Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a393930333a3a2f34382d3438203d3e20323633353030.roa
File:                     323830343a313264383a393930333a3a2f34382d3438203d3e20323633353030.roa (raw, json)
Hash identifier:          4jgA90ozjqfy76aOcGByheLvuEOqf3H//b4Bbx46b5U=
Subject key identifier:   1E:45:6A:B0:2B:79:93:56:A6:97:44:74:DB:59:E2:A2:F3:0D:B1:08
Certificate issuer:       /CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
Certificate serial:       148E31A6ABD5F3DABF9048552090390F5D69C3E8
Authority key identifier: 26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a393930333a3a2f34382d3438203d3e20323633353030.roa
Signing time:             Wed 20 Mar 2024 01:44:52 +0000
ROA not before:           Wed 20 Mar 2024 01:39:52 +0000
ROA not after:            Wed 19 Mar 2025 01:44:52 +0000
asID:                     263500
IP address blocks:        2804:12d8:9903::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8e:31:a6:ab:d5:f3:da:bf:90:48:55:20:90:39:0f:5d:69:c3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
        Validity
            Not Before: Mar 20 01:39:52 2024 GMT
            Not After : Mar 19 01:44:52 2025 GMT
        Subject: CN=1E456AB02B799356A6974474DB59E2A2F30DB108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:a1:7d:72:55:09:87:c7:a8:68:25:24:de:
                    08:60:6f:df:fc:2c:1c:ce:8b:82:08:3b:69:7b:93:
                    88:87:df:40:3d:72:74:00:a0:59:00:8e:c7:f8:8c:
                    23:39:4e:ff:de:6e:44:41:2e:38:f2:8c:18:af:70:
                    01:43:d2:f3:f6:a4:e6:0f:01:03:62:5e:3d:ca:d4:
                    83:e2:b6:b2:56:75:d4:2d:22:be:9b:78:02:8e:e6:
                    c0:d4:80:81:80:3c:1c:1a:a3:2d:01:66:2b:a8:83:
                    15:04:38:01:28:51:2a:ea:65:af:01:17:f8:47:66:
                    ff:36:29:31:00:4f:01:cd:8b:ed:32:d1:f6:e5:b2:
                    e6:43:7a:37:42:b9:ec:17:1e:d2:09:63:68:fd:4a:
                    f7:22:b6:26:06:e9:6d:a8:f0:31:69:da:86:7a:ab:
                    41:f7:f9:0a:4d:8f:04:03:58:ff:8a:93:30:2d:3f:
                    78:d8:90:9d:b6:4e:e5:e1:0b:a6:5d:f0:89:d6:8b:
                    0d:7b:71:3b:a5:11:01:2d:89:63:26:65:ee:4c:a6:
                    88:4e:33:97:60:df:15:75:54:09:73:14:0b:6f:f0:
                    3e:a8:10:95:f2:7c:33:d2:7d:3e:75:9c:6e:ae:fe:
                    0d:4f:4f:9b:5a:16:ab:55:c3:8e:75:8f:b3:ac:1b:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:45:6A:B0:2B:79:93:56:A6:97:44:74:DB:59:E2:A2:F3:0D:B1:08
            X509v3 Authority Key Identifier:
                keyid:26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/323830343a313264383a393930333a3a2f34382d3438203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12d8:9903::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:48:ca:98:42:ea:32:c7:71:2b:2e:a8:28:de:e4:04:f9:0e:
         4c:32:7d:09:33:24:db:65:e0:5c:d4:64:d1:e7:3f:bd:0c:ca:
         4e:84:ec:f9:91:98:84:bf:3a:dc:e4:c9:b8:ba:9e:2b:25:97:
         57:9f:59:cc:9f:11:54:5b:96:51:a4:97:fb:7b:e8:b4:c5:e8:
         b2:56:94:08:d8:af:74:de:a9:63:c5:6c:dd:60:f1:0d:db:a6:
         47:7c:8a:7e:0b:08:50:58:51:75:4c:cb:b8:7e:fd:77:18:6d:
         db:61:fc:40:84:e7:74:f5:31:0f:a9:ae:a4:18:35:40:44:b3:
         28:59:e0:0d:bb:b3:46:55:a4:7f:06:f6:3c:ca:0a:57:be:96:
         7a:1f:25:f8:f1:bf:38:a3:62:cb:47:2c:ef:6a:7d:6c:2a:76:
         bb:5b:19:6b:58:78:6e:4f:9c:24:c0:de:62:5a:d1:4b:23:91:
         c9:ef:b0:7e:fd:28:02:52:38:4c:49:cc:0a:fc:6d:04:6d:f9:
         5e:f3:70:6e:1a:c5:ff:84:40:e0:e6:bf:0c:76:6d:22:44:a5:
         7b:4a:8d:d1:19:95:a8:64:26:e9:87:26:85:9c:04:86:ec:be:
         6a:86:da:68:3f:31:78:a5:2c:7f:9c:68:bd:df:25:c6:d7:e0:
         3b:f6:ab:97
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUFI4xpqvV89q/kEhVIJA5D11pw+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZDMUQxRURFNzNEQjcxMEEzRDUxODgzRURFOTVBQjAy
RTEyQ0U0QzAeFw0yNDAzMjAwMTM5NTJaFw0yNTAzMTkwMTQ0NTJaMDMxMTAvBgNV
BAMTKDFFNDU2QUIwMkI3OTkzNTZBNjk3NDQ3NERCNTlFMkEyRjMwREIxMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9KF9clUJh8eoaCUk3ghgb9/8
LBzOi4IIO2l7k4iH30A9cnQAoFkAjsf4jCM5Tv/ebkRBLjjyjBivcAFD0vP2pOYP
AQNiXj3K1IPitrJWddQtIr6beAKO5sDUgIGAPBwaoy0BZiuogxUEOAEoUSrqZa8B
F/hHZv82KTEATwHNi+0y0fblsuZDejdCuewXHtIJY2j9SvcitiYG6W2o8DFp2oZ6
q0H3+QpNjwQDWP+KkzAtP3jYkJ22TuXhC6Zd8InWiw17cTulEQEtiWMmZe5MpohO
M5dg3xV1VAlzFAtv8D6oEJXyfDPSfT51nG6u/g1PT5taFqtVw451j7OsG1IfAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUHkVqsCt5k1aml0R021niovMNsQgwHwYDVR0j
BBgwFoAUJsHR7ec9txCj1RiD7elasC4SzkwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZnd1VEUXQ5b2RnUXptYUFiZE1TbkZXamVadzNLQ0JuWDhFZTlmMnBY
ZHQvMC8yNkMxRDFFREU3M0RCNzEwQTNENTE4ODNFREU5NUFCMDJFMTJDRTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI2QzFEMUVERTczREI3MTBB
M0Q1MTg4M0VERTk1QUIwMkUxMkNFNEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmZ3dVRFF0OW9kZ1F6bWFBYmRNU25GV2plWnczS0NCblg4RWU5ZjJwWGR0LzAv
MzIzODMwMzQzYTMxMzI2NDM4M2EzOTM5MzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMzM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEEtiZAzANBgkqhkiG9w0BAQsF
AAOCAQEAZ0jKmELqMsdxKy6oKN7kBPkOTDJ9CTMk22XgXNRk0ec/vQzKToTs+ZGY
hL863OTJuLqeKyWXV59ZzJ8RVFuWUaSX+3votMXoslaUCNivdN6pY8Vs3WDxDdum
R3yKfgsIUFhRdUzLuH79dxht22H8QITndPUxD6mupBg1QESzKFngDbuzRlWkfwb2
PMoKV76Weh8l+PG/OKNiy0cs72p9bCp2u1sZa1h4bk+cJMDeYlrRSyORye+wfv0o
AlI4TEnMCvxtBG35XvNwbhrF/4RA4Oa/DHZtIkSle0qN0RmVqGQm6YcmhZwEhuy+
aobaaD8xeKUsf5xovd8lxtfgO/arlw==
-----END CERTIFICATE-----