Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/0/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa
File:                     323830343a333237633a3a2f33322d3332203d3e20323635303831.roa (raw, json)
Hash identifier:          iEd4YL4o3Mcj/OOf1OpXTfvVONN+QqzrDFvpkMIoI/Y=
Subject key identifier:   F3:29:10:2F:9F:C9:91:62:85:1E:1B:13:68:10:3B:B2:3D:AE:13:42
Certificate issuer:       /CN=BBD352C97F636959D6DF3B568D7C420335C42D45
Certificate serial:       59CE8F965DA4560A7423656BF98B3ADEA7F9013D
Authority key identifier: BB:D3:52:C9:7F:63:69:59:D6:DF:3B:56:8D:7C:42:03:35:C4:2D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBD352C97F636959D6DF3B568D7C420335C42D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/0/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa
Signing time:             Mon 11 Mar 2024 18:42:43 +0000
ROA not before:           Mon 11 Mar 2024 18:37:43 +0000
ROA not after:            Mon 10 Mar 2025 18:42:43 +0000
asID:                     265081
IP address blocks:        2804:327c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ce:8f:96:5d:a4:56:0a:74:23:65:6b:f9:8b:3a:de:a7:f9:01:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD352C97F636959D6DF3B568D7C420335C42D45
        Validity
            Not Before: Mar 11 18:37:43 2024 GMT
            Not After : Mar 10 18:42:43 2025 GMT
        Subject: CN=F329102F9FC99162851E1B1368103BB23DAE1342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:74:4f:b0:57:89:1b:f2:fa:bb:09:4f:08:
                    d2:87:e5:a2:68:62:04:b9:c6:9c:09:b0:ad:d7:02:
                    85:2e:7e:84:95:d6:d1:e5:fe:49:a5:3f:bc:96:6d:
                    86:06:fd:cd:49:cd:03:87:b1:c3:a6:9f:10:ce:75:
                    b3:84:98:a9:99:94:69:25:89:00:83:58:18:a0:30:
                    9f:30:18:c0:d6:e1:60:2b:cf:c3:bd:dd:2e:f7:88:
                    bb:ad:da:27:07:05:bd:52:dd:c8:4f:98:00:09:75:
                    a4:63:dc:53:a6:53:81:d4:45:51:b2:38:d3:48:89:
                    06:a3:be:dc:6b:78:f6:a7:87:28:bd:7f:f9:f2:44:
                    10:f0:71:ed:1e:3e:a4:0c:13:77:c4:5b:61:20:14:
                    49:f0:66:50:3c:6a:ed:68:79:af:9b:3c:12:fe:86:
                    57:24:81:5f:e1:d4:33:9a:e2:44:20:41:48:ea:ca:
                    38:f6:58:42:18:46:a7:cd:da:ca:24:d1:b1:dc:5f:
                    e6:c4:9a:90:c6:a5:da:00:bb:cc:c9:b0:ff:e8:fa:
                    72:a7:ab:4c:00:36:e8:12:24:fb:fb:2a:18:cb:8f:
                    3b:8f:33:0f:8d:51:8e:1f:b1:eb:3d:a8:b2:22:45:
                    60:cf:a0:f6:13:00:b7:42:4e:7a:69:55:df:52:33:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:29:10:2F:9F:C9:91:62:85:1E:1B:13:68:10:3B:B2:3D:AE:13:42
            X509v3 Authority Key Identifier:
                keyid:BB:D3:52:C9:7F:63:69:59:D6:DF:3B:56:8D:7C:42:03:35:C4:2D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/0/BBD352C97F636959D6DF3B568D7C420335C42D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBD352C97F636959D6DF3B568D7C420335C42D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/0/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:327c::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:84:fd:f0:ee:8b:9e:af:c6:ba:4e:15:07:8f:2d:52:95:2a:
         2e:86:6d:a5:c2:d2:4f:a1:a3:ff:24:69:d2:8f:b2:65:09:37:
         bf:19:28:77:7b:39:2a:9e:16:8e:7f:2d:43:11:3d:7d:89:2b:
         59:3d:26:2e:a3:3f:7f:96:9a:0c:03:cc:2f:f2:6a:a2:86:7f:
         27:39:f2:61:46:43:f3:b4:d7:d7:b1:1e:3f:9c:3d:b0:bb:13:
         12:b5:43:bb:ad:39:7e:7d:1d:cd:3b:c0:e9:26:84:54:cd:c7:
         8c:41:87:27:4f:ec:64:63:1a:e4:72:d1:28:30:76:73:e8:54:
         62:17:4d:f4:64:63:72:73:fc:5f:3b:65:f6:74:01:7b:56:3f:
         a0:76:7e:35:71:b0:eb:a0:e7:ed:b8:fc:5d:2a:50:ef:54:20:
         77:4e:32:60:6f:ce:74:3f:a3:c9:0b:5c:b3:31:70:73:42:e4:
         f8:7c:0d:92:64:97:89:24:e6:b3:3f:4e:c8:63:61:bc:31:f8:
         c9:6c:92:24:81:75:d0:15:76:d0:9f:89:93:b0:59:44:50:02:
         3c:5a:61:25:83:0d:f3:fb:e1:f6:25:a2:51:9f:6a:fd:6c:49:
         c4:fb:f8:80:2b:a0:70:9e:d5:81:39:fc:2b:95:74:44:7e:cb:
         8d:9c:0d:06
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWc6Pll2kVgp0I2Vr+Ys63qf5AT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJEMzUyQzk3RjYzNjk1OUQ2REYzQjU2OEQ3QzQyMDMz
NUM0MkQ0NTAeFw0yNDAzMTExODM3NDNaFw0yNTAzMTAxODQyNDNaMDMxMTAvBgNV
BAMTKEYzMjkxMDJGOUZDOTkxNjI4NTFFMUIxMzY4MTAzQkIyM0RBRTEzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0EnRPsFeJG/L6uwlPCNKH5aJo
YgS5xpwJsK3XAoUufoSV1tHl/kmlP7yWbYYG/c1JzQOHscOmnxDOdbOEmKmZlGkl
iQCDWBigMJ8wGMDW4WArz8O93S73iLut2icHBb1S3chPmAAJdaRj3FOmU4HURVGy
ONNIiQajvtxrePanhyi9f/nyRBDwce0ePqQME3fEW2EgFEnwZlA8au1oea+bPBL+
hlckgV/h1DOa4kQgQUjqyjj2WEIYRqfN2sok0bHcX+bEmpDGpdoAu8zJsP/o+nKn
q0wANugSJPv7KhjLjzuPMw+NUY4fses9qLIiRWDPoPYTALdCTnppVd9SM47lAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8ykQL5/JkWKFHhsTaBA7sj2uE0IwHwYDVR0j
BBgwFoAUu9NSyX9jaVnW3ztWjXxCAzXELUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRERuY2NwZWZVeGFQQ1FIcFBUNlVVVXd1bnZuZ2ZTR3MyMlcza01hZGVD
RlcvMC9CQkQzNTJDOTdGNjM2OTU5RDZERjNCNTY4RDdDNDIwMzM1QzQyRDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCRDM1MkM5N0Y2MzY5NTlE
NkRGM0I1NjhEN0M0MjAzMzVDNDJENDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0REbmNjcGVmVXhhUENRSHBQVDZVVVV3dW52bmdmU0dzMjJXM2tNYWRlQ0ZXLzAv
MzIzODMwMzQzYTMzMzIzNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzAzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQyfDANBgkqhkiG9w0BAQsFAAOCAQEAAYT98O6L
nq/Guk4VB48tUpUqLoZtpcLST6Gj/yRp0o+yZQk3vxkod3s5Kp4Wjn8tQxE9fYkr
WT0mLqM/f5aaDAPML/JqooZ/JznyYUZD87TX17EeP5w9sLsTErVDu605fn0dzTvA
6SaEVM3HjEGHJ0/sZGMa5HLRKDB2c+hUYhdN9GRjcnP8Xztl9nQBe1Y/oHZ+NXGw
66Dn7bj8XSpQ71Qgd04yYG/OdD+jyQtcszFwc0Lk+HwNkmSXiSTmsz9OyGNhvDH4
yWySJIF10BV20J+Jk7BZRFACPFphJYMN8/vh9iWiUZ9q/WxJxPv4gCugcJ7VgTn8
K5V0RH7LjZwNBg==
-----END CERTIFICATE-----