Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33322d3332203d3e20323731373534.roa (raw, json)
Hash identifier:          DLMAjKVgX+pfPw1uAyxDr3dJNRdZSiSFJZ//vZbz7CE=
Subject key identifier:   F8:15:38:3C:2B:D2:17:68:54:91:3D:25:35:28:A9:32:DC:C7:AA:B0
Certificate issuer:       /CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
Certificate serial:       6C3F7D438DF408D74C3E5614C28452A28AD29D70
Authority key identifier: 27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa
Signing time:             Tue 20 Feb 2024 14:00:00 +0000
ROA not before:           Tue 20 Feb 2024 13:55:00 +0000
ROA not after:            Tue 18 Feb 2025 14:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3f:7d:43:8d:f4:08:d7:4c:3e:56:14:c2:84:52:a2:8a:d2:9d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
        Validity
            Not Before: Feb 20 13:55:00 2024 GMT
            Not After : Feb 18 14:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:1d:b4:3d:78:5f:ef:80:7e:37:1c:da:49:
                    ce:fb:c6:bc:6f:f1:a0:e1:27:cf:aa:9f:b4:59:e2:
                    9e:14:6e:3a:fe:72:62:b4:fb:f4:0e:f2:a7:2f:28:
                    ce:c9:f4:40:a6:db:dd:7c:44:82:e5:74:d3:56:c1:
                    49:0f:06:13:01:20:05:b5:aa:2e:39:78:73:3e:19:
                    df:a6:88:cc:68:45:2d:8e:db:ad:82:91:4c:3d:68:
                    de:c3:68:29:ee:d0:30:fc:63:02:cd:d5:7e:17:22:
                    55:a1:bf:cf:41:1c:b1:eb:13:70:79:7b:78:2c:ca:
                    a8:58:3d:05:8c:11:7b:f7:08:5b:3b:39:f1:9e:e9:
                    4e:e3:fd:70:60:65:d7:fa:fe:fb:16:6c:fb:9e:2d:
                    e9:93:6b:92:69:b3:f7:2d:c1:cb:40:90:6c:1a:48:
                    d7:9b:4c:c6:33:1c:fe:55:f0:43:75:72:5f:f1:99:
                    fc:0c:4f:4a:cd:0b:3f:cf:68:62:e0:da:6f:12:43:
                    4f:fb:ec:2b:ba:b7:ae:5d:03:2b:7f:02:b2:f2:ae:
                    22:46:43:d2:fa:74:49:4d:50:28:6d:92:26:be:41:
                    4f:51:e3:f1:d4:6b:3a:f9:5e:ec:f9:11:33:78:d3:
                    1e:5d:ce:45:25:98:94:27:cb:cb:cc:6b:ed:9c:98:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:15:38:3C:2B:D2:17:68:54:91:3D:25:35:28:A9:32:DC:C7:AA:B0
            X509v3 Authority Key Identifier:
                keyid:27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:2c:12:cb:5e:d6:60:4c:1c:cf:04:cb:8d:00:c7:34:d7:
         f2:d0:12:80:03:67:81:0b:fb:03:10:08:aa:e9:e0:62:ad:c1:
         7f:5c:30:5c:05:22:a3:21:f4:da:17:94:eb:6b:86:d1:ee:87:
         01:8e:ce:e3:a1:4d:04:3b:8c:5f:3f:f7:9c:81:39:c7:37:aa:
         71:e0:21:83:4a:b9:21:c2:d2:7c:f5:78:9a:ea:03:0b:a2:ed:
         44:0c:1b:37:49:66:4b:ff:a1:e1:25:bf:58:b6:75:6f:6a:24:
         28:ec:b4:48:f6:29:b3:9e:f7:f3:05:ff:61:23:93:c6:9f:3a:
         4d:8a:10:c3:9b:18:e4:be:81:9e:92:16:95:80:44:93:f9:7c:
         05:99:79:71:ee:6a:cd:26:46:1b:c9:11:34:6f:5c:76:e4:c3:
         c0:41:09:12:bb:25:29:d0:37:fb:22:30:1c:f1:c3:04:16:bf:
         e8:5c:b2:c2:cb:66:3c:a6:fd:ea:28:c2:bb:3e:90:93:d1:b8:
         c9:fa:99:67:0d:93:1e:bf:de:5c:74:39:e2:95:bd:45:85:6d:
         a7:c9:e8:f5:96:92:19:8d:87:15:60:01:73:3d:5e:06:32:6e:
         7a:3b:27:e2:ce:41:4d:af:29:41:6a:48:e6:91:95:98:7b:0f:
         56:34:fa:21
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUbD99Q430CNdMPlYUwoRSoorSnXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjczOEI1RUQxMzIxQzgyQkRFMERDM0RGOUMwRDk5MzVG
N0I4QzAxQjAeFw0yNDAyMjAxMzU1MDBaFw0yNTAyMTgxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NCNjFEQjQzRDc4NUZFRjgw
N0UzNzFDREE0OUNFRkJDNkJDNkZGMUEwRTEyN0NGQUE5RkI0NTlFMjlFMTQ2RTNB
RkU3MjYyQjRGQkY0MEVGMkE3MkYyOENFQzlGNDQwQTZEQkREN0M0NDgyRTU3NEQz
NTZDMTQ5MEYwNjEzMDEyMDA1QjVBQTJFMzk3ODczM0UxOURGQTY4OENDNjg0NTJE
OEVEQkFEODI5MTRDM0Q2OERFQzM2ODI5RUVEMDMwRkM2MzAyQ0RENTdFMTcyMjU1
QTFCRkNGNDExQ0IxRUIxMzcwNzk3Qjc4MkNDQUE4NTgzRDA1OEMxMTdCRjcwODVC
M0IzOUYxOUVFOTRFRTNGRDcwNjA2NUQ3RkFGRUZCMTY2Q0ZCOUUyREU5OTM2Qjky
NjlCM0Y3MkRDMUNCNDA5MDZDMUE0OEQ3OUI0Q0M2MzMxQ0ZFNTVGMDQzNzU3MjVG
RjE5OUZDMEM0RjRBQ0QwQjNGQ0Y2ODYyRTBEQTZGMTI0MzRGRkJFQzJCQkFCN0FF
NUQwMzJCN0YwMkIyRjJBRTIyNDY0M0QyRkE3NDQ5NEQ1MDI4NkQ5MjI2QkU0MTRG
NTFFM0YxRDQ2QjNBRjk1RUVDRjkxMTMzNzhEMzFFNURDRTQ1MjU5ODk0MjdDQkNC
Q0M2QkVEOUM5ODYxOTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzLYdtD14X++Afjcc2knO+8a8b/Gg4SfPqp+0WeKeFG46/nJitPv0
DvKnLyjOyfRAptvdfESC5XTTVsFJDwYTASAFtaouOXhzPhnfpojMaEUtjtutgpFM
PWjew2gp7tAw/GMCzdV+FyJVob/PQRyx6xNweXt4LMqoWD0FjBF79whbOznxnulO
4/1wYGXX+v77Fmz7ni3pk2uSabP3LcHLQJBsGkjXm0zGMxz+VfBDdXJf8Zn8DE9K
zQs/z2hi4NpvEkNP++wrureuXQMrfwKy8q4iRkPS+nRJTVAobZImvkFPUePx1Gs6
+V7s+REzeNMeXc5FJZiUJ8vLzGvtnJhhlQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FPgVODwr0hdoVJE9JTUoqTLcx6qwMB8GA1UdIwQYMBaAFCc4te0TIcgr3g3D35wN
mTX3uMAbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JxZDRrdWtLbWVOb2Y5
WEdEMkJTY2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzAvMjczOEI1RUQxMzIxQzgy
QkRFMERDM0RGOUMwRDk5MzVGN0I4QzAxQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yNzM4QjVFRDEzMjFDODJCREUwREMzREY5QzBEOTkzNUY3QjhD
MDFCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CcWQ0a3VrS21lTm9mOVhHRDJC
U2Noc2RxZGFCVUN0bTN4MzNyU3BGTGNIMi8wLzMyMzgzMDM0M2EzODMwMzgzMDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMTM3MzUzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
gIAwDQYJKoZIhvcNAQELBQADggEBAHGgLBLLXtZgTBzPBMuNAMc01/LQEoADZ4EL
+wMQCKrp4GKtwX9cMFwFIqMh9NoXlOtrhtHuhwGOzuOhTQQ7jF8/95yBOcc3qnHg
IYNKuSHC0nz1eJrqAwui7UQMGzdJZkv/oeElv1i2dW9qJCjstEj2KbOe9/MF/2Ej
k8afOk2KEMObGOS+gZ6SFpWARJP5fAWZeXHuas0mRhvJETRvXHbkw8BBCRK7JSnQ
N/siMBzxwwQWv+hcssLLZjym/eoowrs+kJPRuMn6mWcNkx6/3lx0OeKVvUWFbafJ
6PWWkhmNhxVgAXM9XgYybno7J+LOQU2vKUFqSOaRlZh7D1Y0+iE=
-----END CERTIFICATE-----