Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3332203d3e20323639323534.roa
File:                     323830343a363163303a3a2f33322d3332203d3e20323639323534.roa (raw, json)
Hash identifier:          b8qKUnTUH7g44R1z1y2a0lJ7Mnv+Wjzo6V1u9LedF3s=
Subject key identifier:   32:6D:23:02:64:F3:6C:1B:FD:75:11:59:99:AE:67:AE:8B:76:44:26
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       1FB4A10131F4A300502B59B198414E9A51331CBD
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3332203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:31:33 +0000
ROA not before:           Tue 15 Aug 2023 14:26:33 +0000
ROA not after:            Tue 13 Aug 2024 14:31:33 +0000
asID:                     269254
IP address blocks:        2804:61c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b4:a1:01:31:f4:a3:00:50:2b:59:b1:98:41:4e:9a:51:33:1c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:26:33 2023 GMT
            Not After : Aug 13 14:31:33 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:07:23:41:d9:17:61:ab:35:a3:7e:78:45:
                    5d:97:5f:a5:0c:92:4f:27:4d:4e:0a:78:c5:f1:09:
                    85:2f:7b:ed:5c:01:e9:e6:f9:34:2b:14:fe:88:78:
                    fc:6e:d5:b8:2a:f1:aa:04:5b:2a:55:fc:44:94:d5:
                    96:02:1e:25:80:be:0b:4c:7a:5e:af:1e:fd:a3:4f:
                    5e:20:69:a1:81:9b:4b:15:c3:f9:38:75:59:96:55:
                    59:13:05:8e:a4:0c:9c:f4:e1:c7:e4:9e:bd:9b:22:
                    3f:59:a4:3e:50:b0:16:f9:b3:b9:53:26:4c:46:91:
                    24:04:48:f7:1a:b1:45:51:83:9c:dc:1e:15:a9:53:
                    67:e8:57:fd:ee:50:5b:e7:c0:d9:ce:13:5c:92:47:
                    18:74:b4:57:b7:44:1b:d3:40:75:f7:a2:32:85:30:
                    de:97:b1:73:e4:88:cc:73:56:31:28:49:ae:f8:f7:
                    c6:47:11:81:07:c4:d7:23:28:1c:68:c1:f5:c8:09:
                    36:9e:e7:04:fc:a9:86:e3:32:18:fb:7f:2e:e6:a1:
                    f2:3b:c5:fb:cb:e5:97:f1:99:7a:68:a6:e9:3b:f5:
                    55:32:3a:d9:26:73:a2:7c:c9:07:80:04:4d:ae:5b:
                    7c:c6:9d:98:e7:cb:d8:8b:03:10:47:37:e9:0f:f3:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6D:23:02:64:F3:6C:1B:FD:75:11:59:99:AE:67:AE:8B:76:44:26
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33322d3332203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:a9:b0:88:e8:42:4a:44:f7:de:1a:d2:ef:d6:9b:b1:db:63:
         e1:40:25:0b:aa:2b:17:4f:d4:69:2b:62:eb:4e:c5:51:75:fb:
         19:3c:70:6c:fa:70:81:16:c2:6e:25:64:c5:3a:be:02:93:12:
         cf:27:07:cd:0b:fe:8b:32:51:25:bf:9a:99:a5:a6:5c:95:3e:
         f1:2a:2b:de:96:95:32:c6:b9:69:68:3a:77:d1:6e:72:06:cb:
         6b:1f:a6:99:31:05:0e:c6:a3:5c:35:0b:46:75:e6:40:e9:b7:
         7c:da:17:0a:7c:37:0d:84:53:06:1d:d0:c0:f1:9e:16:8e:1a:
         63:ff:8f:b4:29:71:47:99:d5:0f:2e:79:f3:26:f0:5d:d7:be:
         11:b2:c0:0e:42:91:26:bd:bc:ee:fe:37:9d:9a:b4:59:3e:05:
         07:fd:9f:28:d7:72:6b:d6:3c:51:c0:cc:20:a6:22:8c:9a:70:
         ab:b9:d0:59:8e:c6:a6:a7:31:3e:0a:1b:95:8b:60:11:0d:1f:
         4a:03:a0:f2:fc:be:c7:d4:7d:59:48:c2:21:e5:92:88:13:0f:
         92:db:50:cf:9b:cf:8b:a3:8b:25:64:ad:7f:4f:e1:35:b0:a8:
         2e:1b:7d:51:4b:6b:3f:92:e8:59:03:fd:4b:3f:fe:66:86:7f:
         67:cd:92:fd
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUH7ShATH0owBQK1mxmEFOmlEzHL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwM0RGNTc2RENGQUM0QjExREE5QUYyNzgwMjg3MTRG
M0VDRDlGQzAeFw0yMzA4MTUxNDI2MzNaFw0yNDA4MTMxNDMxMzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzM5NzA3MjM0MUQ5MTc2MUFC
MzVBMzdFNzg0NTVEOTc1RkE1MEM5MjRGMjc0RDRFMEE3OEM1RjEwOTg1MkY3QkVE
NUMwMUU5RTZGOTM0MkIxNEZFODg3OEZDNkVENUI4MkFGMUFBMDQ1QjJBNTVGQzQ0
OTRENTk2MDIxRTI1ODBCRTBCNEM3QTVFQUYxRUZEQTM0RjVFMjA2OUExODE5QjRC
MTVDM0Y5Mzg3NTU5OTY1NTU5MTMwNThFQTQwQzlDRjRFMUM3RTQ5RUJEOUIyMjNG
NTlBNDNFNTBCMDE2RjlCM0I5NTMyNjRDNDY5MTI0MDQ0OEY3MUFCMTQ1NTE4MzlD
REMxRTE1QTk1MzY3RTg1N0ZERUU1MDVCRTdDMEQ5Q0UxMzVDOTI0NzE4NzRCNDU3
Qjc0NDFCRDM0MDc1RjdBMjMyODUzMERFOTdCMTczRTQ4OENDNzM1NjMxMjg0OUFF
RjhGN0M2NDcxMTgxMDdDNEQ3MjMyODFDNjhDMUY1QzgwOTM2OUVFNzA0RkNBOTg2
RTMzMjE4RkI3RjJFRTZBMUYyM0JDNUZCQ0JFNTk3RjE5OTdBNjhBNkU5M0JGNTU1
MzIzQUQ5MjY3M0EyN0NDOTA3ODAwNDREQUU1QjdDQzY5RDk4RTdDQkQ4OEIwMzEw
NDczN0U5MEZGM0RERkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw5cHI0HZF2GrNaN+eEVdl1+lDJJPJ01OCnjF8QmFL3vtXAHp5vk0
KxT+iHj8btW4KvGqBFsqVfxElNWWAh4lgL4LTHperx79o09eIGmhgZtLFcP5OHVZ
llVZEwWOpAyc9OHH5J69myI/WaQ+ULAW+bO5UyZMRpEkBEj3GrFFUYOc3B4VqVNn
6Ff97lBb58DZzhNckkcYdLRXt0Qb00B196IyhTDel7Fz5IjMc1YxKEmu+PfGRxGB
B8TXIygcaMH1yAk2nucE/KmG4zIY+38u5qHyO8X7y+WX8Zl6aKbpO/VVMjrZJnOi
fMkHgARNrlt8xp2Y58vYiwMQRzfpD/Pd+wIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FDJtIwJk82wb/XURWZmuZ66LdkQmMB8GA1UdIwQYMBaAFEcD31dtz6xLEdqa8ngC
hxTz7Nn8MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hVY3UxU0N6NjN6RGlF
bmhYNURHMnVxd0JGaGMxdnJ0VURMekRkdndSYmRDLzAvNDcwM0RGNTc2RENGQUM0
QjExREE5QUYyNzgwMjg3MTRGM0VDRDlGQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NzAzREY1NzZEQ0ZBQzRCMTFEQTlBRjI3ODAyODcxNEYzRUNE
OUZDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IVWN1MVNDejYzekRpRW5oWDVE
RzJ1cXdCRmhjMXZydFVETHpEZHZ3UmJkQy8wLzMyMzgzMDM0M2EzNjMxNjMzMDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTMyMzUzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
YcAwDQYJKoZIhvcNAQELBQADggEBAI+psIjoQkpE994a0u/Wm7HbY+FAJQuqKxdP
1GkrYutOxVF1+xk8cGz6cIEWwm4lZMU6vgKTEs8nB80L/osyUSW/mpmlplyVPvEq
K96WlTLGuWloOnfRbnIGy2sfppkxBQ7Go1w1C0Z15kDpt3zaFwp8Nw2EUwYd0MDx
nhaOGmP/j7QpcUeZ1Q8uefMm8F3XvhGywA5CkSa9vO7+N52atFk+BQf9nyjXcmvW
PFHAzCCmIoyacKu50FmOxqanMT4KG5WLYBENH0oDoPL8vsfUfVlIwiHlkogTD5Lb
UM+bz4ujiyVkrX9P4TWwqC4bfVFLaz+S6FkD/Us//maGf2fNkv0=
-----END CERTIFICATE-----