Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a3a2f33322d313238203d3e20323731313334.roa
File:                     323830343a373663383a3a2f33322d313238203d3e20323731313334.roa (raw, json)
Hash identifier:          /Vg29+bTAjB+AKmcw2pUPqUlm71ESIAkFaWxNdo1yy0=
Subject key identifier:   B4:B6:38:B6:B6:76:B5:39:83:2D:E2:C1:54:71:02:E5:E8:BE:15:4B
Certificate issuer:       /CN=B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09
Certificate serial:       2BAEBBC0F4C5BF38757C6A64CE0AAF36EF5B175D
Authority key identifier: B8:4D:B7:C8:E0:02:C7:BD:63:00:4D:52:A6:EF:D4:A7:C9:3A:5F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a3a2f33322d313238203d3e20323731313334.roa
Signing time:             Thu 27 Jun 2024 15:48:55 +0000
ROA not before:           Thu 27 Jun 2024 15:43:55 +0000
ROA not after:            Thu 26 Jun 2025 15:48:55 +0000
asID:                     271134
IP address blocks:        2804:76c8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ae:bb:c0:f4:c5:bf:38:75:7c:6a:64:ce:0a:af:36:ef:5b:17:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09
        Validity
            Not Before: Jun 27 15:43:55 2024 GMT
            Not After : Jun 26 15:48:55 2025 GMT
        Subject: CN=B4B638B6B676B539832DE2C1547102E5E8BE154B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:bd:ca:a0:c7:7e:29:3f:8c:2e:70:e3:b8:
                    39:03:23:74:3a:7a:e2:58:2c:74:f0:6c:c6:66:b3:
                    f8:88:b6:e1:c6:1f:25:ba:fa:1f:7a:c3:16:be:e0:
                    92:c8:41:83:6e:4e:9f:97:9b:8d:15:93:34:cc:9b:
                    90:3b:62:2b:62:0d:70:5c:d3:ea:58:90:c8:97:09:
                    36:01:48:40:a5:11:2b:4c:cb:8e:52:12:5d:7c:a7:
                    2c:d9:8c:22:ce:b2:df:58:a9:04:71:ff:aa:43:f9:
                    67:4d:ed:fd:a3:c3:a2:f4:0c:87:35:6c:44:b4:d2:
                    ed:6e:69:95:4e:e8:c6:7f:c8:97:7c:a6:af:a5:cc:
                    54:e7:1f:88:4a:d2:cb:73:fe:bb:73:19:f0:71:f6:
                    09:7d:26:48:7a:8d:68:c5:cb:ac:c5:c0:0d:8d:3b:
                    a2:84:e3:49:85:b8:6c:d1:2f:d1:2b:79:0c:28:62:
                    18:e2:4c:57:98:60:4b:fe:06:a8:a1:8a:f5:d8:f4:
                    29:07:ef:b3:a7:f7:7a:3b:fa:b6:54:8c:50:eb:b0:
                    8c:59:26:04:3b:47:8d:84:50:e0:c8:d0:3d:6b:41:
                    5a:95:cc:fe:44:8a:cd:da:31:68:ce:6d:3e:b6:44:
                    70:fa:75:c5:fa:66:9f:a9:fd:ab:51:b7:fd:76:91:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B6:38:B6:B6:76:B5:39:83:2D:E2:C1:54:71:02:E5:E8:BE:15:4B
            X509v3 Authority Key Identifier:
                keyid:B8:4D:B7:C8:E0:02:C7:BD:63:00:4D:52:A6:EF:D4:A7:C9:3A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a3a2f33322d313238203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:d1:76:50:82:bc:d2:d6:54:3b:f3:c4:4d:5c:29:f1:57:
         5f:c5:bb:52:25:13:a9:bb:fe:87:58:54:ec:6e:9b:6b:78:13:
         6d:e0:cf:e4:7d:a8:7e:eb:2a:c4:f2:94:63:21:ef:7e:a8:57:
         ab:94:a2:78:35:a7:58:75:bc:ab:b8:e4:19:94:41:61:85:e4:
         53:a0:5a:af:fd:7e:27:f2:ce:9d:31:c0:68:c0:27:93:1d:6f:
         bf:2f:d2:dc:19:91:6b:63:2b:13:04:00:80:46:c6:68:f5:df:
         77:1d:21:b2:eb:10:79:49:93:11:68:01:d1:44:48:e3:5a:d7:
         03:ac:0e:98:11:3f:dd:60:d6:f0:ab:07:e2:2b:b7:9c:0f:21:
         06:dc:68:1a:d7:cd:df:fb:30:b3:d3:90:a0:87:f1:0c:d3:22:
         aa:5c:17:14:a9:7b:fa:64:13:ab:15:34:a8:7d:eb:10:e6:c8:
         31:93:63:85:e9:03:10:39:48:43:02:4e:04:59:da:01:e8:0b:
         7d:a5:e3:82:f1:6d:f2:82:b0:4b:07:95:4f:30:c4:74:13:17:
         4b:f2:0f:ff:8c:5e:7f:3d:93:86:e0:d9:83:5c:c9:54:0e:52:
         52:50:e1:7b:55:c5:30:73:85:40:b4:25:a9:89:d2:72:59:33:
         c7:09:5f:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUK667wPTFvzh1fGpkzgqvNu9bF10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg0REI3QzhFMDAyQzdCRDYzMDA0RDUyQTZFRkQ0QTdD
OTNBNUYwOTAeFw0yNDA2MjcxNTQzNTVaFw0yNTA2MjYxNTQ4NTVaMDMxMTAvBgNV
BAMTKEI0QjYzOEI2QjY3NkI1Mzk4MzJERTJDMTU0NzEwMkU1RThCRTE1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7b3KoMd+KT+MLnDjuDkDI3Q6
euJYLHTwbMZms/iItuHGHyW6+h96wxa+4JLIQYNuTp+Xm40VkzTMm5A7YitiDXBc
0+pYkMiXCTYBSEClEStMy45SEl18pyzZjCLOst9YqQRx/6pD+WdN7f2jw6L0DIc1
bES00u1uaZVO6MZ/yJd8pq+lzFTnH4hK0stz/rtzGfBx9gl9Jkh6jWjFy6zFwA2N
O6KE40mFuGzRL9EreQwoYhjiTFeYYEv+BqihivXY9CkH77On93o7+rZUjFDrsIxZ
JgQ7R42EUODI0D1rQVqVzP5Eis3aMWjObT62RHD6dcX6Zp+p/atRt/12kco7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUtLY4trZ2tTmDLeLBVHEC5ei+FUswHwYDVR0j
BBgwFoAUuE23yOACx71jAE1Spu/Up8k6XwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhVM1FoTWF0aldYQW8yWEUzVTkzekxTR0hHY0JFR1pycmQ2MTdnTWFw
NHovMC9CODREQjdDOEUwMDJDN0JENjMwMDRENTJBNkVGRDRBN0M5M0E1RjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NERCN0M4RTAwMkM3QkQ2
MzAwNEQ1MkE2RUZENEE3QzkzQTVGMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoVTNRaE1hdGpXWEFvMlhFM1U5M3pMU0dIR2NCRUdacnJkNjE3Z01hcDR6LzAv
MzIzODMwMzQzYTM3MzY2MzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHbIMA0GCSqGSIb3DQEBCwUAA4IBAQBrgdF2
UIK80tZUO/PETVwp8VdfxbtSJROpu/6HWFTsbptreBNt4M/kfah+6yrE8pRjIe9+
qFerlKJ4NadYdbyruOQZlEFhheRToFqv/X4n8s6dMcBowCeTHW+/L9LcGZFrYysT
BACARsZo9d93HSGy6xB5SZMRaAHRREjjWtcDrA6YET/dYNbwqwfiK7ecDyEG3Gga
183f+zCz05Cgh/EM0yKqXBcUqXv6ZBOrFTSofesQ5sgxk2OF6QMQOUhDAk4EWdoB
6At9peOC8W3ygrBLB5VPMMR0ExdL8g//jF5/PZOG4NmDXMlUDlJSUOF7VcUwc4VA
tCWpidJyWTPHCV97
-----END CERTIFICATE-----