Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
File:                     323830343a363862633a3a2f33322d3332203d3e20323639373132.roa (raw, json)
Hash identifier:          Iv4Tm3hHKiEFOvgdegfWPkIGOP3WVq9EJq6M7A/qgUU=
Subject key identifier:   D3:F4:A3:E1:31:C6:FB:96:F4:1B:3A:68:83:92:6F:16:AC:84:7D:B5
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       36BC19F3D9D87561C8CB49AD3D646601FCF7D0E9
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa
Signing time:             Mon 24 Feb 2025 17:20:06 +0000
ROA not before:           Mon 24 Feb 2025 17:15:06 +0000
ROA not after:            Mon 23 Feb 2026 17:20:06 +0000
asID:                     269712
IP address blocks:        2804:68bc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bc:19:f3:d9:d8:75:61:c8:cb:49:ad:3d:64:66:01:fc:f7:d0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Feb 24 17:15:06 2025 GMT
            Not After : Feb 23 17:20:06 2026 GMT
        Subject: CN=D3F4A3E131C6FB96F41B3A6883926F16AC847DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:0b:4e:d8:20:0a:f5:5d:74:aa:4b:e2:7c:
                    b6:5e:ac:ff:32:75:01:28:9b:02:63:02:01:71:a2:
                    d6:7d:78:a9:4a:5a:be:bc:79:d2:ae:4d:3f:28:87:
                    23:48:20:d6:18:5f:18:07:fd:3a:9a:7a:96:26:8c:
                    2d:06:6b:a6:36:f1:ce:c6:98:99:b1:3b:c2:c1:85:
                    ea:fd:6f:ff:96:98:c5:bf:1e:30:56:bf:0e:71:1a:
                    ca:55:34:f6:3f:be:5e:83:46:b5:f0:96:15:ef:ee:
                    0f:7b:7a:92:aa:3b:09:98:65:cb:fc:45:54:f0:27:
                    39:d8:d3:b7:32:58:d3:e6:40:49:4e:b0:5e:0d:bf:
                    f0:b3:a5:5a:df:fb:db:6b:ad:81:35:59:26:db:7e:
                    1d:2b:1d:aa:c8:6b:b5:15:8e:8d:8d:c8:5e:b9:48:
                    61:40:af:c8:04:82:27:2d:ac:0b:40:b8:e7:14:ce:
                    f2:77:07:c8:ce:17:c9:aa:f2:b9:0d:3d:8e:00:eb:
                    af:c8:60:d7:07:50:a1:9d:ed:7e:ee:cd:b3:e4:5e:
                    39:17:bd:e4:57:f6:62:e7:bb:0a:d8:f9:4b:37:52:
                    2a:0d:95:c5:82:c9:7a:37:cd:fe:ba:6c:7a:b5:3d:
                    d3:8c:cc:d6:1e:95:14:db:3d:8f:b6:86:85:0a:97:
                    00:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F4:A3:E1:31:C6:FB:96:F4:1B:3A:68:83:92:6F:16:AC:84:7D:B5
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3332203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:56:c3:f7:71:ba:e2:b7:25:92:26:24:5e:fa:d4:1a:35:44:
         15:83:e0:a8:cb:23:df:19:fb:6f:15:a3:ab:c6:6f:27:c1:c0:
         b0:73:da:57:39:27:84:56:f9:60:47:8a:54:44:08:63:ef:0a:
         1d:bd:e3:91:b5:04:5d:11:f4:ff:e7:83:42:a9:bd:af:c0:29:
         a7:7d:a4:d6:20:31:13:6b:63:72:63:e7:95:bd:63:66:cb:08:
         2b:85:50:f5:6d:eb:af:fe:6f:b1:e5:03:bc:ba:ae:93:ad:38:
         fc:f8:b7:9e:c0:8a:23:b8:f5:78:68:dc:79:1e:52:de:24:cd:
         e0:4b:67:bb:c1:35:2b:ad:10:d1:86:0c:99:37:b1:3f:d3:c6:
         2b:c4:8b:8b:30:29:53:6f:21:39:e0:b9:7e:60:b2:eb:ed:9d:
         a2:fc:b6:8b:50:31:26:51:6e:01:fa:3f:74:39:cc:0a:17:93:
         03:2b:18:c2:da:87:8d:b3:a4:e2:cc:63:24:28:f7:e3:b5:b5:
         c7:88:bf:42:64:6b:40:f1:d3:9a:48:cd:7b:1a:ac:fd:76:0c:
         6e:2c:1f:68:d9:eb:cb:0e:71:12:30:62:e4:82:3c:2a:e1:c0:
         0a:1d:c5:e5:30:d9:bf:d9:ce:76:b3:6f:79:44:05:cd:cf:51:
         08:eb:c9:33
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNrwZ89nYdWHIy0mtPWRmAfz30OkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF
NjBCODVBMjAeFw0yNTAyMjQxNzE1MDZaFw0yNjAyMjMxNzIwMDZaMDMxMTAvBgNV
BAMTKEQzRjRBM0UxMzFDNkZCOTZGNDFCM0E2ODgzOTI2RjE2QUM4NDdEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBiAtO2CAK9V10qkvifLZerP8y
dQEomwJjAgFxotZ9eKlKWr68edKuTT8ohyNIINYYXxgH/TqaepYmjC0Ga6Y28c7G
mJmxO8LBher9b/+WmMW/HjBWvw5xGspVNPY/vl6DRrXwlhXv7g97epKqOwmYZcv8
RVTwJznY07cyWNPmQElOsF4Nv/CzpVrf+9trrYE1WSbbfh0rHarIa7UVjo2NyF65
SGFAr8gEgictrAtAuOcUzvJ3B8jOF8mq8rkNPY4A66/IYNcHUKGd7X7uzbPkXjkX
veRX9mLnuwrY+Us3UioNlcWCyXo3zf66bHq1PdOMzNYelRTbPY+2hoUKlwA9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0/Sj4THG+5b0Gzpog5JvFqyEfbUwHwYDVR0j
BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt
MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0
NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv
MzIzODMwMzQzYTM2Mzg2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzczMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARovDANBgkqhkiG9w0BAQsFAAOCAQEAT1bD93G6
4rclkiYkXvrUGjVEFYPgqMsj3xn7bxWjq8ZvJ8HAsHPaVzknhFb5YEeKVEQIY+8K
Hb3jkbUEXRH0/+eDQqm9r8App32k1iAxE2tjcmPnlb1jZssIK4VQ9W3rr/5vseUD
vLquk604/Pi3nsCKI7j1eGjceR5S3iTN4Etnu8E1K60Q0YYMmTexP9PGK8SLizAp
U28hOeC5fmCy6+2dovy2i1AxJlFuAfo/dDnMCheTAysYwtqHjbOk4sxjJCj347W1
x4i/QmRrQPHTmkjNexqs/XYMbiwfaNnryw5xEjBi5II8KuHACh3F5TDZv9nOdrNv
eUQFzc9RCOvJMw==
-----END CERTIFICATE-----