Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3335203d3e20323730363030.roa
File:                     323830343a366537633a3a2f33322d3335203d3e20323730363030.roa (raw, json)
Hash identifier:          fMOty5KLgxhCj9JaMKNIt5+Bp3A4O61xU7kRJHPD5gQ=
Subject key identifier:   87:B7:83:B4:95:85:2F:7F:0F:3B:1E:A3:0D:81:2E:7C:B3:31:9B:12
Certificate issuer:       /CN=62F7F7A7C17773714A20B25AC0C460134E4BD38C
Certificate serial:       3975EAA010BBB09868D471C702D9F34761CEA69E
Authority key identifier: 62:F7:F7:A7:C1:77:73:71:4A:20:B2:5A:C0:C4:60:13:4E:4B:D3:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62F7F7A7C17773714A20B25AC0C460134E4BD38C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3335203d3e20323730363030.roa
Signing time:             Fri 09 Feb 2024 14:57:13 +0000
ROA not before:           Fri 09 Feb 2024 14:52:13 +0000
ROA not after:            Fri 07 Feb 2025 14:57:13 +0000
asID:                     270600
IP address blocks:        2804:6e7c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:75:ea:a0:10:bb:b0:98:68:d4:71:c7:02:d9:f3:47:61:ce:a6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F7F7A7C17773714A20B25AC0C460134E4BD38C
        Validity
            Not Before: Feb  9 14:52:13 2024 GMT
            Not After : Feb  7 14:57:13 2025 GMT
        Subject: CN=87B783B495852F7F0F3B1EA30D812E7CB3319B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:c3:d2:84:59:c6:bd:8c:44:1f:63:32:a2:
                    b4:9f:f9:c3:d4:46:4f:1e:e3:a8:a8:dc:ac:67:1d:
                    d1:72:18:21:fe:6a:e6:d6:40:8e:22:20:95:4d:4a:
                    46:31:03:ef:36:fc:e5:06:68:f8:63:32:8a:a2:12:
                    b4:2c:1f:b1:5e:6a:df:e9:a9:ab:fb:6a:a0:6c:77:
                    48:fb:1c:59:19:92:8d:7d:dc:a0:06:04:5a:87:a8:
                    39:98:cc:24:2c:62:ef:df:7a:de:fa:91:08:e7:17:
                    3c:18:ca:d3:ec:29:b5:a4:75:20:aa:ad:bd:ff:78:
                    4b:fc:93:cc:fe:bb:03:e0:09:ef:9b:64:6d:57:fa:
                    f1:8c:b2:57:e1:d3:5c:51:39:9a:7d:a3:24:c4:c0:
                    c9:ec:39:ba:0a:26:f7:41:ad:bf:38:a0:9e:69:f5:
                    3c:51:6b:ce:a3:89:d2:d6:77:3e:b9:b1:4d:4f:d5:
                    81:55:73:3b:78:98:08:10:3b:ae:ae:5a:60:64:a4:
                    e6:48:ba:52:8a:57:06:44:06:2e:b2:10:80:7a:cd:
                    93:e7:09:13:64:6c:7b:0c:1c:e6:ed:24:d6:cf:a0:
                    1d:25:7d:a2:b6:ff:7a:3b:3e:4e:10:fa:11:13:61:
                    c8:2c:0c:b7:0e:4f:07:6a:7f:59:63:60:78:dd:f0:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B7:83:B4:95:85:2F:7F:0F:3B:1E:A3:0D:81:2E:7C:B3:31:9B:12
            X509v3 Authority Key Identifier:
                keyid:62:F7:F7:A7:C1:77:73:71:4A:20:B2:5A:C0:C4:60:13:4E:4B:D3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/62F7F7A7C17773714A20B25AC0C460134E4BD38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62F7F7A7C17773714A20B25AC0C460134E4BD38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3335203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:32:2b:c2:d7:46:3b:ca:62:c8:c0:bc:9f:ca:9e:2e:b9:ec:
         88:46:3c:ea:23:77:16:02:7d:88:53:79:a0:18:1d:e4:a4:4c:
         8b:67:16:4c:04:73:cb:55:d7:cf:96:6d:b9:b3:58:2a:5f:44:
         94:4a:32:d7:a7:8c:ff:d0:5f:cb:35:e0:5c:4c:62:1d:87:e4:
         a5:1d:78:ce:27:a4:23:13:ac:d3:12:1d:6e:af:1d:f6:f4:d6:
         3e:da:35:e4:d7:6a:29:3b:98:79:30:39:a5:05:27:68:2a:0c:
         c8:17:83:04:f6:66:31:8d:f4:99:a0:a4:fb:8e:3a:e4:01:84:
         de:74:5b:e6:7a:2a:62:2d:2a:db:1c:01:1e:bf:9f:a0:a2:f8:
         f0:92:12:82:a0:34:f6:13:ec:03:bf:1d:ae:e1:ad:9a:52:66:
         53:90:77:05:68:a3:b3:11:bd:2e:04:79:15:db:00:58:b9:40:
         c2:34:f5:58:05:09:46:3e:94:44:6d:28:ba:69:4d:e3:bb:3b:
         43:9c:56:9e:34:02:f0:b1:24:bf:6e:c1:56:70:ab:f9:e3:79:
         47:81:aa:9e:d9:45:5c:63:ca:3e:e4:35:ed:1b:b4:0f:26:23:
         0d:34:c5:ef:e0:c9:a3:19:8a:e1:c0:2b:4a:b9:36:30:ba:43:
         22:eb:02:26
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOXXqoBC7sJho1HHHAtnzR2HOpp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJGN0Y3QTdDMTc3NzM3MTRBMjBCMjVBQzBDNDYwMTM0
RTRCRDM4QzAeFw0yNDAyMDkxNDUyMTNaFw0yNTAyMDcxNDU3MTNaMDMxMTAvBgNV
BAMTKDg3Qjc4M0I0OTU4NTJGN0YwRjNCMUVBMzBEODEyRTdDQjMzMTlCMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZcPShFnGvYxEH2MyorSf+cPU
Rk8e46io3KxnHdFyGCH+aubWQI4iIJVNSkYxA+82/OUGaPhjMoqiErQsH7Feat/p
qav7aqBsd0j7HFkZko193KAGBFqHqDmYzCQsYu/fet76kQjnFzwYytPsKbWkdSCq
rb3/eEv8k8z+uwPgCe+bZG1X+vGMslfh01xROZp9oyTEwMnsOboKJvdBrb84oJ5p
9TxRa86jidLWdz65sU1P1YFVczt4mAgQO66uWmBkpOZIulKKVwZEBi6yEIB6zZPn
CRNkbHsMHObtJNbPoB0lfaK2/3o7Pk4Q+hETYcgsDLcOTwdqf1ljYHjd8PAvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUh7eDtJWFL38POx6jDYEufLMxmxIwHwYDVR0j
BBgwFoAUYvf3p8F3c3FKILJawMRgE05L04wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1Y0cEVvdUQ4cVRIREZwQW9kSE04QVZFbjU0UTFuWUFCWGZyazNzVUdF
czgvMC82MkY3RjdBN0MxNzc3MzcxNEEyMEIyNUFDMEM0NjAxMzRFNEJEMzhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYyRjdGN0E3QzE3NzczNzE0
QTIwQjI1QUMwQzQ2MDEzNEU0QkQzOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NWNHBFb3VEOHFUSERGcEFvZEhNOEFWRW41NFExbllBQlhmcmszc1VHRXM4LzAv
MzIzODMwMzQzYTM2NjUzNzYzM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNzMw
MzYzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARufDANBgkqhkiG9w0BAQsFAAOCAQEAVjIrwtdG
O8piyMC8n8qeLrnsiEY86iN3FgJ9iFN5oBgd5KRMi2cWTARzy1XXz5ZtubNYKl9E
lEoy16eM/9BfyzXgXExiHYfkpR14ziekIxOs0xIdbq8d9vTWPto15NdqKTuYeTA5
pQUnaCoMyBeDBPZmMY30maCk+4465AGE3nRb5noqYi0q2xwBHr+foKL48JISgqA0
9hPsA78druGtmlJmU5B3BWijsxG9LgR5FdsAWLlAwjT1WAUJRj6URG0oumlN47s7
Q5xWnjQC8LEkv27BVnCr+eN5R4GqntlFXGPKPuQ17Ru0DyYjDTTF7+DJoxmK4cAr
Srk2MLpDIusCJg==
-----END CERTIFICATE-----