Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a3a2f33322d3332203d3e20323638323631.roa
File:                     323830343a346537303a3a2f33322d3332203d3e20323638323631.roa (raw, json)
Hash identifier:          SZvw5qV0qswVqO6BEzE4E0s07Uyd/T7MEDpzfoYD4hE=
Subject key identifier:   6A:B0:17:13:34:FB:73:1C:03:E4:E3:C5:3D:88:EE:4A:AF:36:39:E9
Certificate issuer:       /CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
Certificate serial:       4A849A54D7421D43C3743DB50F5F6E6667FBFD6E
Authority key identifier: C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a3a2f33322d3332203d3e20323638323631.roa
Signing time:             Fri 28 Jul 2023 17:24:39 +0000
ROA not before:           Fri 28 Jul 2023 17:19:39 +0000
ROA not after:            Fri 26 Jul 2024 17:24:39 +0000
asID:                     268261
IP address blocks:        2804:4e70::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:84:9a:54:d7:42:1d:43:c3:74:3d:b5:0f:5f:6e:66:67:fb:fd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
        Validity
            Not Before: Jul 28 17:19:39 2023 GMT
            Not After : Jul 26 17:24:39 2024 GMT
        Subject: CN=6AB0171334FB731C03E4E3C53D88EE4AAF3639E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:b8:3c:9a:8f:6a:29:15:61:42:07:8c:5e:
                    16:a1:ce:8d:c6:ab:6c:49:54:d1:24:1f:c2:71:3d:
                    a1:6c:38:07:16:c4:51:dc:f1:4b:d8:e0:7f:92:b9:
                    21:7d:08:32:61:68:2f:78:20:68:fe:cc:9b:98:b2:
                    a8:bc:9a:23:a1:40:29:82:49:93:6d:1f:a7:ec:df:
                    20:a3:fa:a1:c9:ce:ec:cd:87:5f:45:4c:16:56:32:
                    84:3d:57:b5:4e:fd:2c:fb:9e:e0:f9:65:e9:07:20:
                    47:17:17:55:3e:ed:27:f8:fe:54:8c:80:ac:cf:94:
                    9c:61:43:25:65:14:df:4b:22:2c:77:e9:08:02:22:
                    c9:87:7d:6b:90:95:da:ec:a8:be:f6:4f:fe:66:39:
                    99:15:81:a0:23:18:3a:7e:13:88:d4:dd:49:51:89:
                    28:af:6c:e7:3d:c9:2a:89:5d:a4:67:b2:89:ec:bc:
                    f3:1f:65:1d:3a:6b:03:aa:bc:ad:d4:85:ad:c9:26:
                    cb:cb:e8:77:a0:76:66:eb:f3:60:3f:de:22:25:34:
                    6e:a7:b7:ec:39:bd:63:27:38:51:b9:d9:8e:a1:49:
                    86:08:0a:36:38:56:55:df:a3:8a:29:9f:bc:5f:a8:
                    c8:b5:a7:37:2f:6a:96:ba:5e:c4:8e:ef:42:91:33:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:17:13:34:FB:73:1C:03:E4:E3:C5:3D:88:EE:4A:AF:36:39:E9
            X509v3 Authority Key Identifier:
                keyid:C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a3a2f33322d3332203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:44:de:21:74:20:e1:27:aa:07:54:6a:97:cc:5f:a3:d5:a3:
         11:b0:ba:81:a3:f5:fb:20:43:61:62:df:cf:22:a9:eb:6d:e0:
         be:dd:0e:7b:e5:13:7f:31:ea:9f:30:48:2e:e0:d9:8d:80:be:
         f3:c1:f0:10:a5:96:11:b7:51:f1:b9:ff:35:22:68:e7:c6:17:
         e6:87:99:79:74:89:48:f9:f8:7a:4b:93:96:ea:34:a1:14:2a:
         9d:46:46:e8:be:a9:09:e9:44:68:40:20:06:b5:bb:a0:7f:b8:
         ea:76:4f:5e:55:9f:e0:d9:8e:1d:7a:fe:18:12:03:fa:ad:0b:
         3f:a2:c2:cc:82:37:dc:f2:ab:58:24:93:78:c4:15:86:02:dc:
         f5:ba:04:00:82:4d:15:56:9e:be:d2:83:d8:91:a4:10:d3:d8:
         5b:96:a8:be:1b:b0:57:b2:ec:71:ed:14:4f:2b:78:de:68:ca:
         e8:ca:41:20:19:11:53:64:98:ea:16:ef:d3:bf:b8:4d:ee:9a:
         73:f8:15:7e:2e:a0:c0:c9:aa:2c:8b:13:ac:82:5b:df:cc:7e:
         ee:fc:66:a2:1a:90:4c:c6:a0:9e:66:4d:9c:cc:3e:d7:8b:76:
         5d:7c:e5:d5:f0:75:04:3b:e7:4d:7d:95:f0:44:1d:37:22:37:
         95:0c:8d:d7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSoSaVNdCHUPDdD21D19uZmf7/W4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA2QzlBOTI4RTdEQUU1MUE2NTAzRERDQTRCNUY3OTc1
MkZGQTk0MjAeFw0yMzA3MjgxNzE5MzlaFw0yNDA3MjYxNzI0MzlaMDMxMTAvBgNV
BAMTKDZBQjAxNzEzMzRGQjczMUMwM0U0RTNDNTNEODhFRTRBQUYzNjM5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFbg8mo9qKRVhQgeMXhahzo3G
q2xJVNEkH8JxPaFsOAcWxFHc8UvY4H+SuSF9CDJhaC94IGj+zJuYsqi8miOhQCmC
SZNtH6fs3yCj+qHJzuzNh19FTBZWMoQ9V7VO/Sz7nuD5ZekHIEcXF1U+7Sf4/lSM
gKzPlJxhQyVlFN9LIix36QgCIsmHfWuQldrsqL72T/5mOZkVgaAjGDp+E4jU3UlR
iSivbOc9ySqJXaRnsonsvPMfZR06awOqvK3Uha3JJsvL6Hegdmbr82A/3iIlNG6n
t+w5vWMnOFG52Y6hSYYICjY4VlXfo4opn7xfqMi1pzcvapa6XsSO70KRM8AJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUarAXEzT7cxwD5OPFPYjuSq82OekwHwYDVR0j
BBgwFoAUwGyako59rlGmUD3cpLX3l1L/qUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFc1WHRucXJRckxTVmtUQzFObVZNTFVxUm9YU1VHbm4yTEJYNm5yNzU3
V2cvMC9DMDZDOUE5MjhFN0RBRTUxQTY1MDNERENBNEI1Rjc5NzUyRkZBOTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MwNkM5QTkyOEU3REFFNTFB
NjUwM0REQ0E0QjVGNzk3NTJGRkE5NDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXNVh0bnFyUXJMU1ZrVEMxTm1WTUxVcVJvWFNVR25uMkxCWDZucjc1N1dnLzAv
MzIzODMwMzQzYTM0NjUzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAROcDANBgkqhkiG9w0BAQsFAAOCAQEAMkTeIXQg
4SeqB1Rql8xfo9WjEbC6gaP1+yBDYWLfzyKp623gvt0Oe+UTfzHqnzBILuDZjYC+
88HwEKWWEbdR8bn/NSJo58YX5oeZeXSJSPn4ekuTluo0oRQqnUZG6L6pCelEaEAg
BrW7oH+46nZPXlWf4NmOHXr+GBID+q0LP6LCzII33PKrWCSTeMQVhgLc9boEAIJN
FVaevtKD2JGkENPYW5aovhuwV7Lsce0UTyt43mjK6MpBIBkRU2SY6hbv07+4Te6a
c/gVfi6gwMmqLIsTrIJb38x+7vxmohqQTMagnmZNnMw+14t2XXzl1fB1BDvnTX2V
8EQdNyI3lQyN1w==
-----END CERTIFICATE-----