Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa
File:                     323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (raw, json)
Hash identifier:          smJSUlwh0zyEMHkJ+TdhQuiF0Iu1TcJjmZwtFOqnHs8=
Subject key identifier:   AB:F2:38:C6:39:A5:4F:4E:AA:CA:F4:A8:84:8D:E6:A0:CB:38:6D:CA
Certificate issuer:       /CN=FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C
Certificate serial:       7E1E823929495D2C595CF840BCE4862FA74B7C2A
Authority key identifier: FE:F8:DD:8F:52:EE:F0:3F:F2:CD:9C:97:A8:31:81:30:44:AA:DE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa
Signing time:             Sun 04 Feb 2024 03:16:20 +0000
ROA not before:           Sun 04 Feb 2024 03:11:20 +0000
ROA not after:            Sun 02 Feb 2025 03:16:20 +0000
asID:                     269053
IP address blocks:        2804:5ebc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1e:82:39:29:49:5d:2c:59:5c:f8:40:bc:e4:86:2f:a7:4b:7c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C
        Validity
            Not Before: Feb  4 03:11:20 2024 GMT
            Not After : Feb  2 03:16:20 2025 GMT
        Subject: CN=ABF238C639A54F4EAACAF4A8848DE6A0CB386DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:2c:7c:50:b9:f3:88:69:bd:b5:c4:25:02:
                    e4:9f:87:ce:6c:d3:10:5c:d8:cf:bc:cb:d9:10:d7:
                    e2:ec:cc:34:e5:1b:19:59:04:c2:c1:e4:66:93:26:
                    e2:86:54:ab:c7:b7:d8:5e:a5:16:4d:b9:40:b5:69:
                    10:2d:eb:f9:0f:6e:32:fe:51:b4:3c:3e:6a:86:2c:
                    2f:99:a4:4a:87:68:df:48:3f:ad:f4:2d:c7:c1:14:
                    c1:87:14:57:d6:f4:f5:1c:9f:1a:04:b2:90:3a:11:
                    77:df:cb:02:9e:a8:dc:0c:49:2f:0e:5b:2d:fb:a3:
                    9c:34:57:09:df:d2:f7:e5:0c:2f:ca:4c:72:60:2d:
                    5a:ec:3b:3c:5a:3d:74:b0:7d:3f:3b:72:3f:0f:d1:
                    5b:21:f2:84:2a:65:84:09:15:19:38:7d:f4:96:ef:
                    3a:6a:27:73:cd:0a:75:b9:79:ec:68:d5:b4:e3:4a:
                    5f:52:d1:d2:76:19:e8:8a:cc:dc:99:f6:4c:95:20:
                    66:a4:f2:64:fb:da:28:ea:f7:04:a1:26:df:9e:e9:
                    ad:ad:11:c8:24:59:08:b3:ea:88:f2:34:c1:ab:d4:
                    4d:d3:50:04:7d:f6:c0:d0:d9:9a:a2:bb:e7:ee:37:
                    e6:b9:2c:3d:0e:75:e9:74:46:14:93:37:cb:44:9e:
                    94:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F2:38:C6:39:A5:4F:4E:AA:CA:F4:A8:84:8D:E6:A0:CB:38:6D:CA
            X509v3 Authority Key Identifier:
                keyid:FE:F8:DD:8F:52:EE:F0:3F:F2:CD:9C:97:A8:31:81:30:44:AA:DE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:15:9e:bc:85:44:f1:45:9a:45:32:fd:b2:d3:10:cf:a1:c6:
         79:f0:58:51:af:c2:c7:a7:3d:50:e7:f3:ec:34:00:c7:0a:a3:
         2c:27:b5:0b:09:3e:34:34:e8:75:47:a0:e6:01:db:1d:73:d3:
         d6:e4:3d:66:02:38:c3:a1:9a:d3:56:3e:dc:9b:5b:eb:ad:d8:
         33:09:58:eb:0b:b6:bd:3d:03:ff:af:5c:f5:94:f9:cc:31:4c:
         5c:4e:13:7d:21:53:ae:63:05:09:ff:a6:db:6d:7d:47:81:44:
         f3:85:29:35:3a:33:55:53:ae:b2:a5:66:7d:09:ce:48:35:49:
         1d:f5:85:19:cd:ed:04:c9:87:dd:ba:d8:b2:b6:b3:94:4f:a4:
         ef:61:23:07:74:4d:e6:30:70:34:1f:78:c0:c8:b7:0d:03:05:
         95:41:71:a5:24:bb:0a:ab:49:80:03:86:6e:f2:9f:b7:17:40:
         9f:5b:5d:9c:68:0d:a3:c1:6e:0e:dd:e8:8f:45:df:41:fc:2c:
         07:ba:80:9c:2b:94:98:89:c3:21:31:e5:f2:4f:4d:4d:8e:c2:
         8e:82:db:ca:fa:0b:fe:b7:ba:f6:95:bc:9f:49:e0:86:ba:41:
         b4:c3:d7:ed:7a:82:16:c0:21:67:eb:a2:3e:78:61:2a:fd:69:
         35:e1:c7:88
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfh6COSlJXSxZXPhAvOSGL6dLfCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGOEREOEY1MkVFRjAzRkYyQ0Q5Qzk3QTgzMTgxMzA0
NEFBREU5QzAeFw0yNDAyMDQwMzExMjBaFw0yNTAyMDIwMzE2MjBaMDMxMTAvBgNV
BAMTKEFCRjIzOEM2MzlBNTRGNEVBQUNBRjRBODg0OERFNkEwQ0IzODZEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYsix8ULnziGm9tcQlAuSfh85s
0xBc2M+8y9kQ1+LszDTlGxlZBMLB5GaTJuKGVKvHt9hepRZNuUC1aRAt6/kPbjL+
UbQ8PmqGLC+ZpEqHaN9IP630LcfBFMGHFFfW9PUcnxoEspA6EXffywKeqNwMSS8O
Wy37o5w0Vwnf0vflDC/KTHJgLVrsOzxaPXSwfT87cj8P0Vsh8oQqZYQJFRk4ffSW
7zpqJ3PNCnW5eexo1bTjSl9S0dJ2GeiKzNyZ9kyVIGak8mT72ijq9wShJt+e6a2t
EcgkWQiz6ojyNMGr1E3TUAR99sDQ2Zqiu+fuN+a5LD0Odel0RhSTN8tEnpTvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUq/I4xjmlT06qyvSohI3moMs4bcowHwYDVR0j
BBgwFoAU/vjdj1Lu8D/yzZyXqDGBMESq3pwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGR3aFZRZ2NEUDZ5TDZMdnF0V0oxdmExczlSS1JLMllYTU14Z1RVRnp4
Mk4vMC9GRUY4REQ4RjUyRUVGMDNGRjJDRDlDOTdBODMxODEzMDQ0QUFERTlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFRjhERDhGNTJFRUYwM0ZG
MkNEOUM5N0E4MzE4MTMwNDRBQURFOUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkd2hWUWdjRFA2eUw2THZxdFdKMXZhMXM5UktSSzJZWE1NeGdUVUZ6eDJOLzAv
MzIzODMwMzQzYTM1NjU2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzAzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARevDANBgkqhkiG9w0BAQsFAAOCAQEAeRWevIVE
8UWaRTL9stMQz6HGefBYUa/Cx6c9UOfz7DQAxwqjLCe1Cwk+NDTodUeg5gHbHXPT
1uQ9ZgI4w6Ga01Y+3Jtb663YMwlY6wu2vT0D/69c9ZT5zDFMXE4TfSFTrmMFCf+m
2219R4FE84UpNTozVVOusqVmfQnOSDVJHfWFGc3tBMmH3brYsrazlE+k72EjB3RN
5jBwNB94wMi3DQMFlUFxpSS7CqtJgAOGbvKftxdAn1tdnGgNo8FuDt3oj0XfQfws
B7qAnCuUmInDITHl8k9NTY7CjoLbyvoL/re69pW8n0nghrpBtMPX7XqCFsAhZ+ui
PnhhKv1pNeHHiA==
-----END CERTIFICATE-----