Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          DB6TNhoy7UvG5KFuDu1wcg+hfKHHDjnMWKgkC16uFSc=
Subject key identifier:   1E:F5:2E:E5:78:4E:29:6F:79:BD:57:01:1B:59:9C:26:6D:99:97:D5
Certificate issuer:       /CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
Certificate serial:       1ADF83BD2388B8E39CCD53FA3599F89BFCCE69B7
Authority key identifier: 3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Thu 14 Mar 2024 02:18:53 +0000
ROA not before:           Thu 14 Mar 2024 02:13:53 +0000
ROA not after:            Thu 13 Mar 2025 02:18:53 +0000
asID:                     266623
IP address blocks:        2804:3ed4:73aa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:df:83:bd:23:88:b8:e3:9c:cd:53:fa:35:99:f8:9b:fc:ce:69:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Validity
            Not Before: Mar 14 02:13:53 2024 GMT
            Not After : Mar 13 02:18:53 2025 GMT
        Subject: CN=1EF52EE5784E296F79BD57011B599C266D9997D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:84:43:11:df:13:84:06:88:47:e7:11:22:
                    d1:c2:4d:3d:93:66:c9:5e:17:37:6a:85:8f:ea:9b:
                    e7:be:1a:7d:60:d5:e7:bd:fd:48:5e:b1:96:5d:91:
                    3a:ac:54:6e:c4:8f:94:5e:f0:c4:73:8a:52:7f:28:
                    2f:3d:cf:4f:a7:f9:b5:49:d8:b6:ca:6e:71:97:83:
                    fc:83:4f:6f:a6:cd:79:a6:46:b0:5b:6e:df:43:56:
                    57:0e:ca:53:97:5a:46:bc:6f:1b:14:42:f9:58:ad:
                    0e:06:ca:1a:82:62:d0:ce:0f:20:dd:d5:ca:be:08:
                    4e:30:98:08:b1:f7:32:96:ad:ef:1d:7b:a8:84:6d:
                    98:87:bb:21:9a:02:5b:6a:4e:b4:14:b9:67:86:a7:
                    16:6d:f6:c4:8a:38:b9:43:7e:e9:d0:df:92:73:51:
                    8a:77:31:fc:c1:20:f8:56:e2:5a:3c:f3:91:89:3e:
                    ab:c7:70:42:57:9d:da:3c:37:64:4d:8c:6e:22:d3:
                    0a:cb:f0:95:e2:98:55:0d:7f:ea:96:fa:ac:67:0b:
                    a6:a8:76:3e:ed:a4:96:65:98:11:52:26:de:5b:d9:
                    5c:fc:18:2e:1f:fb:45:67:cb:22:f5:44:b8:06:78:
                    09:04:4a:1a:c1:85:00:49:df:b7:b7:8a:1b:60:69:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F5:2E:E5:78:4E:29:6F:79:BD:57:01:1B:59:9C:26:6D:99:97:D5
            X509v3 Authority Key Identifier:
                keyid:3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:73aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:2b:e4:a9:8d:5b:20:10:a0:9b:dc:c6:e7:35:ce:06:78:2a:
         c9:ba:dc:8a:21:89:27:65:da:1b:5e:09:f1:0f:ca:aa:32:3c:
         ae:c0:99:d5:63:35:ca:20:29:8b:8b:3b:14:f6:17:0f:e0:03:
         7b:a5:77:0c:c0:89:93:64:48:24:0c:d6:b2:f6:b9:8b:0f:eb:
         a5:f3:cf:e6:b3:d2:b6:02:3e:76:a4:56:b6:99:8d:81:ff:02:
         50:69:fb:d5:19:a5:2f:22:5c:eb:92:7e:92:16:c6:e8:72:c8:
         72:75:4b:5e:81:58:d4:45:86:29:5f:a3:7a:e5:d7:ef:c5:5a:
         18:c5:4c:fa:e8:2f:cd:c1:79:7b:b1:0d:6f:fc:75:e7:83:a6:
         f7:35:cf:83:65:1a:2b:ed:b9:60:c8:1c:48:a1:ac:cd:b7:76:
         de:32:ba:ac:45:34:af:74:8a:c9:76:e2:5a:a5:7a:cd:3e:94:
         fb:60:1b:ea:13:b7:b3:e8:8a:7e:b2:7e:1f:51:49:35:a9:fe:
         b9:17:d0:19:ba:b0:fb:f1:63:00:60:e8:44:b9:1c:a1:1f:1d:
         c9:61:93:94:f4:f1:06:d1:28:c5:82:25:26:19:43:5a:a9:f7:
         89:fd:11:7b:0f:16:58:21:c3:63:2e:da:54:bf:ad:d3:d6:ba:
         3d:2c:f9:dd
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUGt+DvSOIuOOczVP6NZn4m/zOabcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0Mzc0MzY0REVGMEEzQUQzMUMzRjQ1NDRFNDE1QjlF
QzZDNzA4MzAeFw0yNDAzMTQwMjEzNTNaFw0yNTAzMTMwMjE4NTNaMDMxMTAvBgNV
BAMTKDFFRjUyRUU1Nzg0RTI5NkY3OUJENTcwMTFCNTk5QzI2NkQ5OTk3RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IoRDEd8ThAaIR+cRItHCTT2T
ZsleFzdqhY/qm+e+Gn1g1ee9/UhesZZdkTqsVG7Ej5Re8MRzilJ/KC89z0+n+bVJ
2LbKbnGXg/yDT2+mzXmmRrBbbt9DVlcOylOXWka8bxsUQvlYrQ4GyhqCYtDODyDd
1cq+CE4wmAix9zKWre8de6iEbZiHuyGaAltqTrQUuWeGpxZt9sSKOLlDfunQ35Jz
UYp3MfzBIPhW4lo885GJPqvHcEJXndo8N2RNjG4i0wrL8JXimFUNf+qW+qxnC6ao
dj7tpJZlmBFSJt5b2Vz8GC4f+0VnyyL1RLgGeAkEShrBhQBJ37e3ihtgaUBjAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUHvUu5XhOKW95vVcBG1mcJm2Zl9UwHwYDVR0j
BBgwFoAUPUN0Nk3vCjrTHD9FROQVuexscIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMC8zRDQzNzQzNjRERUYwQTNBRDMxQzNGNDU0NEU0MTVCOUVDNkM3MDgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNENDM3NDM2NERFRjBBM0FE
MzFDM0Y0NTQ0RTQxNUI5RUM2QzcwODMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzAv
MzIzODMwMzQzYTMzNjU2NDM0M2EzNzMzNjE2MTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPtRzqjANBgkqhkiG9w0BAQsF
AAOCAQEAjCvkqY1bIBCgm9zG5zXOBngqybrciiGJJ2XaG14J8Q/KqjI8rsCZ1WM1
yiApi4s7FPYXD+ADe6V3DMCJk2RIJAzWsva5iw/rpfPP5rPStgI+dqRWtpmNgf8C
UGn71RmlLyJc65J+khbG6HLIcnVLXoFY1EWGKV+jeuXX78VaGMVM+ugvzcF5e7EN
b/x154Om9zXPg2UaK+25YMgcSKGszbd23jK6rEU0r3SKyXbiWqV6zT6U+2Ab6hO3
s+iKfrJ+H1FJNan+uRfQGbqw+/FjAGDoRLkcoR8dyWGTlPTxBtEoxYIlJhlDWqn3
if0Rew8WWCHDYy7aVL+t09a6PSz53Q==
-----END CERTIFICATE-----