Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/323830343a346165383a3a2f33332d3333203d3e20323637323731.roa
File:                     323830343a346165383a3a2f33332d3333203d3e20323637323731.roa (raw, json)
Hash identifier:          tUdCxD/ibkE0Ff6WTtro/ZL8KPfwGTmRG4On1QFPFSQ=
Subject key identifier:   C8:67:C7:62:B7:06:3C:AF:59:8D:69:97:63:70:95:24:C4:6B:7A:C8
Certificate issuer:       /CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
Certificate serial:       1BDF6F93F28F693FCB77A7EBDF867BE6CA9701C8
Authority key identifier: CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/323830343a346165383a3a2f33332d3333203d3e20323637323731.roa
Signing time:             Sat 08 Apr 2023 15:00:00 +0000
ROA not before:           Sat 08 Apr 2023 14:55:00 +0000
ROA not after:            Sat 06 Apr 2024 15:00:00 +0000
asID:                     267271
IP address blocks:        2804:4ae8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:df:6f:93:f2:8f:69:3f:cb:77:a7:eb:df:86:7b:e6:ca:97:01:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
        Validity
            Not Before: Apr  8 14:55:00 2023 GMT
            Not After : Apr  6 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:c8:d0:88:88:42:83:31:ed:e8:76:67:69:
                    da:18:08:ee:5f:32:df:c7:6b:37:f1:29:c9:45:3b:
                    86:18:dd:0a:df:73:4e:a3:cb:4e:66:fd:d3:24:da:
                    a5:f3:94:f6:7b:b2:22:f6:b8:85:55:ff:f6:79:e8:
                    31:47:91:98:6f:f2:70:51:b9:7a:8b:f4:4a:5c:e3:
                    7f:67:ec:bd:46:74:26:b3:62:e7:81:01:3d:e6:02:
                    46:35:95:11:cf:fa:20:0c:36:68:c2:6d:48:d0:d9:
                    5e:5f:f2:a2:70:12:9a:2f:e2:99:f7:f7:62:83:c1:
                    a9:f9:a3:49:f7:02:07:64:41:cc:70:6a:64:44:a9:
                    96:90:3d:ac:48:3e:a2:b5:3e:de:0a:ec:27:e1:d8:
                    0a:30:48:60:74:70:1c:76:73:1d:12:07:d4:fb:65:
                    63:ad:c9:4e:1b:9c:9e:1f:f3:51:70:ea:2f:b6:dd:
                    bc:57:d1:e5:4b:a9:21:bc:0b:b8:65:83:84:58:dd:
                    df:72:7c:0e:f3:c0:54:23:b6:1b:b1:e8:04:ef:7f:
                    de:54:06:66:a1:72:57:a0:6b:0b:9e:d0:d4:30:81:
                    be:86:fc:8a:cd:36:94:f7:6f:28:ce:44:b3:06:0b:
                    f5:8b:f9:b1:6b:ba:86:36:a2:6c:b9:24:09:dc:9c:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:67:C7:62:B7:06:3C:AF:59:8D:69:97:63:70:95:24:C4:6B:7A:C8
            X509v3 Authority Key Identifier:
                keyid:CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/323830343a346165383a3a2f33332d3333203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae8::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:3b:57:8c:9d:3b:2f:95:74:51:4e:13:d8:d3:7f:eb:31:79:
         6d:39:b1:b6:6d:f1:08:e8:55:44:9e:5f:16:4e:e4:16:48:b4:
         c9:3e:07:7b:a6:e6:41:af:ef:7b:41:6e:4b:64:b0:c7:0f:e4:
         d2:96:87:dc:69:f1:a9:22:d5:21:1f:96:44:dd:ff:e6:83:88:
         d1:e1:8f:4f:b0:d6:1c:34:e3:4b:3b:bc:29:0b:43:d3:ff:5d:
         b3:bf:26:7b:20:f5:19:c8:bb:4d:76:59:2f:2d:01:a4:7f:73:
         3d:2b:3f:b4:af:3c:6a:b0:45:3f:c2:32:61:74:dd:01:dd:62:
         e1:fe:2a:91:10:75:6a:4b:f6:1e:e7:33:e9:d7:1c:90:7f:e2:
         dc:b3:93:4a:e3:79:c4:85:70:4f:48:2b:2b:f0:7c:92:0a:b2:
         5a:78:b2:09:e1:0a:de:57:af:24:66:5d:70:70:dc:c0:53:33:
         82:cd:ce:76:f1:ed:96:c5:a9:81:0b:6e:ae:d9:7e:ca:38:94:
         fd:0d:81:68:0a:49:0b:ad:e9:19:e2:fc:b9:36:2a:92:bd:72:
         07:88:32:5a:0d:2c:44:c9:11:2a:6c:39:76:23:b7:3a:a2:5f:
         0c:a0:bb:5d:f4:06:e3:43:33:ee:9b:57:b5:e2:66:78:e1:ec:
         04:6c:4a:2f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUG99vk/KPaT/Ld6fr34Z75sqXAcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y3Q0EzQzdGNjQ4NEE4REMyNjg4ODk0RjZENzQwMkVE
NTU4MEJFQjAeFw0yMzA0MDgxNDU1MDBaFw0yNDA0MDYxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkM3M0M4RDA4ODg4NDI4MzMx
RURFODc2Njc2OURBMTgwOEVFNUYzMkRGQzc2QjM3RjEyOUM5NDUzQjg2MThERDBB
REY3MzRFQTNDQjRFNjZGREQzMjREQUE1RjM5NEY2N0JCMjIyRjZCODg1NTVGRkY2
NzlFODMxNDc5MTk4NkZGMjcwNTFCOTdBOEJGNDRBNUNFMzdGNjdFQ0JENDY3NDI2
QjM2MkU3ODEwMTNERTYwMjQ2MzU5NTExQ0ZGQTIwMEMzNjY4QzI2RDQ4RDBEOTVF
NUZGMkEyNzAxMjlBMkZFMjk5RjdGNzYyODNDMUE5RjlBMzQ5RjcwMjA3NjQ0MUND
NzA2QTY0NDRBOTk2OTAzREFDNDgzRUEyQjUzRURFMEFFQzI3RTFEODBBMzA0ODYw
NzQ3MDFDNzY3MzFEMTIwN0Q0RkI2NTYzQURDOTRFMUI5QzlFMUZGMzUxNzBFQTJG
QjZEREJDNTdEMUU1NEJBOTIxQkMwQkI4NjU4Mzg0NThERERGNzI3QzBFRjNDMDU0
MjNCNjFCQjFFODA0RUY3RkRFNTQwNjY2QTE3MjU3QTA2QjBCOUVEMEQ0MzA4MUJF
ODZGQzhBQ0QzNjk0Rjc2RjI4Q0U0NEIzMDYwQkY1OEJGOUIxNkJCQTg2MzZBMjZD
QjkyNDA5REM5QzcxODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvHPI0IiIQoMx7eh2Z2naGAjuXzLfx2s38SnJRTuGGN0K33NOo8tO
Zv3TJNql85T2e7Ii9riFVf/2eegxR5GYb/JwUbl6i/RKXON/Z+y9RnQms2LngQE9
5gJGNZURz/ogDDZowm1I0NleX/KicBKaL+KZ9/dig8Gp+aNJ9wIHZEHMcGpkRKmW
kD2sSD6itT7eCuwn4dgKMEhgdHAcdnMdEgfU+2VjrclOG5yeH/NRcOovtt28V9Hl
S6khvAu4ZYOEWN3fcnwO88BUI7YbsegE73/eVAZmoXJXoGsLntDUMIG+hvyKzTaU
928ozkSzBgv1i/mxa7qGNqJsuSQJ3JxxhwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMhnx2K3BjyvWY1pl2NwlSTEa3rIMB8GA1UdIwQYMBaAFM98o8f2SEqNwmiIlPbX
QC7VWAvrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZxdHo1UFRVWUNkcXdK
NUNBSHJ1WVFpTjI2QURzVWplSkN4ZE43QXBTakV0LzAvQ0Y3Q0EzQzdGNjQ4NEE4
REMyNjg4ODk0RjZENzQwMkVENTU4MEJFQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DRjdDQTNDN0Y2NDg0QThEQzI2ODg4OTRGNkQ3NDAyRUQ1NTgw
QkVCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GcXR6NVBUVVlDZHF3SjVDQUhy
dVlRaU4yNkFEc1VqZUpDeGRON0FwU2pFdC8wLzMyMzgzMDM0M2EzNDYxNjUzODNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzNzMyMzczMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
SugAMA0GCSqGSIb3DQEBCwUAA4IBAQClO1eMnTsvlXRRThPY03/rMXltObG2bfEI
6FVEnl8WTuQWSLTJPgd7puZBr+97QW5LZLDHD+TSlofcafGpItUhH5ZE3f/mg4jR
4Y9PsNYcNONLO7wpC0PT/12zvyZ7IPUZyLtNdlkvLQGkf3M9Kz+0rzxqsEU/wjJh
dN0B3WLh/iqREHVqS/Ye5zPp1xyQf+Lcs5NK43nEhXBPSCsr8HySCrJaeLIJ4Qre
V68kZl1wcNzAUzOCzc528e2WxamBC26u2X7KOJT9DYFoCkkLrekZ4vy5NiqSvXIH
iDJaDSxEyREqbDl2I7c6ol8MoLtd9AbjQzPum1e14mZ44ewEbEov
-----END CERTIFICATE-----