Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          g8Bk9N3l58Um5ksheHkI8fpWyMJ3WQkAca495fyegTI=
Subject key identifier:   40:2E:0A:68:DF:E9:99:71:DA:5C:5D:D8:B9:1C:3D:06:E9:10:D7:DB
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       1AD8FE2D0248C29D24A5C0FD4AFA076062D4F94A
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:24 +0000
ROA not before:           Thu 04 Apr 2024 22:44:24 +0000
ROA not after:            Thu 03 Apr 2025 22:49:24 +0000
asID:                     262578
IP address blocks:        2804:658:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d8:fe:2d:02:48:c2:9d:24:a5:c0:fd:4a:fa:07:60:62:d4:f9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:24 2024 GMT
            Not After : Apr  3 22:49:24 2025 GMT
        Subject: CN=402E0A68DFE99971DA5C5DD8B91C3D06E910D7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:e2:d1:dc:dd:ff:4e:36:65:7a:0b:79:e3:
                    df:df:fa:0a:67:5c:81:20:8f:a1:0e:aa:9b:94:05:
                    50:22:23:21:22:b9:90:c2:9d:82:65:15:4e:d0:25:
                    a5:3f:1b:c3:e9:63:7c:c0:60:da:cb:a6:a2:d2:29:
                    38:77:24:04:58:2c:8f:54:b1:ae:35:9d:c6:9a:83:
                    16:bc:81:86:19:2f:c8:0e:8f:3f:14:4f:10:2a:2c:
                    94:1d:41:4e:11:8f:76:72:2d:b8:da:fd:3a:36:98:
                    4d:90:8f:d3:37:82:d4:44:aa:0a:03:5a:6c:2b:f1:
                    e1:70:9c:03:75:20:91:c4:ab:e0:99:61:82:bc:80:
                    f9:7f:d0:74:78:ec:86:e3:67:19:82:03:eb:f1:80:
                    23:fb:06:35:be:be:70:7c:b8:e7:ca:9c:25:c6:d5:
                    14:84:9a:df:89:f1:2c:62:2a:d9:f9:da:be:b4:a1:
                    62:a6:1b:4e:f5:bb:94:fb:a5:c3:79:b6:f9:e0:e4:
                    1d:e9:0a:f8:cb:9f:31:5e:36:f4:b1:a6:ed:cb:46:
                    c2:c6:12:42:d7:96:31:40:eb:f1:c6:2c:43:58:02:
                    2a:b7:45:65:39:18:06:79:a3:62:f5:aa:01:83:bb:
                    3b:f6:12:49:ff:8a:9c:68:ed:f1:05:98:3b:84:23:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2E:0A:68:DF:E9:99:71:DA:5C:5D:D8:B9:1C:3D:06:E9:10:D7:DB
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         38:40:ad:41:35:fc:b3:0d:ae:0a:04:a2:d8:03:ac:d7:7c:ba:
         88:c1:6b:fc:c4:ee:d8:ae:37:7e:55:78:d9:f8:f9:06:73:fb:
         e7:40:26:ae:d6:ef:b6:ea:53:d8:4f:00:48:90:57:3d:3d:a1:
         fe:e9:64:92:84:47:18:68:6e:3e:9c:12:04:ae:19:31:0e:1b:
         2b:98:ee:3d:88:8f:c1:68:54:fa:4d:85:03:04:ba:4e:98:69:
         42:b2:e4:08:19:96:6f:1c:f6:64:76:54:79:02:7e:a4:4d:04:
         65:79:61:63:05:8c:f4:31:14:37:45:ab:fa:82:fa:86:cb:04:
         16:73:df:d5:24:92:18:02:0b:d6:55:7c:8d:64:2e:d5:20:62:
         d9:9c:76:0e:8b:39:79:76:39:da:46:e8:9b:8f:b8:2f:e5:87:
         6e:78:42:f9:e3:2f:97:a2:d6:85:3b:f2:67:28:70:f5:0c:83:
         f5:e8:d3:62:83:c7:d7:a6:a8:0e:f4:fa:d0:4e:aa:f1:b8:51:
         7d:54:18:1f:8f:9e:f8:2a:7d:cc:ca:dc:bf:bd:67:c9:97:22:
         67:7d:ac:9a:b6:9e:f6:8e:5a:ad:2a:cb:47:1d:f0:a9:80:11:
         6e:77:85:20:8c:8c:75:c4:84:61:ad:97:d1:76:e9:3b:14:e5:
         ef:83:9d:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGtj+LQJIwp0kpcD9SvoHYGLU+UowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGM0NEMEMzRDAyNTY2OTU1MjgxM0U4RTQ0MUVBQTcx
MERFNDNCMjAeFw0yNDA0MDQyMjQ0MjRaFw0yNTA0MDMyMjQ5MjRaMDMxMTAvBgNV
BAMTKDQwMkUwQTY4REZFOTk5NzFEQTVDNUREOEI5MUMzRDA2RTkxMEQ3REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhzOLR3N3/TjZlegt549/f+gpn
XIEgj6EOqpuUBVAiIyEiuZDCnYJlFU7QJaU/G8PpY3zAYNrLpqLSKTh3JARYLI9U
sa41ncaagxa8gYYZL8gOjz8UTxAqLJQdQU4Rj3ZyLbja/To2mE2Qj9M3gtREqgoD
Wmwr8eFwnAN1IJHEq+CZYYK8gPl/0HR47IbjZxmCA+vxgCP7BjW+vnB8uOfKnCXG
1RSEmt+J8SxiKtn52r60oWKmG071u5T7pcN5tvng5B3pCvjLnzFeNvSxpu3LRsLG
EkLXljFA6/HGLENYAiq3RWU5GAZ5o2L1qgGDuzv2Ekn/ipxo7fEFmDuEI4a3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQC4KaN/pmXHaXF3YuRw9BukQ19swHwYDVR0j
BBgwFoAU//PNDD0CVmlVKBPo5EHqpxDeQ7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0
QkEvMS9GRkYzQ0QwQzNEMDI1NjY5NTUyODEzRThFNDQxRUFBNzEwREU0M0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRjNDRDBDM0QwMjU2Njk1
NTI4MTNFOEU0NDFFQUE3MTBERTQzQjIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzEv
MzIzODMwMzQzYTM2MzUzODNhNjUzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzMjM2MzIzNTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAZY4DANBgkqhkiG9w0BAQsFAAOC
AQEAOECtQTX8sw2uCgSi2AOs13y6iMFr/MTu2K43flV42fj5BnP750AmrtbvtupT
2E8ASJBXPT2h/ulkkoRHGGhuPpwSBK4ZMQ4bK5juPYiPwWhU+k2FAwS6TphpQrLk
CBmWbxz2ZHZUeQJ+pE0EZXlhYwWM9DEUN0Wr+oL6hssEFnPf1SSSGAIL1lV8jWQu
1SBi2Zx2Dos5eXY52kbom4+4L+WHbnhC+eMvl6LWhTvyZyhw9QyD9ejTYoPH16ao
DvT60E6q8bhRfVQYH4+e+Cp9zMrcv71nyZciZ32smrae9o5arSrLRx3wqYARbneF
IIyMdcSEYa2X0XbpOxTl74Od2A==
-----END CERTIFICATE-----