Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa
File:                     323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa (raw, json)
Hash identifier:          DksDgHnu2N23znAQ8Pspa9hTRjQCtW89WnPQi8CMSAA=
Subject key identifier:   90:EF:C7:F1:E8:FE:51:5B:97:DA:EE:B8:1E:C3:92:FD:49:26:D6:14
Certificate issuer:       /CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
Certificate serial:       08971BB2DC14260B5C350768A513EEC236A61942
Authority key identifier: 1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa
Signing time:             Thu 09 Nov 2023 14:30:52 +0000
ROA not before:           Thu 09 Nov 2023 14:25:52 +0000
ROA not after:            Thu 07 Nov 2024 14:30:52 +0000
asID:                     269320
IP address blocks:        2804:62d0:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:97:1b:b2:dc:14:26:0b:5c:35:07:68:a5:13:ee:c2:36:a6:19:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
        Validity
            Not Before: Nov  9 14:25:52 2023 GMT
            Not After : Nov  7 14:30:52 2024 GMT
        Subject: CN=90EFC7F1E8FE515B97DAEEB81EC392FD4926D614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:a2:3b:3d:09:02:6d:04:23:a7:8d:6c:7d:
                    89:62:62:0f:96:7a:84:71:a1:a2:6d:6d:38:b7:b4:
                    88:26:cb:1a:b6:1e:31:ec:74:7f:70:6a:ce:0c:b1:
                    d8:f6:51:3a:88:9f:2f:a5:f0:91:1e:78:d7:ec:8e:
                    db:0b:2b:7f:3f:7f:6f:55:27:b0:78:c8:7d:62:b7:
                    8f:49:bc:94:d8:05:66:98:61:45:7c:c9:52:4b:65:
                    12:ba:fb:13:e6:1c:f5:0f:bb:a4:59:ca:95:e4:c6:
                    69:b7:bc:a2:26:bd:ae:06:4c:ea:0c:07:5b:3d:42:
                    30:88:ad:31:d0:5d:66:4a:b7:14:83:5a:e2:9c:2e:
                    09:29:55:00:63:21:e6:e3:ed:d5:42:36:a8:0c:49:
                    7d:d4:fc:30:11:70:c1:42:58:b1:0d:af:90:aa:8d:
                    63:6c:63:c4:2a:6b:c1:82:a5:f0:ef:2d:c8:69:75:
                    01:66:88:05:2e:44:a0:e3:1c:34:e0:cb:4d:01:b2:
                    f5:30:67:b0:c4:c3:ca:13:e8:0d:e3:2b:fa:08:72:
                    43:11:4d:b7:5a:61:a6:0f:e1:1a:ea:7b:09:8b:8b:
                    cb:dd:99:cf:7c:97:33:66:55:42:6c:43:49:a9:ef:
                    30:37:1e:a3:6d:20:fe:47:11:d2:42:2a:98:e9:97:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EF:C7:F1:E8:FE:51:5B:97:DA:EE:B8:1E:C3:92:FD:49:26:D6:14
            X509v3 Authority Key Identifier:
                keyid:1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62d0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:9e:cf:08:d2:e9:1c:9f:9f:49:2e:d6:be:c9:91:43:ac:
         3f:9e:9a:b8:e8:79:cf:14:bf:83:1c:89:13:41:36:d8:a2:31:
         9e:b0:fb:70:0e:53:e6:0c:83:f4:e5:e8:f1:4b:91:3d:97:46:
         1e:5a:6f:57:c2:d4:d9:db:53:60:59:42:84:a8:d9:c6:5b:f2:
         05:0b:46:26:dc:3a:c9:2b:30:6d:a7:5f:2c:30:11:ec:03:72:
         bb:91:a4:8c:17:4c:81:99:27:a5:49:2c:31:c0:61:2c:1f:58:
         83:d9:06:0c:17:b9:15:14:aa:26:ae:3f:65:60:8b:9d:7e:b3:
         1b:31:37:d5:9c:8c:ca:b6:a2:a3:e4:aa:f8:92:4b:d6:02:85:
         13:b4:99:7d:68:77:84:54:80:c6:9e:37:0d:d1:79:fa:3d:dc:
         f4:13:a0:16:b9:79:83:b9:ad:53:5d:ba:5c:38:c9:16:bc:7c:
         ed:b1:71:6c:3c:52:e9:a3:a1:76:aa:99:db:7d:87:c3:d9:ff:
         92:b9:7c:44:ae:43:72:d9:8f:8a:12:95:7f:54:09:88:68:05:
         e8:55:7a:88:44:a2:6a:fc:4f:3e:b8:a5:4e:f7:9d:99:4e:e4:
         02:17:ad:81:e9:26:41:1d:51:25:4f:4a:f0:cd:f6:b3:f7:e8:
         cf:31:83:72
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCJcbstwUJgtcNQdopRPuwjamGUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyQzcwQzY1M0QzRTcxRDZGMzQ3NEU2QkU2MEEyMkFB
MTI0NDA5NTAeFw0yMzExMDkxNDI1NTJaFw0yNDExMDcxNDMwNTJaMDMxMTAvBgNV
BAMTKDkwRUZDN0YxRThGRTUxNUI5N0RBRUVCODFFQzM5MkZENDkyNkQ2MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8aI7PQkCbQQjp41sfYliYg+W
eoRxoaJtbTi3tIgmyxq2HjHsdH9was4Msdj2UTqIny+l8JEeeNfsjtsLK38/f29V
J7B4yH1it49JvJTYBWaYYUV8yVJLZRK6+xPmHPUPu6RZypXkxmm3vKImva4GTOoM
B1s9QjCIrTHQXWZKtxSDWuKcLgkpVQBjIebj7dVCNqgMSX3U/DARcMFCWLENr5Cq
jWNsY8Qqa8GCpfDvLchpdQFmiAUuRKDjHDTgy00BsvUwZ7DEw8oT6A3jK/oIckMR
TbdaYaYP4RrqewmLi8vdmc98lzNmVUJsQ0mp7zA3HqNtIP5HEdJCKpjpl+v/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkO/H8ej+UVuX2u64HsOS/Ukm1hQwHwYDVR0j
BBgwFoAUGyxwxlPT5x1vNHTmvmCiKqEkQJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzladnExYm5vYmIzbnlDTjQ3Zjk5b3RBWGV3SmF2Q1BzYlExQ3FpNmh0
UEwvMC8xQjJDNzBDNjUzRDNFNzFENkYzNDc0RTZCRTYwQTIyQUExMjQ0MDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCMkM3MEM2NTNEM0U3MUQ2
RjM0NzRFNkJFNjBBMjJBQTEyNDQwOTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM5WnZxMWJub2JiM255Q040N2Y5OW90QVhld0phdkNQc2JRMUNxaTZodFBMLzAv
MzIzODMwMzQzYTM2MzI2NDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEYtCAMA0GCSqGSIb3DQEBCwUA
A4IBAQB9wp7PCNLpHJ+fSS7WvsmRQ6w/npq46HnPFL+DHIkTQTbYojGesPtwDlPm
DIP05ejxS5E9l0YeWm9XwtTZ21NgWUKEqNnGW/IFC0Ym3DrJKzBtp18sMBHsA3K7
kaSMF0yBmSelSSwxwGEsH1iD2QYMF7kVFKomrj9lYIudfrMbMTfVnIzKtqKj5Kr4
kkvWAoUTtJl9aHeEVIDGnjcN0Xn6Pdz0E6AWuXmDua1TXbpcOMkWvHztsXFsPFLp
o6F2qpnbfYfD2f+SuXxErkNy2Y+KEpV/VAmIaAXoVXqIRKJq/E8+uKVO952ZTuQC
F62B6SZBHVElT0rwzfaz9+jPMYNy
-----END CERTIFICATE-----