Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/323830343a3364343a3a2f33322d313238203d3e20323632343031.roa
File:                     323830343a3364343a3a2f33322d313238203d3e20323632343031.roa (raw, json)
Hash identifier:          bpKHOKj6TYvEaYqGS/Rwn8LvEkvnyNfKJ2VeU6wd4Yc=
Subject key identifier:   9F:73:7E:34:12:61:94:0B:EB:64:0C:F0:B8:21:96:23:63:CC:94:40
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       50640D23046AC7FC3B3367A6098C5722436348EF
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/323830343a3364343a3a2f33322d313238203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:33:08 +0000
ROA not before:           Sat 04 Nov 2023 12:28:08 +0000
ROA not after:            Sat 02 Nov 2024 12:33:08 +0000
asID:                     262401
IP address blocks:        2804:3d4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:64:0d:23:04:6a:c7:fc:3b:33:67:a6:09:8c:57:22:43:63:48:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:28:08 2023 GMT
            Not After : Nov  2 12:33:08 2024 GMT
        Subject: CN=9F737E341261940BEB640CF0B821962363CC9440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:71:06:65:84:75:68:05:a8:20:50:94:52:
                    fc:e7:dc:0e:97:77:1b:08:cf:c9:42:a6:45:d8:7b:
                    aa:4d:53:a2:8f:d0:6c:68:15:55:58:6c:ff:98:18:
                    43:6f:32:e5:91:c9:fa:d0:ed:b4:c5:93:0e:07:f3:
                    47:db:13:a8:a1:f2:10:fe:ee:2a:e7:54:4c:88:29:
                    c6:02:d6:59:9b:42:87:b8:13:df:9f:e7:16:d0:e0:
                    b2:ff:b1:c2:fa:36:53:25:7b:5d:9b:de:f5:d8:4c:
                    2f:4f:a3:4e:f8:1e:46:a8:4c:0c:b2:2a:90:28:bd:
                    bf:5e:7b:21:22:ae:5d:4e:17:cf:cf:15:ff:27:91:
                    25:40:e8:0f:33:27:a8:a0:88:a2:e4:45:6d:56:a0:
                    3d:d1:3b:40:82:b3:49:18:0a:d0:98:21:40:52:d5:
                    fb:ae:17:3b:4e:35:99:87:2d:ed:87:55:57:63:7c:
                    1a:b3:f7:b6:2a:c3:e7:5e:f5:cb:66:86:03:0c:12:
                    c7:34:51:12:12:d1:2f:0b:d6:b8:5d:e3:4d:b5:eb:
                    e2:94:18:e7:55:23:de:41:3e:b9:f3:ae:7a:fd:d8:
                    40:3a:c0:ac:c5:c6:71:e0:a2:5e:88:40:57:db:5b:
                    72:11:1b:0a:2e:30:39:7d:b3:80:4e:8a:8c:a4:27:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:73:7E:34:12:61:94:0B:EB:64:0C:F0:B8:21:96:23:63:CC:94:40
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/323830343a3364343a3a2f33322d313238203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:be:a8:51:74:30:31:4e:c9:28:34:5d:8f:00:df:77:fa:
         56:a1:da:ee:99:ef:4b:18:8a:21:8a:fd:1a:0a:6c:5d:66:18:
         cf:be:f8:cd:00:6f:ba:3f:b6:58:23:bc:0d:ae:82:f1:88:9f:
         56:e2:27:a5:9c:b1:9d:1d:c1:5e:dd:55:b9:00:66:11:06:33:
         0c:17:fe:0c:44:52:ab:ea:c6:2c:07:e7:f2:60:4a:15:58:7a:
         2d:48:02:4a:db:b1:3e:f8:b1:c0:43:39:cd:c9:cf:26:9c:18:
         af:88:85:f7:ff:f5:9a:71:f1:db:23:97:af:f1:5a:fc:3f:c2:
         52:aa:e6:bd:b1:f0:de:a3:ce:69:ff:bd:7f:18:fc:ba:3d:d6:
         31:d3:4f:97:9c:09:2e:13:da:0f:30:ae:20:75:1c:88:2b:95:
         de:aa:0d:ab:11:b2:a8:e2:a3:e8:00:71:54:aa:c8:bb:b9:b0:
         34:76:06:61:e7:d2:4e:6c:29:12:0c:66:0e:9e:0c:c3:10:e3:
         0d:1b:8d:0f:dc:fc:f6:24:50:50:60:d7:03:5b:6b:65:fe:85:
         91:c5:6f:99:33:ed:b5:c7:86:18:99:c3:bb:e7:f3:03:4c:91:
         fb:d7:90:c7:11:bd:82:37:23:88:01:f7:92:76:b7:8a:be:41:
         2f:8d:6d:d6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUGQNIwRqx/w7M2emCYxXIkNjSO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlGRjM5NUFCQTU3RjYxNjRGNTU5REI1REU2Mjk3MTY2
Q0QwNjAwMzAeFw0yMzExMDQxMjI4MDhaFw0yNDExMDIxMjMzMDhaMDMxMTAvBgNV
BAMTKDlGNzM3RTM0MTI2MTk0MEJFQjY0MENGMEI4MjE5NjIzNjNDQzk0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAXEGZYR1aAWoIFCUUvzn3A6X
dxsIz8lCpkXYe6pNU6KP0GxoFVVYbP+YGENvMuWRyfrQ7bTFkw4H80fbE6ih8hD+
7irnVEyIKcYC1lmbQoe4E9+f5xbQ4LL/scL6NlMle12b3vXYTC9Po074HkaoTAyy
KpAovb9eeyEirl1OF8/PFf8nkSVA6A8zJ6igiKLkRW1WoD3RO0CCs0kYCtCYIUBS
1fuuFztONZmHLe2HVVdjfBqz97Yqw+de9ctmhgMMEsc0URIS0S8L1rhd40216+KU
GOdVI95BPrnzrnr92EA6wKzFxnHgol6IQFfbW3IRGwouMDl9s4BOioykJ66jAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUn3N+NBJhlAvrZAzwuCGWI2PMlEAwHwYDVR0j
BBgwFoAUef85WrpX9hZPVZ213mKXFmzQYAMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMC83OUZGMzk1QUJBNTdGNjE2NEY1NTlEQjVERTYyOTcxNjZDRDA2MDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5RkYzOTVBQkE1N0Y2MTY0
RjU1OURCNURFNjI5NzE2NkNEMDYwMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzAv
MzIzODMwMzQzYTMzNjQzNDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzQzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQD1DANBgkqhkiG9w0BAQsFAAOCAQEALae+qFF0
MDFOySg0XY8A33f6VqHa7pnvSxiKIYr9GgpsXWYYz774zQBvuj+2WCO8Da6C8Yif
VuInpZyxnR3BXt1VuQBmEQYzDBf+DERSq+rGLAfn8mBKFVh6LUgCStuxPvixwEM5
zcnPJpwYr4iF9//1mnHx2yOXr/Fa/D/CUqrmvbHw3qPOaf+9fxj8uj3WMdNPl5wJ
LhPaDzCuIHUciCuV3qoNqxGyqOKj6ABxVKrIu7mwNHYGYefSTmwpEgxmDp4MwxDj
DRuND9z89iRQUGDXA1trZf6FkcVvmTPttceGGJnDu+fzA0yR+9eQxxG9gjcjiAH3
kna3ir5BL41t1g==
-----END CERTIFICATE-----