Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/323830343a6261343a3a2f33312d313238203d3e203238363135.roa
File:                     323830343a6261343a3a2f33312d313238203d3e203238363135.roa (raw, json)
Hash identifier:          MQRbI9AhkeszzYuID2bZ6ymfXArEsVn3IcvgPWFxXzY=
Subject key identifier:   00:86:65:AD:EA:56:A1:21:D4:30:F4:C5:CD:0B:64:9B:C3:08:07:8A
Certificate issuer:       /CN=3F2F047713EE5C35F02ED01388508451431B1C44
Certificate serial:       069DD8A9C4495D23E8CC9B8F831A10307C72CB36
Authority key identifier: 3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/323830343a6261343a3a2f33312d313238203d3e203238363135.roa
Signing time:             Tue 02 Apr 2024 13:14:09 +0000
ROA not before:           Tue 02 Apr 2024 13:09:09 +0000
ROA not after:            Tue 01 Apr 2025 13:14:09 +0000
asID:                     28615
IP address blocks:        2804:ba4::/31 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9d:d8:a9:c4:49:5d:23:e8:cc:9b:8f:83:1a:10:30:7c:72:cb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F2F047713EE5C35F02ED01388508451431B1C44
        Validity
            Not Before: Apr  2 13:09:09 2024 GMT
            Not After : Apr  1 13:14:09 2025 GMT
        Subject: CN=008665ADEA56A121D430F4C5CD0B649BC308078A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:86:a3:48:d3:65:a3:58:8f:aa:3c:10:18:
                    ca:81:eb:ff:58:df:65:93:02:b9:38:a6:b1:5a:81:
                    9d:08:bf:ee:3f:48:6a:86:fe:07:ac:98:20:5a:3d:
                    05:41:5c:b6:fe:28:8c:aa:11:1f:93:c4:c8:19:13:
                    3e:df:41:84:90:6e:32:e5:b5:5a:59:d6:76:f9:f0:
                    7d:fb:a1:22:f5:bf:11:94:f1:a3:eb:90:de:ea:e0:
                    32:a5:41:56:74:b0:6c:25:0a:2d:b4:85:5b:a0:a4:
                    80:00:9d:87:80:9e:c5:2d:1c:78:d2:15:ae:80:15:
                    89:c4:b6:85:b4:58:91:2c:f6:17:34:8c:22:c6:65:
                    81:5d:bf:d2:3a:f5:57:f1:bd:f0:d2:cf:0c:40:f7:
                    e8:c1:db:d3:78:cc:71:90:31:df:89:90:59:ff:f0:
                    f7:8c:a8:d0:59:9e:92:46:58:0b:76:b7:65:70:82:
                    a0:ea:eb:f4:ba:c2:4b:1b:bc:17:e6:4f:a8:a0:cd:
                    65:a5:55:eb:9d:16:79:d4:f3:14:7a:55:19:ba:af:
                    fc:d1:1a:59:c6:70:0f:1e:ab:2c:d3:c9:37:dc:39:
                    0b:d7:4a:1b:14:aa:6b:02:e0:7c:55:36:76:55:76:
                    f2:cc:d9:99:a1:db:f0:93:9e:2f:6f:78:d4:1e:5c:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:86:65:AD:EA:56:A1:21:D4:30:F4:C5:CD:0B:64:9B:C3:08:07:8A
            X509v3 Authority Key Identifier:
                keyid:3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3F2F047713EE5C35F02ED01388508451431B1C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/323830343a6261343a3a2f33312d313238203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ba4::/31

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:4e:cb:60:94:c3:6d:70:30:2e:90:75:cf:6a:fd:2c:cb:
         46:4f:46:7a:ae:a3:04:e3:f4:6b:e0:d1:ff:a4:f5:c8:86:9b:
         ab:ad:86:a7:01:6a:81:bb:1c:fd:18:ee:58:6e:de:43:7f:df:
         28:55:09:5d:87:15:c6:b2:23:69:33:7b:4b:cb:52:c1:a1:c3:
         84:4a:a9:f6:4b:0c:ec:e3:5c:6b:4f:a1:92:5e:86:aa:77:f0:
         f9:d7:91:a2:0e:c5:89:80:68:1f:d7:99:5b:a0:1c:9b:0d:9d:
         9d:c9:5f:ff:14:ca:fe:e8:71:a7:e5:44:9f:03:61:8d:cb:d7:
         9a:d1:a8:c2:68:e9:c1:5a:46:a6:23:ec:f4:28:4b:97:07:f3:
         1b:92:81:7b:c8:29:f1:be:e6:30:07:7f:e7:a8:df:f4:3b:4a:
         ea:81:5d:29:3b:70:b5:ce:b6:ca:21:7a:d4:84:33:94:06:e7:
         30:4d:ed:5c:57:73:ef:41:97:eb:1f:d6:d0:d0:20:c5:d7:50:
         7f:c2:eb:25:b7:8f:95:90:81:a6:b7:d2:fa:76:bb:f2:9d:0f:
         49:e4:70:73:18:a5:fc:e1:33:fe:af:84:8f:8c:fa:a4:ec:67:
         be:fc:62:d0:89:22:4d:e0:7f:a2:67:4b:1c:e6:a9:ca:15:36:
         43:f6:b2:8a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUBp3YqcRJXSPozJuPgxoQMHxyyzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YyRjA0NzcxM0VFNUMzNUYwMkVEMDEzODg1MDg0NTE0
MzFCMUM0NDAeFw0yNDA0MDIxMzA5MDlaFw0yNTA0MDExMzE0MDlaMDMxMTAvBgNV
BAMTKDAwODY2NUFERUE1NkExMjFENDMwRjRDNUNEMEI2NDlCQzMwODA3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWIajSNNlo1iPqjwQGMqB6/9Y
32WTArk4prFagZ0Iv+4/SGqG/gesmCBaPQVBXLb+KIyqER+TxMgZEz7fQYSQbjLl
tVpZ1nb58H37oSL1vxGU8aPrkN7q4DKlQVZ0sGwlCi20hVugpIAAnYeAnsUtHHjS
Fa6AFYnEtoW0WJEs9hc0jCLGZYFdv9I69VfxvfDSzwxA9+jB29N4zHGQMd+JkFn/
8PeMqNBZnpJGWAt2t2VwgqDq6/S6wksbvBfmT6igzWWlVeudFnnU8xR6VRm6r/zR
GlnGcA8eqyzTyTfcOQvXShsUqmsC4HxVNnZVdvLM2Zmh2/CTni9veNQeXOQ3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUAIZlrepWoSHUMPTFzQtkm8MIB4owHwYDVR0j
BBgwFoAUPy8EdxPuXDXwLtATiFCEUUMbHEQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FYa3VTZ054QjdKQUxFank0S1ZDc0xSRjl2Sk5UNG5xQk1xdGNZTjJq
SjIvMC8zRjJGMDQ3NzEzRUU1QzM1RjAyRUQwMTM4ODUwODQ1MTQzMUIxQzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMkYwNDc3MTNFRTVDMzVG
MDJFRDAxMzg4NTA4NDUxNDMxQjFDNDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRWGt1U2dOeEI3SkFMRWp5NEtWQ3NMUkY5dkpOVDRucUJNcXRjWU4yakoyLzAv
MzIzODMwMzQzYTYyNjEzNDNhM2EyZjMzMzEyZDMxMzIzODIwM2QzZTIwMzIzODM2
MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFASgEC6QwDQYJKoZIhvcNAQELBQADggEBACDxTstglMNt
cDAukHXPav0sy0ZPRnquowTj9Gvg0f+k9ciGm6uthqcBaoG7HP0Y7lhu3kN/3yhV
CV2HFcayI2kze0vLUsGhw4RKqfZLDOzjXGtPoZJehqp38PnXkaIOxYmAaB/XmVug
HJsNnZ3JX/8Uyv7ocaflRJ8DYY3L15rRqMJo6cFaRqYj7PQoS5cH8xuSgXvIKfG+
5jAHf+eo3/Q7SuqBXSk7cLXOtsohetSEM5QG5zBN7VxXc+9Bl+sf1tDQIMXXUH/C
6yW3j5WQgaa30vp2u/KdD0nkcHMYpfzhM/6vhI+M+qTsZ778YtCJIk3gf6JnSxzm
qcoVNkP2soo=
-----END CERTIFICATE-----