Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
File:                     323830343a383865303a3a2f33322d3438203d3e203238333236.roa (raw, json)
Hash identifier:          SeaWMyrp5xV/FM4egKpNXuVAmp5YfNwi7FmjQldB7UM=
Subject key identifier:   2B:64:9F:B9:1E:AF:93:CE:9A:47:0A:CB:45:F2:14:2B:4E:5A:72:6E
Certificate issuer:       /CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
Certificate serial:       038125A2521CAD4B9D5312CABCAC9EA7C937AC56
Authority key identifier: D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
Signing time:             Fri 17 Nov 2023 19:15:04 +0000
ROA not before:           Fri 17 Nov 2023 19:10:04 +0000
ROA not after:            Fri 15 Nov 2024 19:15:04 +0000
asID:                     28326
IP address blocks:        2804:88e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:81:25:a2:52:1c:ad:4b:9d:53:12:ca:bc:ac:9e:a7:c9:37:ac:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8DC918B29E361938B8B9F2093F104E2C3CBADB9
        Validity
            Not Before: Nov 17 19:10:04 2023 GMT
            Not After : Nov 15 19:15:04 2024 GMT
        Subject: CN=2B649FB91EAF93CE9A470ACB45F2142B4E5A726E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:4f:61:c6:06:3a:65:29:88:a9:91:66:c4:
                    ca:0a:e8:b9:16:a3:8c:f1:f5:4b:18:fe:86:07:78:
                    ea:bd:a6:2f:06:af:a8:fb:89:b9:14:18:b6:66:87:
                    4c:1a:f8:75:8b:c9:a8:aa:ba:49:9d:c6:c1:03:5e:
                    94:ce:bf:9f:9d:15:04:f1:0d:0c:a1:67:29:dc:d9:
                    a0:69:5e:f8:f6:6b:e2:ed:76:5f:cc:f7:93:51:70:
                    49:03:d7:b0:77:8c:11:64:a5:27:51:20:88:06:c2:
                    61:73:79:4c:dc:09:61:3d:f0:2e:95:9f:06:2e:9a:
                    28:3d:95:a4:db:93:94:bd:ca:4a:32:49:f3:58:b4:
                    77:7b:41:2d:06:03:f4:f8:08:8f:9b:21:a9:24:17:
                    ac:e7:2b:28:ce:89:57:cc:9b:2d:56:71:9b:5b:06:
                    3a:81:86:9c:5b:fb:72:82:a8:a0:88:56:93:94:b9:
                    9e:92:ad:2e:dc:54:46:b8:b8:0b:2d:06:4a:20:98:
                    32:89:4b:6b:ca:e8:d9:7c:4b:6e:de:14:0c:71:fd:
                    fe:c6:f3:64:ff:58:62:cf:a0:c0:aa:a0:f6:82:8f:
                    15:68:87:71:01:52:94:d5:ee:db:43:09:c6:62:c9:
                    57:36:33:3f:70:38:b8:0b:57:34:32:02:c9:41:ad:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:64:9F:B9:1E:AF:93:CE:9A:47:0A:CB:45:F2:14:2B:4E:5A:72:6E
            X509v3 Authority Key Identifier:
                keyid:D8:DC:91:8B:29:E3:61:93:8B:8B:9F:20:93:F1:04:E2:C3:CB:AD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8DC918B29E361938B8B9F2093F104E2C3CBADB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/0/323830343a383865303a3a2f33322d3438203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:85:50:49:f9:31:16:7e:6c:11:97:2e:c1:14:2a:5e:c7:
         1e:4e:88:0f:0c:7c:dc:9f:8a:ec:17:67:20:c5:99:ef:d8:04:
         27:28:4e:5e:20:1e:0d:26:4f:4f:8b:fb:ea:5f:13:f6:21:10:
         a0:59:d1:66:ff:a1:87:75:87:69:1b:aa:0c:6e:37:4c:7b:3e:
         82:38:50:77:d2:1a:d1:3a:ee:92:d6:0c:05:61:ac:68:2b:42:
         74:29:fb:8f:cc:18:f8:f0:86:6a:65:9d:3c:67:74:c4:a8:35:
         7b:31:35:36:29:c9:7d:83:f9:ef:96:00:1c:04:34:a5:97:c2:
         40:6b:b9:34:9f:ad:ee:a0:e5:63:e4:ed:e5:9b:93:8d:4e:8a:
         f6:96:14:b0:5a:10:8b:e0:b3:b4:58:fa:44:ce:88:53:95:fb:
         26:c6:1e:c3:3b:0d:21:9b:d4:98:82:7b:e8:f4:54:1f:20:78:
         58:78:fd:9d:03:79:7d:44:86:1e:2e:36:43:39:d1:3b:b6:c7:
         96:58:1b:fa:3a:c7:dc:24:82:aa:57:67:80:ea:e7:c6:6e:61:
         05:26:2a:c2:95:6c:b3:b9:13:f5:80:6b:8e:b7:8a:ed:0a:b3:
         4a:e9:55:b3:f0:83:52:e9:34:8d:bc:c0:86:01:42:11:46:94:
         a3:b7:c6:99
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUA4ElolIcrUudUxLKvKyep8k3rFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhEQzkxOEIyOUUzNjE5MzhCOEI5RjIwOTNGMTA0RTJD
M0NCQURCOTAeFw0yMzExMTcxOTEwMDRaFw0yNDExMTUxOTE1MDRaMDMxMTAvBgNV
BAMTKDJCNjQ5RkI5MUVBRjkzQ0U5QTQ3MEFDQjQ1RjIxNDJCNEU1QTcyNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93U9hxgY6ZSmIqZFmxMoK6LkW
o4zx9UsY/oYHeOq9pi8Gr6j7ibkUGLZmh0wa+HWLyaiqukmdxsEDXpTOv5+dFQTx
DQyhZync2aBpXvj2a+Ltdl/M95NRcEkD17B3jBFkpSdRIIgGwmFzeUzcCWE98C6V
nwYumig9laTbk5S9ykoySfNYtHd7QS0GA/T4CI+bIakkF6znKyjOiVfMmy1WcZtb
BjqBhpxb+3KCqKCIVpOUuZ6SrS7cVEa4uAstBkogmDKJS2vK6Nl8S27eFAxx/f7G
82T/WGLPoMCqoPaCjxVoh3EBUpTV7ttDCcZiyVc2Mz9wOLgLVzQyAslBrXcNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUK2SfuR6vk86aRwrLRfIUK05acm4wHwYDVR0j
BBgwFoAU2NyRiynjYZOLi58gk/EE4sPLrbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanli
bWEvMC9EOERDOTE4QjI5RTM2MTkzOEI4QjlGMjA5M0YxMDRFMkMzQ0JBREI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4REM5MThCMjlFMzYxOTM4
QjhCOUYyMDkzRjEwNEUyQzNDQkFEQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjUnlZa0FlN0I4MUhtaDhScERRUHJtQ242R3pNTVRkSkJ5VHFQTWp5Ym1hLzAv
MzIzODMwMzQzYTM4Mzg2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODMz
MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEiOAwDQYJKoZIhvcNAQELBQADggEBAHaohVBJ+TEW
fmwRly7BFCpexx5OiA8MfNyfiuwXZyDFme/YBCcoTl4gHg0mT0+L++pfE/YhEKBZ
0Wb/oYd1h2kbqgxuN0x7PoI4UHfSGtE67pLWDAVhrGgrQnQp+4/MGPjwhmplnTxn
dMSoNXsxNTYpyX2D+e+WABwENKWXwkBruTSfre6g5WPk7eWbk41OivaWFLBaEIvg
s7RY+kTOiFOV+ybGHsM7DSGb1JiCe+j0VB8geFh4/Z0DeX1Ehh4uNkM50Tu2x5ZY
G/o6x9wkgqpXZ4Dq58ZuYQUmKsKVbLO5E/WAa463iu0Ks0rpVbPwg1LpNI28wIYB
QhFGlKO3xpk=
-----END CERTIFICATE-----