Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
File:                     323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa (raw, json)
Hash identifier:          m20EO7O2PdJfT8yacTX7vABfIdFSc4TelMI522VTAxQ=
Subject key identifier:   FE:AB:00:D5:3E:48:DD:12:9A:94:B5:5B:7C:F4:F0:3A:68:5B:5D:8D
Certificate issuer:       /CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
Certificate serial:       5258085D473DF2870EB361B7EA955D5A97DCF86F
Authority key identifier: 10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
Signing time:             Tue 12 Mar 2024 08:08:51 +0000
ROA not before:           Tue 12 Mar 2024 08:03:51 +0000
ROA not after:            Tue 11 Mar 2025 08:08:51 +0000
asID:                     271504
IP address blocks:        2804:7c90:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:58:08:5d:47:3d:f2:87:0e:b3:61:b7:ea:95:5d:5a:97:dc:f8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10872CEC6BBF53B1A7F684D9A661A8978564FE7D
        Validity
            Not Before: Mar 12 08:03:51 2024 GMT
            Not After : Mar 11 08:08:51 2025 GMT
        Subject: CN=FEAB00D53E48DD129A94B55B7CF4F03A685B5D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:55:c7:3f:5b:1d:11:a5:3e:13:36:33:7b:
                    b4:39:f0:a1:ee:e4:c9:b5:1a:a5:a9:6d:ab:6f:40:
                    e6:66:57:d6:d3:f2:28:44:30:ec:87:7d:61:6a:bd:
                    cf:91:27:71:6f:63:91:88:c9:ca:0c:be:21:5e:cd:
                    f0:d0:e6:cb:a7:0c:b6:bd:88:b7:18:bd:27:20:e1:
                    89:b4:97:ac:4c:34:bf:1d:04:37:a2:04:a7:6e:7f:
                    06:4e:fc:14:b1:cc:62:02:aa:9b:b1:ed:bb:d2:13:
                    9e:17:cc:18:fd:2e:15:3a:31:37:e2:2b:65:cb:39:
                    74:b3:a6:16:5f:2f:ae:10:6c:a6:20:31:25:76:ae:
                    a5:c5:bc:66:88:cf:41:3e:3b:58:ad:9f:c5:dc:ac:
                    d5:7b:5d:90:a7:df:e7:6f:db:57:55:a4:20:16:9e:
                    71:c9:a1:34:c9:e1:82:23:a6:ba:55:d3:72:fa:a1:
                    4e:fd:4b:dd:d9:5a:d2:49:c0:41:5c:ae:37:ff:52:
                    d8:cc:97:cc:60:65:5d:1a:de:47:6d:1b:15:91:c7:
                    59:d6:70:bc:94:a1:43:bd:f5:4f:77:49:37:7d:50:
                    de:8e:58:47:e6:0c:98:67:97:8d:5c:b2:d1:42:2f:
                    eb:93:de:9c:dc:6e:32:96:c4:f4:03:2d:da:11:f4:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AB:00:D5:3E:48:DD:12:9A:94:B5:5B:7C:F4:F0:3A:68:5B:5D:8D
            X509v3 Authority Key Identifier:
                keyid:10:87:2C:EC:6B:BF:53:B1:A7:F6:84:D9:A6:61:A8:97:85:64:FE:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10872CEC6BBF53B1A7F684D9A661A8978564FE7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c90:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:65:f6:05:35:29:67:02:10:9b:30:22:ee:3f:3a:29:a1:
         be:7c:14:19:3d:ea:8d:70:ff:ea:6a:28:ea:ad:5f:17:6e:4f:
         07:20:38:9f:57:3c:1c:f9:d2:b4:83:a7:b9:50:48:76:55:a8:
         da:7f:f8:1b:ac:81:ed:f7:25:f7:5a:e0:39:cd:df:aa:58:00:
         a9:cf:3e:5e:25:6a:87:84:e3:09:2c:cb:99:fe:63:5d:f3:2d:
         11:2d:48:22:0c:fb:11:ff:fc:db:ee:5f:fb:ed:1d:ee:be:f3:
         b3:88:1e:52:85:f7:64:d0:6f:c9:2f:84:7e:e5:0b:52:a1:e5:
         f0:95:3f:45:64:07:75:85:dc:38:6c:97:97:a4:83:0d:62:5c:
         73:44:7b:bb:4b:79:58:76:95:c8:28:18:4c:58:49:5a:81:ab:
         c9:b1:48:81:d7:c7:4e:e2:f3:b3:f0:6b:35:05:26:29:d3:d1:
         66:78:b7:68:ae:ab:ac:9a:86:e6:9e:f7:4c:32:23:9e:75:9d:
         7c:9b:6b:8f:c6:36:b2:51:13:95:ca:7c:da:8e:da:81:b4:7b:
         f5:2a:e4:12:e0:8d:2a:ba:fa:85:98:96:bd:48:f4:df:26:e4:
         e9:86:41:70:8c:38:c6:c6:ad:0c:1d:1d:95:15:60:4a:32:50:
         53:ea:40:11
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUlgIXUc98ocOs2G36pVdWpfc+G8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4NzJDRUM2QkJGNTNCMUE3RjY4NEQ5QTY2MUE4OTc4
NTY0RkU3RDAeFw0yNDAzMTIwODAzNTFaFw0yNTAzMTEwODA4NTFaMDMxMTAvBgNV
BAMTKEZFQUIwMEQ1M0U0OEREMTI5QTk0QjU1QjdDRjRGMDNBNjg1QjVEOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nlXHP1sdEaU+EzYze7Q58KHu
5Mm1GqWpbatvQOZmV9bT8ihEMOyHfWFqvc+RJ3FvY5GIycoMviFezfDQ5sunDLa9
iLcYvScg4Ym0l6xMNL8dBDeiBKdufwZO/BSxzGICqpux7bvSE54XzBj9LhU6MTfi
K2XLOXSzphZfL64QbKYgMSV2rqXFvGaIz0E+O1itn8XcrNV7XZCn3+dv21dVpCAW
nnHJoTTJ4YIjprpV03L6oU79S93ZWtJJwEFcrjf/UtjMl8xgZV0a3kdtGxWRx1nW
cLyUoUO99U93STd9UN6OWEfmDJhnl41cstFCL+uT3pzcbjKWxPQDLdoR9JslAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/qsA1T5I3RKalLVbfPTwOmhbXY0wHwYDVR0j
BBgwFoAUEIcs7Gu/U7Gn9oTZpmGol4Vk/n0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFdQNnd6N3hyZXNzb1NCY2dYS3FtUW9BV0ZmMmZyOEs2aFNrZjFRR3ZM
OXovMC8xMDg3MkNFQzZCQkY1M0IxQTdGNjg0RDlBNjYxQTg5Nzg1NjRGRTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwODcyQ0VDNkJCRjUzQjFB
N0Y2ODREOUE2NjFBODk3ODU2NEZFN0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RXUDZ3ejd4cmVzc29TQmNnWEtxbVFvQVdGZjJmcjhLNmhTa2YxUUd2TDl6LzAv
MzIzODMwMzQzYTM3NjMzOTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMTM1MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEfJCAMA0GCSqGSIb3DQEBCwUA
A4IBAQBrm2X2BTUpZwIQmzAi7j86KaG+fBQZPeqNcP/qaijqrV8Xbk8HIDifVzwc
+dK0g6e5UEh2Vajaf/gbrIHt9yX3WuA5zd+qWACpzz5eJWqHhOMJLMuZ/mNd8y0R
LUgiDPsR//zb7l/77R3uvvOziB5Shfdk0G/JL4R+5QtSoeXwlT9FZAd1hdw4bJeX
pIMNYlxzRHu7S3lYdpXIKBhMWElagavJsUiB18dO4vOz8Gs1BSYp09FmeLdorqus
mobmnvdMMiOedZ18m2uPxjayUROVynzajtqBtHv1KuQS4I0quvqFmJa9SPTfJuTp
hkFwjDjGxq0MHR2VFWBKMlBT6kAR
-----END CERTIFICATE-----