Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/323830343a343331303a3a2f33322d313238203d3e20323637353436.roa
File:                     323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (raw, json)
Hash identifier:          0PY823GRacLBn4Ij6QxRwHbWKZ3t8cRfds01ZwrMpLU=
Subject key identifier:   8E:8E:80:E5:E0:05:02:00:A0:BD:DB:BC:FA:6E:DB:8E:2C:5C:E0:6F
Certificate issuer:       /CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Certificate serial:       605EF9F9F5B9E828940BFECC8219BE3E6DDBD91E
Authority key identifier: B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/323830343a343331303a3a2f33322d313238203d3e20323637353436.roa
Signing time:             Tue 13 Feb 2024 23:58:00 +0000
ROA not before:           Tue 13 Feb 2024 23:53:00 +0000
ROA not after:            Tue 11 Feb 2025 23:58:00 +0000
asID:                     267546
IP address blocks:        2804:4310::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5e:f9:f9:f5:b9:e8:28:94:0b:fe:cc:82:19:be:3e:6d:db:d9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
        Validity
            Not Before: Feb 13 23:53:00 2024 GMT
            Not After : Feb 11 23:58:00 2025 GMT
        Subject: CN=8E8E80E5E0050200A0BDDBBCFA6EDB8E2C5CE06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:0a:c6:41:d2:3d:16:6c:6e:68:ab:eb:2b:
                    1d:12:67:23:3c:6c:75:fd:34:f2:58:5d:88:5e:27:
                    7e:13:82:66:0c:6d:48:27:e6:60:25:95:b2:95:3b:
                    fb:fe:d1:3f:99:59:ab:62:ff:d2:ac:b2:3c:0b:7f:
                    99:d5:3f:77:9c:a8:46:c6:2a:e7:e9:2e:87:47:fb:
                    b4:18:fc:78:4f:ff:65:b2:b1:a0:c9:05:38:c9:9b:
                    06:76:20:b8:6e:8d:c7:52:35:ea:44:83:bd:8a:4e:
                    cc:8b:43:a8:e1:1f:da:ec:10:22:5e:bf:87:1b:e7:
                    50:9e:48:ec:fd:5a:81:a6:6f:21:e0:9f:ac:b1:f8:
                    d2:14:7a:a8:35:52:1b:e7:76:09:4b:ea:55:c0:04:
                    81:d6:2d:dd:42:28:a7:46:4c:00:8e:c5:72:31:01:
                    4c:40:7b:3c:ee:de:34:c1:d7:48:14:5a:c3:d5:3e:
                    bb:2a:a8:53:bc:56:48:fb:bb:3a:ba:4d:cf:77:94:
                    64:d1:1b:5c:9c:73:a9:09:37:10:ec:d9:89:c6:c3:
                    e8:2c:5b:5c:c4:cb:bd:be:af:b6:12:11:a8:21:b0:
                    c8:30:71:80:cf:00:2a:73:54:ff:12:bb:ed:3c:26:
                    b2:ff:8f:fb:7c:c7:e5:f6:c0:ba:d3:af:21:ef:fc:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:80:E5:E0:05:02:00:A0:BD:DB:BC:FA:6E:DB:8E:2C:5C:E0:6F
            X509v3 Authority Key Identifier:
                keyid:B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/323830343a343331303a3a2f33322d313238203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4310::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:5a:b6:82:7d:53:f0:19:26:f4:85:86:7f:ce:72:3a:83:d6:
         9d:cf:17:ef:4b:5e:3e:48:09:03:7e:bf:69:23:14:82:4b:1d:
         81:bb:20:5d:6d:c8:42:39:c4:a7:ea:57:04:f9:c6:1b:8e:1c:
         9a:27:6e:a2:9a:7a:13:29:c4:bb:0b:3f:89:da:3f:77:5c:30:
         d6:7f:e2:4b:a1:06:6e:55:89:ea:6f:7e:42:0f:e8:a6:ed:34:
         68:61:12:a3:42:bf:f0:44:3d:dd:d2:a9:73:a1:d7:cd:c1:66:
         d4:b7:c8:3c:e6:91:e2:1f:13:2b:ba:66:74:36:ed:eb:34:07:
         5b:02:34:53:d2:ea:20:7c:86:66:fd:e4:45:b8:f5:12:f7:37:
         17:08:8d:65:3a:a8:74:dc:24:59:a7:01:ab:88:9a:68:39:7f:
         d1:0a:37:26:40:19:9d:65:92:33:90:7d:84:99:b1:6c:28:67:
         72:1e:5e:be:fb:c0:21:d4:30:d6:c7:6e:21:9e:b9:bd:0d:ff:
         57:08:94:91:69:78:75:a4:ff:8e:36:7a:d4:1a:b4:1e:b1:96:
         fa:9b:6c:c6:5c:cc:60:87:62:e8:0b:b4:ee:6b:a1:3c:7e:15:
         ad:ab:01:0d:60:8e:07:c2:61:48:2a:cd:9d:96:26:34:02:60:
         e1:e6:fe:d9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYF75+fW56CiUC/7Mghm+Pm3b2R4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJDQUIzQ0VCMDM4NTJFMTY0RDQ3MEE1MkEwNkQwREZB
MDQ5NEM4NjAeFw0yNDAyMTMyMzUzMDBaFw0yNTAyMTEyMzU4MDBaMDMxMTAvBgNV
BAMTKDhFOEU4MEU1RTAwNTAyMDBBMEJEREJCQ0ZBNkVEQjhFMkM1Q0UwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZwrGQdI9FmxuaKvrKx0SZyM8
bHX9NPJYXYheJ34TgmYMbUgn5mAllbKVO/v+0T+ZWati/9KssjwLf5nVP3ecqEbG
KufpLodH+7QY/HhP/2WysaDJBTjJmwZ2ILhujcdSNepEg72KTsyLQ6jhH9rsECJe
v4cb51CeSOz9WoGmbyHgn6yx+NIUeqg1UhvndglL6lXABIHWLd1CKKdGTACOxXIx
AUxAezzu3jTB10gUWsPVPrsqqFO8Vkj7uzq6Tc93lGTRG1ycc6kJNxDs2YnGw+gs
W1zEy72+r7YSEaghsMgwcYDPACpzVP8Su+08JrL/j/t8x+X2wLrTryHv/PEnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUjo6A5eAFAgCgvdu8+m7bjixc4G8wHwYDVR0j
BBgwFoAUssqzzrA4UuFk1HClKgbQ36BJTIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZn
U00vMC9CMkNBQjNDRUIwMzg1MkUxNjRENDcwQTUyQTA2RDBERkEwNDk0Qzg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQ0FCM0NFQjAzODUyRTE2
NEQ0NzBBNTJBMDZEMERGQTA0OTRDODYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWGJ2ZFJjbUQ0REZKNnJtN2lXTnE1R0VjVEZrUFZoS3VaQk5aTDI2Z1NNLzAv
MzIzODMwMzQzYTM0MzMzMTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEMQMA0GCSqGSIb3DQEBCwUAA4IBAQALWraC
fVPwGSb0hYZ/znI6g9adzxfvS14+SAkDfr9pIxSCSx2BuyBdbchCOcSn6lcE+cYb
jhyaJ26imnoTKcS7Cz+J2j93XDDWf+JLoQZuVYnqb35CD+im7TRoYRKjQr/wRD3d
0qlzodfNwWbUt8g85pHiHxMrumZ0Nu3rNAdbAjRT0uogfIZm/eRFuPUS9zcXCI1l
Oqh03CRZpwGriJpoOX/RCjcmQBmdZZIzkH2EmbFsKGdyHl6++8Ah1DDWx24hnrm9
Df9XCJSRaXh1pP+ONnrUGrQesZb6m2zGXMxgh2LoC7Tua6E8fhWtqwENYI4HwmFI
Ks2dliY0AmDh5v7Z
-----END CERTIFICATE-----