Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa
File:                     323830343a3534343a3a2f33322d3438203d3e20323632353035.roa (raw, json)
Hash identifier:          iRI62VPBV2+8nDI40vCW0ktLe1JOlvpkxguK3CuxQio=
Subject key identifier:   D0:8C:FD:CF:4A:44:4E:DE:96:21:33:91:C9:32:5D:8C:C8:E7:63:D3
Certificate issuer:       /CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
Certificate serial:       1F4C8D4B3B592987FB85A0B01E5405F2AAC452DD
Authority key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa
Signing time:             Wed 03 Apr 2024 22:42:16 +0000
ROA not before:           Wed 03 Apr 2024 22:37:16 +0000
ROA not after:            Wed 02 Apr 2025 22:42:16 +0000
asID:                     262505
IP address blocks:        2804:544::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4c:8d:4b:3b:59:29:87:fb:85:a0:b0:1e:54:05:f2:aa:c4:52:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Validity
            Not Before: Apr  3 22:37:16 2024 GMT
            Not After : Apr  2 22:42:16 2025 GMT
        Subject: CN=D08CFDCF4A444EDE96213391C9325D8CC8E763D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:61:c9:24:45:b1:63:a7:0c:0c:76:93:cd:
                    ed:f3:dd:80:fd:a2:d5:4b:1c:7c:6f:72:ed:8b:2b:
                    46:b1:f9:dd:26:29:7d:3e:d4:23:1f:71:3b:51:64:
                    b5:26:31:3e:61:2c:d4:3e:b3:b0:cf:78:e0:48:d9:
                    d0:d5:88:f7:84:66:73:44:54:05:0d:26:89:de:e1:
                    63:a0:67:25:d1:95:79:d7:f8:47:3e:77:42:31:1a:
                    93:c5:09:69:87:0d:a1:fc:e6:5b:fb:77:06:ee:6b:
                    55:c0:c6:00:24:10:c8:09:db:9f:f9:41:15:57:76:
                    83:dc:51:15:7c:26:0c:47:ac:ce:a5:73:70:df:51:
                    3c:b1:10:2f:70:52:59:63:a3:cb:fc:09:7d:2e:16:
                    75:87:e0:ed:e1:8f:ab:90:46:fb:04:23:38:2a:27:
                    cc:74:c6:6b:8d:8a:53:0f:68:58:13:f4:2b:a2:be:
                    ed:37:f3:4a:47:e2:4b:d7:18:77:2b:58:10:bf:bd:
                    ce:09:c1:51:eb:a9:5b:4b:70:f8:59:57:a9:3b:43:
                    ac:19:47:82:a2:f4:5c:32:12:79:7d:20:9e:70:3b:
                    9f:18:36:a6:e2:34:91:8b:17:74:fa:87:26:14:10:
                    ff:c9:cf:00:f8:66:8d:85:a7:16:9f:b1:80:af:3a:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8C:FD:CF:4A:44:4E:DE:96:21:33:91:C9:32:5D:8C:C8:E7:63:D3
            X509v3 Authority Key Identifier:
                keyid:CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:544::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:ee:55:a3:2d:ff:37:95:df:c0:ae:83:ab:a5:5f:4d:d2:
         e5:cd:88:bd:bf:aa:0c:66:e1:9a:9b:14:42:0b:3e:9e:e1:ea:
         41:a2:e9:a8:1c:c1:9e:7c:25:f3:45:91:d3:0e:21:6e:ed:13:
         0f:37:69:dc:8e:5b:81:e2:e5:33:c0:98:ff:f2:05:24:74:b7:
         a0:86:f5:72:3e:e4:00:ce:c7:99:5f:ad:1c:58:27:4d:7c:68:
         1e:23:b5:9c:1f:d8:28:dc:96:3e:7d:1b:87:ba:3b:03:a0:3b:
         4f:ea:93:08:53:2b:5b:be:bb:f3:4e:12:ab:63:6d:b8:c1:e9:
         65:b8:96:e3:8b:38:07:ad:bb:6f:38:25:80:c9:ca:66:41:9b:
         f1:12:ea:ef:0b:87:c9:38:8a:fb:e9:a6:10:e8:03:41:17:b5:
         75:a3:b1:2a:09:58:ab:37:eb:af:2a:09:2f:01:28:2a:db:98:
         ea:3f:e3:1c:22:85:a8:a2:f2:d1:58:af:5e:87:74:7a:d1:db:
         9e:37:ec:d9:d7:c7:c1:13:52:00:fc:01:6e:aa:e5:2f:d7:f4:
         ca:50:ee:48:75:1f:2f:61:65:94:ae:da:c7:f4:00:2a:21:54:
         ec:aa:9f:c8:14:76:6b:a6:25:16:6c:f7:8e:03:c6:63:bd:57:
         00:42:8e:be
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUH0yNSztZKYf7haCwHlQF8qrEUt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y4OUVDRjE5MDY5MzRCODg2ODc0OUZFMTA3MDNFQ0JC
NDM0RDNCOTAeFw0yNDA0MDMyMjM3MTZaFw0yNTA0MDIyMjQyMTZaMDMxMTAvBgNV
BAMTKEQwOENGRENGNEE0NDRFREU5NjIxMzM5MUM5MzI1RDhDQzhFNzYzRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAI2HJJEWxY6cMDHaTze3z3YD9
otVLHHxvcu2LK0ax+d0mKX0+1CMfcTtRZLUmMT5hLNQ+s7DPeOBI2dDViPeEZnNE
VAUNJone4WOgZyXRlXnX+Ec+d0IxGpPFCWmHDaH85lv7dwbua1XAxgAkEMgJ25/5
QRVXdoPcURV8JgxHrM6lc3DfUTyxEC9wUlljo8v8CX0uFnWH4O3hj6uQRvsEIzgq
J8x0xmuNilMPaFgT9Cuivu0380pH4kvXGHcrWBC/vc4JwVHrqVtLcPhZV6k7Q6wZ
R4Ki9FwyEnl9IJ5wO58YNqbiNJGLF3T6hyYUEP/JzwD4Zo2FpxafsYCvOnfLAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU0Iz9z0pETt6WITORyTJdjMjnY9MwHwYDVR0j
BBgwFoAUz4ns8ZBpNLiGh0n+EHA+y7Q007kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp
NUMvMS9DRjg5RUNGMTkwNjkzNEI4ODY4NzQ5RkUxMDcwM0VDQkI0MzREM0I5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGODlFQ0YxOTA2OTM0Qjg4
Njg3NDlGRTEwNzAzRUNCQjQzNEQzQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWSnpnZEpDajV2R3Y2V0FxV0xrMkxvZ2lUUFRZemREZDgyZnE2TE03aTVDLzEv
MzIzODMwMzQzYTM1MzQzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM1
MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBUQwDQYJKoZIhvcNAQELBQADggEBABPB7lWjLf83
ld/AroOrpV9N0uXNiL2/qgxm4ZqbFEILPp7h6kGi6agcwZ58JfNFkdMOIW7tEw83
adyOW4Hi5TPAmP/yBSR0t6CG9XI+5ADOx5lfrRxYJ018aB4jtZwf2Cjclj59G4e6
OwOgO0/qkwhTK1u+u/NOEqtjbbjB6WW4luOLOAetu284JYDJymZBm/ES6u8Lh8k4
ivvpphDoA0EXtXWjsSoJWKs3668qCS8BKCrbmOo/4xwihaii8tFYr16HdHrR2543
7NnXx8ETUgD8AW6q5S/X9MpQ7kh1Hy9hZZSu2sf0ACohVOyqn8gUdmumJRZs944D
xmO9VwBCjr4=
-----END CERTIFICATE-----