Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/323830343a333230633a3a2f33322d3438203d3e20323635303533.roa
File:                     323830343a333230633a3a2f33322d3438203d3e20323635303533.roa (raw, json)
Hash identifier:          +ytRdGJk4FWA2C5nT2ZB4u3q79BSXSSp60L68Qk6Lrk=
Subject key identifier:   10:17:3F:42:E7:D0:4C:34:63:46:5C:FB:55:08:B6:3F:46:52:CA:3F
Certificate issuer:       /CN=92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472
Certificate serial:       268CB2A7E0071D7BCA6A895B61F62A5533A7C1E0
Authority key identifier: 92:19:1D:0C:D8:E1:07:AB:4B:CE:5C:6F:E7:A7:FC:C2:3D:32:34:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/323830343a333230633a3a2f33322d3438203d3e20323635303533.roa
Signing time:             Mon 24 Jul 2023 12:30:37 +0000
ROA not before:           Mon 24 Jul 2023 12:25:37 +0000
ROA not after:            Mon 22 Jul 2024 12:30:37 +0000
asID:                     265053
IP address blocks:        2804:320c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8c:b2:a7:e0:07:1d:7b:ca:6a:89:5b:61:f6:2a:55:33:a7:c1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472
        Validity
            Not Before: Jul 24 12:25:37 2023 GMT
            Not After : Jul 22 12:30:37 2024 GMT
        Subject: CN=10173F42E7D04C3463465CFB5508B63F4652CA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:84:19:fd:cf:de:3a:33:f6:48:59:a4:91:
                    ef:0f:9d:39:be:b9:55:fa:1a:64:8c:c0:76:4a:cd:
                    f6:5e:f1:ba:09:45:60:02:b0:9b:00:06:27:92:4f:
                    9e:32:81:52:a8:0e:50:a9:95:02:bb:bb:14:b9:0f:
                    9f:2a:c0:7e:da:e2:30:da:f0:9e:cb:50:ab:76:ba:
                    a4:0e:f5:b8:06:ab:89:40:ee:20:b0:7a:d5:5f:25:
                    e8:67:d1:20:e7:40:7a:9d:22:80:92:45:81:0c:e5:
                    6b:bf:3b:ba:21:99:85:f7:c0:b7:94:8b:50:34:8d:
                    20:41:73:67:77:2b:77:92:d0:72:6c:98:8a:c8:c3:
                    dc:45:fe:37:9a:55:aa:cb:d7:ab:9b:fa:3d:9c:71:
                    8a:56:cc:2c:85:37:fc:1e:df:f8:c6:71:20:0a:52:
                    6a:e6:89:ff:b7:e0:fe:6a:41:05:f4:fe:e6:d1:5c:
                    4f:bc:70:ca:d4:3a:a2:db:43:84:92:28:5e:d3:a7:
                    35:3e:a6:94:fe:f3:8d:98:6c:07:05:e8:4e:2b:22:
                    b6:4b:4e:62:e8:a2:26:13:ed:17:6a:1a:d4:97:b4:
                    67:db:8f:15:6d:7a:be:bf:fc:09:d3:5d:9c:be:7a:
                    b3:63:a0:6c:1f:0b:ef:15:1a:d7:b4:91:53:40:16:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:17:3F:42:E7:D0:4C:34:63:46:5C:FB:55:08:B6:3F:46:52:CA:3F
            X509v3 Authority Key Identifier:
                keyid:92:19:1D:0C:D8:E1:07:AB:4B:CE:5C:6F:E7:A7:FC:C2:3D:32:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/323830343a333230633a3a2f33322d3438203d3e20323635303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:320c::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:52:87:e9:cd:17:4c:3d:8f:34:18:dc:a6:ef:68:44:ed:f2:
         ac:f4:b4:1c:50:94:af:04:7c:15:80:4f:2b:79:44:00:80:e9:
         4c:d2:76:f3:13:cb:39:e4:40:a1:cb:d6:2f:10:14:90:d9:44:
         34:8c:56:2a:48:26:46:9c:14:17:12:13:6f:df:2e:26:4e:2d:
         7b:e0:0b:dd:d5:e2:4f:73:6d:e3:50:a8:d2:b1:e6:15:ce:4a:
         d1:75:c1:e3:8d:0e:78:c0:91:98:a5:ab:d4:c4:b7:e2:39:3c:
         10:71:df:be:6d:4b:e9:31:32:5b:5b:91:dc:0c:bd:75:77:1f:
         40:44:ba:b8:4d:ed:fc:bf:b8:35:7f:b1:ea:05:37:05:4a:3f:
         3d:9b:ce:55:8e:de:05:89:3f:81:47:36:5d:93:6b:2d:f5:4c:
         44:be:82:a3:f5:ac:b4:d3:d3:d1:f5:a4:90:9c:28:96:0e:35:
         14:45:7c:70:1e:e1:71:91:6e:97:d7:7d:d7:d6:75:0e:c7:7f:
         17:53:10:cd:b2:14:f6:9b:ab:f4:93:45:c0:e2:32:6e:cc:67:
         45:fe:25:36:1f:ee:b1:6d:ed:5b:e5:08:28:81:2e:d1:bf:7d:
         d2:d5:9d:03:c6:65:5e:6a:69:f9:44:0a:e9:ce:39:cc:27:85:
         3c:19:db:f1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJoyyp+AHHXvKaolbYfYqVTOnweAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIxOTFEMENEOEUxMDdBQjRCQ0U1QzZGRTdBN0ZDQzIz
RDMyMzQ3MjAeFw0yMzA3MjQxMjI1MzdaFw0yNDA3MjIxMjMwMzdaMDMxMTAvBgNV
BAMTKDEwMTczRjQyRTdEMDRDMzQ2MzQ2NUNGQjU1MDhCNjNGNDY1MkNBM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hoQZ/c/eOjP2SFmkke8PnTm+
uVX6GmSMwHZKzfZe8boJRWACsJsABieST54ygVKoDlCplQK7uxS5D58qwH7a4jDa
8J7LUKt2uqQO9bgGq4lA7iCwetVfJehn0SDnQHqdIoCSRYEM5Wu/O7ohmYX3wLeU
i1A0jSBBc2d3K3eS0HJsmIrIw9xF/jeaVarL16ub+j2ccYpWzCyFN/we3/jGcSAK
Umrmif+34P5qQQX0/ubRXE+8cMrUOqLbQ4SSKF7TpzU+ppT+842YbAcF6E4rIrZL
TmLooiYT7RdqGtSXtGfbjxVter6//AnTXZy+erNjoGwfC+8VGte0kVNAFvslAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUEBc/QufQTDRjRlz7VQi2P0ZSyj8wHwYDVR0j
BBgwFoAUkhkdDNjhB6tLzlxv56f8wj0yNHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhOc0dZaEVGMXVuUDhFNE5nb2hQRWNmbXdjdUNrTThiSkJWNnNmYzRS
bnQvMC85MjE5MUQwQ0Q4RTEwN0FCNEJDRTVDNkZFN0E3RkNDMjNEMzIzNDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkyMTkxRDBDRDhFMTA3QUI0
QkNFNUM2RkU3QTdGQ0MyM0QzMjM0NzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZITnNHWWhFRjF1blA4RTROZ29oUEVjZm13Y3VDa004YkpCVjZzZmM0Um50LzAv
MzIzODMwMzQzYTMzMzIzMDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzAzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQyDDANBgkqhkiG9w0BAQsFAAOCAQEAdVKH6c0X
TD2PNBjcpu9oRO3yrPS0HFCUrwR8FYBPK3lEAIDpTNJ28xPLOeRAocvWLxAUkNlE
NIxWKkgmRpwUFxITb98uJk4te+AL3dXiT3Nt41Co0rHmFc5K0XXB440OeMCRmKWr
1MS34jk8EHHfvm1L6TEyW1uR3Ay9dXcfQES6uE3t/L+4NX+x6gU3BUo/PZvOVY7e
BYk/gUc2XZNrLfVMRL6Co/WstNPT0fWkkJwolg41FEV8cB7hcZFul9d919Z1Dsd/
F1MQzbIU9pur9JNFwOIybsxnRf4lNh/usW3tW+UIKIEu0b990tWdA8ZlXmpp+UQK
6c45zCeFPBnb8Q==
-----END CERTIFICATE-----