Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/323830343a386535343a3a2f33322d313236203d3e203532353637.roa
File:                     323830343a386535343a3a2f33322d313236203d3e203532353637.roa (raw, json)
Hash identifier:          rk+s90pXDiSkp9rIDiqqSYPvLG/7c/Rfjzu5nZv2XDQ=
Subject key identifier:   2A:F9:A3:DC:57:2B:91:5A:3F:6A:4E:CB:D0:57:87:5C:FB:AC:5E:BF
Certificate issuer:       /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial:       448C78645682E7CA1D3CB8414E35F928036CF9B5
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/323830343a386535343a3a2f33322d313236203d3e203532353637.roa
Signing time:             Wed 20 Mar 2024 11:46:58 +0000
ROA not before:           Wed 20 Mar 2024 11:41:58 +0000
ROA not after:            Wed 19 Mar 2025 11:46:58 +0000
asID:                     52567
IP address blocks:        2804:8e54::/32 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8c:78:64:56:82:e7:ca:1d:3c:b8:41:4e:35:f9:28:03:6c:f9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
        Validity
            Not Before: Mar 20 11:41:58 2024 GMT
            Not After : Mar 19 11:46:58 2025 GMT
        Subject: CN=2AF9A3DC572B915A3F6A4ECBD057875CFBAC5EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:45:82:91:52:f9:9a:50:01:09:cd:f7:e4:
                    3f:2e:c5:08:15:b7:1d:4a:0e:bd:f6:89:0a:5b:8f:
                    56:f6:11:34:0f:d5:25:e4:34:69:8b:c8:cf:9a:be:
                    bc:61:30:6f:9a:9c:bc:c4:6c:7e:03:2b:89:8b:07:
                    5f:bd:d3:e2:8e:77:16:28:5d:7c:64:9c:71:8d:48:
                    ab:9f:54:ae:f3:5d:4e:62:a6:8c:f1:32:94:c0:59:
                    a0:7f:15:5b:77:65:2d:cd:31:09:da:be:82:76:7a:
                    22:20:81:d7:9d:7e:eb:bc:f2:07:85:0e:13:6c:9a:
                    d4:ef:61:7c:91:cb:a6:dc:c3:9b:db:8e:5c:04:bb:
                    2f:9f:a4:09:2a:3a:0d:b1:aa:4e:8c:5d:97:13:87:
                    2e:e8:5f:1d:5d:7f:df:89:6c:36:52:19:83:8d:32:
                    76:1c:22:01:5a:32:bc:ed:dd:cb:68:46:bf:fa:db:
                    d2:cf:f3:aa:40:a8:cb:5c:73:7c:04:12:19:95:cb:
                    7c:a3:97:81:ba:25:6e:4c:f8:86:5b:23:78:a0:3e:
                    88:7c:00:60:d9:2b:3d:b8:00:11:e0:9d:36:58:78:
                    d9:3f:38:2a:d4:a5:e6:37:66:ff:04:92:a1:33:21:
                    37:f0:58:dc:82:7c:b2:1d:42:e9:b3:b2:44:25:3e:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:A3:DC:57:2B:91:5A:3F:6A:4E:CB:D0:57:87:5C:FB:AC:5E:BF
            X509v3 Authority Key Identifier:
                keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/323830343a386535343a3a2f33322d313236203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e54::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:86:34:0b:ab:b5:6a:a8:82:b8:ff:e0:28:a6:c6:2b:e2:
         a2:77:56:9b:72:5c:8b:cd:fd:43:5c:70:1b:a2:36:7d:2d:63:
         ad:d3:bc:e5:7a:3b:e7:f1:5c:86:38:f2:6d:f4:e8:c0:7b:42:
         68:db:65:d3:ef:04:27:55:c8:65:cc:cd:4f:7e:52:a0:fa:ee:
         4c:ce:2e:4e:82:93:98:b5:10:b3:98:d0:67:ab:e7:b5:e5:a3:
         be:fd:99:77:c1:0a:c6:53:ca:60:b7:38:a9:ef:a7:ca:22:67:
         c2:b8:96:fa:78:bf:63:ff:18:e3:09:22:d8:f3:50:07:90:af:
         88:9b:ee:e2:bf:3b:c0:6a:9a:39:e2:cd:77:58:be:cf:b6:18:
         af:b5:fd:e1:ed:52:78:9f:ae:57:89:71:5f:ba:f0:1e:be:8b:
         1e:ee:8f:06:23:8a:cb:96:f8:e8:39:be:4f:bc:92:86:15:23:
         7f:74:e7:8a:77:d4:8b:c5:ae:79:38:e2:86:96:c7:0a:47:ef:
         b0:74:d3:35:bc:d8:f9:c2:0c:99:7a:b4:8d:06:ce:7d:7a:78:
         7c:f8:b1:7b:a5:1e:ec:d8:09:4c:97:23:4d:38:65:44:d2:19:
         f1:d0:c5:46:d5:a9:fa:a8:bb:1c:ef:6a:0e:87:f0:1b:57:59:
         ff:75:15:e9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURIx4ZFaC58odPLhBTjX5KANs+bUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFQjJCQUNGNDMxNTgzMDAzMjY1MjgyNzhEOTJBQ0U3
Q0Y3RUI5MjAeFw0yNDAzMjAxMTQxNThaFw0yNTAzMTkxMTQ2NThaMDMxMTAvBgNV
BAMTKDJBRjlBM0RDNTcyQjkxNUEzRjZBNEVDQkQwNTc4NzVDRkJBQzVFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12EWCkVL5mlABCc335D8uxQgV
tx1KDr32iQpbj1b2ETQP1SXkNGmLyM+avrxhMG+anLzEbH4DK4mLB1+90+KOdxYo
XXxknHGNSKufVK7zXU5ipozxMpTAWaB/FVt3ZS3NMQnavoJ2eiIggdedfuu88geF
DhNsmtTvYXyRy6bcw5vbjlwEuy+fpAkqOg2xqk6MXZcThy7oXx1df9+JbDZSGYON
MnYcIgFaMrzt3ctoRr/629LP86pAqMtcc3wEEhmVy3yjl4G6JW5M+IZbI3igPoh8
AGDZKz24ABHgnTZYeNk/OCrUpeY3Zv8EkqEzITfwWNyCfLIdQumzskQlPpsxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUKvmj3FcrkVo/ak7L0FeHXPusXr8wHwYDVR0j
BBgwFoAUZ+srrPQxWDADJlKCeNkqznz365IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhLMTdGNjE4ckdKV1BEU3hpalVldk1ybXV2Qm9XN0VuR1d3bllNQjVR
UFMvMC82N0VCMkJBQ0Y0MzE1ODMwMDMyNjUyODI3OEQ5MkFDRTdDRjdFQjkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3RUIyQkFDRjQzMTU4MzAw
MzI2NTI4Mjc4RDkyQUNFN0NGN0VCOTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4SzE3RjYxOHJHSldQRFN4aWpVZXZNcm11dkJvVzdFbkdXd25ZTUI1UVBTLzAv
MzIzODMwMzQzYTM4NjUzNTM0M2EzYTJmMzMzMjJkMzEzMjM2MjAzZDNlMjAzNTMy
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASOVDANBgkqhkiG9w0BAQsFAAOCAQEAEsqGNAur
tWqogrj/4CimxiviondWm3Jci839Q1xwG6I2fS1jrdO85Xo75/FchjjybfTowHtC
aNtl0+8EJ1XIZczNT35SoPruTM4uToKTmLUQs5jQZ6vnteWjvv2Zd8EKxlPKYLc4
qe+nyiJnwriW+ni/Y/8Y4wki2PNQB5CviJvu4r87wGqaOeLNd1i+z7YYr7X94e1S
eJ+uV4lxX7rwHr6LHu6PBiOKy5b46Dm+T7yShhUjf3TninfUi8WueTjihpbHCkfv
sHTTNbzY+cIMmXq0jQbOfXp4fPixe6Ue7NgJTJcjTThlRNIZ8dDFRtWp+qi7HO9q
DofwG1dZ/3UV6Q==
-----END CERTIFICATE-----