Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa
File:                     323830343a333061383a3a2f33322d3332203d3e20323634393637.roa (raw, json)
Hash identifier:          LlA/OLfVyTx/49MEJhACOok0xfx/QoaxwBDK8+Qopv4=
Subject key identifier:   64:6B:B7:24:08:8E:78:6F:B3:EB:78:EA:D3:D8:07:F9:9B:46:D1:2E
Certificate issuer:       /CN=26F1864FE8FB04F586F022A4A61BDEB4D05ECF86
Certificate serial:       25160B279B2DDEEF18F49E29C6EAC34D3BA04863
Authority key identifier: 26:F1:86:4F:E8:FB:04:F5:86:F0:22:A4:A6:1B:DE:B4:D0:5E:CF:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa
Signing time:             Wed 19 Jun 2024 20:12:44 +0000
ROA not before:           Wed 19 Jun 2024 20:07:44 +0000
ROA not after:            Wed 18 Jun 2025 20:12:44 +0000
asID:                     264967
IP address blocks:        2804:30a8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:16:0b:27:9b:2d:de:ef:18:f4:9e:29:c6:ea:c3:4d:3b:a0:48:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F1864FE8FB04F586F022A4A61BDEB4D05ECF86
        Validity
            Not Before: Jun 19 20:07:44 2024 GMT
            Not After : Jun 18 20:12:44 2025 GMT
        Subject: CN=646BB724088E786FB3EB78EAD3D807F99B46D12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:1b:7f:30:0e:2e:e2:e8:56:10:ae:54:f4:
                    01:ab:d5:7a:e9:f2:26:42:3c:e9:e2:7e:b1:e0:3f:
                    d0:35:c0:39:c5:da:95:f2:4a:93:f2:3d:1d:af:bc:
                    09:3a:b6:26:19:18:f7:57:cc:21:af:c3:07:c5:da:
                    c6:6c:bb:c2:d8:1a:d1:c7:ed:b8:04:0b:a9:71:df:
                    30:41:f4:5a:90:16:b8:c8:7f:31:c3:44:ec:95:c0:
                    1b:93:6d:15:8c:e1:4c:b2:03:92:f7:85:47:d4:71:
                    ba:f0:f8:86:17:aa:fd:82:4b:94:39:ab:64:24:d7:
                    3f:dc:5b:2f:72:f2:57:d5:7e:67:04:c1:64:89:bf:
                    51:cb:28:e3:5d:62:a4:35:7b:3f:7b:df:0a:67:dd:
                    4b:6b:2f:92:e7:d4:58:cf:fb:b8:cf:06:82:44:c6:
                    68:c7:b1:e4:f3:77:97:fa:75:7f:4e:06:55:e3:8d:
                    0b:9c:81:f1:34:9f:f9:43:6a:8f:80:b9:84:bb:bf:
                    f8:1b:78:3b:ee:32:52:19:02:f1:9e:a6:dd:21:97:
                    ef:82:72:ee:ec:af:bc:c7:f0:aa:9c:88:f6:3e:b1:
                    d7:cb:ef:96:a9:0d:e2:11:a3:eb:76:c1:18:47:3a:
                    8c:88:bf:2f:c8:72:b5:3c:a7:2a:6e:44:a7:8d:aa:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6B:B7:24:08:8E:78:6F:B3:EB:78:EA:D3:D8:07:F9:9B:46:D1:2E
            X509v3 Authority Key Identifier:
                keyid:26:F1:86:4F:E8:FB:04:F5:86:F0:22:A4:A6:1B:DE:B4:D0:5E:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:ac:27:89:93:04:12:36:6c:36:5c:08:0f:fc:a6:44:cf:48:
         ce:ed:62:59:a8:f0:14:01:4b:5e:66:18:26:df:2e:5d:cd:44:
         55:9c:5a:4f:6e:f9:fb:24:1e:c2:78:80:de:68:1b:92:0c:75:
         36:e4:7a:d3:b6:88:53:17:e7:a9:09:8d:43:66:a6:78:c3:0d:
         cc:38:d9:24:d0:6f:1d:e8:67:58:90:1e:d7:f1:e4:4a:f9:fb:
         73:66:c1:4c:a4:da:7a:d6:c3:5a:38:30:9e:dc:19:19:54:89:
         78:0a:e3:a7:ab:dc:cc:53:d5:13:54:7a:b4:3c:93:3d:ee:ca:
         82:2c:33:e4:41:55:01:9d:61:fb:0a:91:7b:40:f2:d2:41:fb:
         fa:f0:dc:d6:28:bf:0a:c0:41:21:46:8d:7e:b2:9e:ce:40:a7:
         e0:c1:21:aa:79:1c:6f:30:6d:cf:a6:07:14:4b:b6:e2:20:36:
         54:2a:71:2c:36:91:ff:7d:f1:31:6b:33:cf:39:c7:da:b4:68:
         4e:90:7c:4e:f1:ee:6b:f5:69:e6:a9:02:c2:38:57:2e:ff:a1:
         5e:b2:31:28:b9:c5:0c:b6:2f:0e:af:bf:03:e0:eb:f4:9b:f6:
         a2:d6:ba:2c:ba:59:61:70:e0:6d:12:d9:67:80:9e:f3:3c:43:
         d5:1d:a9:31
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJRYLJ5st3u8Y9J4pxurDTTugSGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZGMTg2NEZFOEZCMDRGNTg2RjAyMkE0QTYxQkRFQjRE
MDVFQ0Y4NjAeFw0yNDA2MTkyMDA3NDRaFw0yNTA2MTgyMDEyNDRaMDMxMTAvBgNV
BAMTKDY0NkJCNzI0MDg4RTc4NkZCM0VCNzhFQUQzRDgwN0Y5OUI0NkQxMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdRt/MA4u4uhWEK5U9AGr1Xrp
8iZCPOnifrHgP9A1wDnF2pXySpPyPR2vvAk6tiYZGPdXzCGvwwfF2sZsu8LYGtHH
7bgEC6lx3zBB9FqQFrjIfzHDROyVwBuTbRWM4UyyA5L3hUfUcbrw+IYXqv2CS5Q5
q2Qk1z/cWy9y8lfVfmcEwWSJv1HLKONdYqQ1ez973wpn3UtrL5Ln1FjP+7jPBoJE
xmjHseTzd5f6dX9OBlXjjQucgfE0n/lDao+AuYS7v/gbeDvuMlIZAvGept0hl++C
cu7sr7zH8KqciPY+sdfL75apDeIRo+t2wRhHOoyIvy/IcrU8pypuRKeNqiQFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZGu3JAiOeG+z63jq09gH+ZtG0S4wHwYDVR0j
BBgwFoAUJvGGT+j7BPWG8CKkphvetNBez4YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01GVkZkVWhXRkJLWmE1Z3VLU3FQaW5SR2lNbm5Hd2pwaVVuVVJiR1pD
b2kvMC8yNkYxODY0RkU4RkIwNEY1ODZGMDIyQTRBNjFCREVCNEQwNUVDRjg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2RjE4NjRGRThGQjA0RjU4
NkYwMjJBNEE2MUJERUI0RDA1RUNGODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNRlZGZFVoV0ZCS1phNWd1S1NxUGluUkdpTW5uR3dqcGlVblVSYkdaQ29pLzAv
MzIzODMwMzQzYTMzMzA2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwqDANBgkqhkiG9w0BAQsFAAOCAQEAiawniZME
EjZsNlwID/ymRM9Izu1iWajwFAFLXmYYJt8uXc1EVZxaT275+yQewniA3mgbkgx1
NuR607aIUxfnqQmNQ2ameMMNzDjZJNBvHehnWJAe1/HkSvn7c2bBTKTaetbDWjgw
ntwZGVSJeArjp6vczFPVE1R6tDyTPe7Kgiwz5EFVAZ1h+wqRe0Dy0kH7+vDc1ii/
CsBBIUaNfrKezkCn4MEhqnkcbzBtz6YHFEu24iA2VCpxLDaR/33xMWszzznH2rRo
TpB8TvHua/Vp5qkCwjhXLv+hXrIxKLnFDLYvDq+/A+Dr9Jv2ota6LLpZYXDgbRLZ
Z4Ce8zxD1R2pMQ==
-----END CERTIFICATE-----