Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33322d3438203d3e20323633353733.roa
File:                     323830343a6634303a3a2f33322d3438203d3e20323633353733.roa (raw, json)
Hash identifier:          sdjj5WBtAUjGPIwJP13e9E8u/F6GbX1vEuXSTBqKkpc=
Subject key identifier:   42:C6:65:39:89:BE:96:30:A0:F3:28:F9:90:80:B6:FD:6B:77:AB:C7
Certificate issuer:       /CN=12D5E6753F0953AA0492298DB65F4F16200D508E
Certificate serial:       450E4ACC29C61B0A18B76EA2D4FD42085A0A724A
Authority key identifier: 12:D5:E6:75:3F:09:53:AA:04:92:29:8D:B6:5F:4F:16:20:0D:50:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D5E6753F0953AA0492298DB65F4F16200D508E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33322d3438203d3e20323633353733.roa
Signing time:             Fri 15 Mar 2024 23:22:22 +0000
ROA not before:           Fri 15 Mar 2024 23:17:22 +0000
ROA not after:            Fri 14 Mar 2025 23:22:22 +0000
asID:                     263573
IP address blocks:        2804:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0e:4a:cc:29:c6:1b:0a:18:b7:6e:a2:d4:fd:42:08:5a:0a:72:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12D5E6753F0953AA0492298DB65F4F16200D508E
        Validity
            Not Before: Mar 15 23:17:22 2024 GMT
            Not After : Mar 14 23:22:22 2025 GMT
        Subject: CN=42C6653989BE9630A0F328F99080B6FD6B77ABC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:d4:79:97:07:8e:47:37:c3:7e:50:7c:44:
                    4b:fa:95:bb:24:ed:34:fa:83:5c:18:f2:33:5f:c0:
                    a4:71:6f:6d:44:6a:27:cb:5d:4e:85:dd:d7:90:c4:
                    ad:ac:b6:1f:ba:15:f2:c6:8d:6e:bd:22:66:81:6d:
                    68:d7:9c:f4:c0:6a:47:b3:44:ce:ad:53:93:45:6d:
                    4a:d0:a1:12:75:b9:91:2b:67:4f:5c:12:c7:eb:8c:
                    a1:bd:8a:f4:d4:65:9b:86:08:82:9f:09:5c:7d:d6:
                    28:14:2c:cf:24:b9:f8:a9:71:0c:0a:c4:46:3e:78:
                    86:63:23:22:bf:e9:3b:66:57:ae:fb:8e:f2:15:24:
                    ee:86:8d:07:92:4f:0a:8c:3a:f5:53:a0:e0:ca:84:
                    21:f5:f1:4e:51:de:d2:c8:3c:db:9b:39:31:5e:16:
                    41:27:85:99:51:84:1d:90:b3:5a:e9:8b:f8:e7:e2:
                    4f:52:eb:86:0b:da:dc:1e:51:0f:e2:5a:95:df:c8:
                    52:d6:f3:df:da:23:4e:5c:e3:61:85:df:28:06:74:
                    4a:5a:69:29:97:98:19:97:5f:27:1a:29:46:84:cc:
                    a9:4d:f7:db:d3:67:28:29:16:23:ee:44:d6:18:b0:
                    16:9c:ac:36:b2:25:7b:85:97:57:fe:32:3e:b4:cb:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C6:65:39:89:BE:96:30:A0:F3:28:F9:90:80:B6:FD:6B:77:AB:C7
            X509v3 Authority Key Identifier:
                keyid:12:D5:E6:75:3F:09:53:AA:04:92:29:8D:B6:5F:4F:16:20:0D:50:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/12D5E6753F0953AA0492298DB65F4F16200D508E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D5E6753F0953AA0492298DB65F4F16200D508E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33322d3438203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:3f:b7:ce:68:f3:e9:9e:c5:ba:5e:e3:05:39:3a:32:a8:
         44:9c:2e:c3:85:35:4d:c0:6f:df:73:db:63:a0:b5:85:d1:75:
         61:53:f1:2e:93:25:2e:2f:50:d7:cf:1f:1c:6a:d7:11:c7:aa:
         12:ec:43:42:df:77:5e:38:6a:f1:16:d1:78:fa:bf:f3:5b:75:
         d0:f7:c6:d1:45:36:d2:e5:e4:61:4f:91:75:98:5e:29:d8:bf:
         d9:20:b5:0b:fd:32:47:fa:a7:e7:6a:b1:85:35:4d:15:13:17:
         6b:ef:ec:fb:49:e9:cd:75:17:3a:b9:6f:91:da:46:e1:af:b4:
         02:eb:97:1d:e0:82:c4:5c:3d:cd:51:36:2f:43:e6:4c:23:1e:
         5a:af:d5:c4:2b:2b:a9:ce:a1:56:90:0a:87:eb:39:9b:7a:5c:
         04:8f:5d:f9:99:b1:72:87:7e:b5:59:bc:b5:e4:61:be:87:b6:
         3d:d9:5e:97:5c:a2:ea:e3:00:82:60:37:44:9e:6a:58:c2:d6:
         42:db:a2:34:ff:21:3a:b1:0e:92:a6:77:71:cd:0a:96:fc:e2:
         62:2b:12:df:35:36:08:74:89:30:b7:f4:8f:88:df:b1:9f:69:
         00:d2:ab:b9:08:22:6f:25:f4:eb:56:6e:24:99:f2:33:42:43:
         65:97:e2:60
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIURQ5KzCnGGwoYt26i1P1CCFoKckowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJENUU2NzUzRjA5NTNBQTA0OTIyOThEQjY1RjRGMTYy
MDBENTA4RTAeFw0yNDAzMTUyMzE3MjJaFw0yNTAzMTQyMzIyMjJaMDMxMTAvBgNV
BAMTKDQyQzY2NTM5ODlCRTk2MzBBMEYzMjhGOTkwODBCNkZENkI3N0FCQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xNR5lweORzfDflB8REv6lbsk
7TT6g1wY8jNfwKRxb21EaifLXU6F3deQxK2sth+6FfLGjW69ImaBbWjXnPTAakez
RM6tU5NFbUrQoRJ1uZErZ09cEsfrjKG9ivTUZZuGCIKfCVx91igULM8kufipcQwK
xEY+eIZjIyK/6TtmV677jvIVJO6GjQeSTwqMOvVToODKhCH18U5R3tLIPNubOTFe
FkEnhZlRhB2Qs1rpi/jn4k9S64YL2tweUQ/iWpXfyFLW89/aI05c42GF3ygGdEpa
aSmXmBmXXycaKUaEzKlN99vTZygpFiPuRNYYsBacrDayJXuFl1f+Mj60yyz9AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUQsZlOYm+ljCg8yj5kIC2/Wt3q8cwHwYDVR0j
BBgwFoAUEtXmdT8JU6oEkimNtl9PFiANUI4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Od0p2dEdMeTRaV0dqRlNtNjk3MUhHank1VUQ5Q1JrcTEzRm9QZFhxYTl4
LzAvMTJENUU2NzUzRjA5NTNBQTA0OTIyOThEQjY1RjRGMTYyMDBENTA4RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8xMkQ1RTY3NTNGMDk1M0FBMDQ5
MjI5OERCNjVGNEYxNjIwMEQ1MDhFLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
d0p2dEdMeTRaV0dqRlNtNjk3MUhHank1VUQ5Q1JrcTEzRm9QZFhxYTl4LzAvMzIz
ODMwMzQzYTY2MzQzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM1Mzcz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgED0AwDQYJKoZIhvcNAQELBQADggEBAHemP7fOaPPpnsW6
XuMFOToyqEScLsOFNU3Ab99z22OgtYXRdWFT8S6TJS4vUNfPHxxq1xHHqhLsQ0Lf
d144avEW0Xj6v/NbddD3xtFFNtLl5GFPkXWYXinYv9kgtQv9Mkf6p+dqsYU1TRUT
F2vv7PtJ6c11Fzq5b5HaRuGvtALrlx3ggsRcPc1RNi9D5kwjHlqv1cQrK6nOoVaQ
CofrOZt6XASPXfmZsXKHfrVZvLXkYb6Htj3ZXpdcourjAIJgN0SealjC1kLbojT/
ITqxDpKmd3HNCpb84mIrEt81Ngh0iTC39I+I37GfaQDSq7kIIm8l9OtWbiSZ8jNC
Q2WX4mA=
-----END CERTIFICATE-----