Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/323830343a333037383a3a2f33322d3438203d3e20323634393533.roa
File:                     323830343a333037383a3a2f33322d3438203d3e20323634393533.roa (raw, json)
Hash identifier:          JXVijsMZg1pxAh+3BmHm4Cep54ViO7iWIPXLy/RCEGM=
Subject key identifier:   00:E1:4C:54:D6:21:26:90:6B:A2:95:27:F7:F4:EE:F2:9B:AF:AF:34
Certificate issuer:       /CN=1B1702BC517065A11637A946F3D5295EB223FCE1
Certificate serial:       17E1484D6379832189314A80399E483A14ED921F
Authority key identifier: 1B:17:02:BC:51:70:65:A1:16:37:A9:46:F3:D5:29:5E:B2:23:FC:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B1702BC517065A11637A946F3D5295EB223FCE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/323830343a333037383a3a2f33322d3438203d3e20323634393533.roa
Signing time:             Mon 19 Feb 2024 22:00:48 +0000
ROA not before:           Mon 19 Feb 2024 21:55:48 +0000
ROA not after:            Mon 17 Feb 2025 22:00:48 +0000
asID:                     264953
IP address blocks:        2804:3078::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e1:48:4d:63:79:83:21:89:31:4a:80:39:9e:48:3a:14:ed:92:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1702BC517065A11637A946F3D5295EB223FCE1
        Validity
            Not Before: Feb 19 21:55:48 2024 GMT
            Not After : Feb 17 22:00:48 2025 GMT
        Subject: CN=00E14C54D62126906BA29527F7F4EEF29BAFAF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:26:53:98:04:38:53:15:a7:dc:a5:08:2c:
                    20:c7:fa:ce:8e:ea:c6:0d:fc:c2:35:43:fb:8a:dd:
                    38:3f:2d:e8:a1:d1:ba:a8:1e:25:c7:e8:0d:06:c1:
                    ac:ff:ad:e2:e5:8e:3b:61:4f:40:9c:bf:d1:2e:5f:
                    08:3d:3f:d8:73:ec:8d:8f:37:89:58:43:7c:b0:13:
                    a7:30:2f:b9:c0:4e:84:45:8e:d6:a3:d0:23:cb:6b:
                    88:00:d0:e6:08:34:51:8c:4d:30:64:f3:ff:c1:f3:
                    3f:de:a3:0e:77:42:1e:90:dd:ee:6d:0a:01:fa:35:
                    e2:4e:89:86:2f:23:f7:b1:f4:0f:6d:2c:e2:f6:90:
                    4e:04:1a:92:cd:b5:49:60:40:34:dd:f0:f6:a9:c1:
                    30:87:23:11:56:0b:85:52:7e:c1:0d:79:2d:fb:5f:
                    b6:8f:2b:72:3b:49:79:67:b1:3c:1f:51:0f:55:ff:
                    5c:12:e9:dc:4a:16:4d:f8:cc:85:7e:df:e1:df:e0:
                    1a:6f:17:bd:c9:8b:7b:54:42:33:ee:77:c5:93:f2:
                    0c:97:48:b3:c5:c1:b7:3c:a4:d6:51:2c:67:9e:88:
                    fa:9f:fb:7c:6d:6b:01:8e:55:10:97:15:69:15:b9:
                    54:ae:be:73:8a:eb:34:07:5a:8e:df:e2:ea:18:b0:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E1:4C:54:D6:21:26:90:6B:A2:95:27:F7:F4:EE:F2:9B:AF:AF:34
            X509v3 Authority Key Identifier:
                keyid:1B:17:02:BC:51:70:65:A1:16:37:A9:46:F3:D5:29:5E:B2:23:FC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/1B1702BC517065A11637A946F3D5295EB223FCE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B1702BC517065A11637A946F3D5295EB223FCE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVUH9Yv1QXtFry7CGPUTWiKT74fsMu13kkoA4feuhHbk/0/323830343a333037383a3a2f33322d3438203d3e20323634393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3078::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:e2:d9:83:46:13:45:df:27:4a:52:8c:b0:59:f2:11:3f:79:
         67:b2:5d:82:b2:66:05:8c:93:15:3d:25:a7:ab:df:5e:73:18:
         54:0d:01:1a:17:96:c4:2d:3b:67:58:01:1e:77:c0:46:3c:57:
         c5:84:c6:44:b1:a6:f6:cb:3f:29:84:c7:ae:95:ba:65:76:df:
         58:a8:91:b8:96:d2:02:f0:5c:3e:85:d9:11:68:64:c1:77:4f:
         4f:09:2b:b2:3b:03:ec:c9:df:a9:95:f2:20:4c:a6:58:20:2f:
         b7:2e:16:96:43:a0:02:44:4a:f4:78:9b:14:6a:d7:21:5e:61:
         ca:ae:01:ec:c6:49:83:c0:c8:c9:dd:c8:c7:df:18:49:e8:bc:
         f0:2b:4f:33:b6:b4:06:0a:54:78:b9:70:d2:28:2a:cb:2b:23:
         d8:f4:a3:15:c5:d7:81:dc:0c:51:8e:13:ef:fa:ac:66:a3:8d:
         e1:cd:ff:a6:3a:63:4f:80:cd:da:4d:96:be:83:96:55:12:aa:
         14:9a:38:f8:e8:56:8c:dd:b7:50:75:f8:93:6a:03:b5:bd:e5:
         5f:9e:20:d6:65:b1:b5:3b:99:49:51:fa:0b:dc:61:f7:9b:cd:
         b2:71:5c:cc:9a:1a:8c:17:d6:d8:8a:af:07:97:56:df:12:c6:
         a1:a2:dd:cc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUF+FITWN5gyGJMUqAOZ5IOhTtkh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIxNzAyQkM1MTcwNjVBMTE2MzdBOTQ2RjNENTI5NUVC
MjIzRkNFMTAeFw0yNDAyMTkyMTU1NDhaFw0yNTAyMTcyMjAwNDhaMDMxMTAvBgNV
BAMTKDAwRTE0QzU0RDYyMTI2OTA2QkEyOTUyN0Y3RjRFRUYyOUJBRkFGMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tSZTmAQ4UxWn3KUILCDH+s6O
6sYN/MI1Q/uK3Tg/Leih0bqoHiXH6A0Gwaz/reLljjthT0Ccv9EuXwg9P9hz7I2P
N4lYQ3ywE6cwL7nAToRFjtaj0CPLa4gA0OYINFGMTTBk8//B8z/eow53Qh6Q3e5t
CgH6NeJOiYYvI/ex9A9tLOL2kE4EGpLNtUlgQDTd8PapwTCHIxFWC4VSfsENeS37
X7aPK3I7SXlnsTwfUQ9V/1wS6dxKFk34zIV+3+Hf4BpvF73Ji3tUQjPud8WT8gyX
SLPFwbc8pNZRLGeeiPqf+3xtawGOVRCXFWkVuVSuvnOK6zQHWo7f4uoYsF1pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAOFMVNYhJpBropUn9/Tu8puvrzQwHwYDVR0j
BBgwFoAUGxcCvFFwZaEWN6lG89UpXrIj/OEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZVSDlZdjFRWHRGcnk3Q0dQVVRXaUtUNzRmc011MTNra29BNGZldWhI
YmsvMC8xQjE3MDJCQzUxNzA2NUExMTYzN0E5NDZGM0Q1Mjk1RUIyMjNGQ0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCMTcwMkJDNTE3MDY1QTEx
NjM3QTk0NkYzRDUyOTVFQjIyM0ZDRTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWVUg5WXYxUVh0RnJ5N0NHUFVUV2lLVDc0ZnNNdTEza2tvQTRmZXVoSGJrLzAv
MzIzODMwMzQzYTMzMzAzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQweDANBgkqhkiG9w0BAQsFAAOCAQEAHuLZg0YT
Rd8nSlKMsFnyET95Z7JdgrJmBYyTFT0lp6vfXnMYVA0BGheWxC07Z1gBHnfARjxX
xYTGRLGm9ss/KYTHrpW6ZXbfWKiRuJbSAvBcPoXZEWhkwXdPTwkrsjsD7MnfqZXy
IEymWCAvty4WlkOgAkRK9HibFGrXIV5hyq4B7MZJg8DIyd3Ix98YSei88CtPM7a0
BgpUeLlw0igqyysj2PSjFcXXgdwMUY4T7/qsZqON4c3/pjpjT4DN2k2WvoOWVRKq
FJo4+OhWjN23UHX4k2oDtb3lX54g1mWxtTuZSVH6C9xh95vNsnFczJoajBfW2Iqv
B5dW3xLGoaLdzA==
-----END CERTIFICATE-----