Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032303a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343032303a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          hPvYYIu1FZ21wr+FHtuThUQg6XaUmlMrHmgzlkwI2E8=
Subject key identifier:   7B:36:C3:AB:02:71:18:B6:B6:CC:DE:94:ED:CF:84:DF:90:A4:18:5C
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2FAAD8CF82C48B2C8ECD6E54487C2349E1D6E34E
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032303a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Mon 30 Jan 2023 21:53:56 +0000
ROA not before:           Mon 30 Jan 2023 21:48:56 +0000
ROA not after:            Mon 29 Jan 2024 21:53:56 +0000
asID:                     262773
IP address blocks:        2804:9f8:4020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:d8:cf:82:c4:8b:2c:8e:cd:6e:54:48:7c:23:49:e1:d6:e3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jan 30 21:48:56 2023 GMT
            Not After : Jan 29 21:53:56 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:6c:8c:c5:6d:60:ec:1d:24:d6:b7:a6:25:
                    19:f0:28:7a:58:d7:b4:eb:33:68:73:ed:3c:4d:55:
                    86:35:dc:77:4d:16:fe:ab:46:d0:b6:5f:cd:68:d1:
                    ff:86:9c:7e:3f:f2:d7:d7:ae:82:35:9c:04:17:75:
                    fe:5b:ee:33:45:6f:51:7b:1f:10:0e:5f:c2:d9:52:
                    b9:c0:62:9e:e8:45:6c:d1:79:e8:3e:e6:a6:24:0b:
                    94:b8:bc:77:dc:03:bb:ef:15:07:1e:67:86:84:71:
                    4a:29:e3:09:3c:8c:6e:a9:bb:41:89:cd:a5:23:d6:
                    28:75:76:41:6e:c2:99:73:9f:a1:1c:3c:7d:47:40:
                    08:95:86:b3:fa:33:e1:85:9b:61:a7:09:ce:09:ef:
                    b2:df:98:48:e6:65:c1:20:63:f3:72:22:81:dd:28:
                    c1:59:64:2c:9c:a1:73:86:fd:6d:4a:6e:ec:3b:50:
                    8a:00:a5:06:2f:41:51:5d:bf:ee:ea:c9:30:01:0d:
                    a3:40:06:14:07:e6:50:12:f5:4c:49:8d:b5:74:6f:
                    65:ad:bc:f3:3b:a0:c8:a4:c2:07:10:dc:eb:30:4f:
                    1f:53:a6:11:25:8e:cc:11:6b:72:bc:a7:d7:19:47:
                    51:27:0a:6b:f5:a6:41:b5:90:55:98:5b:40:7c:ce:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:36:C3:AB:02:71:18:B6:B6:CC:DE:94:ED:CF:84:DF:90:A4:18:5C
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032303a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:66:3b:18:78:84:85:1e:4f:53:7b:d2:e4:39:23:fb:94:48:
         db:27:64:21:39:e3:0e:f7:d6:6d:bc:3c:8f:c7:f8:32:7a:ab:
         74:88:59:b2:f3:6b:3d:bb:67:84:49:46:df:8c:ca:2a:6e:a8:
         0d:32:3c:9d:2a:5f:9d:bd:42:16:b2:d1:11:09:ff:3e:37:d8:
         8f:f8:a8:00:81:63:a3:ce:08:d6:d9:09:a0:e2:4e:7e:cd:b1:
         66:05:a2:55:d0:ed:4a:5e:7f:a7:44:a7:1b:38:04:fe:be:38:
         c3:60:9c:73:4c:fc:16:01:a2:7b:5b:d5:30:46:aa:0f:22:e0:
         0d:21:6d:e4:60:6c:f8:7c:25:53:5b:19:03:dc:ab:c1:f2:33:
         92:81:04:ec:17:fa:35:2d:f6:61:c3:84:84:f1:c5:81:bc:01:
         43:0b:f0:db:90:47:13:87:cf:7d:e5:9d:1f:53:de:95:87:c4:
         45:7a:eb:4a:f2:28:02:69:ef:17:b1:f9:a3:cf:77:f2:8d:5b:
         9f:89:27:1b:cb:e5:c0:5e:e7:f6:b0:dd:bf:77:6a:36:8b:87:
         38:25:7f:31:84:a7:22:3d:e2:e9:14:63:ed:f9:ea:c2:33:a8:
         e4:57:be:38:0e:6e:1c:70:a2:4e:37:73:f8:d4:c5:d8:fc:4e:
         00:b4:59:49
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUL6rYz4LEiyyOzW5USHwjSeHW404wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAxMzAyMTQ4NTZaFw0yNDAxMjkyMTUzNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkExRDZDOENDNTZENjBFQzFE
MjRENkI3QTYyNTE5RjAyODdBNThEN0I0RUIzMzY4NzNFRDNDNEQ1NTg2MzVEQzc3
NEQxNkZFQUI0NkQwQjY1RkNENjhEMUZGODY5QzdFM0ZGMkQ3RDdBRTgyMzU5QzA0
MTc3NUZFNUJFRTMzNDU2RjUxN0IxRjEwMEU1RkMyRDk1MkI5QzA2MjlFRTg0NTZD
RDE3OUU4M0VFNkE2MjQwQjk0QjhCQzc3REMwM0JCRUYxNTA3MUU2Nzg2ODQ3MTRB
MjlFMzA5M0M4QzZFQTlCQjQxODlDREE1MjNENjI4NzU3NjQxNkVDMjk5NzM5RkEx
MUMzQzdENDc0MDA4OTU4NkIzRkEzM0UxODU5QjYxQTcwOUNFMDlFRkIyREY5ODQ4
RTY2NUMxMjA2M0YzNzIyMjgxREQyOEMxNTk2NDJDOUNBMTczODZGRDZENEE2RUVD
M0I1MDhBMDBBNTA2MkY0MTUxNURCRkVFRUFDOTMwMDEwREEzNDAwNjE0MDdFNjUw
MTJGNTRDNDk4REI1NzQ2RjY1QURCQ0YzM0JBMEM4QTRDMjA3MTBEQ0VCMzA0RjFG
NTNBNjExMjU4RUNDMTE2QjcyQkNBN0Q3MTk0NzUxMjcwQTZCRjVBNjQxQjU5MDU1
OTg1QjQwN0NDRThBNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuh1sjMVtYOwdJNa3piUZ8Ch6WNe06zNoc+08TVWGNdx3TRb+q0bQ
tl/NaNH/hpx+P/LX166CNZwEF3X+W+4zRW9Rex8QDl/C2VK5wGKe6EVs0XnoPuam
JAuUuLx33AO77xUHHmeGhHFKKeMJPIxuqbtBic2lI9YodXZBbsKZc5+hHDx9R0AI
lYaz+jPhhZthpwnOCe+y35hI5mXBIGPzciKB3SjBWWQsnKFzhv1tSm7sO1CKAKUG
L0FRXb/u6skwAQ2jQAYUB+ZQEvVMSY21dG9lrbzzO6DIpMIHENzrME8fU6YRJY7M
EWtyvKfXGUdRJwpr9aZBtZBVmFtAfM6KcQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FHs2w6sCcRi2tszelO3PhN+QpBhcMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMyMzgzMDM0M2EzOTY2MzgzYTM0
MzAzMjMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQJ+EAgMA0GCSqGSIb3DQEBCwUAA4IBAQBjZjsYeISFHk9Te9LkOSP7
lEjbJ2QhOeMO99ZtvDyPx/gyeqt0iFmy82s9u2eESUbfjMoqbqgNMjydKl+dvUIW
stERCf8+N9iP+KgAgWOjzgjW2Qmg4k5+zbFmBaJV0O1KXn+nRKcbOAT+vjjDYJxz
TPwWAaJ7W9UwRqoPIuANIW3kYGz4fCVTWxkD3KvB8jOSgQTsF/o1LfZhw4SE8cWB
vAFDC/DbkEcTh8995Z0fU96Vh8RFeutK8igCae8Xsfmjz3fyjVufiScby+XAXuf2
sN2/d2o2i4c4JX8xhKciPeLpFGPt+erCM6jkV744Dm4ccKJON3P41MXY/E4AtFlJ
-----END CERTIFICATE-----