Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/323830343a353761383a3a2f33322d313238203d3e20323638303738.roa
File:                     323830343a353761383a3a2f33322d313238203d3e20323638303738.roa (raw, json)
Hash identifier:          XCsKSMmfYb2V8wV8FtRNZt24aM9+yGKSq/n5NK0E+RA=
Subject key identifier:   00:F8:B1:26:A0:AA:E7:52:70:74:82:46:A4:13:95:5B:4F:BD:4B:9F
Certificate issuer:       /CN=02EF807C172BDA9EBD65360B768B355F949CBE4C
Certificate serial:       08AD60CFA2CC7C16729284E40530CB8B54B21322
Authority key identifier: 02:EF:80:7C:17:2B:DA:9E:BD:65:36:0B:76:8B:35:5F:94:9C:BE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/323830343a353761383a3a2f33322d313238203d3e20323638303738.roa
Signing time:             Wed 03 Apr 2024 21:18:43 +0000
ROA not before:           Wed 03 Apr 2024 21:13:43 +0000
ROA not after:            Wed 02 Apr 2025 21:18:43 +0000
asID:                     268078
IP address blocks:        2804:57a8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ad:60:cf:a2:cc:7c:16:72:92:84:e4:05:30:cb:8b:54:b2:13:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02EF807C172BDA9EBD65360B768B355F949CBE4C
        Validity
            Not Before: Apr  3 21:13:43 2024 GMT
            Not After : Apr  2 21:18:43 2025 GMT
        Subject: CN=00F8B126A0AAE75270748246A413955B4FBD4B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:00:04:4c:ee:82:dc:8c:33:58:fd:02:de:
                    dd:1f:e0:36:b4:43:52:e6:93:88:1e:6e:bb:a6:b5:
                    69:76:50:81:17:06:fd:08:31:d9:d6:95:02:49:f8:
                    a4:5f:8d:41:1b:11:56:b3:d9:07:21:51:bb:4d:c4:
                    32:58:59:d1:36:a8:ac:94:02:73:19:8d:e8:6f:1a:
                    75:cd:78:d4:d2:90:6a:71:a3:6a:f2:4b:57:f3:49:
                    cd:38:9a:93:b2:81:a8:3e:54:70:35:7a:6e:fa:3d:
                    1e:fc:46:dd:61:17:2c:8c:10:2c:65:a4:c7:76:52:
                    87:10:87:1e:83:d6:e9:67:51:f6:c0:31:27:f8:46:
                    8b:72:80:b6:d5:fa:83:8c:b1:66:13:88:f7:57:0d:
                    6a:ce:7a:e8:6b:ee:92:e4:6d:4b:28:ef:d7:b3:90:
                    55:89:57:0b:bb:1e:59:7d:0c:a1:92:7c:9a:9d:cc:
                    bc:32:fd:91:54:da:b3:da:ff:b0:b4:68:90:69:42:
                    02:64:6c:9a:28:43:40:59:26:ff:58:d5:68:ae:b4:
                    c5:71:2e:41:5f:3a:9a:d7:2c:94:25:64:51:2e:49:
                    84:d0:8d:3f:51:b7:31:9e:90:c7:ee:0a:87:6a:1a:
                    38:13:d4:29:42:c6:d7:34:cd:62:64:03:88:c5:fd:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:B1:26:A0:AA:E7:52:70:74:82:46:A4:13:95:5B:4F:BD:4B:9F
            X509v3 Authority Key Identifier:
                keyid:02:EF:80:7C:17:2B:DA:9E:BD:65:36:0B:76:8B:35:5F:94:9C:BE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02EF807C172BDA9EBD65360B768B355F949CBE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/1/323830343a353761383a3a2f33322d313238203d3e20323638303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:c1:63:f5:fe:b5:10:ae:35:f3:6d:29:05:da:b2:c7:76:9d:
         ec:7a:22:7a:c6:e2:af:ba:42:04:5c:7c:22:ca:20:01:61:52:
         61:4f:f4:7b:33:0d:3e:46:e3:5d:cf:24:74:be:64:e7:0e:81:
         c6:f0:38:b6:5e:b8:b0:ee:49:40:e7:80:29:b0:5a:1a:60:f2:
         52:b9:f7:ba:cc:cb:5f:29:18:0e:11:1b:3e:80:cc:25:1f:c6:
         fd:f9:6f:34:8b:aa:87:fd:60:db:da:32:12:34:4b:c2:91:1b:
         46:0c:8e:58:0e:44:1f:a7:ad:b9:ca:cc:90:ed:93:62:60:32:
         2e:61:5a:13:d5:d0:63:aa:a8:4f:17:9a:33:81:3a:67:9d:49:
         e0:31:5e:1c:a9:ee:bd:96:38:8d:3f:63:55:7d:a4:5b:97:b5:
         7f:f8:ea:84:e0:4e:ef:92:ee:04:6d:5a:98:0a:a1:25:97:b9:
         e2:b7:dd:2d:02:c7:02:d0:53:66:90:6a:59:cb:7c:fb:be:1f:
         dc:82:11:2b:03:64:54:17:97:99:cf:12:45:07:1c:d0:d3:a6:
         51:a6:5f:a3:de:e9:da:10:de:c4:18:9b:83:df:da:19:88:75:
         be:34:be:89:57:f8:b3:b0:39:58:61:ca:01:05:e4:f8:6f:6a:
         fd:d3:95:e8
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUCK1gz6LMfBZykoTkBTDLi1SyEyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJFRjgwN0MxNzJCREE5RUJENjUzNjBCNzY4QjM1NUY5
NDlDQkU0QzAeFw0yNDA0MDMyMTEzNDNaFw0yNTA0MDIyMTE4NDNaMDMxMTAvBgNV
BAMTKDAwRjhCMTI2QTBBQUU3NTI3MDc0ODI0NkE0MTM5NTVCNEZCRDRCOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aQAETO6C3IwzWP0C3t0f4Da0
Q1Lmk4gebrumtWl2UIEXBv0IMdnWlQJJ+KRfjUEbEVaz2QchUbtNxDJYWdE2qKyU
AnMZjehvGnXNeNTSkGpxo2ryS1fzSc04mpOygag+VHA1em76PR78Rt1hFyyMECxl
pMd2UocQhx6D1ulnUfbAMSf4RotygLbV+oOMsWYTiPdXDWrOeuhr7pLkbUso79ez
kFWJVwu7Hll9DKGSfJqdzLwy/ZFU2rPa/7C0aJBpQgJkbJooQ0BZJv9Y1WiutMVx
LkFfOprXLJQlZFEuSYTQjT9RtzGekMfuCodqGjgT1ClCxtc0zWJkA4jF/a2tAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUAPixJqCq51JwdIJGpBOVW0+9S58wHwYDVR0j
BBgwFoAUAu+AfBcr2p69ZTYLdos1X5ScvkwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHZHU1BwVFpweEt2WVNYbnZWcG15ZDJOQkY0VXdienZIMTlzWVNmOHNp
U3AvMS8wMkVGODA3QzE3MkJEQTlFQkQ2NTM2MEI3NjhCMzU1Rjk0OUNCRTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyRUY4MDdDMTcyQkRBOUVC
RDY1MzYwQjc2OEIzNTVGOTQ5Q0JFNEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R2R1NQcFRacHhLdllTWG52VnBteWQyTkJGNFV3Ynp2SDE5c1lTZjhzaVNwLzEv
MzIzODMwMzQzYTM1Mzc2MTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFeoMA0GCSqGSIb3DQEBCwUAA4IBAQDPwWP1
/rUQrjXzbSkF2rLHdp3seiJ6xuKvukIEXHwiyiABYVJhT/R7Mw0+RuNdzyR0vmTn
DoHG8Di2Xriw7klA54ApsFoaYPJSufe6zMtfKRgOERs+gMwlH8b9+W80i6qH/WDb
2jISNEvCkRtGDI5YDkQfp625ysyQ7ZNiYDIuYVoT1dBjqqhPF5ozgTpnnUngMV4c
qe69ljiNP2NVfaRbl7V/+OqE4E7vku4EbVqYCqEll7nit90tAscC0FNmkGpZy3z7
vh/cghErA2RUF5eZzxJFBxzQ06ZRpl+j3unaEN7EGJuD39oZiHW+NL6JV/izsDlY
YcoBBeT4b2r905Xo
-----END CERTIFICATE-----