Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/323830343a323739343a3a2f33322d3336203d3e20323633393131.roa
File:                     323830343a323739343a3a2f33322d3336203d3e20323633393131.roa (raw, json)
Hash identifier:          I+J5LhMJQsezDzRmALs1rBrRTlqXAUgx6p0Ue4AmKuQ=
Subject key identifier:   1F:7F:5B:DA:09:66:42:43:C7:B4:7A:41:4C:9E:DB:7F:49:93:B6:D8
Certificate issuer:       /CN=231C71CF45E50AD3D88C21DB5CDF14086564AB31
Certificate serial:       78F225CFA55F0D36E20BCE4C861EDEF5ED3D8EB8
Authority key identifier: 23:1C:71:CF:45:E5:0A:D3:D8:8C:21:DB:5C:DF:14:08:65:64:AB:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/323830343a323739343a3a2f33322d3336203d3e20323633393131.roa
Signing time:             Thu 13 Jun 2024 17:15:18 +0000
ROA not before:           Thu 13 Jun 2024 17:10:18 +0000
ROA not after:            Thu 12 Jun 2025 17:15:18 +0000
asID:                     263911
IP address blocks:        2804:2794::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f2:25:cf:a5:5f:0d:36:e2:0b:ce:4c:86:1e:de:f5:ed:3d:8e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C71CF45E50AD3D88C21DB5CDF14086564AB31
        Validity
            Not Before: Jun 13 17:10:18 2024 GMT
            Not After : Jun 12 17:15:18 2025 GMT
        Subject: CN=1F7F5BDA09664243C7B47A414C9EDB7F4993B6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:b1:fc:23:a7:87:5a:27:22:9f:f0:6a:7e:
                    fe:cf:5e:c6:2e:f0:7f:45:78:be:62:e9:e0:d0:81:
                    04:01:0f:d5:ae:09:ac:29:0e:f5:8e:1c:19:cd:f3:
                    e6:c5:0f:39:b5:60:67:2f:78:1b:0a:bd:77:70:52:
                    07:03:56:11:c1:41:5d:60:51:e9:00:c8:1a:69:b9:
                    8e:3d:7a:c4:be:68:eb:59:1e:e2:99:4f:26:a3:7e:
                    ab:db:68:6b:f3:3b:49:d1:10:b8:ca:4d:8c:1e:13:
                    74:22:5e:03:72:5d:bc:a0:f1:84:cb:67:46:8a:0b:
                    28:76:c4:b3:bc:99:58:a4:00:8a:23:22:5d:ea:be:
                    08:ad:bb:74:cf:af:ed:4a:f8:a0:c8:a5:a0:84:59:
                    a6:ee:ab:30:08:6e:4f:54:96:2d:30:73:e8:6a:1c:
                    d2:72:2c:44:6d:a5:ab:8b:bd:82:c9:ac:f2:b1:f4:
                    7b:2d:d4:41:71:af:2e:34:42:6b:63:55:b2:22:23:
                    7f:67:50:b3:98:5c:51:ba:83:25:89:e1:b8:3a:7b:
                    7f:4d:ea:b3:bd:59:d7:d9:e2:4b:f3:02:7e:9e:8f:
                    2a:c1:cf:05:3a:59:e4:77:27:52:54:26:f2:9a:ba:
                    c6:e4:86:da:bc:d7:97:37:d4:65:bf:18:72:d9:33:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7F:5B:DA:09:66:42:43:C7:B4:7A:41:4C:9E:DB:7F:49:93:B6:D8
            X509v3 Authority Key Identifier:
                keyid:23:1C:71:CF:45:E5:0A:D3:D8:8C:21:DB:5C:DF:14:08:65:64:AB:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/323830343a323739343a3a2f33322d3336203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2794::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:e8:8c:7b:90:2b:76:8d:7b:d3:02:89:53:3e:dd:2d:95:
         75:53:3b:06:cf:43:3d:73:c5:f9:6b:c0:29:e2:ef:3d:b8:16:
         6a:35:3e:a3:35:40:f3:b0:d3:08:4a:d2:6b:5e:6d:41:87:dc:
         e0:49:96:2e:26:aa:64:4c:5d:ef:c7:f2:3b:2e:13:a2:76:1d:
         16:03:27:8b:bb:c0:f1:fe:5f:4e:06:6a:cb:91:20:34:38:8f:
         a6:77:9b:aa:ad:86:b2:a3:f4:00:70:bd:40:b1:1c:9e:14:a7:
         ad:65:3d:3b:9f:6e:fa:39:91:4f:15:c8:dc:af:09:47:fa:8d:
         a8:c3:f6:56:00:7a:1f:7f:bb:d3:52:d7:03:8f:20:59:d2:cc:
         ae:1b:f1:f3:51:a7:aa:ff:58:e0:d8:43:7e:a3:c2:0d:b1:3e:
         68:ee:b9:de:a0:54:a9:96:d4:65:36:cd:6a:ac:99:d6:68:cb:
         2a:5d:3b:a8:43:e0:7b:0c:d9:dd:9d:a6:6e:43:6e:da:9f:6e:
         7e:6f:53:e0:c6:b0:ae:77:e7:27:f9:8c:56:15:88:48:aa:fe:
         8d:4f:06:28:19:c1:f6:6c:e2:6e:a0:65:2b:c8:85:49:dc:09:
         60:51:ef:81:46:06:30:b1:67:d3:93:e1:2c:f8:0b:3a:d2:86:
         13:89:1f:0e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUePIlz6VfDTbiC85Mhh7e9e09jrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxQzcxQ0Y0NUU1MEFEM0Q4OEMyMURCNUNERjE0MDg2
NTY0QUIzMTAeFw0yNDA2MTMxNzEwMThaFw0yNTA2MTIxNzE1MThaMDMxMTAvBgNV
BAMTKDFGN0Y1QkRBMDk2NjQyNDNDN0I0N0E0MTRDOUVEQjdGNDk5M0I2RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsbH8I6eHWicin/Bqfv7PXsYu
8H9FeL5i6eDQgQQBD9WuCawpDvWOHBnN8+bFDzm1YGcveBsKvXdwUgcDVhHBQV1g
UekAyBppuY49esS+aOtZHuKZTyajfqvbaGvzO0nRELjKTYweE3QiXgNyXbyg8YTL
Z0aKCyh2xLO8mVikAIojIl3qvgitu3TPr+1K+KDIpaCEWabuqzAIbk9Uli0wc+hq
HNJyLERtpauLvYLJrPKx9Hst1EFxry40QmtjVbIiI39nULOYXFG6gyWJ4bg6e39N
6rO9WdfZ4kvzAn6ejyrBzwU6WeR3J1JUJvKausbkhtq815c31GW/GHLZM6ZNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUH39b2glmQkPHtHpBTJ7bf0mTttgwHwYDVR0j
BBgwFoAUIxxxz0XlCtPYjCHbXN8UCGVkqzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT
clgvMS8yMzFDNzFDRjQ1RTUwQUQzRDg4QzIxREI1Q0RGMTQwODY1NjRBQjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzMUM3MUNGNDVFNTBBRDNE
ODhDMjFEQjVDREYxNDA4NjU2NEFCMzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzEv
MzIzODMwMzQzYTMyMzczOTM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjMz
MzkzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnlDANBgkqhkiG9w0BAQsFAAOCAQEAZk7ojHuQ
K3aNe9MCiVM+3S2VdVM7Bs9DPXPF+WvAKeLvPbgWajU+ozVA87DTCErSa15tQYfc
4EmWLiaqZExd78fyOy4TonYdFgMni7vA8f5fTgZqy5EgNDiPpnebqq2GsqP0AHC9
QLEcnhSnrWU9O59u+jmRTxXI3K8JR/qNqMP2VgB6H3+701LXA48gWdLMrhvx81Gn
qv9Y4NhDfqPCDbE+aO653qBUqZbUZTbNaqyZ1mjLKl07qEPgewzZ3Z2mbkNu2p9u
fm9T4MawrnfnJ/mMVhWISKr+jU8GKBnB9mzibqBlK8iFSdwJYFHvgUYGMLFn05Ph
LPgLOtKGE4kfDg==
-----END CERTIFICATE-----