Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a373430303a3a2f34302d3430203d3e20323730373634.roa
File:                     323830343a373131303a373430303a3a2f34302d3430203d3e20323730373634.roa (raw, json)
Hash identifier:          9kNLXrWMEF4eQv3jESXiqBAsH/YFC/htmk3kYfi0f4c=
Subject key identifier:   81:0A:A9:62:4B:0F:A7:CD:B4:09:69:D5:AD:D9:B1:8D:9B:9E:93:03
Certificate issuer:       /CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
Certificate serial:       0B3911CDA7DBA053DCE7392FA915B4C4E4F2C791
Authority key identifier: 6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a373430303a3a2f34302d3430203d3e20323730373634.roa
Signing time:             Thu 04 Apr 2024 18:05:33 +0000
ROA not before:           Thu 04 Apr 2024 18:00:33 +0000
ROA not after:            Thu 03 Apr 2025 18:05:33 +0000
asID:                     270764
IP address blocks:        2804:7110:7400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:39:11:cd:a7:db:a0:53:dc:e7:39:2f:a9:15:b4:c4:e4:f2:c7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0
        Validity
            Not Before: Apr  4 18:00:33 2024 GMT
            Not After : Apr  3 18:05:33 2025 GMT
        Subject: CN=810AA9624B0FA7CDB40969D5ADD9B18D9B9E9303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:24:5d:be:aa:73:14:87:f7:fc:9e:3d:22:
                    c7:98:d4:d6:48:7a:f0:d6:72:a6:2a:34:de:fb:af:
                    3d:fb:1f:ba:07:00:33:57:1e:f6:3e:85:d5:8f:5e:
                    66:91:89:e4:e4:0f:ec:17:69:c3:a7:39:64:3b:92:
                    44:2e:87:b2:58:21:d7:49:ed:6e:ce:0e:ee:4e:09:
                    fb:09:3a:c2:9a:9d:d9:9f:c9:c9:ca:67:e8:d4:22:
                    db:bb:a7:fa:62:78:4c:26:64:35:53:6b:11:f8:34:
                    12:a6:96:a1:fd:60:3d:3b:e6:ce:70:c2:7f:af:44:
                    a6:87:9e:75:28:03:06:c3:50:87:38:3a:23:01:14:
                    58:22:54:33:c0:fa:ef:f4:23:3c:68:99:49:d9:2d:
                    bc:e7:f2:bd:3b:f0:03:4f:39:de:0e:3a:f7:e9:a3:
                    3c:1c:d0:9c:8f:76:97:49:fd:a4:5f:75:ee:f7:b2:
                    ee:ba:ec:0c:79:4d:4e:fc:61:b3:e0:f2:e8:3b:f5:
                    3f:a6:6b:62:ec:2e:cc:54:ab:de:7e:e3:ac:04:2c:
                    9d:78:bb:2a:93:1d:f7:4f:88:d6:69:dc:ed:cf:74:
                    f6:e9:9f:c7:85:a1:5a:fb:28:f4:3a:75:07:a2:77:
                    b7:09:9b:22:0a:50:a8:d8:1c:0f:94:b5:eb:91:98:
                    e4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0A:A9:62:4B:0F:A7:CD:B4:09:69:D5:AD:D9:B1:8D:9B:9E:93:03
            X509v3 Authority Key Identifier:
                keyid:6F:24:DF:4A:84:CC:21:33:7A:B0:CA:31:4C:26:5D:C9:D5:DD:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F24DF4A84CC21337AB0CA314C265DC9D5DDA9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/1/323830343a373131303a373430303a3a2f34302d3430203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:33:84:1c:f1:67:f0:15:49:9c:82:4f:cc:25:15:e0:50:3b:
         a4:8d:92:36:1b:74:93:8a:0f:bf:dd:23:a4:43:d5:aa:eb:81:
         a3:e0:66:ca:6d:17:13:c3:ae:3d:4c:d0:8a:6c:81:90:35:b9:
         0f:c1:10:25:2e:c9:b0:a9:66:9d:26:a7:62:2a:59:cf:f8:a1:
         c3:b9:62:ab:19:69:b8:c0:ee:23:7d:60:b7:3a:20:45:c1:08:
         fa:39:c0:7a:7d:4a:b9:95:23:69:4e:9c:dd:84:d9:75:59:57:
         fe:b9:fb:df:16:e6:ad:12:98:94:7a:75:59:89:2b:74:3f:82:
         38:80:3c:f0:e7:f1:96:49:b6:7e:3a:fe:b9:ce:64:3b:e7:40:
         38:01:31:52:f3:7f:52:e9:bb:9d:c7:2a:a9:1e:39:eb:97:bb:
         76:68:ff:08:c5:5f:a2:1d:f7:4c:91:6c:53:93:55:2f:5b:23:
         4b:df:0a:e6:3d:d4:bd:2a:b8:20:c2:d4:77:8c:2f:16:67:11:
         58:f5:50:61:3c:fb:97:e3:b4:5a:9d:1d:99:30:df:8d:50:d2:
         68:9b:02:44:00:e6:b7:e2:26:8a:21:2f:f3:66:14:02:3d:49:
         1c:41:33:e3:25:73:29:88:3c:4f:2a:9d:89:4d:b9:4a:2b:c8:
         5b:88:b8:b1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCzkRzafboFPc5zkvqRW0xOTyx5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYyNERGNEE4NENDMjEzMzdBQjBDQTMxNEMyNjVEQzlE
NUREQTlBMDAeFw0yNDA0MDQxODAwMzNaFw0yNTA0MDMxODA1MzNaMDMxMTAvBgNV
BAMTKDgxMEFBOTYyNEIwRkE3Q0RCNDA5NjlENUFERDlCMThEOUI5RTkzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8SRdvqpzFIf3/J49IseY1NZI
evDWcqYqNN77rz37H7oHADNXHvY+hdWPXmaRieTkD+wXacOnOWQ7kkQuh7JYIddJ
7W7ODu5OCfsJOsKandmfycnKZ+jUItu7p/pieEwmZDVTaxH4NBKmlqH9YD075s5w
wn+vRKaHnnUoAwbDUIc4OiMBFFgiVDPA+u/0IzxomUnZLbzn8r078ANPOd4OOvfp
ozwc0JyPdpdJ/aRfde73su667Ax5TU78YbPg8ug79T+ma2LsLsxUq95+46wELJ14
uyqTHfdPiNZp3O3PdPbpn8eFoVr7KPQ6dQeid7cJmyIKUKjYHA+UteuRmOT5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUgQqpYksPp820CWnVrdmxjZuekwMwHwYDVR0j
BBgwFoAUbyTfSoTMITN6sMoxTCZdydXdqaAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMS82RjI0REY0QTg0Q0MyMTMzN0FCMENBMzE0QzI2NURDOUQ1RERBOUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMjRERjRBODRDQzIxMzM3
QUIwQ0EzMTRDMjY1REM5RDVEREE5QTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzEv
MzIzODMwMzQzYTM3MzEzMTMwM2EzNzM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcRB0MA0GCSqGSIb3DQEBCwUA
A4IBAQCVM4Qc8WfwFUmcgk/MJRXgUDukjZI2G3STig+/3SOkQ9Wq64Gj4GbKbRcT
w649TNCKbIGQNbkPwRAlLsmwqWadJqdiKlnP+KHDuWKrGWm4wO4jfWC3OiBFwQj6
OcB6fUq5lSNpTpzdhNl1WVf+ufvfFuatEpiUenVZiSt0P4I4gDzw5/GWSbZ+Ov65
zmQ750A4ATFS839S6budxyqpHjnrl7t2aP8IxV+iHfdMkWxTk1UvWyNL3wrmPdS9
KrggwtR3jC8WZxFY9VBhPPuX47RanR2ZMN+NUNJomwJEAOa34iaKIS/zZhQCPUkc
QTPjJXMpiDxPKp2JTblKK8hbiLix
-----END CERTIFICATE-----