Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33332d3333203d3e20323632353332.roa
File:                     323830343a6563383a3a2f33332d3333203d3e20323632353332.roa (raw, json)
Hash identifier:          77UGhjyB2X1wtELCzV4VhTLBBhiUESsU0O1TZ3O+Npo=
Subject key identifier:   40:54:92:21:18:A1:A9:7E:22:9A:4C:8A:65:CE:43:E4:9C:A0:49:FF
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       3B2BCB4956E257271BA832B6660AF7AE5E79FFA6
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33332d3333203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:12 +0000
ROA not before:           Wed 28 Feb 2024 14:06:12 +0000
ROA not after:            Wed 26 Feb 2025 14:11:12 +0000
asID:                     262532
IP address blocks:        2804:ec8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2b:cb:49:56:e2:57:27:1b:a8:32:b6:66:0a:f7:ae:5e:79:ff:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:12 2024 GMT
            Not After : Feb 26 14:11:12 2025 GMT
        Subject: CN=4054922118A1A97E229A4C8A65CE43E49CA049FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:cd:83:d2:5a:dd:a8:64:67:0c:4f:7c:d4:
                    f8:bf:f3:4e:02:4f:02:e4:f1:93:87:17:04:c4:0f:
                    e7:17:2b:18:1c:bd:65:cc:ae:e5:57:d3:91:b3:44:
                    77:6a:fc:87:43:fc:f2:76:2e:7e:dc:ac:a5:b1:6a:
                    f4:ad:cb:b0:8f:06:f4:98:e1:26:2e:d6:a0:01:1f:
                    76:7b:e6:2b:3f:e3:4c:ed:43:af:81:7c:93:3e:08:
                    7d:58:18:0d:0a:57:cf:73:7a:80:3e:f7:68:fa:1e:
                    b4:22:cb:46:6c:a0:6a:59:10:1d:76:26:e1:a9:6d:
                    90:94:ef:c8:31:57:aa:ea:8e:86:ba:e4:92:22:be:
                    f6:d2:a2:ba:61:1c:3e:8a:29:8d:ed:61:86:33:cd:
                    03:5f:ee:14:15:88:00:b3:bf:21:d9:79:13:87:71:
                    34:4c:a7:ee:ce:3d:93:14:51:ee:c3:b8:43:a9:8b:
                    39:4f:d1:c1:63:5c:13:bb:ee:7d:ca:2b:5c:f2:c9:
                    82:17:43:a0:34:bd:6f:e4:50:b7:68:31:07:66:85:
                    83:95:69:e8:49:c0:c9:1a:4c:15:ab:07:69:94:b6:
                    22:b8:11:e0:5d:92:6b:90:6b:75:2b:be:76:17:2e:
                    45:71:46:ad:51:99:14:3a:d6:91:ec:6e:bd:ff:c5:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:54:92:21:18:A1:A9:7E:22:9A:4C:8A:65:CE:43:E4:9C:A0:49:FF
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33332d3333203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:67:41:70:56:3a:33:6c:bb:76:d0:72:eb:f8:a2:dd:15:
         01:20:a1:df:85:9f:0a:e6:ce:88:91:72:86:43:92:b0:71:8c:
         38:1d:0f:16:97:64:1f:a9:40:8e:f7:c5:6a:b7:c2:97:c1:5d:
         be:fd:40:06:cf:f8:4d:f6:c8:a6:6f:53:79:75:4b:d8:d0:50:
         e4:3e:a9:93:17:64:0e:9f:49:07:6d:46:14:e9:bf:46:c2:b1:
         3c:f9:f4:ff:9b:40:35:f9:a9:bc:ec:07:41:96:bd:b9:e3:5b:
         07:5b:e9:88:e5:07:cd:7e:79:66:59:34:76:7a:aa:98:d3:f0:
         4f:00:27:64:09:c1:1d:9d:d0:6a:91:52:6c:0f:29:91:08:16:
         92:7f:72:bd:53:71:e1:6c:8a:ff:32:0f:62:bd:26:a7:80:d6:
         5d:9d:03:17:27:a2:9b:42:6c:d4:a5:39:22:d9:93:c5:f6:d2:
         b8:1f:95:d9:96:94:a7:c1:c9:d5:dd:a2:fb:3f:67:00:c0:a5:
         24:db:7a:85:29:4f:93:ad:97:8d:45:69:15:85:d6:f0:6c:cd:
         ad:c5:f1:04:d2:9f:e6:86:d3:7f:2c:57:af:00:8e:0d:73:d3:
         5f:77:d8:8c:0e:04:34:4f:22:a8:93:76:d8:93:a2:85:aa:51:
         9d:69:69:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOyvLSVbiVycbqDK2Zgr3rl55/6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkyNDREQjBGQ0JEMUREMjdCOTM4MzdGOEIwNTJDRTNC
OUIyOTJBRjAeFw0yNDAyMjgxNDA2MTJaFw0yNTAyMjYxNDExMTJaMDMxMTAvBgNV
BAMTKDQwNTQ5MjIxMThBMUE5N0UyMjlBNEM4QTY1Q0U0M0U0OUNBMDQ5RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqts2D0lrdqGRnDE981Pi/804C
TwLk8ZOHFwTED+cXKxgcvWXMruVX05GzRHdq/IdD/PJ2Ln7crKWxavSty7CPBvSY
4SYu1qABH3Z75is/40ztQ6+BfJM+CH1YGA0KV89zeoA+92j6HrQiy0ZsoGpZEB12
JuGpbZCU78gxV6rqjoa65JIivvbSorphHD6KKY3tYYYzzQNf7hQViACzvyHZeROH
cTRMp+7OPZMUUe7DuEOpizlP0cFjXBO77n3KK1zyyYIXQ6A0vW/kULdoMQdmhYOV
aehJwMkaTBWrB2mUtiK4EeBdkmuQa3UrvnYXLkVxRq1RmRQ61pHsbr3/xfI3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQFSSIRihqX4imkyKZc5D5JygSf8wHwYDVR0j
BBgwFoAUySRNsPy9HdJ7k4N/iwUs47mykq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMC9DOTI0NERCMEZDQkQxREQyN0I5MzgzN0Y4QjA1MkNFM0I5QjI5MkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5MjQ0REIwRkNCRDFERDI3
QjkzODM3RjhCMDUyQ0UzQjlCMjkyQUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzAv
MzIzODMwMzQzYTY1NjMzODNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjM1
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEDsgAMA0GCSqGSIb3DQEBCwUAA4IBAQBslWdBcFY6
M2y7dtBy6/ii3RUBIKHfhZ8K5s6IkXKGQ5KwcYw4HQ8Wl2QfqUCO98Vqt8KXwV2+
/UAGz/hN9simb1N5dUvY0FDkPqmTF2QOn0kHbUYU6b9GwrE8+fT/m0A1+am87AdB
lr2541sHW+mI5QfNfnlmWTR2eqqY0/BPACdkCcEdndBqkVJsDymRCBaSf3K9U3Hh
bIr/Mg9ivSangNZdnQMXJ6KbQmzUpTki2ZPF9tK4H5XZlpSnwcnV3aL7P2cAwKUk
23qFKU+TrZeNRWkVhdbwbM2txfEE0p/mhtN/LFevAI4Nc9Nfd9iMDgQ0TyKok3bY
k6KFqlGdaWkC
-----END CERTIFICATE-----