Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/323830343a326537383a3a2f33322d3336203d3e203238323133.roa
File:                     323830343a326537383a3a2f33322d3336203d3e203238323133.roa (raw, json)
Hash identifier:          hFG7Y9f2OEnM5xNjDNtUzrE/F2whD2B/grz7UmnaAbo=
Subject key identifier:   01:1B:C6:8E:B0:D8:5A:DC:B5:2B:49:17:E8:10:E3:92:E4:8B:C7:B0
Certificate issuer:       /CN=B4DFF47C5B3118AFC71F35AA50D26565D807E777
Certificate serial:       C7C52CB411460E744A636B293D83DCE2D48AE9
Authority key identifier: B4:DF:F4:7C:5B:31:18:AF:C7:1F:35:AA:50:D2:65:65:D8:07:E7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/323830343a326537383a3a2f33322d3336203d3e203238323133.roa
Signing time:             Fri 15 Mar 2024 20:00:00 +0000
ROA not before:           Fri 15 Mar 2024 19:55:00 +0000
ROA not after:            Sat 15 Mar 2025 20:00:00 +0000
asID:                     28213
IP address blocks:        2804:2e78::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:c5:2c:b4:11:46:0e:74:4a:63:6b:29:3d:83:dc:e2:d4:8a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DFF47C5B3118AFC71F35AA50D26565D807E777
        Validity
            Not Before: Mar 15 19:55:00 2024 GMT
            Not After : Mar 15 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:86:f6:d1:3e:0e:72:1b:40:43:b4:96:1a:
                    f5:03:0d:db:f6:87:97:a1:b3:b4:03:6a:ef:3f:9e:
                    f9:4f:30:d6:37:e7:d7:b4:ae:e0:b8:0c:47:34:36:
                    fa:bd:44:c2:9b:83:61:a1:49:0e:5a:7c:fa:c0:28:
                    47:a0:7e:14:a2:66:b0:29:4b:f6:6e:ff:0f:5c:f5:
                    b5:d4:c0:6b:f6:99:77:8e:19:e3:73:d3:89:12:ac:
                    75:6b:fa:aa:9f:5a:9f:fa:27:4a:4c:8a:01:77:09:
                    2b:7a:cd:db:fe:eb:cf:55:71:68:85:bb:b3:57:b6:
                    12:a6:74:c7:7b:66:4c:0d:f7:58:e3:79:3e:7a:54:
                    0e:6a:fd:31:f1:27:82:73:73:c7:a5:33:16:68:79:
                    cb:2a:1e:d7:65:c0:e6:62:36:2a:0f:db:a7:3a:16:
                    3d:1a:cb:71:7b:66:a5:ed:05:54:64:ab:09:70:71:
                    ae:9f:a9:2a:1a:4e:50:a7:41:45:93:28:d3:13:86:
                    c6:0f:51:75:d3:45:7c:3c:cd:97:ea:bb:f1:ae:59:
                    84:e1:0f:08:6f:e5:6a:90:b2:52:10:14:9a:07:a3:
                    b8:fe:d8:b1:1d:2c:11:47:c9:7c:1f:f4:cf:8f:9c:
                    7c:8d:8c:17:e1:d7:c8:ef:4e:a2:1a:ba:ea:47:e1:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:C6:8E:B0:D8:5A:DC:B5:2B:49:17:E8:10:E3:92:E4:8B:C7:B0
            X509v3 Authority Key Identifier:
                keyid:B4:DF:F4:7C:5B:31:18:AF:C7:1F:35:AA:50:D2:65:65:D8:07:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/323830343a326537383a3a2f33322d3336203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:14:70:be:74:1d:52:c9:4b:c1:bb:fe:a8:73:ca:d8:35:
         82:86:90:4e:3d:cc:e6:72:ba:a7:56:3d:c4:a8:a7:88:21:f7:
         18:46:aa:1c:90:a1:e3:f7:67:a0:a9:c9:7e:2e:0b:5f:b2:e9:
         3a:c1:b7:07:30:4d:8b:5b:54:a2:61:5d:a3:8d:e3:3c:5e:31:
         c0:e9:c4:17:4e:87:ce:42:c0:99:c8:7f:84:2c:bb:a2:94:f7:
         ed:ce:32:22:53:1c:b3:6b:ab:7a:d1:b4:ee:5a:59:3f:00:3d:
         78:7f:55:db:59:54:5c:90:cc:3a:7d:79:02:0f:ac:74:20:c0:
         b8:c2:5b:ed:78:12:d2:37:4c:8e:ac:ac:5c:f4:b6:0c:c6:18:
         3a:a9:f1:5e:db:59:7a:8d:b3:c5:b3:4a:3c:c8:49:52:70:ca:
         c8:16:a3:80:2b:c3:02:a6:ed:82:04:1d:bf:4c:f6:2c:dc:f7:
         e8:d1:ce:a5:c9:6d:df:4b:31:d2:5b:e4:df:83:b4:b8:11:4e:
         e2:86:ca:32:b5:d5:c7:c5:2d:06:c9:8d:a6:76:b2:99:0c:5e:
         04:34:eb:b9:8f:be:83:4a:14:6a:4a:9a:61:f8:a5:ad:73:f3:
         31:5f:6f:f3:8c:4c:cf:4f:07:e8:ea:bf:88:69:bc:87:97:08:
         60:30:65:b0
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUAMfFLLQRRg50SmNrKT2D3OLUiukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRERkY0N0M1QjMxMThBRkM3MUYzNUFBNTBEMjY1NjVE
ODA3RTc3NzAeFw0yNDAzMTUxOTU1MDBaFw0yNTAzMTUyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkVCMjg2RjZEMTNFMEU3MjFC
NDA0M0I0OTYxQUY1MDMwRERCRjY4Nzk3QTFCM0I0MDM2QUVGM0Y5RUY5NEYzMEQ2
MzdFN0Q3QjRBRUUwQjgwQzQ3MzQzNkZBQkQ0NEMyOUI4MzYxQTE0OTBFNUE3Q0ZB
QzAyODQ3QTA3RTE0QTI2NkIwMjk0QkY2NkVGRjBGNUNGNUI1RDRDMDZCRjY5OTc3
OEUxOUUzNzNEMzg5MTJBQzc1NkJGQUFBOUY1QTlGRkEyNzRBNEM4QTAxNzcwOTJC
N0FDRERCRkVFQkNGNTU3MTY4ODVCQkIzNTdCNjEyQTY3NEM3N0I2NjRDMERGNzU4
RTM3OTNFN0E1NDBFNkFGRDMxRjEyNzgyNzM3M0M3QTUzMzE2Njg3OUNCMkExRUQ3
NjVDMEU2NjIzNjJBMEZEQkE3M0ExNjNEMUFDQjcxN0I2NkE1RUQwNTU0NjRBQjA5
NzA3MUFFOUZBOTJBMUE0RTUwQTc0MTQ1OTMyOEQzMTM4NkM2MEY1MTc1RDM0NTdD
M0NDRDk3RUFCQkYxQUU1OTg0RTEwRjA4NkZFNTZBOTBCMjUyMTAxNDlBMDdBM0I4
RkVEOEIxMUQyQzExNDdDOTdDMUZGNENGOEY5QzdDOEQ4QzE3RTFEN0M4RUY0RUEy
MUFCQUVBNDdFMTdGMDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvrKG9tE+DnIbQEO0lhr1Aw3b9oeXobO0A2rvP575TzDWN+fXtK7g
uAxHNDb6vUTCm4NhoUkOWnz6wChHoH4UomawKUv2bv8PXPW11MBr9pl3jhnjc9OJ
Eqx1a/qqn1qf+idKTIoBdwkres3b/uvPVXFohbuzV7YSpnTHe2ZMDfdY43k+elQO
av0x8SeCc3PHpTMWaHnLKh7XZcDmYjYqD9unOhY9Gstxe2al7QVUZKsJcHGun6kq
Gk5Qp0FFkyjTE4bGD1F100V8PM2X6rvxrlmE4Q8Ib+VqkLJSEBSaB6O4/tixHSwR
R8l8H/TPj5x8jYwX4dfI706iGrrqR+F/BQIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FAEbxo6w2FrctStJF+gQ45Lki8ewMB8GA1UdIwQYMBaAFLTf9HxbMRivxx81qlDS
ZWXYB+d3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NMMTU4elVuR0NCQ05p
dG9RWWFaR2pEcncyanFuc3FEN055U3g5VGdlTFJ1LzAvQjRERkY0N0M1QjMxMThB
RkM3MUYzNUFBNTBEMjY1NjVEODA3RTc3Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNERGRjQ3QzVCMzExOEFGQzcxRjM1QUE1MEQyNjU2NUQ4MDdF
Nzc3LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DTDE1OHpVbkdDQkNOaXRvUVlh
WkdqRHJ3MmpxbnNxRDdOeVN4OVRnZUxSdS8wLzMyMzgzMDM0M2EzMjY1MzczODNh
M2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzgzMjMxMzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBC54
MA0GCSqGSIb3DQEBCwUAA4IBAQAc8xRwvnQdUslLwbv+qHPK2DWChpBOPczmcrqn
Vj3EqKeIIfcYRqockKHj92egqcl+Lgtfsuk6wbcHME2LW1SiYV2jjeM8XjHA6cQX
TofOQsCZyH+ELLuilPftzjIiUxyza6t60bTuWlk/AD14f1XbWVRckMw6fXkCD6x0
IMC4wlvteBLSN0yOrKxc9LYMxhg6qfFe21l6jbPFs0o8yElScMrIFqOAK8MCpu2C
BB2/TPYs3Pfo0c6lyW3fSzHSW+Tfg7S4EU7ihsoytdXHxS0GyY2mdrKZDF4ENOu5
j76DShRqSpph+KWtc/MxX2/zjEzPTwfo6r+IabyHlwhgMGWw
-----END CERTIFICATE-----