Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/323830343a346238383a3a2f33322d313238203d3e20323637333132.roa
File:                     323830343a346238383a3a2f33322d313238203d3e20323637333132.roa (raw, json)
Hash identifier:          Z/o6qvdSblTSm0qtCQ8AyrklRBtciCbObU9Ze7NwCEY=
Subject key identifier:   61:3A:50:F6:2D:C7:09:14:E9:6C:75:83:BC:C6:59:29:9B:AB:D2:47
Certificate issuer:       /CN=D4E7FC5209A271F113E974568598FBFD5E252646
Certificate serial:       0F375C61726EE3323CDA3F42194F9574C7156662
Authority key identifier: D4:E7:FC:52:09:A2:71:F1:13:E9:74:56:85:98:FB:FD:5E:25:26:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E7FC5209A271F113E974568598FBFD5E252646.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/323830343a346238383a3a2f33322d313238203d3e20323637333132.roa
Signing time:             Mon 12 Feb 2024 14:08:38 +0000
ROA not before:           Mon 12 Feb 2024 14:03:38 +0000
ROA not after:            Mon 10 Feb 2025 14:08:38 +0000
asID:                     267312
IP address blocks:        2804:4b88::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:37:5c:61:72:6e:e3:32:3c:da:3f:42:19:4f:95:74:c7:15:66:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E7FC5209A271F113E974568598FBFD5E252646
        Validity
            Not Before: Feb 12 14:03:38 2024 GMT
            Not After : Feb 10 14:08:38 2025 GMT
        Subject: CN=613A50F62DC70914E96C7583BCC659299BABD247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:bf:56:1b:47:72:e3:42:de:7f:d3:aa:94:
                    3f:88:08:cc:18:6e:d8:08:f1:d9:f5:92:57:56:36:
                    24:d9:d4:92:a4:3d:13:87:ba:7c:e1:53:0f:2c:32:
                    25:d6:99:3b:08:27:8d:ac:d0:51:5c:2d:f5:15:08:
                    e8:c7:8c:17:3b:13:fc:57:89:b1:7e:e0:c2:e3:75:
                    46:24:c4:15:6c:4a:40:31:c7:ac:84:7b:27:c1:57:
                    ff:d6:27:92:1c:ad:f1:07:ef:d0:2d:49:69:97:58:
                    42:d5:cf:38:54:4d:3c:b2:3b:be:f5:ff:c7:88:b3:
                    b4:8e:12:2b:77:54:3c:13:53:ba:33:29:a9:18:d8:
                    b8:d9:c0:60:76:33:1a:39:2d:54:19:1c:31:9f:50:
                    e9:ca:ca:9a:18:60:55:c2:d4:25:50:d1:df:6c:c1:
                    44:ca:55:30:db:50:4b:5b:df:96:a4:b0:c6:a9:cb:
                    0c:3c:9b:cc:e9:00:4e:ca:12:de:fa:22:53:e2:10:
                    33:0b:95:0a:59:b7:d5:20:02:07:ed:57:81:95:45:
                    b2:df:75:96:b2:4b:6b:5d:47:b0:5c:7d:89:37:bd:
                    a5:ac:f1:dd:d4:66:6c:c3:8c:c1:c9:f2:dd:ef:76:
                    d6:19:a7:9b:66:17:74:c0:6c:2b:f2:0d:a6:ad:25:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3A:50:F6:2D:C7:09:14:E9:6C:75:83:BC:C6:59:29:9B:AB:D2:47
            X509v3 Authority Key Identifier:
                keyid:D4:E7:FC:52:09:A2:71:F1:13:E9:74:56:85:98:FB:FD:5E:25:26:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/D4E7FC5209A271F113E974568598FBFD5E252646.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E7FC5209A271F113E974568598FBFD5E252646.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/323830343a346238383a3a2f33322d313238203d3e20323637333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:b2:b2:a1:21:02:be:6d:e6:12:ed:a1:72:0b:21:45:64:
         71:51:51:4d:91:e0:11:27:2d:59:1e:fa:b9:43:06:d7:78:be:
         78:85:83:19:59:06:3c:cb:5a:d8:3a:8a:19:56:d3:c9:e5:ea:
         cd:d4:5b:a3:19:76:9b:b4:4a:84:fd:ef:ba:6f:a7:fa:16:09:
         de:86:e3:22:1d:5e:97:4d:25:89:56:17:58:5f:ef:ee:fe:03:
         2c:c6:20:04:7c:b0:e1:40:f9:7c:4b:82:67:dc:0f:1a:e0:33:
         89:6e:57:48:36:9c:6e:71:40:c9:08:11:a2:78:fe:85:b0:6f:
         20:a2:9d:55:5f:6b:67:e9:35:f5:be:c2:9e:1e:9e:25:f7:50:
         3f:e4:75:24:bf:9f:2a:55:fc:70:e7:1d:18:a2:25:20:7f:90:
         dd:43:56:11:b2:10:10:1f:b4:bc:c9:db:ed:e7:c7:aa:0b:d3:
         86:e0:8d:c5:88:c3:6c:31:63:da:07:5e:28:68:33:1c:50:b8:
         4e:8a:e9:ee:6c:c1:5c:44:da:d4:29:37:99:22:68:12:b1:43:
         97:81:b3:60:00:82:54:92:55:65:20:7c:32:c3:4d:47:3b:cb:
         8a:35:2c:5f:c8:a7:86:73:12:bd:8a:22:57:58:ac:4d:5e:93:
         56:0b:42:4e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUDzdcYXJu4zI82j9CGU+VdMcVZmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRFN0ZDNTIwOUEyNzFGMTEzRTk3NDU2ODU5OEZCRkQ1
RTI1MjY0NjAeFw0yNDAyMTIxNDAzMzhaFw0yNTAyMTAxNDA4MzhaMDMxMTAvBgNV
BAMTKDYxM0E1MEY2MkRDNzA5MTRFOTZDNzU4M0JDQzY1OTI5OUJBQkQyNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDepL9WG0dy40Lef9OqlD+ICMwY
btgI8dn1kldWNiTZ1JKkPROHunzhUw8sMiXWmTsIJ42s0FFcLfUVCOjHjBc7E/xX
ibF+4MLjdUYkxBVsSkAxx6yEeyfBV//WJ5IcrfEH79AtSWmXWELVzzhUTTyyO771
/8eIs7SOEit3VDwTU7ozKakY2LjZwGB2Mxo5LVQZHDGfUOnKypoYYFXC1CVQ0d9s
wUTKVTDbUEtb35aksMapyww8m8zpAE7KEt76IlPiEDMLlQpZt9UgAgftV4GVRbLf
dZayS2tdR7BcfYk3vaWs8d3UZmzDjMHJ8t3vdtYZp5tmF3TAbCvyDaatJYQZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUYTpQ9i3HCRTpbHWDvMZZKZur0kcwHwYDVR0j
BBgwFoAU1Of8UgmicfET6XRWhZj7/V4lJkYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURQWldKcFNrRGt1UHk3azc5V1B3RzY3dldFWWpONXJQcWpTNXRXbU4z
bmkvMC9ENEU3RkM1MjA5QTI3MUYxMTNFOTc0NTY4NTk4RkJGRDVFMjUyNjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0RTdGQzUyMDlBMjcxRjEx
M0U5NzQ1Njg1OThGQkZENUUyNTI2NDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEUFpXSnBTa0RrdVB5N2s3OVdQd0c2N3ZXRVlqTjVyUHFqUzV0V21OM25pLzAv
MzIzODMwMzQzYTM0NjIzODM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEuIMA0GCSqGSIb3DQEBCwUAA4IBAQA3DbKy
oSECvm3mEu2hcgshRWRxUVFNkeARJy1ZHvq5QwbXeL54hYMZWQY8y1rYOooZVtPJ
5erN1FujGXabtEqE/e+6b6f6FgnehuMiHV6XTSWJVhdYX+/u/gMsxiAEfLDhQPl8
S4Jn3A8a4DOJbldINpxucUDJCBGieP6FsG8gop1VX2tn6TX1vsKeHp4l91A/5HUk
v58qVfxw5x0YoiUgf5DdQ1YRshAQH7S8ydvt58eqC9OG4I3FiMNsMWPaB14oaDMc
ULhOiunubMFcRNrUKTeZImgSsUOXgbNgAIJUklVlIHwyw01HO8uKNSxfyKeGcxK9
iiJXWKxNXpNWC0JO
-----END CERTIFICATE-----