Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/323830343a343161383a3a2f33322d3438203d3e20323637343438.roa
File:                     323830343a343161383a3a2f33322d3438203d3e20323637343438.roa (raw, json)
Hash identifier:          ElGHfK3iE9aJkRMnzydR0vchhb+FYuFS7RorBlezIko=
Subject key identifier:   CD:12:E5:0B:5E:96:DE:AC:61:A0:4B:61:3B:8D:72:B2:EB:E8:D9:CA
Certificate issuer:       /CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
Certificate serial:       05FB5E5431491DD80C75E709EA909D54914968BC
Authority key identifier: B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/323830343a343161383a3a2f33322d3438203d3e20323637343438.roa
Signing time:             Tue 28 Nov 2023 21:19:52 +0000
ROA not before:           Tue 28 Nov 2023 21:14:52 +0000
ROA not after:            Tue 26 Nov 2024 21:19:52 +0000
asID:                     267448
IP address blocks:        2804:41a8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fb:5e:54:31:49:1d:d8:0c:75:e7:09:ea:90:9d:54:91:49:68:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
        Validity
            Not Before: Nov 28 21:14:52 2023 GMT
            Not After : Nov 26 21:19:52 2024 GMT
        Subject: CN=CD12E50B5E96DEAC61A04B613B8D72B2EBE8D9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:e4:d2:46:8a:ac:34:82:0a:13:6a:60:11:
                    e8:e6:61:0e:6b:6f:87:33:6d:94:72:6f:fb:b2:41:
                    ad:1e:07:64:00:f4:95:f3:44:e5:51:5b:af:61:cc:
                    b3:53:7b:ef:ed:f5:74:99:31:cc:9c:e4:d9:36:83:
                    39:40:20:6d:ff:c0:c9:cb:cd:f3:e3:58:93:6d:ed:
                    7a:0a:32:8e:2a:79:79:91:ef:d0:ec:c9:21:fb:d9:
                    23:17:b9:57:99:5f:60:e1:32:69:dc:96:67:2c:dc:
                    ba:6b:53:6a:b4:8d:18:5c:f8:af:13:9e:ef:0c:6a:
                    1d:59:58:d0:6f:26:c2:b7:85:a7:27:73:3c:0e:fa:
                    c5:9a:98:5f:d7:ec:3c:44:f0:47:2c:4a:c8:d0:72:
                    cf:d0:20:b3:5e:b7:44:09:c6:69:4d:57:e2:1a:05:
                    82:f1:6e:3c:df:30:46:3d:6a:ba:ad:47:6a:78:e3:
                    ba:e1:4f:e4:06:a8:37:5a:78:e9:59:22:3f:66:58:
                    1e:0b:a6:e3:83:36:2b:11:a4:c2:3d:01:70:81:19:
                    2c:18:e6:1f:f8:36:d0:b6:11:36:fa:71:0b:f9:0c:
                    fa:6c:3c:6e:8c:cd:71:92:59:2d:9b:42:ea:c2:a8:
                    c8:fb:ae:a0:91:74:45:79:31:b7:8b:16:5a:ae:4a:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:12:E5:0B:5E:96:DE:AC:61:A0:4B:61:3B:8D:72:B2:EB:E8:D9:CA
            X509v3 Authority Key Identifier:
                keyid:B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/323830343a343161383a3a2f33322d3438203d3e20323637343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:29:2c:17:c5:72:6d:cd:88:29:ca:df:f4:96:14:3f:ac:c8:
         8b:c8:58:aa:44:c9:2a:28:f1:ef:fa:36:f4:72:d2:b1:53:84:
         ae:8a:78:28:64:50:a9:c4:18:74:17:23:6e:7b:cb:99:49:7d:
         0d:15:7d:53:a7:04:fd:85:b8:a9:aa:8d:d9:dc:21:e1:de:5d:
         00:29:ba:7e:6b:d4:b3:fa:63:33:b8:db:52:af:f0:cd:0b:b3:
         7d:b8:be:c0:3c:87:51:02:c3:4a:87:8f:a5:58:34:1d:26:fa:
         d4:c8:43:38:0c:28:5c:52:7e:9a:72:98:d9:b8:1b:4b:25:1c:
         2c:e8:14:35:46:c0:23:c1:b1:9e:02:00:44:da:45:1b:4b:cb:
         ea:c4:49:b5:84:84:63:36:64:70:cc:91:e8:7d:19:30:bf:ab:
         ed:67:c7:6e:c7:9d:0b:c1:d5:2b:8c:c7:91:16:12:b1:be:3c:
         0b:aa:95:7c:b2:84:4e:f2:f9:e7:1c:57:91:95:09:22:8e:fc:
         17:43:07:4b:55:1a:1f:64:12:a7:e2:9c:d7:81:ab:48:db:87:
         18:5f:b9:18:f3:69:db:c2:af:b4:fb:fd:89:0c:ad:48:a0:65:
         13:af:e6:c8:54:3c:23:85:b8:e1:56:a0:5b:01:e6:70:3d:01:
         44:a4:4b:f1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBfteVDFJHdgMdecJ6pCdVJFJaLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE3RDhEQTQ1OTlCNUZENTkyREU0NEI2QUI5NDI3MTEw
RjFGRTBCMjAeFw0yMzExMjgyMTE0NTJaFw0yNDExMjYyMTE5NTJaMDMxMTAvBgNV
BAMTKENEMTJFNTBCNUU5NkRFQUM2MUEwNEI2MTNCOEQ3MkIyRUJFOEQ5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxuTSRoqsNIIKE2pgEejmYQ5r
b4czbZRyb/uyQa0eB2QA9JXzROVRW69hzLNTe+/t9XSZMcyc5Nk2gzlAIG3/wMnL
zfPjWJNt7XoKMo4qeXmR79DsySH72SMXuVeZX2DhMmnclmcs3LprU2q0jRhc+K8T
nu8Mah1ZWNBvJsK3hacnczwO+sWamF/X7DxE8EcsSsjQcs/QILNet0QJxmlNV+Ia
BYLxbjzfMEY9arqtR2p447rhT+QGqDdaeOlZIj9mWB4LpuODNisRpMI9AXCBGSwY
5h/4NtC2ETb6cQv5DPpsPG6MzXGSWS2bQurCqMj7rqCRdEV5MbeLFlquSrjBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzRLlC16W3qxhoEthO41ysuvo2cowHwYDVR0j
BBgwFoAUsX2NpFmbX9WS3kS2q5QnEQ8f4LIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFvNzhYM1A0VWJtajdjZlBRV1JMYnRUQWJLN0RHdGNCVjlnQUNIRTJr
Y0ovMC9CMTdEOERBNDU5OUI1RkQ1OTJERTQ0QjZBQjk0MjcxMTBGMUZFMEIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxN0Q4REE0NTk5QjVGRDU5
MkRFNDRCNkFCOTQyNzExMEYxRkUwQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zxbzc4WDNQNFVibWo3Y2ZQUVdSTGJ0VEFiSzdER3RjQlY5Z0FDSEUya2NKLzAv
MzIzODMwMzQzYTM0MzE2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzQzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARBqDANBgkqhkiG9w0BAQsFAAOCAQEAPCksF8Vy
bc2IKcrf9JYUP6zIi8hYqkTJKijx7/o29HLSsVOErop4KGRQqcQYdBcjbnvLmUl9
DRV9U6cE/YW4qaqN2dwh4d5dACm6fmvUs/pjM7jbUq/wzQuzfbi+wDyHUQLDSoeP
pVg0HSb61MhDOAwoXFJ+mnKY2bgbSyUcLOgUNUbAI8GxngIARNpFG0vL6sRJtYSE
YzZkcMyR6H0ZML+r7WfHbsedC8HVK4zHkRYSsb48C6qVfLKETvL55xxXkZUJIo78
F0MHS1UaH2QSp+Kc14GrSNuHGF+5GPNp28KvtPv9iQytSKBlE6/myFQ8I4W44Vag
WwHmcD0BRKRL8Q==
-----END CERTIFICATE-----