Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          WMeZSau17SF2UsccRngXa+LgdA/FNLsb2+FJPzE+UBs=
Subject key identifier:   6A:1C:D0:AB:29:02:04:10:7F:13:18:75:15:AD:5B:68:1C:DC:F7:5B
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       050DA665E0E77F93DBE9BAB13AFC1F232C328BB7
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        2804:259c:ba00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0d:a6:65:e0:e7:7f:93:db:e9:ba:b1:3a:fc:1f:23:2c:32:8b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=6A1CD0AB290204107F13187515AD5B681CDCF75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:3f:3b:22:88:85:2d:4f:78:89:84:0c:eb:
                    f0:a2:d0:be:b4:19:e9:7e:e7:2d:d5:9b:68:0f:f7:
                    b9:82:f7:07:05:d7:02:f8:a7:23:28:86:7a:ec:b6:
                    4d:55:c2:ec:94:2b:87:28:c7:04:69:7c:34:22:8d:
                    c1:a1:4e:80:19:99:56:c6:e3:00:24:60:ec:f4:f6:
                    f1:8b:2e:5d:fb:b5:66:26:3e:47:89:13:10:7c:9e:
                    f5:3a:1b:2f:98:c4:a2:aa:c7:66:35:97:46:6a:b0:
                    32:43:38:28:2c:46:c1:ac:b3:b9:8b:0b:b7:80:74:
                    11:33:ec:19:ae:d5:9e:01:5a:22:38:1a:61:ef:dc:
                    f0:1f:9b:90:01:94:9e:b8:28:e4:fa:a4:1d:c0:c5:
                    a5:25:4b:e0:32:8e:ad:9e:f9:dd:fb:55:c6:33:27:
                    1d:69:aa:d2:6e:e4:b0:0e:9a:57:96:17:d2:4b:bd:
                    f8:df:91:2a:92:8c:95:8a:e8:dc:76:2e:b1:ab:af:
                    57:62:68:b1:56:b7:ed:13:f9:c0:65:6d:39:ba:20:
                    0c:5e:b9:0f:23:29:d3:89:ba:90:23:a1:49:c6:8c:
                    a0:b9:d9:ec:43:57:b1:60:5c:1a:bf:6a:a4:c3:43:
                    09:46:26:74:af:c3:62:5a:fc:c9:b3:1f:d9:23:8c:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1C:D0:AB:29:02:04:10:7F:13:18:75:15:AD:5B:68:1C:DC:F7:5B
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:5d:e7:e9:02:dc:a5:49:cc:d0:87:09:e1:11:3e:ac:2c:27:
         55:92:f9:e3:99:c8:c0:8b:72:d0:0a:bb:49:60:49:52:d0:51:
         d4:19:5c:61:35:e6:90:4d:f8:b9:f0:10:e1:58:51:0b:bf:56:
         f5:28:82:73:9d:d7:70:ca:65:73:bb:c5:a9:6d:10:88:5c:9c:
         82:74:42:37:08:64:51:f8:71:3a:be:12:ac:56:cc:f5:7a:ee:
         3e:4b:4c:90:47:36:2c:cc:02:83:39:db:63:df:b4:8e:2f:db:
         8f:bd:f3:a1:2d:8e:79:a3:35:b4:a4:9f:a7:9d:56:3b:dd:1b:
         cb:0a:d1:70:2b:eb:75:e4:9f:df:a3:fa:88:ec:84:9c:a8:72:
         b3:30:aa:13:d9:f1:3b:6c:e5:e0:6d:a6:08:c6:c0:61:de:d7:
         a9:9f:b2:41:71:4a:c8:9d:85:67:14:a0:5b:1c:ae:c9:5e:19:
         f0:39:7f:5d:12:ba:c5:01:09:58:c6:19:55:ea:bb:26:0e:09:
         e4:bc:eb:68:af:cb:d7:97:f8:c6:5e:bb:25:fc:f3:70:0b:c7:
         64:ec:15:79:9c:8e:3e:f1:95:68:31:3b:54:3d:ba:75:6f:f5:
         ae:9a:24:2b:9a:10:94:88:9a:2e:70:c1:4a:65:c2:5e:3e:3b:
         3d:80:3e:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBQ2mZeDnf5Pb6bqxOvwfIywyi7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwRTM3Q0U1RjIxRUU4QUQ1RjI4NkE4MkE1QkY5RTQ1
QjMwQkUwRjAeFw0yNDA0MDMyMTQ5MTlaFw0yNTA0MDIyMTU0MTlaMDMxMTAvBgNV
BAMTKDZBMUNEMEFCMjkwMjA0MTA3RjEzMTg3NTE1QUQ1QjY4MUNEQ0Y3NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDngz87IoiFLU94iYQM6/Ci0L60
Gel+5y3Vm2gP97mC9wcF1wL4pyMohnrstk1VwuyUK4coxwRpfDQijcGhToAZmVbG
4wAkYOz09vGLLl37tWYmPkeJExB8nvU6Gy+YxKKqx2Y1l0ZqsDJDOCgsRsGss7mL
C7eAdBEz7Bmu1Z4BWiI4GmHv3PAfm5ABlJ64KOT6pB3AxaUlS+Ayjq2e+d37VcYz
Jx1pqtJu5LAOmleWF9JLvfjfkSqSjJWK6Nx2LrGrr1diaLFWt+0T+cBlbTm6IAxe
uQ8jKdOJupAjoUnGjKC52exDV7FgXBq/aqTDQwlGJnSvw2Ja/MmzH9kjjKJ7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUahzQqykCBBB/Exh1Fa1baBzc91swHwYDVR0j
BBgwFoAUKw43zl8h7orV8oaoKlv55Fswvg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMS8yQjBFMzdDRTVGMjFFRThBRDVGMjg2QTgyQTVCRjlFNDVCMzBCRTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMEUzN0NFNUYyMUVFOEFE
NUYyODZBODJBNUJGOUU0NUIzMEJFMEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzEv
MzIzODMwMzQzYTMyMzUzOTYzM2E2MjYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM1MzIzNzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCWcujANBgkqhkiG9w0BAQsFAAOC
AQEAEl3n6QLcpUnM0IcJ4RE+rCwnVZL545nIwIty0Aq7SWBJUtBR1BlcYTXmkE34
ufAQ4VhRC79W9SiCc53XcMplc7vFqW0QiFycgnRCNwhkUfhxOr4SrFbM9XruPktM
kEc2LMwCgznbY9+0ji/bj73zoS2OeaM1tKSfp51WO90bywrRcCvrdeSf36P6iOyE
nKhyszCqE9nxO2zl4G2mCMbAYd7XqZ+yQXFKyJ2FZxSgWxyuyV4Z8Dl/XRK6xQEJ
WMYZVeq7Jg4J5LzraK/L15f4xl67JfzzcAvHZOwVeZyOPvGVaDE7VD26dW/1rpok
K5oQlIiaLnDBSmXCXj47PYA+5w==
-----END CERTIFICATE-----