Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/2/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa
File:                     323830343a366630303a3a2f33322d3438203d3e20323730363332.roa (raw, json)
Hash identifier:          Q2UigrfUsC0p92gfwcjpM7pjOFDh8psU8M98qwbCezo=
Subject key identifier:   CD:FE:4C:82:69:A4:20:EC:2C:80:65:03:2E:73:1B:AD:B4:CA:0B:14
Certificate issuer:       /CN=8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B
Certificate serial:       436C7D8CA3DCC128AFECCAFDC3F49197FFD3E4FF
Authority key identifier: 8A:05:DB:B6:FD:BC:2D:4B:1F:AC:6D:E0:3D:77:C0:8E:13:6E:CC:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/2/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa
Signing time:             Fri 21 Jul 2023 22:12:29 +0000
ROA not before:           Fri 21 Jul 2023 22:07:29 +0000
ROA not after:            Fri 19 Jul 2024 22:12:29 +0000
asID:                     270632
IP address blocks:        2804:6f00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6c:7d:8c:a3:dc:c1:28:af:ec:ca:fd:c3:f4:91:97:ff:d3:e4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B
        Validity
            Not Before: Jul 21 22:07:29 2023 GMT
            Not After : Jul 19 22:12:29 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:81:e2:15:e3:c1:6b:e6:9d:3e:02:18:d4:
                    95:09:25:e4:87:32:a9:a6:71:32:7c:ec:50:fc:20:
                    9e:3d:48:7f:04:77:62:43:29:62:71:bc:15:08:e8:
                    44:a5:f1:1c:30:50:7d:0b:e3:13:de:f3:90:37:35:
                    a6:20:48:02:46:8d:99:ec:12:69:15:95:5f:75:a2:
                    e0:9c:e2:8f:40:7f:6a:73:87:2e:39:c4:51:4b:59:
                    a9:8b:11:00:d5:7f:29:49:1b:b5:59:49:04:12:8e:
                    56:6f:3b:b1:87:51:18:b5:42:c4:14:37:6b:4e:ee:
                    e0:2a:ee:9a:d2:ec:63:61:1a:fe:ae:7d:60:ef:24:
                    ce:a0:31:c1:98:68:d0:b3:b9:6c:da:c5:fb:69:4a:
                    53:d2:9e:ec:ef:55:47:af:48:db:ad:ee:58:67:0e:
                    e9:88:bc:db:d7:2e:f5:6c:74:d3:c3:d4:ea:f3:5d:
                    23:55:ef:14:8b:9e:04:5c:4c:6c:f2:2d:3c:18:e0:
                    52:92:74:eb:15:bd:9f:d7:56:ca:b8:07:84:f1:b1:
                    7f:16:82:4a:50:af:4c:f8:a0:ff:68:4d:14:7f:87:
                    f0:d0:4f:87:9a:13:31:fc:fa:9c:85:50:cb:ff:af:
                    99:8b:c5:ab:37:e9:40:c5:0b:bc:07:78:bf:ad:de:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FE:4C:82:69:A4:20:EC:2C:80:65:03:2E:73:1B:AD:B4:CA:0B:14
            X509v3 Authority Key Identifier:
                keyid:8A:05:DB:B6:FD:BC:2D:4B:1F:AC:6D:E0:3D:77:C0:8E:13:6E:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/2/8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A05DBB6FDBC2D4B1FAC6DE03D77C08E136ECC1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/2/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:db:9d:57:d6:ae:b0:0e:35:fc:f1:d8:0b:a5:33:03:e1:
         d9:a7:ee:3e:45:c4:c6:f5:84:c1:6a:51:bf:55:d4:92:93:33:
         30:36:62:f9:ad:f9:5a:51:54:4c:7f:f3:54:38:3c:2b:4d:0d:
         e2:56:7e:29:2a:52:14:52:ff:bc:b2:66:7a:7c:0f:ce:d8:68:
         06:38:84:d3:27:bc:0a:c2:4a:9b:08:68:95:9b:1e:a2:77:e2:
         9e:24:00:e1:0a:38:91:55:8f:93:f7:3c:c8:8e:d9:58:78:24:
         a7:24:f5:7b:df:99:0a:38:31:52:19:06:84:3c:5d:9c:2d:2b:
         9a:25:7a:d4:ec:06:67:d5:fb:cc:cb:c5:7c:ae:cc:8e:e2:6c:
         7d:35:d7:81:2e:d6:a6:53:30:48:24:ef:22:65:71:f3:52:27:
         bd:a6:07:55:c7:cb:b2:38:e5:7f:7b:9a:35:a3:01:d7:79:e1:
         d0:5a:e0:db:d3:f6:a2:0f:b7:76:06:47:8f:b5:ef:5c:cb:f3:
         e0:87:1a:6c:f7:94:73:82:d4:f9:af:de:c6:60:4a:62:99:c6:
         fc:9d:b6:a5:89:0b:40:6b:b8:cb:f5:9e:b3:89:4a:0a:08:ac:
         c7:68:8e:3f:fd:a6:e8:21:55:9f:36:36:d2:65:0b:f6:54:f6:
         9e:93:85:ae
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUQ2x9jKPcwSiv7Mr9w/SRl//T5P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwNURCQjZGREJDMkQ0QjFGQUM2REUwM0Q3N0MwOEUx
MzZFQ0MxQjAeFw0yMzA3MjEyMjA3MjlaFw0yNDA3MTkyMjEyMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREFDQzgxRTIxNUUzQzE2QkU2
OUQzRTAyMThENDk1MDkyNUU0ODczMkE5QTY3MTMyN0NFQzUwRkMyMDlFM0Q0ODdG
MDQ3NzYyNDMyOTYyNzFCQzE1MDhFODQ0QTVGMTFDMzA1MDdEMEJFMzEzREVGMzkw
MzczNUE2MjA0ODAyNDY4RDk5RUMxMjY5MTU5NTVGNzVBMkUwOUNFMjhGNDA3RjZB
NzM4NzJFMzlDNDUxNEI1OUE5OEIxMTAwRDU3RjI5NDkxQkI1NTk0OTA0MTI4RTU2
NkYzQkIxODc1MTE4QjU0MkM0MTQzNzZCNEVFRUUwMkFFRTlBRDJFQzYzNjExQUZF
QUU3RDYwRUYyNENFQTAzMUMxOTg2OEQwQjNCOTZDREFDNUZCNjk0QTUzRDI5RUVD
RUY1NTQ3QUY0OERCQURFRTU4NjcwRUU5ODhCQ0RCRDcyRUY1NkM3NEQzQzNENEVB
RjM1RDIzNTVFRjE0OEI5RTA0NUM0QzZDRjIyRDNDMThFMDUyOTI3NEVCMTVCRDlG
RDc1NkNBQjgwNzg0RjFCMTdGMTY4MjRBNTBBRjRDRjhBMEZGNjg0RDE0N0Y4N0Yw
RDA0Rjg3OUExMzMxRkNGQTlDODU1MENCRkZBRjk5OEJDNUFCMzdFOTQwQzUwQkJD
MDc3OEJGQURERTIxMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2syB4hXjwWvmnT4CGNSVCSXkhzKppnEyfOxQ/CCePUh/BHdiQyli
cbwVCOhEpfEcMFB9C+MT3vOQNzWmIEgCRo2Z7BJpFZVfdaLgnOKPQH9qc4cuOcRR
S1mpixEA1X8pSRu1WUkEEo5Wbzuxh1EYtULEFDdrTu7gKu6a0uxjYRr+rn1g7yTO
oDHBmGjQs7ls2sX7aUpT0p7s71VHr0jbre5YZw7piLzb1y71bHTTw9Tq810jVe8U
i54EXExs8i08GOBSknTrFb2f11bKuAeE8bF/FoJKUK9M+KD/aE0Uf4fw0E+HmhMx
/PqchVDL/6+Zi8WrN+lAxQu8B3i/rd4hKQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FM3+TIJppCDsLIBlAy5zG620ygsUMB8GA1UdIwQYMBaAFIoF27b9vC1LH6xt4D13
wI4TbswbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pEQUZDR01Hc2dydTFl
eURrZXkzcEhkQ1hLWWMzMlV3eTFUd3E3dkFpc2thLzIvOEEwNURCQjZGREJDMkQ0
QjFGQUM2REUwM0Q3N0MwOEUxMzZFQ0MxQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QTA1REJCNkZEQkMyRDRCMUZBQzZERTAzRDc3QzA4RTEzNkVD
QzFCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KREFGQ0dNR3NncnUxZXlEa2V5
M3BIZENYS1ljMzJVd3kxVHdxN3ZBaXNrYS8yLzMyMzgzMDM0M2EzNjY2MzAzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMDM2MzMzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
bwAwDQYJKoZIhvcNAQELBQADggEBAHma251X1q6wDjX88dgLpTMD4dmn7j5FxMb1
hMFqUb9V1JKTMzA2Yvmt+VpRVEx/81Q4PCtNDeJWfikqUhRS/7yyZnp8D87YaAY4
hNMnvArCSpsIaJWbHqJ34p4kAOEKOJFVj5P3PMiO2Vh4JKck9XvfmQo4MVIZBoQ8
XZwtK5oletTsBmfV+8zLxXyuzI7ibH0114Eu1qZTMEgk7yJlcfNSJ72mB1XHy7I4
5X97mjWjAdd54dBa4NvT9qIPt3YGR4+171zL8+CHGmz3lHOC1Pmv3sZgSmKZxvyd
tqWJC0BruMv1nrOJSgoIrMdojj/9pughVZ82NtJlC/ZU9p6Tha4=
-----END CERTIFICATE-----