Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/323830343a363662633a3a2f33332d3333203d3e20323639353739.roa
File:                     323830343a363662633a3a2f33332d3333203d3e20323639353739.roa (raw, json)
Hash identifier:          mxxFWffb7f1Mnb3PFGqSCbgOkBLEbG8N3SYZ+gXu5Jg=
Subject key identifier:   13:B9:63:6B:82:87:FD:15:8A:4A:4C:74:9D:BD:21:5B:0F:52:48:C5
Certificate issuer:       /CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
Certificate serial:       551B98EFECBC104588399D0B244AB9B95AE2FCDF
Authority key identifier: 7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/323830343a363662633a3a2f33332d3333203d3e20323639353739.roa
Signing time:             Wed 03 Apr 2024 18:30:02 +0000
ROA not before:           Wed 03 Apr 2024 18:25:02 +0000
ROA not after:            Wed 02 Apr 2025 18:30:02 +0000
asID:                     269579
IP address blocks:        2804:66bc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1b:98:ef:ec:bc:10:45:88:39:9d:0b:24:4a:b9:b9:5a:e2:fc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
        Validity
            Not Before: Apr  3 18:25:02 2024 GMT
            Not After : Apr  2 18:30:02 2025 GMT
        Subject: CN=13B9636B8287FD158A4A4C749DBD215B0F5248C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:11:07:4d:db:15:e4:1b:d1:b7:f5:d1:0e:
                    34:54:ba:8c:18:83:e6:6f:6c:1d:f0:ff:30:9b:c4:
                    83:4a:bd:89:ba:73:25:ed:39:23:7d:84:8a:f0:b0:
                    c3:3f:fb:98:ef:65:9e:3e:ff:b4:bf:3e:cb:19:1d:
                    a3:3d:9e:a2:e2:6b:be:6c:99:85:bf:f2:49:d1:50:
                    28:38:68:a4:4f:9f:91:37:4f:21:24:a4:b5:e0:89:
                    fc:99:29:8c:63:1e:d6:b8:28:92:ae:63:42:71:11:
                    7e:6e:af:45:66:61:03:09:14:a5:1a:06:d5:d8:a8:
                    31:97:cb:db:3d:7a:e1:3d:98:77:19:07:d4:4b:b0:
                    ae:62:3e:91:0d:e8:5b:c4:cd:40:80:1f:1e:28:de:
                    ba:3c:74:80:33:f0:0e:2d:81:20:8c:c1:06:74:4d:
                    18:b8:18:8a:da:86:4d:38:ba:35:b9:ed:dc:58:7a:
                    6a:77:76:fd:8a:6e:d7:19:64:83:1d:64:4f:23:e1:
                    66:7d:c3:f4:80:03:6e:ef:60:86:97:63:21:ab:d3:
                    2b:5b:21:b2:28:9d:e8:a4:71:93:ca:e4:15:58:44:
                    60:ab:53:5c:39:53:fe:20:13:1b:d3:26:90:e7:aa:
                    4f:58:da:43:0e:15:70:2b:5c:cd:ca:e0:f5:06:76:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:63:6B:82:87:FD:15:8A:4A:4C:74:9D:BD:21:5B:0F:52:48:C5
            X509v3 Authority Key Identifier:
                keyid:7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/323830343a363662633a3a2f33332d3333203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:cf:c0:7f:06:08:4f:35:0f:b7:fe:90:16:90:b5:93:97:c2:
         e3:f8:78:39:5e:f4:6b:52:36:8a:54:2d:13:c1:bf:28:4d:26:
         1e:e5:75:d5:b6:3c:72:6f:e9:e2:4c:19:75:bf:dd:4d:37:18:
         44:71:64:8a:01:c7:a9:6f:b9:ba:0a:3a:0b:4d:0b:42:c5:96:
         57:02:79:40:74:e1:2b:45:40:d3:5e:43:dd:a0:b3:23:f1:28:
         9f:47:03:37:1d:c2:a6:0c:a0:80:97:10:27:0c:6b:95:be:c4:
         94:a8:43:9a:1b:47:d5:72:46:b1:65:7e:16:6c:d9:6f:fb:09:
         88:bc:f3:58:59:90:0b:61:bd:24:68:14:db:13:31:8d:74:81:
         8e:58:56:88:87:41:c7:de:64:5e:0e:08:79:44:7a:cd:7d:c3:
         43:3b:1e:61:24:3a:67:04:2e:22:c5:76:90:78:f9:2e:85:82:
         02:da:40:9f:4f:96:59:b7:33:95:0f:b6:b4:25:8e:c5:b5:08:
         4b:c3:51:0a:7f:7e:d4:4b:3b:97:62:7f:2c:a6:40:4c:01:4b:
         8f:bb:ec:8e:21:d9:64:31:a5:2c:05:9b:76:4b:7b:74:0e:83:
         3b:15:3a:93:a9:58:bc:02:4f:f7:21:49:da:9e:80:10:61:b1:
         98:3e:1d:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVRuY7+y8EEWIOZ0LJEq5uVri/N8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VBNDI2MkM3M0U5QzNDQkRGNjExQzZCNUQwNUUxQ0U1
QjU4MUJCMDAeFw0yNDA0MDMxODI1MDJaFw0yNTA0MDIxODMwMDJaMDMxMTAvBgNV
BAMTKDEzQjk2MzZCODI4N0ZEMTU4QTRBNEM3NDlEQkQyMTVCMEY1MjQ4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsKhEHTdsV5BvRt/XRDjRUuowY
g+ZvbB3w/zCbxINKvYm6cyXtOSN9hIrwsMM/+5jvZZ4+/7S/PssZHaM9nqLia75s
mYW/8knRUCg4aKRPn5E3TyEkpLXgifyZKYxjHta4KJKuY0JxEX5ur0VmYQMJFKUa
BtXYqDGXy9s9euE9mHcZB9RLsK5iPpEN6FvEzUCAHx4o3ro8dIAz8A4tgSCMwQZ0
TRi4GIrahk04ujW57dxYemp3dv2KbtcZZIMdZE8j4WZ9w/SAA27vYIaXYyGr0ytb
IbIoneikcZPK5BVYRGCrU1w5U/4gExvTJpDnqk9Y2kMOFXArXM3K4PUGdg9rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUE7lja4KH/RWKSkx0nb0hWw9SSMUwHwYDVR0j
BBgwFoAUfqQmLHPpw8vfYRxrXQXhzltYG7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkI1OFNiWWhDeGtxc2VNVnpzOUFxNlBwZVJUNHVMMUFZazUxeHQ0UHNt
RWovMS83RUE0MjYyQzczRTlDM0NCREY2MTFDNkI1RDA1RTFDRTVCNTgxQkIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFQTQyNjJDNzNFOUMzQ0JE
RjYxMUM2QjVEMDVFMUNFNUI1ODFCQjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCNThTYlloQ3hrcXNlTVZ6czlBcTZQcGVSVDR1TDFBWWs1MXh0NFBzbUVqLzEv
MzIzODMwMzQzYTM2MzY2MjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARmvAAwDQYJKoZIhvcNAQELBQADggEBAKnPwH8G
CE81D7f+kBaQtZOXwuP4eDle9GtSNopULRPBvyhNJh7lddW2PHJv6eJMGXW/3U03
GERxZIoBx6lvuboKOgtNC0LFllcCeUB04StFQNNeQ92gsyPxKJ9HAzcdwqYMoICX
ECcMa5W+xJSoQ5obR9VyRrFlfhZs2W/7CYi881hZkAthvSRoFNsTMY10gY5YVoiH
QcfeZF4OCHlEes19w0M7HmEkOmcELiLFdpB4+S6FggLaQJ9Pllm3M5UPtrQljsW1
CEvDUQp/ftRLO5difyymQEwBS4+77I4h2WQxpSwFm3ZLe3QOgzsVOpOpWLwCT/ch
SdqegBBhsZg+Hcg=
-----END CERTIFICATE-----