Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a3a2f33322d3332203d3e20323639343235.roa
File:                     323830343a363436343a3a2f33322d3332203d3e20323639343235.roa (raw, json)
Hash identifier:          QhWH+shEc82K/FhfR9+8O6I3CKMMTwB6+TeTqFxw0/k=
Subject key identifier:   A1:E9:5D:FC:30:89:C4:58:82:63:65:5F:36:17:5E:0D:2C:AE:FA:9F
Certificate issuer:       /CN=9B51B15273976450E1F7907A02174B498E4E9C95
Certificate serial:       538366FCE4F34B4E1202FBA2CA3A32FB5E9D9735
Authority key identifier: 9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a3a2f33322d3332203d3e20323639343235.roa
Signing time:             Tue 10 Sep 2024 17:48:21 +0000
ROA not before:           Tue 10 Sep 2024 17:43:21 +0000
ROA not after:            Tue 09 Sep 2025 17:48:21 +0000
asID:                     269425
IP address blocks:        2804:6464::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:83:66:fc:e4:f3:4b:4e:12:02:fb:a2:ca:3a:32:fb:5e:9d:97:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B51B15273976450E1F7907A02174B498E4E9C95
        Validity
            Not Before: Sep 10 17:43:21 2024 GMT
            Not After : Sep  9 17:48:21 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:d7:f3:f6:ce:09:35:56:37:e6:65:bb:70:
                    78:55:42:95:39:df:a4:9a:4d:6a:b5:93:ad:ce:40:
                    ca:ed:71:38:30:14:61:07:13:68:91:46:a7:1b:15:
                    92:e4:92:77:95:85:ac:df:f8:e8:8c:77:16:bc:d8:
                    21:53:79:6b:a4:f1:b3:c3:29:8c:f4:34:8a:f9:29:
                    c1:5b:fa:36:54:f5:91:eb:6f:d0:cb:27:8d:f9:ae:
                    12:f0:ae:fb:dd:25:dd:48:aa:73:64:e2:45:54:ca:
                    38:1a:28:32:09:33:aa:7f:b5:81:3c:8b:6f:37:b0:
                    79:91:bc:be:dc:75:3a:9d:be:46:4e:b4:ec:76:2e:
                    e4:0c:f3:4b:e1:5b:26:99:f2:ee:95:35:5e:14:37:
                    13:36:da:8e:ee:c5:3d:a5:20:ad:be:81:60:99:b6:
                    3e:a9:3c:51:cd:10:52:ef:ba:b8:40:6a:45:cb:12:
                    94:ed:fd:3e:77:02:d2:e0:a9:1e:d3:c8:79:88:0c:
                    00:8d:2d:8c:5c:93:da:65:bb:6f:4f:99:39:bf:85:
                    6a:32:2c:26:75:f9:03:56:ee:aa:05:86:d8:d7:d2:
                    cb:66:a3:48:dd:50:ab:99:cf:dd:b0:59:81:47:f7:
                    a9:3a:59:5c:29:a6:82:08:c8:ae:40:89:60:fa:d6:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E9:5D:FC:30:89:C4:58:82:63:65:5F:36:17:5E:0D:2C:AE:FA:9F
            X509v3 Authority Key Identifier:
                keyid:9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/9B51B15273976450E1F7907A02174B498E4E9C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a3a2f33322d3332203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6464::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:8d:52:7d:54:96:88:e1:28:fd:88:eb:30:59:d5:c2:3a:1a:
         e8:91:d6:9a:42:3b:27:99:e4:02:b0:42:d2:a4:52:d9:fb:47:
         78:4d:3b:92:66:eb:5e:9f:f5:79:28:cd:a5:fe:de:f4:cc:fd:
         f7:61:2c:31:75:24:9e:00:b3:51:06:85:54:c5:b4:d9:28:de:
         b5:70:09:5f:91:de:cb:ed:74:75:c1:f9:03:de:6a:0b:58:57:
         90:a0:e6:b9:74:4f:cf:1d:59:e6:88:44:89:3c:10:20:e2:a3:
         5d:a4:ec:5d:8b:9f:af:53:4f:d1:4b:bc:87:85:c0:7b:75:d6:
         ef:ee:b1:a9:5f:1d:f9:04:24:b3:20:a9:80:31:bf:ae:a8:7a:
         fa:92:f0:9f:98:64:06:bb:75:c7:a0:8d:bf:31:7f:81:94:34:
         4f:74:a9:25:76:f1:71:a0:7a:af:f9:9a:4b:01:4b:4d:5d:f0:
         09:43:43:52:11:6a:a3:99:a2:d3:18:4a:f4:bd:cf:bb:1a:4e:
         13:39:59:b4:ec:f2:e5:b3:18:89:c7:74:1f:4e:f3:f4:ef:b3:
         cf:c4:f5:16:55:8a:50:88:c7:3f:ed:fa:be:58:ad:f4:84:f6:
         7d:f0:b3:fe:5b:c8:74:4d:bf:d0:a3:0f:63:d8:7e:2d:b0:6a:
         33:83:b1:22
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUU4Nm/OTzS04SAvuiyjoy+16dlzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI1MUIxNTI3Mzk3NjQ1MEUxRjc5MDdBMDIxNzRCNDk4
RTRFOUM5NTAeFw0yNDA5MTAxNzQzMjFaFw0yNTA5MDkxNzQ4MjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q5QUQ3RjNGNkNFMDkzNTU2
MzdFNjY1QkI3MDc4NTU0Mjk1MzlERkE0OUE0RDZBQjU5M0FEQ0U0MENBRUQ3MTM4
MzAxNDYxMDcxMzY4OTE0NkE3MUIxNTkyRTQ5Mjc3OTU4NUFDREZGOEU4OEM3NzE2
QkNEODIxNTM3OTZCQTRGMUIzQzMyOThDRjQzNDhBRjkyOUMxNUJGQTM2NTRGNTkx
RUI2RkQwQ0IyNzhERjlBRTEyRjBBRUZCREQyNURENDhBQTczNjRFMjQ1NTRDQTM4
MUEyODMyMDkzM0FBN0ZCNTgxM0M4QjZGMzdCMDc5OTFCQ0JFREM3NTNBOURCRTQ2
NEVCNEVDNzYyRUU0MENGMzRCRTE1QjI2OTlGMkVFOTUzNTVFMTQzNzEzMzZEQThF
RUVDNTNEQTUyMEFEQkU4MTYwOTlCNjNFQTkzQzUxQ0QxMDUyRUZCQUI4NDA2QTQ1
Q0IxMjk0RURGRDNFNzcwMkQyRTBBOTFFRDNDODc5ODgwQzAwOEQyRDhDNUM5M0RB
NjVCQjZGNEY5OTM5QkY4NTZBMzIyQzI2NzVGOTAzNTZFRUFBMDU4NkQ4RDdEMkNC
NjZBMzQ4REQ1MEFCOTlDRkREQjA1OTgxNDdGN0E5M0E1OTVDMjlBNjgyMDhDOEFF
NDA4OTYwRkFENkY2OTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzZrX8/bOCTVWN+Zlu3B4VUKVOd+kmk1qtZOtzkDK7XE4MBRhBxNo
kUanGxWS5JJ3lYWs3/jojHcWvNghU3lrpPGzwymM9DSK+SnBW/o2VPWR62/QyyeN
+a4S8K773SXdSKpzZOJFVMo4GigyCTOqf7WBPItvN7B5kby+3HU6nb5GTrTsdi7k
DPNL4VsmmfLulTVeFDcTNtqO7sU9pSCtvoFgmbY+qTxRzRBS77q4QGpFyxKU7f0+
dwLS4Kke08h5iAwAjS2MXJPaZbtvT5k5v4VqMiwmdfkDVu6qBYbY19LLZqNI3VCr
mc/dsFmBR/epOllcKaaCCMiuQIlg+tb2lQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FKHpXfwwicRYgmNlXzYXXg0srvqfMB8GA1UdIwQYMBaAFJtRsVJzl2RQ4feQegIX
S0mOTpyVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JicFFQakw2eUhzZmVl
Z0piQUt3N2ZEM2g3WHpXTnFMdjNLampjSkRkTEdOLzEvOUI1MUIxNTI3Mzk3NjQ1
MEUxRjc5MDdBMDIxNzRCNDk4RTRFOUM5NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85QjUxQjE1MjczOTc2NDUwRTFGNzkwN0EwMjE3NEI0OThFNEU5
Qzk1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CYnBRUGpMNnlIc2ZlZWdKYkFL
dzdmRDNoN1h6V05xTHYzS2pqY0pEZExHTi8xLzMyMzgzMDM0M2EzNjM0MzYzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTM0MzIzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
ZGQwDQYJKoZIhvcNAQELBQADggEBADKNUn1UlojhKP2I6zBZ1cI6GuiR1ppCOyeZ
5AKwQtKkUtn7R3hNO5Jm616f9XkozaX+3vTM/fdhLDF1JJ4As1EGhVTFtNko3rVw
CV+R3svtdHXB+QPeagtYV5Cg5rl0T88dWeaIRIk8ECDio12k7F2Ln69TT9FLvIeF
wHt11u/usalfHfkEJLMgqYAxv66oevqS8J+YZAa7dcegjb8xf4GUNE90qSV28XGg
eq/5mksBS01d8AlDQ1IRaqOZotMYSvS9z7saThM5WbTs8uWzGInHdB9O8/Tvs8/E
9RZVilCIxz/t+r5YrfSE9n3ws/5byHRNv9CjD2PYfi2wajODsSI=
-----END CERTIFICATE-----