Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030313a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383030313a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          a+OfGJ8Lv3J5PzGo9ECsFIAmKBv7YEQj4vVE5DVlGp0=
Subject key identifier:   3A:41:20:F2:EA:FB:4C:EF:DF:D7:E9:0C:91:52:5F:5E:65:85:08:FA
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       505874C3F16914C1D6FE23E61B043537980F07B4
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030313a3a2f34382d3438203d3e203532343638.roa
Signing time:             Sat 26 Aug 2023 01:00:00 +0000
ROA not before:           Sat 26 Aug 2023 00:55:00 +0000
ROA not after:            Sat 24 Aug 2024 01:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:74:c3:f1:69:14:c1:d6:fe:23:e6:1b:04:35:37:98:0f:07:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Aug 26 00:55:00 2023 GMT
            Not After : Aug 24 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:e2:c7:b6:77:99:d2:4e:ba:ca:5d:e6:2b:
                    cf:18:c2:8a:6e:cd:0e:12:ab:29:0f:d3:64:c0:66:
                    c4:58:ce:9f:fd:22:74:5f:10:53:8f:63:f6:4c:7e:
                    2f:d9:a5:18:a5:c9:f4:77:a4:c2:ed:b8:c1:d7:4f:
                    10:dc:8e:b0:8f:8a:9b:ad:a1:cc:78:a2:71:e7:f0:
                    e0:fd:03:c9:e0:80:31:f9:c6:c2:4b:39:5f:f9:be:
                    f3:a7:1c:f1:56:a3:db:eb:8f:04:dd:37:aa:0e:72:
                    26:41:ee:a7:8c:0a:dc:d2:03:b6:9b:e4:f1:1d:40:
                    79:b4:37:b6:38:d9:68:6e:4d:b8:b1:82:49:5e:8e:
                    9d:a6:ee:e1:22:bd:f9:df:1e:ca:27:d0:f5:bc:c4:
                    9e:3e:09:54:d9:94:9e:69:60:98:7c:83:64:39:9d:
                    0c:98:e1:a2:7a:ce:13:75:5b:e7:a8:13:50:57:b4:
                    1d:06:b4:23:96:2c:bc:ae:26:a4:30:27:ae:91:e8:
                    19:75:30:38:2c:66:98:95:81:a6:91:18:58:d6:08:
                    12:6b:ca:7d:57:7d:e0:f2:b3:3d:31:68:19:8a:93:
                    f2:df:e4:88:01:52:1e:b5:54:e4:96:07:c3:55:2b:
                    b5:7b:e8:d7:7b:fe:07:b2:d5:6f:a9:ce:51:de:0d:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:41:20:F2:EA:FB:4C:EF:DF:D7:E9:0C:91:52:5F:5E:65:85:08:FA
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/323830343a326237383a383030313a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:68:bd:1d:5a:63:ac:5a:b3:44:b5:41:3d:07:56:9f:b4:
         62:57:cc:a9:0d:b5:74:31:8e:3d:86:50:bc:db:eb:11:48:90:
         ff:db:b7:1a:90:3b:68:1b:15:f9:2b:4a:38:ff:65:42:66:4d:
         e1:73:8e:bd:9f:cd:43:b2:1d:79:64:9c:2e:03:04:7f:54:a8:
         76:5d:a4:dd:c9:91:3e:44:f0:79:54:ea:ff:a6:6b:f9:91:ef:
         22:7f:f9:91:cf:39:fc:fd:02:ca:ad:4f:bb:4f:14:10:97:f1:
         bd:e1:50:16:0e:c3:1e:a7:58:32:59:83:31:66:c6:de:ff:32:
         99:2f:ec:f5:8a:37:21:8f:c3:df:e0:fa:70:9a:cb:f6:30:07:
         0b:3f:7e:ff:6a:73:eb:82:4e:21:fa:3b:92:99:ac:de:3a:ba:
         73:99:d3:2c:bb:be:03:f7:56:e8:8f:d3:d8:02:2b:23:45:95:
         2a:bf:cf:fe:88:29:d4:18:4f:b2:88:d3:19:ad:3e:12:b7:0c:
         7c:06:a6:4c:6e:60:52:04:ad:3d:e9:c8:75:5a:f8:28:03:fd:
         31:22:0c:8e:66:3c:09:67:13:c4:25:e0:99:b7:2f:66:10:51:
         b4:a8:89:4c:98:75:9d:53:65:ad:e7:66:be:ac:fa:b9:3d:f1:
         de:e6:52:2a
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUUFh0w/FpFMHW/iPmGwQ1N5gPB7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yMzA4MjYwMDU1MDBaFw0yNDA4MjQwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkM0Q0UyQzdCNjc3OTlEMjRF
QkFDQTVERTYyQkNGMThDMjhBNkVDRDBFMTJBQjI5MEZEMzY0QzA2NkM0NThDRTlG
RkQyMjc0NUYxMDUzOEY2M0Y2NEM3RTJGRDlBNTE4QTVDOUY0NzdBNEMyRURCOEMx
RDc0RjEwREM4RUIwOEY4QTlCQURBMUNDNzhBMjcxRTdGMEUwRkQwM0M5RTA4MDMx
RjlDNkMyNEIzOTVGRjlCRUYzQTcxQ0YxNTZBM0RCRUI4RjA0REQzN0FBMEU3MjI2
NDFFRUE3OEMwQURDRDIwM0I2OUJFNEYxMUQ0MDc5QjQzN0I2MzhEOTY4NkU0REI4
QjE4MjQ5NUU4RTlEQTZFRUUxMjJCREY5REYxRUNBMjdEMEY1QkNDNDlFM0UwOTU0
RDk5NDlFNjk2MDk4N0M4MzY0Mzk5RDBDOThFMUEyN0FDRTEzNzU1QkU3QTgxMzUw
NTdCNDFEMDZCNDIzOTYyQ0JDQUUyNkE0MzAyN0FFOTFFODE5NzUzMDM4MkM2Njk4
OTU4MUE2OTExODU4RDYwODEyNkJDQTdENTc3REUwRjJCMzNEMzE2ODE5OEE5M0Yy
REZFNDg4MDE1MjFFQjU1NEU0OTYwN0MzNTUyQkI1N0JFOEQ3N0JGRTA3QjJENTZG
QTlDRTUxREUwREE4QjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvEzix7Z3mdJOuspd5ivPGMKKbs0OEqspD9NkwGbEWM6f/SJ0XxBT
j2P2TH4v2aUYpcn0d6TC7bjB108Q3I6wj4qbraHMeKJx5/Dg/QPJ4IAx+cbCSzlf
+b7zpxzxVqPb648E3TeqDnImQe6njArc0gO2m+TxHUB5tDe2ONlobk24sYJJXo6d
pu7hIr353x7KJ9D1vMSePglU2ZSeaWCYfINkOZ0MmOGies4TdVvnqBNQV7QdBrQj
liy8riakMCeukegZdTA4LGaYlYGmkRhY1ggSa8p9V33g8rM9MWgZipPy3+SIAVIe
tVTklgfDVSu1e+jXe/4HstVvqc5R3g2oswIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FDpBIPLq+0zv39fpDJFSX15lhQj6MB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMyMzgzMDM0M2EzMjYyMzczODNh
MzgzMDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQreIABMA0GCSqGSIb3DQEBCwUAA4IBAQCgW2i9HVpjrFqzRLVBPQdW
n7RiV8ypDbV0MY49hlC82+sRSJD/27cakDtoGxX5K0o4/2VCZk3hc469n81Dsh15
ZJwuAwR/VKh2XaTdyZE+RPB5VOr/pmv5ke8if/mRzzn8/QLKrU+7TxQQl/G94VAW
DsMep1gyWYMxZsbe/zKZL+z1ijchj8Pf4Ppwmsv2MAcLP37/anPrgk4h+juSmaze
OrpzmdMsu74D91boj9PYAisjRZUqv8/+iCnUGE+yiNMZrT4Stwx8BqZMbmBSBK09
6ch1WvgoA/0xIgyOZjwJZxPEJeCZty9mEFG0qIlMmHWdU2Wt52a+rPq5PfHe5lIq
-----END CERTIFICATE-----