Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa
File:                     323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa (raw, json)
Hash identifier:          6RguHUQpO8GxA1d6rTE+w0MHkUxKCp8DbxmX2unXqeU=
Subject key identifier:   C1:BB:1A:83:E7:93:D4:D1:3C:34:C9:8E:B2:8C:3D:4C:A3:38:92:74
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       5B1F9C5D7F35BD5446121C340E28A1A4C8188542
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:04 +0000
ROA not before:           Tue 13 Feb 2024 19:12:04 +0000
ROA not after:            Tue 11 Feb 2025 19:17:04 +0000
asID:                     267668
IP address blocks:        2804:4508:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1f:9c:5d:7f:35:bd:54:46:12:1c:34:0e:28:a1:a4:c8:18:85:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:04 2024 GMT
            Not After : Feb 11 19:17:04 2025 GMT
        Subject: CN=C1BB1A83E793D4D13C34C98EB28C3D4CA3389274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:9b:c6:d7:74:30:4b:4c:50:54:c2:3b:34:
                    4d:ef:cb:25:36:58:34:95:b4:88:7b:f7:6c:7b:8f:
                    d1:01:fb:10:4c:b7:b6:42:d0:35:13:48:30:e9:d4:
                    06:b2:22:40:b5:4e:72:8b:e5:2d:7c:2b:f3:6d:46:
                    db:30:db:59:2c:f2:e1:1c:b4:b4:d3:21:41:4d:fd:
                    da:76:c6:0b:58:97:89:e7:93:67:18:a5:0b:2b:b4:
                    bf:80:68:57:1e:a0:75:d7:74:70:db:d5:38:51:ba:
                    15:f4:b2:0f:40:f3:bd:9b:c9:a8:fe:87:76:3c:75:
                    b5:e4:da:84:06:81:1f:c8:a1:17:82:88:33:4d:e4:
                    c8:05:5e:21:f2:d2:4f:b9:b2:02:22:da:eb:35:d9:
                    9a:bc:85:77:f2:ca:61:1d:50:b4:8b:86:6f:1a:0a:
                    31:ad:ed:fc:43:2c:86:fd:b4:60:9c:67:fa:9e:58:
                    da:59:d9:02:f5:9d:be:bc:da:ca:45:81:95:ba:d3:
                    a8:92:de:f2:41:31:51:1f:46:d5:dc:94:bb:8f:83:
                    58:08:71:6b:3d:c8:75:6a:a5:93:ef:b5:28:dd:f2:
                    55:29:43:8c:38:46:56:cc:19:ba:ba:31:8c:f6:07:
                    2c:ff:d1:9e:0a:ec:20:ee:27:b8:44:4f:e5:12:30:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BB:1A:83:E7:93:D4:D1:3C:34:C9:8E:B2:8C:3D:4C:A3:38:92:74
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:7c:03:55:f9:d7:92:d2:2d:78:a1:8c:96:00:aa:6b:f1:77:
         84:a7:02:e0:34:81:04:83:15:26:46:09:6a:19:7a:a0:c8:69:
         46:f0:3b:4b:35:45:47:ab:67:4f:41:be:ea:76:03:ab:c2:80:
         5c:8d:54:87:3e:7b:b3:2f:7c:5c:a1:c1:a7:c5:ed:06:19:4a:
         e8:87:b0:97:d3:a7:a5:3f:ca:d9:0e:96:34:be:5b:f8:61:70:
         50:a0:b2:9e:5b:8e:d7:82:77:1e:93:06:f7:5e:c8:d0:31:15:
         8e:36:1f:d4:4a:4d:33:83:dd:f4:4d:94:e0:42:7a:ad:e9:b3:
         fe:d8:08:78:90:73:50:51:3e:db:a6:9a:36:43:5c:04:b4:c2:
         79:06:cb:fe:5a:3c:ba:70:43:ba:d1:46:d0:06:58:25:c3:ac:
         36:a8:a0:3a:27:81:5f:b8:07:a0:f2:6d:c4:72:e9:c8:38:0b:
         f9:7e:4c:51:a3:2a:6f:61:69:e0:d7:b1:5f:95:2e:f9:32:4d:
         a8:17:1d:7d:3c:a7:34:26:b7:fc:33:5a:12:09:6d:8e:61:34:
         2e:f1:15:bd:71:2a:bf:ae:3b:e3:11:af:2b:ad:c8:c6:d4:ee:
         e6:bf:26:a3:f8:2f:aa:3d:e5:99:a9:6a:dd:ff:70:ec:01:bf:
         32:aa:9d:43
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWx+cXX81vVRGEhw0DiihpMgYhUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0RjMwQjA1NzI2RkE1NDNDMTQ3REE5NEJGQkQ0NEMx
RDkzNjMwMDAeFw0yNDAyMTMxOTEyMDRaFw0yNTAyMTExOTE3MDRaMDMxMTAvBgNV
BAMTKEMxQkIxQTgzRTc5M0Q0RDEzQzM0Qzk4RUIyOEMzRDRDQTMzODkyNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAf5vG13QwS0xQVMI7NE3vyyU2
WDSVtIh792x7j9EB+xBMt7ZC0DUTSDDp1AayIkC1TnKL5S18K/NtRtsw21ks8uEc
tLTTIUFN/dp2xgtYl4nnk2cYpQsrtL+AaFceoHXXdHDb1ThRuhX0sg9A872byaj+
h3Y8dbXk2oQGgR/IoReCiDNN5MgFXiHy0k+5sgIi2us12Zq8hXfyymEdULSLhm8a
CjGt7fxDLIb9tGCcZ/qeWNpZ2QL1nb682spFgZW606iS3vJBMVEfRtXclLuPg1gI
cWs9yHVqpZPvtSjd8lUpQ4w4RlbMGbq6MYz2Byz/0Z4K7CDuJ7hET+USMIi1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwbsag+eT1NE8NMmOsow9TKM4knQwHwYDVR0j
BBgwFoAU0E8wsFcm+lQ8FH2pS/vUTB2TYwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMC9EMDRGMzBCMDU3MjZGQTU0M0MxNDdEQTk0QkZCRDQ0QzFEOTM2MzAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwNEYzMEIwNTcyNkZBNTQz
QzE0N0RBOTRCRkJENDRDMUQ5MzYzMDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzAv
MzIzODMwMzQzYTM0MzUzMDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERQhAMA0GCSqGSIb3DQEBCwUA
A4IBAQBwfANV+deS0i14oYyWAKpr8XeEpwLgNIEEgxUmRglqGXqgyGlG8DtLNUVH
q2dPQb7qdgOrwoBcjVSHPnuzL3xcocGnxe0GGUroh7CX06elP8rZDpY0vlv4YXBQ
oLKeW47Xgncekwb3XsjQMRWONh/USk0zg930TZTgQnqt6bP+2Ah4kHNQUT7bppo2
Q1wEtMJ5Bsv+Wjy6cEO60UbQBlglw6w2qKA6J4FfuAeg8m3EcunIOAv5fkxRoypv
YWng17FflS75Mk2oFx19PKc0Jrf8M1oSCW2OYTQu8RW9cSq/rjvjEa8rrcjG1O7m
vyaj+C+qPeWZqWrd/3DsAb8yqp1D
-----END CERTIFICATE-----