BA180830C99AE9B670187062C5BBF2D1A7DA27B3A559F305BE3ED0F570D61AF6EB1EE64BF590FC9B1DE317FC01BFDFFE1B84CCEE18849981E7CB331FFB9DD5A4DD05C8FB3B1EBCF359988E487845B3A75B3D900BA14A7291F64D02390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:20:a5:73:95:36:d5:6f:51:83:db:37:9c:
                    16:3d:25:a1:9e:05:54:8f:7f:de:53:9b:6b:9d:6e:
                    fa:00:29:76:6f:c9:e5:48:c2:28:37:f1:49:ca:74:
                    0f:e7:f0:f8:75:65:fd:e8:d0:2b:13:95:61:81:91:
                    3b:8e:f9:0d:63:f2:99:5f:1f:0d:75:1c:d7:17:0d:
                    3f:12:fc:4b:3e:50:26:84:93:f7:b8:89:99:87:d9:
                    9f:fc:c6:70:07:c0:4f:a9:4c:9d:ba:56:f9:24:4b:
                    b0:b5:07:88:ef:80:7e:44:b1:9f:c0:82:34:6f:07:
                    75:01:3d:7b:1c:11:81:02:88:10:07:04:dc:10:93:
                    da:c3:c5:21:70:f4:cd:0c:96:e5:a4:06:a4:58:12:
                    9b:07:c9:59:1d:7f:23:fc:f2:c5:95:2e:b1:26:20:
                    ba:18:08:30:c9:9a:e9:b6:70:18:70:62:c5:bb:f2:
                    d1:a7:da:27:b3:a5:59:f3:05:be:3e:d0:f5:70:d6:
                    1a:f6:eb:1e:e6:4b:f5:90:fc:9b:1d:e3:17:fc:01:
                    bf:df:fe:1b:84:cc:ee:18:84:99:81:e7:cb:33:1f:
                    fb:9d:d5:a4:dd:05:c8:fb:3b:1e:bc:f3:59:98:8e:
                    48:78:45:b3:a7:5b:3d:90:0b:a1:4a:72:91:f6:4d:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C7:29:9D:41:DD:D8:7E:95:FA:94:4C:2F:5F:53:E0:58:E9:83:F7
            X509v3 Authority Key Identifier:
                keyid:AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a3530303a3a2f34302d3430203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:99:fd:f0:4a:f1:63:45:20:a0:82:33:e4:87:8c:fb:14:d3:
         43:50:5b:9a:35:6a:c6:b8:04:43:97:7a:e9:09:f8:41:b4:98:
         34:fe:5c:cc:ff:0a:b6:e6:a6:b2:2b:40:ad:58:db:4d:28:fc:
         c4:ec:b8:ab:c0:42:c6:53:6e:b2:78:aa:8d:f7:95:22:7a:49:
         ef:9e:f1:14:c1:69:80:67:6b:f4:9c:5f:42:2b:93:6a:ef:df:
         35:62:8d:0c:9f:e2:3c:cf:65:60:2b:8b:31:03:7b:b3:5f:c9:
         c5:d6:9b:d2:a5:9e:58:a6:ea:34:d4:f8:bb:fe:b8:83:04:05:
         15:58:cd:2a:3e:cb:08:e7:37:36:14:32:b7:04:6c:3d:e6:5b:
         94:d6:42:c2:67:3f:bb:06:34:0b:37:73:6c:02:a3:d7:3c:d7:
         f3:24:65:2a:9a:32:37:06:90:07:0f:0d:e9:4a:65:09:dd:cc:
         52:5b:36:68:6e:5e:cb:a8:93:53:66:e6:9c:15:04:c1:49:da:
         11:46:7d:c7:61:26:4f:4a:0b:32:2c:44:6f:fa:2c:12:3d:e4:
         67:24:d9:b5:51:90:ed:85:e8:9e:3e:d6:79:38:42:75:23:75:
         4a:78:87:2f:fc:1b:30:4f:c5:81:42:cc:3e:15:c2:b8:79:bd:
         c4:9d:34:8b
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUVaaJ652bQyuwCD7/zBfUAgbaxRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBRUQ5MDA4RjI0RjVCNjE5ODcxODBCQjFDMUQ2ODgx
MEJBMTdDQzAeFw0yMzA4MTQxMTUxNTBaFw0yNDA4MTIxMTU2NTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc4NjIwQTU3Mzk1MzZENTZG
NTE4M0RCMzc5QzE2M0QyNUExOUUwNTU0OEY3RkRFNTM5QjZCOUQ2RUZBMDAyOTc2
NkZDOUU1NDhDMjI4MzdGMTQ5Q0E3NDBGRTdGMEY4NzU2NUZERThEMDJCMTM5NTYx
ODE5MTNCOEVGOTBENjNGMjk5NUYxRjBENzUxQ0Q3MTcwRDNGMTJGQzRCM0U1MDI2
ODQ5M0Y3Qjg4OTk5ODdEOTlGRkNDNjcwMDdDMDRGQTk0QzlEQkE1NkY5MjQ0QkIw
QjUwNzg4RUY4MDdFNDRCMTlGQzA4MjM0NkYwNzc1MDEzRDdCMUMxMTgxMDI4ODEw
MDcwNERDMTA5M0RBQzNDNTIxNzBGNENEMEM5NkU1QTQwNkE0NTgxMjlCMDdDOTU5
MUQ3RjIzRkNGMkM1OTUyRUIxMjYyMEJBMTgwODMwQzk5QUU5QjY3MDE4NzA2MkM1
QkJGMkQxQTdEQTI3QjNBNTU5RjMwNUJFM0VEMEY1NzBENjFBRjZFQjFFRTY0QkY1
OTBGQzlCMURFMzE3RkMwMUJGREZGRTFCODRDQ0VFMTg4NDk5ODFFN0NCMzMxRkZC
OURENUE0REQwNUM4RkIzQjFFQkNGMzU5OTg4RTQ4Nzg0NUIzQTc1QjNEOTAwQkEx
NEE3MjkxRjY0RDAyMzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA14YgpXOVNtVvUYPbN5wWPSWhngVUj3/eU5trnW76ACl2b8nlSMIo
N/FJynQP5/D4dWX96NArE5VhgZE7jvkNY/KZXx8NdRzXFw0/EvxLPlAmhJP3uImZ
h9mf/MZwB8BPqUydulb5JEuwtQeI74B+RLGfwII0bwd1AT17HBGBAogQBwTcEJPa
w8UhcPTNDJblpAakWBKbB8lZHX8j/PLFlS6xJiC6GAgwyZrptnAYcGLFu/LRp9on
s6VZ8wW+PtD1cNYa9use5kv1kPybHeMX/AG/3/4bhMzuGISZgefLMx/7ndWk3QXI
+zsevPNZmI5IeEWzp1s9kAuhSnKR9k0COQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FGjHKZ1B3dh+lfqUTC9fU+BY6YP3MB8GA1UdIwQYMBaAFK2u2QCPJPW2GYcYC7HB
1ogQuhfMMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FyVDh2ckRqcXk0Yldh
TUN0RlAyNENGVTVoTXpXaEhSa2p2Z3haeVFCUWtwLzAvQURBRUQ5MDA4RjI0RjVC
NjE5ODcxODBCQjFDMUQ2ODgxMEJBMTdDQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BREFFRDkwMDhGMjRGNUI2MTk4NzE4MEJCMUMxRDY4ODEwQkEx
N0NDLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BclQ4dnJEanF5NGJXYU1DdEZQ
MjRDRlU1aE16V2hIUmtqdmd4WnlRQlFrcC8wLzMyMzgzMDM0M2EzMjY2NjMzODNh
MzUzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjMyMzYzMTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKAQvyAUwDQYJKoZIhvcNAQELBQADggEBAJmZ/fBK8WNFIKCCM+SHjPsU
00NQW5o1asa4BEOXeukJ+EG0mDT+XMz/CrbmprIrQK1Y200o/MTsuKvAQsZTbrJ4
qo33lSJ6Se+e8RTBaYBna/ScX0Irk2rv3zVijQyf4jzPZWArizEDe7NfycXWm9Kl
nlim6jTU+Lv+uIMEBRVYzSo+ywjnNzYUMrcEbD3mW5TWQsJnP7sGNAs3c2wCo9c8
1/MkZSqaMjcGkAcPDelKZQndzFJbNmhuXsuok1Nm5pwVBMFJ2hFGfcdhJk9KCzIs
RG/6LBI95Gck2bVRkO2F6J4+1nk4QnUjdUp4hy/8GzBPxYFCzD4Vwrh5vcSdNIs=
-----END CERTIFICATE-----