Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d3332203d3e20323638353634.roa
File:                     323830343a353331633a3a2f33322d3332203d3e20323638353634.roa (raw, json)
Hash identifier:          9z+vfB7vSCFPvVpz52MSE/fFHFcIIH2s6akY6SXahdQ=
Subject key identifier:   6B:B1:B9:84:E0:69:4C:A5:E8:D1:C8:08:A7:B6:0A:DC:76:DC:93:4B
Certificate issuer:       /CN=FA5DD4A99CE33D3AE72F86A394621F08627407D3
Certificate serial:       71C5A958746C2AE12656824D2C495D922CE2BC4A
Authority key identifier: FA:5D:D4:A9:9C:E3:3D:3A:E7:2F:86:A3:94:62:1F:08:62:74:07:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d3332203d3e20323638353634.roa
Signing time:             Fri 22 Mar 2024 17:00:02 +0000
ROA not before:           Fri 22 Mar 2024 16:55:02 +0000
ROA not after:            Sat 22 Mar 2025 17:00:02 +0000
asID:                     268564
IP address blocks:        2804:531c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c5:a9:58:74:6c:2a:e1:26:56:82:4d:2c:49:5d:92:2c:e2:bc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5DD4A99CE33D3AE72F86A394621F08627407D3
        Validity
            Not Before: Mar 22 16:55:02 2024 GMT
            Not After : Mar 22 17:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:e2:e3:43:70:0c:8b:55:38:d7:47:68:25:
                    fb:90:03:d2:2a:e9:3d:6f:e1:7a:1b:47:13:04:d9:
                    fa:ea:24:ee:14:af:fd:3b:f9:1d:21:39:5e:24:f3:
                    2e:45:75:bb:38:ed:0d:9f:2f:24:20:e9:bb:8b:63:
                    71:c0:5c:47:38:09:0b:df:8c:71:e8:fa:87:e3:94:
                    10:c1:45:43:6f:81:b2:e4:59:42:ac:b8:fe:1b:d3:
                    59:31:fa:de:3b:09:26:f6:fe:7e:2f:51:a5:2e:c1:
                    5a:3a:33:ed:54:33:17:02:46:bb:01:16:04:8d:a8:
                    4b:44:2b:26:27:3b:a6:ef:cd:67:d9:8f:1c:09:97:
                    48:2e:c3:71:04:da:cd:66:b0:08:cb:44:27:ba:68:
                    12:27:7f:bc:4b:ad:86:4d:0c:fb:7f:54:0b:c2:9e:
                    38:93:17:71:61:f6:ca:c1:8a:10:bc:6b:7a:75:d4:
                    ed:70:72:17:6f:8d:f9:3b:32:a6:2b:d6:22:d1:22:
                    ee:e9:65:d9:db:59:4b:fa:c4:b9:c2:47:b5:84:dd:
                    99:52:20:4b:59:67:40:08:b4:67:00:ca:72:65:8b:
                    f1:8d:e3:63:91:15:86:06:24:c3:44:6b:b5:f0:b1:
                    6c:4d:a5:50:f5:7d:ad:d7:36:61:e6:b7:c4:e1:f6:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B1:B9:84:E0:69:4C:A5:E8:D1:C8:08:A7:B6:0A:DC:76:DC:93:4B
            X509v3 Authority Key Identifier:
                keyid:FA:5D:D4:A9:9C:E3:3D:3A:E7:2F:86:A3:94:62:1F:08:62:74:07:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5DD4A99CE33D3AE72F86A394621F08627407D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d3332203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:c5:49:0b:0e:a4:ea:31:a2:b6:38:06:2d:39:4b:42:40:
         a9:ff:63:1b:d0:43:9e:17:ee:d4:51:6b:69:1c:bd:5d:bf:48:
         18:b9:85:b3:06:c3:2b:5a:f4:3f:d4:61:eb:b9:07:f9:0d:67:
         9a:29:7a:a0:88:39:e0:18:ad:64:d4:5b:5f:8a:a8:98:7c:aa:
         e6:1d:a5:d5:e2:4e:3d:6d:d1:a0:4b:cf:a1:d6:17:12:a2:a7:
         91:1c:7a:0c:a5:9c:ec:15:3d:7d:0c:52:43:f2:c4:99:c0:b2:
         e7:c9:0a:8f:20:92:22:a4:4e:c2:5b:4e:15:06:27:5c:65:a3:
         0e:b9:54:60:4b:82:94:0f:8b:71:37:25:c3:e7:15:f1:5f:92:
         27:37:c0:d7:92:1d:74:12:9b:51:68:05:53:8c:e4:9f:51:6d:
         8c:b2:4a:11:7f:75:18:25:90:6e:20:c6:ca:59:b7:70:10:59:
         24:cb:ed:e2:2a:21:02:10:6b:e1:56:32:81:e1:d2:eb:d0:e3:
         ef:31:01:d5:e1:c7:52:04:ee:25:99:ab:4d:b6:0f:8a:51:53:
         e6:08:a3:ef:b6:e3:68:61:17:3e:ba:47:1d:9b:eb:98:48:be:
         a3:1d:f7:7c:52:f0:4b:66:98:83:9e:d5:7c:fc:49:94:2b:cb:
         b2:64:a3:6f
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUccWpWHRsKuEmVoJNLEldkizivEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1REQ0QTk5Q0UzM0QzQUU3MkY4NkEzOTQ2MjFGMDg2
Mjc0MDdEMzAeFw0yNDAzMjIxNjU1MDJaFw0yNTAzMjIxNzAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDgxREUyRTM0MzcwMEM4QjU1
MzhENzQ3NjgyNUZCOTAwM0QyMkFFOTNENkZFMTdBMUI0NzEzMDREOUZBRUEyNEVF
MTRBRkZEM0JGOTFEMjEzOTVFMjRGMzJFNDU3NUJCMzhFRDBEOUYyRjI0MjBFOUJC
OEI2MzcxQzA1QzQ3MzgwOTBCREY4QzcxRThGQTg3RTM5NDEwQzE0NTQzNkY4MUIy
RTQ1OTQyQUNCOEZFMUJEMzU5MzFGQURFM0IwOTI2RjZGRTdFMkY1MUE1MkVDMTVB
M0EzM0VENTQzMzE3MDI0NkJCMDExNjA0OERBODRCNDQyQjI2MjczQkE2RUZDRDY3
RDk4RjFDMDk5NzQ4MkVDMzcxMDREQUNENjZCMDA4Q0I0NDI3QkE2ODEyMjc3RkJD
NEJBRDg2NEQwQ0ZCN0Y1NDBCQzI5RTM4OTMxNzcxNjFGNkNBQzE4QTEwQkM2QjdB
NzVENEVENzA3MjE3NkY4REY5M0IzMkE2MkJENjIyRDEyMkVFRTk2NUQ5REI1OTRC
RkFDNEI5QzI0N0I1ODRERDk5NTIyMDRCNTk2NzQwMDhCNDY3MDBDQTcyNjU4QkYx
OERFMzYzOTExNTg2MDYyNEMzNDQ2QkI1RjBCMTZDNERBNTUwRjU3REFERDczNjYx
RTZCN0M0RTFGNjVDRUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2B3i40NwDItVONdHaCX7kAPSKuk9b+F6G0cTBNn66iTuFK/9O/kd
ITleJPMuRXW7OO0Nny8kIOm7i2NxwFxHOAkL34xx6PqH45QQwUVDb4Gy5FlCrLj+
G9NZMfreOwkm9v5+L1GlLsFaOjPtVDMXAka7ARYEjahLRCsmJzum781n2Y8cCZdI
LsNxBNrNZrAIy0QnumgSJ3+8S62GTQz7f1QLwp44kxdxYfbKwYoQvGt6ddTtcHIX
b435OzKmK9Yi0SLu6WXZ21lL+sS5wke1hN2ZUiBLWWdACLRnAMpyZYvxjeNjkRWG
BiTDRGu18LFsTaVQ9X2t1zZh5rfE4fZc6wIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FGuxuYTgaUyl6NHICKe2Ctx23JNLMB8GA1UdIwQYMBaAFPpd1Kmc4z065y+Go5Ri
HwhidAfTMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g0TFhVY2RZU2Q2N2k3
b0N5SnBWVEhVMWZ5QjU5SkttaHU5MlRqcDFnaGFuLzAvRkE1REQ0QTk5Q0UzM0Qz
QUU3MkY4NkEzOTQ2MjFGMDg2Mjc0MDdEMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GQTVERDRBOTlDRTMzRDNBRTcyRjg2QTM5NDYyMUYwODYyNzQw
N0QzLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9INExYVWNkWVNkNjdpN29DeUpw
VlRIVTFmeUI1OUpLbWh1OTJUanAxZ2hhbi8wLzMyMzgzMDM0M2EzNTMzMzE2MzNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzODM1MzYzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
UxwwDQYJKoZIhvcNAQELBQADggEBAGvJxUkLDqTqMaK2OAYtOUtCQKn/YxvQQ54X
7tRRa2kcvV2/SBi5hbMGwyta9D/UYeu5B/kNZ5opeqCIOeAYrWTUW1+KqJh8quYd
pdXiTj1t0aBLz6HWFxKip5EcegylnOwVPX0MUkPyxJnAsufJCo8gkiKkTsJbThUG
J1xlow65VGBLgpQPi3E3JcPnFfFfkic3wNeSHXQSm1FoBVOM5J9RbYyyShF/dRgl
kG4gxspZt3AQWSTL7eIqIQIQa+FWMoHh0uvQ4+8xAdXhx1IE7iWZq022D4pRU+YI
o++242hhFz66Rx2b65hIvqMd93xS8EtmmIOe1Xz8SZQry7Jko28=
-----END CERTIFICATE-----