Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/323830343a343a3a2f33322d3438203d3e203238363637.roa
File:                     323830343a343a3a2f33322d3438203d3e203238363637.roa (raw, json)
Hash identifier:          K/whwXrv15v5hRlMD04pBD3TMK4taXI8rdlAZP0S+MM=
Subject key identifier:   75:36:E7:4C:9D:C7:4A:DB:92:7F:2C:DC:8D:5F:AE:BA:14:6B:4F:39
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       676542D31AB6F14E30DB6B1422FD484C7AD0000A
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/323830343a343a3a2f33322d3438203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:13 +0000
ROA not before:           Tue 23 Jul 2024 11:46:13 +0000
ROA not after:            Tue 22 Jul 2025 11:51:13 +0000
asID:                     28667
IP address blocks:        2804:4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:65:42:d3:1a:b6:f1:4e:30:db:6b:14:22:fd:48:4c:7a:d0:00:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:13 2024 GMT
            Not After : Jul 22 11:51:13 2025 GMT
        Subject: CN=7536E74C9DC74ADB927F2CDC8D5FAEBA146B4F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:16:64:95:00:45:30:7c:03:8a:a4:b5:04:
                    7d:2d:d4:1e:f3:d9:38:74:88:c5:e8:12:1b:36:88:
                    66:82:bb:15:6d:d4:a1:41:ba:90:29:81:50:52:b0:
                    4b:89:b7:25:4b:0f:70:1f:39:77:b9:a6:b5:c5:ff:
                    ac:43:33:ca:8b:3b:be:a6:8d:d6:f7:9c:78:07:01:
                    72:78:71:9a:30:1c:5d:81:94:75:cb:68:2d:af:bb:
                    4d:6c:dd:7b:78:27:90:d7:fe:80:77:d9:c6:65:74:
                    58:ed:2a:8a:7c:48:c7:23:e8:6e:64:aa:d9:f2:1a:
                    37:d9:43:8b:c5:80:2e:94:e6:2a:22:e3:a9:54:e2:
                    68:0b:25:c1:d3:37:be:21:8b:45:00:e7:25:4f:fc:
                    9c:14:40:b5:fe:25:5d:e3:88:2b:7b:ae:fd:7c:fb:
                    ac:48:d4:d4:be:44:24:08:02:74:26:8d:3a:e0:e8:
                    d6:c2:2d:88:da:57:07:00:a8:9d:76:ee:65:93:f9:
                    50:b0:0d:9a:4b:f6:79:70:62:bb:66:76:56:3b:9d:
                    7d:86:02:0a:1c:3f:a2:8f:87:42:00:9c:47:40:9c:
                    98:1d:b0:d0:d6:50:c5:d8:41:3d:42:8c:a7:0e:87:
                    9a:49:a2:13:d6:ce:6a:09:1b:1b:23:aa:fc:f8:98:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:36:E7:4C:9D:C7:4A:DB:92:7F:2C:DC:8D:5F:AE:BA:14:6B:4F:39
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/323830343a343a3a2f33322d3438203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:58:7d:bc:bc:24:ec:24:50:70:54:e7:69:02:70:e4:32:
         af:68:8c:71:4f:8d:d5:a9:2d:69:45:cd:39:ce:d5:2e:34:95:
         e5:46:33:4c:26:d0:94:87:e7:e2:ad:36:cc:1c:05:f9:ba:00:
         57:c1:82:9d:2c:40:b7:db:89:81:c5:6d:3e:cb:ad:ce:b7:4d:
         ec:c2:ea:e6:91:e8:67:b9:1c:7c:04:86:b8:f9:ec:48:56:55:
         04:14:45:4a:f2:2c:89:eb:c7:1a:9f:90:06:f9:77:51:61:39:
         7f:f5:fa:15:61:6b:c6:c5:4c:54:f9:2d:fd:57:24:ba:c8:50:
         3f:6f:fd:a1:28:69:9a:75:ea:76:87:bb:a8:b0:65:ee:f4:fa:
         a6:e6:01:6f:91:8d:0f:8a:11:61:a5:52:3c:44:3b:5d:cf:4f:
         8d:1b:57:35:4c:a2:53:44:b9:75:ab:c8:70:33:7d:03:f8:d1:
         5f:8d:4a:26:e4:e8:ba:82:37:f8:ac:01:29:5c:32:53:05:f3:
         d6:11:59:2c:68:b1:74:26:20:81:8f:0a:87:71:6f:d6:96:4e:
         82:cd:9a:cc:d5:3f:76:0e:7e:cd:d3:04:b0:4e:73:0c:5c:41:
         e0:86:69:32:46:0f:67:db:3b:0d:d9:89:74:cd:a7:32:94:d7:
         dc:59:73:f5
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUZ2VC0xq28U4w22sUIv1ITHrQAAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU3MjE2QjE2OEE5NkZENjkzODlCMUM3RTFBMTVGQkFE
MUUyMTg0RjAeFw0yNDA3MjMxMTQ2MTNaFw0yNTA3MjIxMTUxMTNaMDMxMTAvBgNV
BAMTKDc1MzZFNzRDOURDNzRBREI5MjdGMkNEQzhENUZBRUJBMTQ2QjRGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaxBZklQBFMHwDiqS1BH0t1B7z
2Th0iMXoEhs2iGaCuxVt1KFBupApgVBSsEuJtyVLD3AfOXe5prXF/6xDM8qLO76m
jdb3nHgHAXJ4cZowHF2BlHXLaC2vu01s3Xt4J5DX/oB32cZldFjtKop8SMcj6G5k
qtnyGjfZQ4vFgC6U5ioi46lU4mgLJcHTN74hi0UA5yVP/JwUQLX+JV3jiCt7rv18
+6xI1NS+RCQIAnQmjTrg6NbCLYjaVwcAqJ127mWT+VCwDZpL9nlwYrtmdlY7nX2G
AgocP6KPh0IAnEdAnJgdsNDWUMXYQT1CjKcOh5pJohPWzmoJGxsjqvz4mBOHAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUdTbnTJ3HStuSfyzcjV+uuhRrTzkwHwYDVR0j
BBgwFoAURXIWsWipb9aTibHH4aFfutHiGE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMi80NTcyMTZCMTY4QTk2RkQ2OTM4OUIxQzdFMUExNUZCQUQxRTIxODRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1NzIxNkIxNjhBOTZGRDY5
Mzg5QjFDN0UxQTE1RkJBRDFFMjE4NEYuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCB
kQYIKwYBBQUHMAuGgYRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzIv
MzIzODMwMzQzYTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODM2MzYzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACgEAAQwDQYJKoZIhvcNAQELBQADggEBAGvoWH28vCTsJFBwVOdp
AnDkMq9ojHFPjdWpLWlFzTnO1S40leVGM0wm0JSH5+KtNswcBfm6AFfBgp0sQLfb
iYHFbT7Lrc63TezC6uaR6Ge5HHwEhrj57EhWVQQURUryLInrxxqfkAb5d1FhOX/1
+hVha8bFTFT5Lf1XJLrIUD9v/aEoaZp16naHu6iwZe70+qbmAW+RjQ+KEWGlUjxE
O13PT40bVzVMolNEuXWryHAzfQP40V+NSibk6LqCN/isASlcMlMF89YRWSxosXQm
IIGPCodxb9aWToLNmszVP3YOfs3TBLBOcwxcQeCGaTJGD2fbOw3ZiXTNpzKU19xZ
c/U=
-----END CERTIFICATE-----