Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/323830343a343836303a3a2f33322d3438203d3e20323637313137.roa
File:                     323830343a343836303a3a2f33322d3438203d3e20323637313137.roa (raw, json)
Hash identifier:          BvHUzQk+RMQs/GZQopsG4wHHjemzjGY87ldjxOHx+og=
Subject key identifier:   23:F8:13:60:E0:2C:8F:B0:9F:44:B6:1E:8B:D6:BA:73:21:ED:FB:32
Certificate issuer:       /CN=7E1BBAB799647F4715B7F978054B1A5E92477B5B
Certificate serial:       559D2035727E44ED125AD23E53545F74B77502A0
Authority key identifier: 7E:1B:BA:B7:99:64:7F:47:15:B7:F9:78:05:4B:1A:5E:92:47:7B:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E1BBAB799647F4715B7F978054B1A5E92477B5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/323830343a343836303a3a2f33322d3438203d3e20323637313137.roa
Signing time:             Wed 17 May 2023 17:30:00 +0000
ROA not before:           Wed 17 May 2023 17:25:00 +0000
ROA not after:            Wed 15 May 2024 17:30:00 +0000
asID:                     267117
IP address blocks:        2804:4860::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9d:20:35:72:7e:44:ed:12:5a:d2:3e:53:54:5f:74:b7:75:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E1BBAB799647F4715B7F978054B1A5E92477B5B
        Validity
            Not Before: May 17 17:25:00 2023 GMT
            Not After : May 15 17:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e1:6f:12:50:73:a5:e3:d4:2a:14:7c:71:17:
                    3e:e4:0c:d2:65:e2:96:71:1a:94:de:0e:12:fb:48:
                    09:24:a9:93:1c:6f:61:00:38:c5:c2:1d:35:ac:de:
                    4b:f5:59:ec:89:83:d5:4c:c6:40:a1:5f:bb:b8:88:
                    03:8d:29:c7:7c:cd:ba:6c:e3:2a:2d:be:95:42:69:
                    04:d0:23:bd:23:98:0d:29:fe:bc:60:2f:99:cd:bc:
                    4b:4d:61:33:63:0f:e4:d8:0a:bd:dc:e3:80:9c:70:
                    5f:65:3e:6e:66:21:c3:56:21:7a:d1:2f:3f:6c:c3:
                    c9:a5:f5:16:db:16:7b:49:36:94:c1:ac:23:a8:3e:
                    da:78:33:cf:d9:26:94:bf:98:54:00:00:ec:61:c7:
                    45:85:76:39:66:5a:ca:67:83:17:48:25:4f:5b:b7:
                    ec:c1:41:9b:ae:c5:de:2f:31:1e:bd:e0:b3:ba:7b:
                    c5:28:75:2d:b3:c0:b7:fc:be:9c:89:4b:55:90:a6:
                    57:3f:26:3f:4e:82:a3:d3:be:44:74:10:ff:e1:10:
                    22:2a:82:81:72:63:a0:28:d4:3c:97:0a:39:4e:a0:
                    06:95:b2:67:10:c4:9a:47:6e:92:87:3f:7e:21:d7:
                    f1:ed:f3:8d:15:4a:9d:56:d0:0c:fb:b2:c3:c0:bd:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:13:60:E0:2C:8F:B0:9F:44:B6:1E:8B:D6:BA:73:21:ED:FB:32
            X509v3 Authority Key Identifier:
                keyid:7E:1B:BA:B7:99:64:7F:47:15:B7:F9:78:05:4B:1A:5E:92:47:7B:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/7E1BBAB799647F4715B7F978054B1A5E92477B5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E1BBAB799647F4715B7F978054B1A5E92477B5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/323830343a343836303a3a2f33322d3438203d3e20323637313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4860::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:90:4f:c7:92:f1:08:cd:5c:05:df:88:bf:e1:01:ab:a4:cb:
         dd:94:fb:b2:de:19:de:f6:3c:89:ef:25:fd:b1:e2:db:4e:94:
         2a:b6:c0:68:30:65:8c:74:95:c4:b1:88:10:ea:f2:57:96:51:
         f7:66:2b:9c:a3:3d:3c:0f:b3:b6:af:c7:71:cb:04:92:a7:09:
         a0:f6:27:2e:50:d7:83:ca:25:3e:cf:da:cd:8b:cb:f5:83:fb:
         e5:18:5f:7c:36:c2:0e:f6:43:69:a9:5f:bb:ed:74:a5:6a:d7:
         e6:2a:b1:a8:d5:d2:a8:70:63:df:ea:bc:3a:c0:5f:1a:81:9a:
         31:5b:2a:d0:f5:91:9e:d2:52:80:18:74:2b:d0:20:6f:27:e7:
         01:c7:e6:b9:73:1f:69:c9:db:22:1f:9b:51:0b:08:46:a9:e0:
         47:93:78:86:ad:4d:65:1a:13:4b:7a:7a:52:f5:b7:53:86:31:
         80:27:50:d2:76:f5:16:37:cd:84:e9:02:1e:3f:f5:b7:d0:44:
         64:0b:f8:a8:ea:76:e4:1c:4f:27:72:2d:f5:86:90:a4:7c:fb:
         c9:ec:e4:18:be:3a:ef:86:97:92:fb:d5:62:0b:3c:61:c9:2b:
         3d:fe:3c:6d:5a:2c:fe:9e:84:19:fe:ed:fc:ff:d3:12:08:df:
         97:db:bc:fb
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUVZ0gNXJ+RO0SWtI+U1RfdLd1AqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UxQkJBQjc5OTY0N0Y0NzE1QjdGOTc4MDU0QjFBNUU5
MjQ3N0I1QjAeFw0yMzA1MTcxNzI1MDBaFw0yNDA1MTUxNzMwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjBFMTZGMTI1MDczQTVFM0Q0
MkExNDdDNzExNzNFRTQwQ0QyNjVFMjk2NzExQTk0REUwRTEyRkI0ODA5MjRBOTkz
MUM2RjYxMDAzOEM1QzIxRDM1QUNERTRCRjU1OUVDODk4M0Q1NENDNjQwQTE1RkJC
Qjg4ODAzOEQyOUM3N0NDREJBNkNFMzJBMkRCRTk1NDI2OTA0RDAyM0JEMjM5ODBE
MjlGRUJDNjAyRjk5Q0RCQzRCNEQ2MTMzNjMwRkU0RDgwQUJERENFMzgwOUM3MDVG
NjUzRTZFNjYyMUMzNTYyMTdBRDEyRjNGNkNDM0M5QTVGNTE2REIxNjdCNDkzNjk0
QzFBQzIzQTgzRURBNzgzM0NGRDkyNjk0QkY5ODU0MDAwMEVDNjFDNzQ1ODU3NjM5
NjY1QUNBNjc4MzE3NDgyNTRGNUJCN0VDQzE0MTlCQUVDNURFMkYzMTFFQkRFMEIz
QkE3QkM1Mjg3NTJEQjNDMEI3RkNCRTlDODk0QjU1OTBBNjU3M0YyNjNGNEU4MkEz
RDNCRTQ0NzQxMEZGRTExMDIyMkE4MjgxNzI2M0EwMjhENDNDOTcwQTM5NEVBMDA2
OTVCMjY3MTBDNDlBNDc2RTkyODczRjdFMjFEN0YxRURGMzhEMTU0QTlENTZEMDBD
RkJCMkMzQzBCREVEMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8OFvElBzpePUKhR8cRc+5AzSZeKWcRqU3g4S+0gJJKmTHG9hADjF
wh01rN5L9VnsiYPVTMZAoV+7uIgDjSnHfM26bOMqLb6VQmkE0CO9I5gNKf68YC+Z
zbxLTWEzYw/k2Aq93OOAnHBfZT5uZiHDViF60S8/bMPJpfUW2xZ7STaUwawjqD7a
eDPP2SaUv5hUAADsYcdFhXY5ZlrKZ4MXSCVPW7fswUGbrsXeLzEeveCzunvFKHUt
s8C3/L6ciUtVkKZXPyY/ToKj075EdBD/4RAiKoKBcmOgKNQ8lwo5TqAGlbJnEMSa
R26Shz9+Idfx7fONFUqdVtAM+7LDwL3tIQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FCP4E2DgLI+wn0S2HovWunMh7fsyMB8GA1UdIwQYMBaAFH4bureZZH9HFbf5eAVL
Gl6SR3tbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hSSHd0emJTaTJLNHBh
VUJkbm9wZ2k3aXVLcGRaY05ITGZScWZiRHREYUJaLzAvN0UxQkJBQjc5OTY0N0Y0
NzE1QjdGOTc4MDU0QjFBNUU5MjQ3N0I1Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83RTFCQkFCNzk5NjQ3RjQ3MTVCN0Y5NzgwNTRCMUE1RTkyNDc3
QjVCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IUkh3dHpiU2kySzRwYVVCZG5v
cGdpN2l1S3BkWmNOSExmUnFmYkR0RGFCWi8wLzMyMzgzMDM0M2EzNDM4MzYzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzMxMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
SGAwDQYJKoZIhvcNAQELBQADggEBAIuQT8eS8QjNXAXfiL/hAauky92U+7LeGd72
PInvJf2x4ttOlCq2wGgwZYx0lcSxiBDq8leWUfdmK5yjPTwPs7avx3HLBJKnCaD2
Jy5Q14PKJT7P2s2Ly/WD++UYX3w2wg72Q2mpX7vtdKVq1+YqsajV0qhwY9/qvDrA
XxqBmjFbKtD1kZ7SUoAYdCvQIG8n5wHH5rlzH2nJ2yIfm1ELCEap4EeTeIatTWUa
E0t6elL1t1OGMYAnUNJ29RY3zYTpAh4/9bfQRGQL+KjqduQcTydyLfWGkKR8+8ns
5Bi+Ou+Gl5L71WILPGHJKz3+PG1aLP6ehBn+7fz/0xII35fbvPs=
-----END CERTIFICATE-----