Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa
File:                     323830343a383064303a3a2f33322d3438203d3e20323732343134.roa (raw, json)
Hash identifier:          rdjQ6O6tU+CdVye0FofScg0IAx+w3a4o0CppMO7HSaE=
Subject key identifier:   40:4A:B5:A5:3B:02:00:BE:D2:59:B1:06:BE:93:C7:7A:C9:1E:7B:66
Certificate issuer:       /CN=18B854A9A3D838C10CF123C6F7913E1A3CA401B5
Certificate serial:       4237C0104C389E4F326B8B55CBE62BEA4364318C
Authority key identifier: 18:B8:54:A9:A3:D8:38:C1:0C:F1:23:C6:F7:91:3E:1A:3C:A4:01:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa
Signing time:             Thu 01 Feb 2024 19:14:22 +0000
ROA not before:           Thu 01 Feb 2024 19:09:22 +0000
ROA not after:            Thu 30 Jan 2025 19:14:22 +0000
asID:                     272414
IP address blocks:        2804:80d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:37:c0:10:4c:38:9e:4f:32:6b:8b:55:cb:e6:2b:ea:43:64:31:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B854A9A3D838C10CF123C6F7913E1A3CA401B5
        Validity
            Not Before: Feb  1 19:09:22 2024 GMT
            Not After : Jan 30 19:14:22 2025 GMT
        Subject: CN=404AB5A53B0200BED259B106BE93C77AC91E7B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:99:36:75:d1:6e:3f:30:42:74:bb:32:5d:
                    2e:a9:dc:27:80:27:f9:60:32:bf:40:94:3f:97:e8:
                    82:bc:6c:25:50:50:69:e0:ca:52:6f:50:7a:d4:4a:
                    48:87:c8:f7:2d:a8:d2:b4:f7:3f:f6:56:4c:9b:8e:
                    4c:8b:54:9c:24:b4:07:9e:a0:1c:cd:5d:9c:5b:5c:
                    71:b0:c0:cc:09:05:07:a1:a4:1f:bc:9a:2f:19:c8:
                    91:03:28:68:12:dd:00:6b:3d:40:7c:49:82:05:ea:
                    f6:7c:06:76:c3:b4:da:b9:e2:48:7b:3f:79:1a:e5:
                    c4:91:0c:20:88:9b:bb:6e:25:02:01:6d:bf:5a:0a:
                    92:bc:b3:f2:80:17:7b:ad:e2:d2:9d:fa:51:9d:3d:
                    8b:9a:cc:e5:9a:a1:64:b8:36:1d:ec:d3:2d:1f:88:
                    0a:a0:73:7f:a5:55:e5:a2:15:00:8d:cc:88:a1:3b:
                    2e:b4:db:77:3a:1f:00:aa:66:b3:69:5a:71:42:fc:
                    d8:fe:60:c3:c8:51:c6:77:0d:2c:2c:ef:c0:24:2f:
                    f1:7b:7e:a6:81:68:1c:89:40:e9:45:24:7c:19:f0:
                    b1:fb:63:64:8e:bf:f4:7b:f4:ca:95:ab:09:9d:ea:
                    f1:db:b6:5e:59:b9:ac:ba:53:99:31:21:75:53:7e:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:B5:A5:3B:02:00:BE:D2:59:B1:06:BE:93:C7:7A:C9:1E:7B:66
            X509v3 Authority Key Identifier:
                keyid:18:B8:54:A9:A3:D8:38:C1:0C:F1:23:C6:F7:91:3E:1A:3C:A4:01:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B854A9A3D838C10CF123C6F7913E1A3CA401B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/323830343a383064303a3a2f33322d3438203d3e20323732343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:a5:2a:04:fa:67:90:91:01:21:7a:a7:94:b4:ac:fa:59:15:
         e8:24:2e:97:e6:ef:82:5c:1a:37:65:62:93:4b:b3:19:79:51:
         27:99:0d:3c:82:99:1a:af:0b:f4:67:9c:fa:40:44:8c:d8:2f:
         4a:0c:71:36:8d:06:4b:0e:d0:c7:00:84:0a:5e:53:df:a1:dd:
         ce:d1:88:28:06:28:fb:ab:d4:32:98:ff:55:1f:76:56:b8:c5:
         04:00:36:26:dc:97:31:20:0c:c5:46:10:7c:26:28:99:35:13:
         4b:7f:15:1a:2f:1b:e5:4b:3f:b7:c9:69:16:e1:b2:60:b0:a3:
         16:be:df:68:86:df:10:97:a4:9c:96:b6:48:41:ae:15:89:f7:
         68:7d:0d:12:6a:01:48:52:e5:de:af:55:65:fb:d0:2c:58:d7:
         e4:72:f0:68:be:0c:7f:2e:d4:21:6d:25:44:49:19:7e:3d:d2:
         e4:6d:42:88:c9:c3:8e:5d:65:88:d1:89:4c:84:55:33:46:f7:
         5f:26:2f:ee:c4:01:b7:7f:f9:74:a4:1b:94:58:34:84:3d:e9:
         a0:b1:b9:41:fe:5c:12:6b:41:b1:ae:bf:64:14:39:73:3d:91:
         1c:c1:44:f4:14:0c:ac:10:91:09:08:2e:14:24:66:47:d9:8f:
         ec:77:64:2e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQjfAEEw4nk8ya4tVy+Yr6kNkMYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThCODU0QTlBM0Q4MzhDMTBDRjEyM0M2Rjc5MTNFMUEz
Q0E0MDFCNTAeFw0yNDAyMDExOTA5MjJaFw0yNTAxMzAxOTE0MjJaMDMxMTAvBgNV
BAMTKDQwNEFCNUE1M0IwMjAwQkVEMjU5QjEwNkJFOTNDNzdBQzkxRTdCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GJk2ddFuPzBCdLsyXS6p3CeA
J/lgMr9AlD+X6IK8bCVQUGngylJvUHrUSkiHyPctqNK09z/2VkybjkyLVJwktAee
oBzNXZxbXHGwwMwJBQehpB+8mi8ZyJEDKGgS3QBrPUB8SYIF6vZ8BnbDtNq54kh7
P3ka5cSRDCCIm7tuJQIBbb9aCpK8s/KAF3ut4tKd+lGdPYuazOWaoWS4Nh3s0y0f
iAqgc3+lVeWiFQCNzIihOy6023c6HwCqZrNpWnFC/Nj+YMPIUcZ3DSws78AkL/F7
fqaBaByJQOlFJHwZ8LH7Y2SOv/R79MqVqwmd6vHbtl5Zuay6U5kxIXVTflB9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQEq1pTsCAL7SWbEGvpPHeskee2YwHwYDVR0j
BBgwFoAUGLhUqaPYOMEM8SPG95E+GjykAbUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1ZWaUhhaHByYzRYb2RYdjR6UzZrcWpCVlgxSDZLeEdEZDJBR3hHcW9a
WksvMC8xOEI4NTRBOUEzRDgzOEMxMENGMTIzQzZGNzkxM0UxQTNDQTQwMUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE4Qjg1NEE5QTNEODM4QzEw
Q0YxMjNDNkY3OTEzRTFBM0NBNDAxQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NWVmlIYWhwcmM0WG9kWHY0elM2a3FqQlZYMUg2S3hHRGQyQUd4R3FvWlpLLzAv
MzIzODMwMzQzYTM4MzA2NDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASA0DANBgkqhkiG9w0BAQsFAAOCAQEAHqUqBPpn
kJEBIXqnlLSs+lkV6CQul+bvglwaN2Vik0uzGXlRJ5kNPIKZGq8L9Gec+kBEjNgv
SgxxNo0GSw7QxwCECl5T36HdztGIKAYo+6vUMpj/VR92VrjFBAA2JtyXMSAMxUYQ
fCYomTUTS38VGi8b5Us/t8lpFuGyYLCjFr7faIbfEJeknJa2SEGuFYn3aH0NEmoB
SFLl3q9VZfvQLFjX5HLwaL4Mfy7UIW0lREkZfj3S5G1CiMnDjl1liNGJTIRVM0b3
XyYv7sQBt3/5dKQblFg0hD3poLG5Qf5cEmtBsa6/ZBQ5cz2RHMFE9BQMrBCRCQgu
FCRmR9mP7HdkLg==
-----END CERTIFICATE-----