Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa
File:                     323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa (raw, json)
Hash identifier:          bcG/r1gPH6gZR5bQ560dBw2HJr0pG2u0v5dT8MFMeW0=
Subject key identifier:   5B:EF:7B:89:5D:34:22:74:C7:82:7F:67:F8:16:24:4C:60:18:C3:B4
Certificate issuer:       /CN=3F18422C71C9046C3B4C766867F0CC989883236F
Certificate serial:       47F0893E2D8A577B4821ED80654941173F7B3324
Authority key identifier: 3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa
Signing time:             Mon 19 Feb 2024 11:49:31 +0000
ROA not before:           Mon 19 Feb 2024 11:44:31 +0000
ROA not after:            Mon 17 Feb 2025 11:49:31 +0000
asID:                     266022
IP address blocks:        2804:3944:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f0:89:3e:2d:8a:57:7b:48:21:ed:80:65:49:41:17:3f:7b:33:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F18422C71C9046C3B4C766867F0CC989883236F
        Validity
            Not Before: Feb 19 11:44:31 2024 GMT
            Not After : Feb 17 11:49:31 2025 GMT
        Subject: CN=5BEF7B895D342274C7827F67F816244C6018C3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:e0:c2:71:f1:5e:6a:b9:dd:fd:78:8f:c2:
                    23:5d:6d:df:4a:1c:a2:da:06:93:bc:b3:fe:9d:7d:
                    cc:70:11:64:78:47:23:5b:de:30:22:cb:12:cc:06:
                    b4:46:39:4d:c0:9a:dd:f8:38:d4:1f:40:0d:d2:0a:
                    41:05:da:6d:a0:9c:39:b7:ed:db:8a:35:6d:2e:9b:
                    ed:0a:ec:72:08:c7:77:70:2b:bf:11:fc:ef:8e:e0:
                    ee:53:eb:09:c8:17:a5:09:a8:8a:ce:f6:42:fe:08:
                    86:ab:8b:a1:f6:bc:ed:02:9f:05:d5:d6:71:c1:c4:
                    ea:15:1c:50:dc:05:b1:0e:a8:e4:81:bd:9f:da:c8:
                    d4:b2:56:a8:88:2c:6c:0a:19:61:b0:58:2f:73:5f:
                    af:d2:d4:23:2a:f0:4e:6f:de:32:bd:bf:c9:b5:86:
                    d9:71:cf:92:1c:bb:37:e4:8f:08:72:0d:cf:d5:98:
                    59:b9:15:06:08:17:5d:eb:a2:2c:71:78:d6:cd:57:
                    52:60:52:01:4c:16:d4:a8:cd:e8:04:8e:5c:ed:51:
                    aa:ec:7f:91:3e:c0:ba:b6:b0:88:f2:0a:d8:ce:ce:
                    47:91:5e:7c:b9:00:cd:23:ce:c3:50:30:23:a0:e7:
                    49:78:ed:27:30:a5:af:14:35:d1:56:56:b6:a5:24:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EF:7B:89:5D:34:22:74:C7:82:7F:67:F8:16:24:4C:60:18:C3:B4
            X509v3 Authority Key Identifier:
                keyid:3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3F18422C71C9046C3B4C766867F0CC989883236F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a633030303a3a2f33342d3334203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3944:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:90:ed:24:30:ae:65:92:05:d9:24:c1:2f:18:25:cd:11:
         af:65:2f:5b:de:64:74:af:ea:86:a3:cd:f3:95:8b:43:fb:f0:
         10:a9:bf:1d:31:33:30:de:ad:65:b7:19:5c:ac:9a:a6:6b:f9:
         f0:58:29:62:86:98:d1:5d:c3:a8:9c:e9:ad:ff:f6:9b:93:bd:
         83:d1:3d:5d:c7:96:03:54:b5:2c:5d:13:9c:f4:b0:3e:2d:4b:
         f5:9f:1d:dd:03:40:e3:2e:27:4d:31:d1:93:e8:c7:fe:2b:68:
         69:6b:2f:13:a9:7b:ac:8a:e3:66:88:90:9a:15:7b:c4:a5:63:
         f2:14:84:42:04:79:38:83:9d:49:4e:f1:e4:7e:ff:87:c5:a8:
         89:8a:e2:9f:c5:13:89:c8:63:74:b7:c3:27:1b:33:06:45:b6:
         0c:a6:8e:fe:ee:5a:73:ab:ca:b6:b1:78:46:4f:c3:13:50:d0:
         4a:c9:dd:89:ad:2d:14:f6:ff:e2:68:83:0b:4a:69:23:fd:c4:
         57:44:5f:2c:af:ca:7e:b2:2c:84:af:9a:2e:c2:76:55:9f:4d:
         b1:fb:c4:75:fc:91:9e:be:09:1d:41:51:ce:a3:56:8a:bd:f3:
         c2:75:77:51:e6:45:aa:f5:21:72:c1:d0:61:57:8f:6e:25:1c:
         2b:1d:55:18
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUR/CJPi2KV3tIIe2AZUlBFz97MyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxODQyMkM3MUM5MDQ2QzNCNEM3NjY4NjdGMENDOTg5
ODgzMjM2RjAeFw0yNDAyMTkxMTQ0MzFaFw0yNTAyMTcxMTQ5MzFaMDMxMTAvBgNV
BAMTKDVCRUY3Qjg5NUQzNDIyNzRDNzgyN0Y2N0Y4MTYyNDRDNjAxOEMzQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcz+DCcfFearnd/XiPwiNdbd9K
HKLaBpO8s/6dfcxwEWR4RyNb3jAiyxLMBrRGOU3Amt34ONQfQA3SCkEF2m2gnDm3
7duKNW0um+0K7HIIx3dwK78R/O+O4O5T6wnIF6UJqIrO9kL+CIari6H2vO0CnwXV
1nHBxOoVHFDcBbEOqOSBvZ/ayNSyVqiILGwKGWGwWC9zX6/S1CMq8E5v3jK9v8m1
htlxz5IcuzfkjwhyDc/VmFm5FQYIF13roixxeNbNV1JgUgFMFtSozegEjlztUars
f5E+wLq2sIjyCtjOzkeRXny5AM0jzsNQMCOg50l47Scwpa8UNdFWVralJIGjAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUW+97iV00InTHgn9n+BYkTGAYw7QwHwYDVR0j
BBgwFoAUPxhCLHHJBGw7THZoZ/DMmJiDI28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnc4RjVFb2Nkc0NrY040WWZLQlBrWUp0Tno0VUZEcEZMcnl0elZpN2dl
dW4vMC8zRjE4NDIyQzcxQzkwNDZDM0I0Qzc2Njg2N0YwQ0M5ODk4ODMyMzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMTg0MjJDNzFDOTA0NkMz
QjRDNzY2ODY3RjBDQzk4OTg4MzIzNkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3OEY1RW9jZHNDa2NONFlmS0JQa1lKdE56NFVGRHBGTHJ5dHpWaTdnZXVuLzAv
MzIzODMwMzQzYTMzMzkzNDM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMwMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOUTAMA0GCSqGSIb3DQEBCwUA
A4IBAQAKYJDtJDCuZZIF2STBLxglzRGvZS9b3mR0r+qGo83zlYtD+/AQqb8dMTMw
3q1ltxlcrJqma/nwWClihpjRXcOonOmt//abk72D0T1dx5YDVLUsXROc9LA+LUv1
nx3dA0DjLidNMdGT6Mf+K2hpay8TqXusiuNmiJCaFXvEpWPyFIRCBHk4g51JTvHk
fv+HxaiJiuKfxROJyGN0t8MnGzMGRbYMpo7+7lpzq8q2sXhGT8MTUNBKyd2JrS0U
9v/iaIMLSmkj/cRXRF8sr8p+siyEr5ouwnZVn02x+8R1/JGevgkdQVHOo1aKvfPC
dXdR5kWq9SFywdBhV49uJRwrHVUY
-----END CERTIFICATE-----