Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          strvJ+h+4H4CV2K1Y7VZkXEQunCvE0PGJaGW1vPiqfk=
Subject key identifier:   AD:74:FB:1A:4C:51:4D:39:B0:4F:86:91:B4:55:68:49:F7:EF:06:26
Certificate issuer:       /CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
Certificate serial:       75E1D5B354316DCCCCCDE2A3E7DF44CC00A2446B
Authority key identifier: 6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Thu 04 Apr 2024 18:05:30 +0000
ROA not before:           Thu 04 Apr 2024 18:00:30 +0000
ROA not after:            Thu 03 Apr 2025 18:05:30 +0000
asID:                     270764
IP address blocks:        2804:7110:4900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e1:d5:b3:54:31:6d:cc:cc:cd:e2:a3:e7:df:44:cc:00:a2:44:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
        Validity
            Not Before: Apr  4 18:00:30 2024 GMT
            Not After : Apr  3 18:05:30 2025 GMT
        Subject: CN=AD74FB1A4C514D39B04F8691B4556849F7EF0626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:64:e2:b8:aa:b8:e0:e9:cb:5d:64:e5:13:35:
                    07:4c:1c:d6:bd:68:fc:7c:73:53:9c:db:70:3d:83:
                    f3:a9:75:6a:7a:6a:a5:60:bb:c1:bf:f3:2b:5f:4d:
                    ef:b3:80:50:b6:85:40:4b:6d:10:ea:b4:86:4b:93:
                    26:2e:12:44:04:09:ba:b8:52:10:96:3a:9e:7e:0c:
                    06:93:25:27:70:d5:6b:81:83:3b:34:e5:56:f9:84:
                    a7:f4:3d:b3:14:a6:1e:41:0f:f3:f3:c7:f4:16:3d:
                    19:32:d4:01:47:9c:77:22:82:97:5a:01:b7:45:fd:
                    2d:b1:8d:35:35:0f:5d:55:7d:80:7a:ac:04:99:b2:
                    92:1f:95:fa:b8:12:1a:55:6e:22:1b:d8:28:b7:3e:
                    58:a1:cc:11:9f:ac:3b:a0:21:a7:04:48:33:79:61:
                    30:01:db:58:f6:98:03:5c:22:e0:b2:9a:01:e4:c5:
                    74:9c:46:67:30:80:7b:84:88:6f:46:48:50:73:8a:
                    03:75:d5:35:75:f9:c8:6d:0a:99:c9:ee:42:29:93:
                    61:e3:e1:67:f1:a0:f4:72:33:22:66:da:c6:1a:94:
                    8d:5d:e3:48:63:48:81:f1:8e:6f:1c:cd:1a:49:a0:
                    54:d5:a0:dd:14:61:03:26:92:45:e6:f7:36:e4:cd:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:FB:1A:4C:51:4D:39:B0:4F:86:91:B4:55:68:49:F7:EF:06:26
            X509v3 Authority Key Identifier:
                keyid:6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:4900::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:e9:48:c5:6d:be:4e:dd:0c:40:7f:c6:8e:5f:62:a0:9f:ef:
         01:95:07:00:a7:ff:47:21:35:b7:9c:1a:47:ca:11:b7:05:c0:
         c7:f5:95:be:39:fa:67:18:eb:6b:cf:21:ec:04:1a:26:17:c1:
         c6:64:9a:73:75:39:ed:65:46:21:d5:6d:e3:ee:61:02:54:43:
         6b:3e:be:fd:07:b5:b0:43:8b:4c:f1:d1:28:4e:a1:cc:02:7f:
         be:ba:b7:5a:d4:a2:e4:95:32:07:ed:69:b3:c2:3b:8d:dd:6c:
         ca:e3:1f:59:5f:bb:ff:9e:a9:70:c1:27:18:6c:5a:69:65:5b:
         2c:ec:f7:ef:af:54:97:72:94:07:aa:a4:63:5a:93:a2:8f:da:
         7d:09:49:fc:73:5b:bd:a4:e2:91:fd:c0:63:f9:90:85:d2:f3:
         ab:36:e2:dc:f0:59:be:b3:2b:f1:3d:0a:58:b7:fa:8b:fe:b1:
         93:2f:e6:29:7c:28:bf:00:43:2c:d7:d8:51:0a:0e:ed:c7:a6:
         5e:28:3a:89:7e:e0:28:56:8d:23:53:85:8b:40:df:73:88:1c:
         38:85:a7:c9:4e:dc:bd:c8:bd:ac:ae:37:45:d0:b2:2a:31:e6:
         e6:6c:64:5e:7d:8c:55:e8:21:66:a0:d4:1c:44:bc:39:82:2d:
         07:f7:bf:77
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUdeHVs1QxbczMzeKj599EzACiRGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYyNERGNEE4NENDMjEzMzdBQjBDQTMxNEMyNjVEQzlE
NUREQTlBMDAeFw0yNDA0MDQxODAwMzBaFw0yNTA0MDMxODA1MzBaMDMxMTAvBgNV
BAMTKEFENzRGQjFBNEM1MTREMzlCMDRGODY5MUI0NTU2ODQ5RjdFRjA2MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZOK4qrjg6ctdZOUTNQdMHNa9
aPx8c1Oc23A9g/OpdWp6aqVgu8G/8ytfTe+zgFC2hUBLbRDqtIZLkyYuEkQECbq4
UhCWOp5+DAaTJSdw1WuBgzs05Vb5hKf0PbMUph5BD/Pzx/QWPRky1AFHnHcigpda
AbdF/S2xjTU1D11VfYB6rASZspIflfq4EhpVbiIb2Ci3PlihzBGfrDugIacESDN5
YTAB21j2mANcIuCymgHkxXScRmcwgHuEiG9GSFBzigN11TV1+chtCpnJ7kIpk2Hj
4WfxoPRyMyJm2sYalI1d40hjSIHxjm8czRpJoFTVoN0UYQMmkkXm9zbkzbytAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUrXT7GkxRTTmwT4aRtFVoSffvBiYwHwYDVR0j
BBgwFoAUbyTfSoTMITN6sMoxTCZdydXdqaAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMS82RjI0REY0QTg0Q0MyMTMzN0FCMENBMzE0QzI2NURDOUQ1RERBOUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMjRERjRBODRDQzIxMzM3
QUIwQ0EzMTRDMjY1REM5RDVEREE5QTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzEv
MzIzODMwMzQzYTM3MzEzMTMwM2EzNDM5MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEcRBJADANBgkqhkiG9w0BAQsF
AAOCAQEAlulIxW2+Tt0MQH/Gjl9ioJ/vAZUHAKf/RyE1t5waR8oRtwXAx/WVvjn6
Zxjra88h7AQaJhfBxmSac3U57WVGIdVt4+5hAlRDaz6+/Qe1sEOLTPHRKE6hzAJ/
vrq3WtSi5JUyB+1ps8I7jd1syuMfWV+7/56pcMEnGGxaaWVbLOz3769Ul3KUB6qk
Y1qToo/afQlJ/HNbvaTikf3AY/mQhdLzqzbi3PBZvrMr8T0KWLf6i/6xky/mKXwo
vwBDLNfYUQoO7cemXig6iX7gKFaNI1OFi0Dfc4gcOIWnyU7cvci9rK43RdCyKjHm
5mxkXn2MVeghZqDUHES8OYItB/e/dw==
-----END CERTIFICATE-----