Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/323830343a353930343a3a2f33322d3332203d3e20323638313634.roa
File:                     323830343a353930343a3a2f33322d3332203d3e20323638313634.roa (raw, json)
Hash identifier:          Uat0Cay1LI5rhOs12l2goRovaIQGCG4uY4UTV0vVqj8=
Subject key identifier:   F1:11:29:DC:50:80:8C:68:FD:8C:FB:6E:08:63:AE:90:4D:B5:69:69
Certificate issuer:       /CN=D85040866220B9E2081CF8E30D0BE49F82B0C554
Certificate serial:       68589974706839C27C695702B31243CE530722E7
Authority key identifier: D8:50:40:86:62:20:B9:E2:08:1C:F8:E3:0D:0B:E4:9F:82:B0:C5:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/323830343a353930343a3a2f33322d3332203d3e20323638313634.roa
Signing time:             Tue 09 Jan 2024 11:42:40 +0000
ROA not before:           Tue 09 Jan 2024 11:37:40 +0000
ROA not after:            Tue 07 Jan 2025 11:42:40 +0000
asID:                     268164
IP address blocks:        2804:5904::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:58:99:74:70:68:39:c2:7c:69:57:02:b3:12:43:ce:53:07:22:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85040866220B9E2081CF8E30D0BE49F82B0C554
        Validity
            Not Before: Jan  9 11:37:40 2024 GMT
            Not After : Jan  7 11:42:40 2025 GMT
        Subject: CN=F11129DC50808C68FD8CFB6E0863AE904DB56969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:5d:b1:f3:c0:85:09:43:f4:de:e3:9d:a4:
                    fd:f2:51:89:58:0d:5e:e9:e6:56:67:a8:8d:8b:c8:
                    09:32:18:0a:61:af:c2:c0:e0:45:4b:1a:dd:b8:1f:
                    4a:ad:37:1f:4f:87:a0:ed:a0:55:46:8a:db:d1:a2:
                    13:19:fc:8c:b8:27:ef:da:a3:f9:1e:c9:c8:23:51:
                    70:e8:6e:4c:f2:3b:b2:ea:31:d7:a6:de:e6:f9:dd:
                    3c:32:9c:c7:5a:3a:e7:66:ff:1f:f6:84:f8:8f:a0:
                    73:70:d6:af:3a:1f:a3:de:a8:db:ad:61:3b:cd:84:
                    42:9d:e1:cd:a8:62:c6:ee:b7:67:a3:b0:e6:dc:76:
                    79:1b:4f:e8:e7:f3:68:18:8a:0f:9a:82:5f:4a:f6:
                    52:4f:cc:37:2a:51:3a:f7:7f:58:2f:69:12:af:7c:
                    52:7a:d6:ff:1b:9c:7a:25:c8:dc:fb:a1:b5:c0:e1:
                    3e:70:68:ba:c3:00:c3:7a:69:2f:f9:c3:de:21:b3:
                    b9:ab:7d:15:5e:a1:67:c5:d3:b9:a8:9b:a4:8b:c7:
                    4e:9b:2c:9e:b3:64:04:76:ec:75:8d:0d:0b:f0:94:
                    c2:c8:c9:42:df:bc:45:32:21:26:cd:f4:e3:cd:de:
                    51:ca:7c:6a:4e:ef:2b:45:65:ea:b1:d1:33:91:1f:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:11:29:DC:50:80:8C:68:FD:8C:FB:6E:08:63:AE:90:4D:B5:69:69
            X509v3 Authority Key Identifier:
                keyid:D8:50:40:86:62:20:B9:E2:08:1C:F8:E3:0D:0B:E4:9F:82:B0:C5:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/323830343a353930343a3a2f33322d3332203d3e20323638313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5904::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:56:8d:16:be:1d:21:24:8e:2c:18:b6:5e:4d:65:57:ef:3c:
         cd:1a:d8:ad:2c:dc:fc:f7:5b:21:ed:86:82:7d:81:b9:cc:66:
         5e:04:a4:58:b9:66:6b:b5:48:ad:6c:f1:83:bb:88:9e:29:e9:
         fa:05:ad:4e:b8:03:b9:08:f6:f0:4c:79:93:75:7e:be:08:0b:
         01:bc:4f:21:77:b7:ac:4b:8d:0e:61:67:a4:51:a0:cb:17:84:
         09:a0:97:ef:4d:53:a3:8c:97:0d:05:d0:df:9c:96:13:55:49:
         78:3b:2b:b9:a0:bb:5d:d8:1b:4b:35:74:96:ce:51:69:24:9e:
         21:c1:29:bc:69:fd:70:47:59:c0:f8:f7:e0:44:b9:83:0d:b5:
         70:57:fd:79:46:fc:b0:f6:d8:98:50:df:31:38:70:17:e0:4a:
         07:b7:89:06:04:c3:1e:42:0e:bb:8c:a0:0b:e4:01:eb:09:9f:
         38:a5:53:55:49:99:b1:e4:c0:77:bb:dd:b0:65:21:41:02:cd:
         85:04:aa:3e:b2:b6:0d:0f:90:f1:66:d9:5f:a3:2e:74:21:9c:
         c1:4b:4a:3b:7e:95:b4:05:e1:a2:99:2a:9f:11:fb:39:cc:bf:
         fd:42:c2:f3:de:3c:f0:4d:a4:a1:ba:a4:b0:b3:6e:49:8d:d7:
         a4:e4:fc:41
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaFiZdHBoOcJ8aVcCsxJDzlMHIucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1MDQwODY2MjIwQjlFMjA4MUNGOEUzMEQwQkU0OUY4
MkIwQzU1NDAeFw0yNDAxMDkxMTM3NDBaFw0yNTAxMDcxMTQyNDBaMDMxMTAvBgNV
BAMTKEYxMTEyOURDNTA4MDhDNjhGRDhDRkI2RTA4NjNBRTkwNERCNTY5NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDc12x88CFCUP03uOdpP3yUYlY
DV7p5lZnqI2LyAkyGAphr8LA4EVLGt24H0qtNx9Ph6DtoFVGitvRohMZ/Iy4J+/a
o/keycgjUXDobkzyO7LqMdem3ub53TwynMdaOudm/x/2hPiPoHNw1q86H6PeqNut
YTvNhEKd4c2oYsbut2ejsObcdnkbT+jn82gYig+agl9K9lJPzDcqUTr3f1gvaRKv
fFJ61v8bnHolyNz7obXA4T5waLrDAMN6aS/5w94hs7mrfRVeoWfF07mom6SLx06b
LJ6zZAR27HWNDQvwlMLIyULfvEUyISbN9OPN3lHKfGpO7ytFZeqx0TORHyJBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8REp3FCAjGj9jPtuCGOukE21aWkwHwYDVR0j
BBgwFoAU2FBAhmIgueIIHPjjDQvkn4KwxVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3pTcHpFN1pKNGNTUHBMc2FKVEFFV3NhSGRqVFpNbnlObkc5Q1R0dGN4
UEgvMC9EODUwNDA4NjYyMjBCOUUyMDgxQ0Y4RTMwRDBCRTQ5RjgyQjBDNTU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NTA0MDg2NjIyMEI5RTIw
ODFDRjhFMzBEMEJFNDlGODJCMEM1NTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6U3B6RTdaSjRjU1BwTHNhSlRBRVdzYUhkalRaTW55Tm5HOUNUdHRjeFBILzAv
MzIzODMwMzQzYTM1MzkzMDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzEzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARZBDANBgkqhkiG9w0BAQsFAAOCAQEAmVaNFr4d
ISSOLBi2Xk1lV+88zRrYrSzc/PdbIe2Ggn2BucxmXgSkWLlma7VIrWzxg7uIninp
+gWtTrgDuQj28Ex5k3V+vggLAbxPIXe3rEuNDmFnpFGgyxeECaCX701To4yXDQXQ
35yWE1VJeDsruaC7XdgbSzV0ls5RaSSeIcEpvGn9cEdZwPj34ES5gw21cFf9eUb8
sPbYmFDfMThwF+BKB7eJBgTDHkIOu4ygC+QB6wmfOKVTVUmZseTAd7vdsGUhQQLN
hQSqPrK2DQ+Q8WbZX6MudCGcwUtKO36VtAXhopkqnxH7Ocy//ULC89488E2kobqk
sLNuSY3XpOT8QQ==
-----END CERTIFICATE-----