Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3438203d3e20323730353737.roa
File:                     323830343a366532303a3a2f33322d3438203d3e20323730353737.roa (raw, json)
Hash identifier:          vA8mqKPilxBERY4zJEppM7lF1WZ88qzbWQTdxeA1sfk=
Subject key identifier:   7E:2C:7E:E8:6B:B5:00:DB:35:B0:B4:C6:37:22:CB:02:33:68:4D:11
Certificate issuer:       /CN=E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7
Certificate serial:       5B86A898FD8536265F9025CA557163B33B6505E8
Authority key identifier: E0:E8:8C:0E:CD:EE:6F:4B:0F:14:27:B3:F5:35:37:2B:20:F7:6C:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3438203d3e20323730353737.roa
Signing time:             Fri 03 Mar 2023 12:42:00 +0000
ROA not before:           Fri 03 Mar 2023 12:37:00 +0000
ROA not after:            Fri 01 Mar 2024 12:42:00 +0000
asID:                     270577
IP address blocks:        2804:6e20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:86:a8:98:fd:85:36:26:5f:90:25:ca:55:71:63:b3:3b:65:05:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7
        Validity
            Not Before: Mar  3 12:37:00 2023 GMT
            Not After : Mar  1 12:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:34:fe:3c:8d:8d:08:db:63:59:dd:43:ef:
                    6f:ad:c4:a6:b0:83:e5:f8:89:62:80:7a:2b:8a:f8:
                    c3:f0:0f:c4:22:d8:7b:38:09:69:84:a1:f1:1a:17:
                    bc:b9:27:84:a2:38:13:70:9b:3d:db:49:81:dc:17:
                    f3:a0:b1:18:11:96:00:47:62:16:74:8f:05:03:86:
                    1e:df:9b:e0:7b:31:39:90:ce:52:15:c5:d7:9a:cd:
                    d2:3b:d4:b4:15:5e:92:4e:54:54:d3:43:b2:36:e3:
                    52:cd:1c:bf:2a:96:da:50:44:c8:bc:33:af:b5:f4:
                    c4:b4:ae:99:a6:3c:42:8b:81:20:8f:a1:e9:2a:7f:
                    5b:48:af:97:2e:72:3a:2e:c5:cb:b6:ef:bb:69:98:
                    a4:7c:5c:10:47:ad:ec:fc:5f:bf:17:7f:79:11:76:
                    a8:2d:2a:57:79:53:53:cf:63:02:9a:35:4a:4e:88:
                    76:4a:4b:aa:99:36:e0:f0:f4:f2:6e:0d:a3:60:af:
                    35:cf:6d:3e:02:db:68:89:48:af:9f:fe:fc:91:5b:
                    3f:65:e5:50:ba:f8:aa:07:6f:6d:1d:db:0d:67:a5:
                    91:15:30:2d:b5:66:93:8c:f7:83:bd:e7:3c:1d:d5:
                    fa:82:33:c9:4b:f9:a6:aa:f2:ba:ad:7c:45:fb:ec:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2C:7E:E8:6B:B5:00:DB:35:B0:B4:C6:37:22:CB:02:33:68:4D:11
            X509v3 Authority Key Identifier:
                keyid:E0:E8:8C:0E:CD:EE:6F:4B:0F:14:27:B3:F5:35:37:2B:20:F7:6C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3438203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:7f:da:be:ef:88:a8:63:ab:ec:f7:49:cf:c5:ea:2f:2d:31:
         89:c8:8c:a6:8a:dc:bf:51:41:20:84:c6:52:0f:34:ec:f1:a4:
         b1:92:cc:05:de:fc:b4:9e:04:42:57:c8:87:43:a2:83:27:e6:
         b2:29:6d:7b:42:49:a6:53:15:14:41:26:3b:aa:a5:5e:10:b9:
         0e:93:7f:e6:19:c1:8b:d4:5f:29:2b:1d:1c:36:a7:8f:07:2a:
         0e:bd:e1:8c:d3:a5:cd:00:a3:5e:81:c1:e0:4b:92:7d:b4:6d:
         5a:62:78:6d:9a:bd:61:9c:30:0f:61:43:0e:9a:51:af:48:8e:
         eb:4e:d8:01:4a:f1:10:21:75:dd:18:81:7f:73:40:7a:84:f5:
         5a:5f:8e:22:e4:50:01:22:4b:a0:fa:48:64:54:49:cf:9b:ff:
         41:6a:ae:f1:fc:7d:46:0e:dc:91:54:fd:38:d4:22:8f:f1:d4:
         a2:bc:05:d8:f4:fb:79:f1:98:8c:cd:4a:63:0d:24:6d:3f:e9:
         bf:75:16:a0:55:29:b8:4c:e8:0d:f7:fb:01:5f:08:9e:da:6b:
         5f:b1:1c:72:89:65:72:67:d2:6c:5e:81:db:06:63:95:3d:75:
         95:08:28:1f:ef:a8:04:e7:ec:cf:30:72:d5:ba:d0:5d:ed:72:
         f5:23:b8:0a
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUW4aomP2FNiZfkCXKVXFjsztlBegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBFODhDMEVDREVFNkY0QjBGMTQyN0IzRjUzNTM3MkIy
MEY3NkNDNzAeFw0yMzAzMDMxMjM3MDBaFw0yNDAzMDExMjQyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc0NDM0RkUzQzhEOEQwOERC
NjM1OURENDNFRjZGQURDNEE2QjA4M0U1Rjg4OTYyODA3QTJCOEFGOEMzRjAwRkM0
MjJEODdCMzgwOTY5ODRBMUYxMUExN0JDQjkyNzg0QTIzODEzNzA5QjNEREI0OTgx
REMxN0YzQTBCMTE4MTE5NjAwNDc2MjE2NzQ4RjA1MDM4NjFFREY5QkUwN0IzMTM5
OTBDRTUyMTVDNUQ3OUFDREQyM0JENEI0MTU1RTkyNEU1NDU0RDM0M0IyMzZFMzUy
Q0QxQ0JGMkE5NkRBNTA0NEM4QkMzM0FGQjVGNEM0QjRBRTk5QTYzQzQyOEI4MTIw
OEZBMUU5MkE3RjVCNDhBRjk3MkU3MjNBMkVDNUNCQjZFRkJCNjk5OEE0N0M1QzEw
NDdBREVDRkM1RkJGMTc3Rjc5MTE3NkE4MkQyQTU3Nzk1MzUzQ0Y2MzAyOUEzNTRB
NEU4ODc2NEE0QkFBOTkzNkUwRjBGNEYyNkUwREEzNjBBRjM1Q0Y2RDNFMDJEQjY4
ODk0OEFGOUZGRUZDOTE1QjNGNjVFNTUwQkFGOEFBMDc2RjZEMUREQjBENjdBNTkx
MTUzMDJEQjU2NjkzOENGNzgzQkRFNzNDMURENUZBODIzM0M5NEJGOUE2QUFGMkJB
QUQ3QzQ1RkJFQzIzMTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA10Q0/jyNjQjbY1ndQ+9vrcSmsIPl+IligHorivjD8A/EIth7OAlp
hKHxGhe8uSeEojgTcJs920mB3BfzoLEYEZYAR2IWdI8FA4Ye35vgezE5kM5SFcXX
ms3SO9S0FV6STlRU00OyNuNSzRy/KpbaUETIvDOvtfTEtK6ZpjxCi4Egj6HpKn9b
SK+XLnI6LsXLtu+7aZikfFwQR63s/F+/F395EXaoLSpXeVNTz2MCmjVKToh2Skuq
mTbg8PTybg2jYK81z20+AttoiUivn/78kVs/ZeVQuviqB29tHdsNZ6WRFTAttWaT
jPeDvec8HdX6gjPJS/mmqvK6rXxF++wjGQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FH4sfuhrtQDbNbC0xjciywIzaE0RMB8GA1UdIwQYMBaAFODojA7N7m9LDxQns/U1
Nysg92zHMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0g0aXE5eXZnenozM2hx
MW9kNnhNU3BveG05U3hmZnVlck5nTDZLWHZXcy8wL0UwRTg4QzBFQ0RFRTZGNEIw
RjE0MjdCM0Y1MzUzNzJCMjBGNzZDQzcuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvRTBFODhDMEVDREVFNkY0QjBGMTQyN0IzRjUzNTM3MkIyMEY3NkND
Ny5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0g0aXE5eXZnenozM2hxMW9kNnhN
U3BveG05U3hmZnVlck5nTDZLWHZXcy8wLzMyMzgzMDM0M2EzNjY1MzIzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMDM1MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEbiAw
DQYJKoZIhvcNAQELBQADggEBAB1/2r7viKhjq+z3Sc/F6i8tMYnIjKaK3L9RQSCE
xlIPNOzxpLGSzAXe/LSeBEJXyIdDooMn5rIpbXtCSaZTFRRBJjuqpV4QuQ6Tf+YZ
wYvUXykrHRw2p48HKg694YzTpc0Ao16BweBLkn20bVpieG2avWGcMA9hQw6aUa9I
jutO2AFK8RAhdd0YgX9zQHqE9VpfjiLkUAEiS6D6SGRUSc+b/0FqrvH8fUYO3JFU
/TjUIo/x1KK8Bdj0+3nxmIzNSmMNJG0/6b91FqBVKbhM6A33+wFfCJ7aa1+xHHKJ
ZXJn0mxegdsGY5U9dZUIKB/vqATn7M8wctW60F3tcvUjuAo=
-----END CERTIFICATE-----